$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d.cer File: b40c2924-46ab-45b3-a20b-b3799429913d.cer (raw, json) Hash identifier: h+9JDq3k+oqmPpaSVwiXE67ZMtr/tt8hQbyq2jv0+/E= Subject key identifier: 6D:A5:DC:08:F2:86:3C:17:75:D4:0D:B6:08:98:55:64:C1:42:E3:70 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584D4922A365B9BA7CBBEB3BFD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/b40c2924-46ab-45b3-a20b-b3799429913d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:45:22 +0000 Certificate not after: Tue 27 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 29787 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:22:a3:65:b9:ba:7c:bb:eb:3b:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 25 12:45:22 2026 GMT Not After : Jun 27 12:45:22 2028 GMT Subject: CN=b40c2924-46ab-45b3-a20b-b3799429913d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ff:c8:31:8c:97:9a:1d:8c:f1:a2:be:8a:45: 8f:76:18:ea:82:4c:08:7a:0a:51:12:86:63:81:fd: f9:2f:cf:9e:e2:e9:6e:3e:7a:99:90:b1:31:8d:a2: 0b:5a:9e:e4:11:82:88:b0:ae:bb:4f:7b:24:ce:7e: cb:f7:cd:c8:a3:f2:c7:2f:58:71:30:a9:37:e5:33: 86:aa:4d:28:6b:b5:94:97:b1:44:e0:c6:41:5e:4c: d0:0a:95:0d:da:6b:28:1c:3a:23:4f:fc:25:c5:dc: e2:09:bf:d4:75:83:83:53:07:82:b4:e3:63:05:57: 82:f9:5d:c6:56:af:f2:db:8d:b0:cc:a0:06:f3:56: 81:9e:40:bc:c9:66:93:87:b4:1d:be:8b:56:32:ab: c9:de:30:c4:ad:ab:60:97:c0:6e:da:0e:cd:bb:bd: a9:38:b5:1c:3a:27:43:af:db:40:56:e2:8f:76:46: c0:d1:55:14:fa:8b:f2:34:1d:f9:53:3d:ce:56:2c: 4f:bd:36:ef:2c:fc:85:ec:36:5f:93:1e:cd:7f:a3: 96:c9:19:f0:3e:00:9e:39:5d:b4:25:b7:ed:81:61: d9:39:a7:38:76:07:82:5b:21:f1:d1:5e:2b:c2:d3: 85:c5:8f:09:c5:dc:0a:d1:4e:ed:3d:bb:35:84:3b: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:DC:08:F2:86:3C:17:75:D4:0D:B6:08:98:55:64:C1:42:E3:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b40c2924-46ab-45b3-a20b-b3799429913d/b40c2924-46ab-45b3-a20b-b3799429913d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 29787 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a8:a0:9c:0f:c7:aa:1b:25:fe:d6:b4:d4:58:08:8e:d8:1b: c8:86:9d:1e:db:a6:c6:7c:64:43:cb:e3:66:15:d5:9c:4c:d2: 70:c1:1f:57:00:0f:60:66:64:ed:ca:2e:20:43:1f:80:84:57: 2d:f3:9f:92:52:09:83:7e:ae:8f:1b:9a:3c:54:85:7d:93:b8: 59:40:61:8f:05:09:93:69:79:a0:3d:6f:65:10:42:17:cb:18: 8e:1e:45:e1:9d:ca:24:ae:73:c6:15:f2:95:45:81:cc:31:a9: 51:65:10:5a:6c:bc:2e:e9:c3:78:01:52:9c:9e:4f:be:1d:15: 4d:d8:54:4a:bf:30:ac:72:12:4e:fd:54:30:84:27:87:03:ee: f4:9b:7c:8b:1c:8f:1d:9b:7c:35:c1:da:22:c2:8f:8b:88:aa: 6f:89:bf:fb:bb:e4:56:f0:96:86:a1:ac:ef:34:65:9f:e9:bc: c0:73:08:7b:10:6a:c7:d7:09:c2:04:27:cc:56:51:6e:1c:66: 45:06:b3:ec:34:31:89:d0:81:89:04:07:b3:20:ee:1a:c6:c9: 97:73:2f:b6:96:f4:cf:69:28:14:ee:7b:40:3b:1b:7a:0e:be: 4a:a2:50:3e:4b:a6:d1:b8:20:22:87:87:f1:a9:b3:41:4c:b2: 24:80:3f:12 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE1JIqNlubp8u+s7/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDMyNTEyNDUyMloXDTI4MDYyNzEyNDUyMlowLzEtMCsGA1UEAxMk YjQwYzI5MjQtNDZhYi00NWIzLWEyMGItYjM3OTk0Mjk5MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf/IMYyXmh2M8aK+ikWPdhjqgkwIegpREoZj gf35L8+e4uluPnqZkLExjaILWp7kEYKIsK67T3skzn7L983Io/LHL1hxMKk35TOG qk0oa7WUl7FE4MZBXkzQCpUN2msoHDojT/wlxdziCb/UdYODUweCtONjBVeC+V3G Vq/y242wzKAG81aBnkC8yWaTh7QdvotWMqvJ3jDEratgl8Bu2g7Nu72pOLUcOidD r9tAVuKPdkbA0VUU+ovyNB35Uz3OVixPvTbvLPyF7DZfkx7Nf6OWyRnwPgCeOV20 JbftgWHZOac4dgeCWyHx0V4rwtOFxY8JxdwK0U7tPbs1hDsPLQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFG2l3AjyhjwXddQNtgiYVWTBQuNwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i NDBjMjkyNC00NmFiLTQ1YjMtYTIwYi1iMzc5OTQyOTkxM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I0MGMyOTI0LTQ2YWItNDViMy1h MjBiLWIzNzk5NDI5OTEzZC9iNDBjMjkyNC00NmFiLTQ1YjMtYTIwYi1iMzc5OTQy OTkxM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdFswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgaignA/Hqhsl/ta01FgIjtgbyIad HtumxnxkQ8vjZhXVnEzScMEfVwAPYGZk7couIEMfgIRXLfOfklIJg36ujxuaPFSF fZO4WUBhjwUJk2l5oD1vZRBCF8sYjh5F4Z3KJK5zxhXylUWBzDGpUWUQWmy8LunD eAFSnJ5Pvh0VTdhUSr8wrHISTv1UMIQnhwPu9Jt8ixyPHZt8NcHaIsKPi4iqb4m/ +7vkVvCWhqGs7zRln+m8wHMIexBqx9cJwgQnzFZRbhxmRQaz7DQxidCBiQQHsyDu GsbJl3Mvtpb0z2koFO57QDsbeg6+SqJQPkum0bggIoeH8amzQUyyJIA/Eg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:12:19 2026 by rpki-client