$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09710dc4-1d91-46df-9754-fab74a4eaacd.cer File: 09710dc4-1d91-46df-9754-fab74a4eaacd.cer (raw, json) Hash identifier: hvpxUgTcrGNhoCzPiPrf5P0Tg78qveED1EEEqarwhTA= Subject key identifier: 93:77:EE:50:68:CA:13:15:B7:A7:4C:43:44:E1:42:79:E7:23:AE:65 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D46ED882D70EC3A0D563DC940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09710dc4-1d91-46df-9754-fab74a4eaacd/09710dc4-1d91-46df-9754-fab74a4eaacd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09710dc4-1d91-46df-9754-fab74a4eaacd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Mar 2026 17:46:45 +0000 Certificate not after: Mon 26 Jun 2028 17:46:45 +0000 Subordinate resources: AS: 402270 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:ed:88:2d:70:ec:3a:0d:56:3d:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 24 17:46:45 2026 GMT Not After : Jun 26 17:46:45 2028 GMT Subject: CN=09710dc4-1d91-46df-9754-fab74a4eaacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:05:8c:28:ab:d7:93:43:b9:fc:4e:12:c8: 49:91:69:56:bb:aa:b4:f6:80:87:93:18:1d:5d:d8: ab:88:8b:95:63:f2:10:b1:59:71:cc:da:4b:79:0b: 1a:83:96:41:0a:71:5d:81:0d:cc:0f:8f:ef:3d:f2: 64:17:25:6a:c1:cd:04:22:1e:07:34:79:ec:07:7c: d2:87:be:4f:57:b4:a5:81:bc:d1:e4:b9:01:ad:83: b8:90:88:3c:29:e5:26:85:8f:1c:55:dc:6a:26:b0: 9e:ba:13:ef:e3:aa:1a:d3:c4:d4:1f:f5:be:4a:67: 98:6b:14:05:41:76:9f:e8:95:b1:a5:c3:2d:c0:a6: c8:0a:5d:ab:5c:57:65:c5:f7:78:c9:5a:00:93:1b: 00:16:1d:86:eb:d0:a5:c4:d8:dc:c2:8f:a1:d6:ba: c8:d2:66:62:80:b1:8b:d6:9a:73:19:bd:51:a3:5d: ed:af:ac:3f:e2:2d:fd:78:12:bd:71:70:06:80:36: 85:1e:b0:77:0c:de:5c:c6:5a:44:d9:e6:ef:e0:97: 63:37:f7:37:0b:40:29:92:21:31:6c:1a:98:f8:f4: 50:e1:80:f7:ee:c9:2d:7c:67:e7:50:9c:92:31:34: a2:57:9f:cd:7e:13:1a:b1:2a:6d:53:bc:c4:d5:96: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:77:EE:50:68:CA:13:15:B7:A7:4C:43:44:E1:42:79:E7:23:AE:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09710dc4-1d91-46df-9754-fab74a4eaacd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09710dc4-1d91-46df-9754-fab74a4eaacd/09710dc4-1d91-46df-9754-fab74a4eaacd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402270 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c8:ab:c9:92:f0:c9:48:34:d2:64:02:9f:09:82:ef:b5:37: 57:10:d5:ed:92:dc:52:b6:6b:5d:8a:d3:b3:35:5f:c7:47:fb: 02:48:01:17:9c:5f:6e:2c:ff:b0:f8:4a:2d:14:7c:c9:94:9d: 87:25:df:18:58:40:d4:ba:1b:34:dc:3f:85:2e:3a:4a:46:b4: b5:5c:4c:49:1b:ef:00:22:7c:40:e3:db:24:73:b4:d4:d3:05: 4a:1f:71:e5:1b:3b:26:f4:85:16:d3:9a:33:de:65:2f:10:33: da:46:38:60:3e:d6:f3:ea:55:9d:f5:1b:e9:2d:a6:3c:08:51: 47:7e:4c:29:29:eb:a9:36:89:5c:5b:bd:c5:49:e7:2c:a8:1c: d8:0f:22:1b:cf:f2:c3:82:2c:a2:9e:2f:b3:13:05:f8:f4:ce: ed:a7:f8:54:e9:3b:87:9d:56:76:5b:7a:41:0b:7f:19:2a:c0: 36:2c:fb:df:6b:4c:6f:0b:2d:36:a3:6c:fc:a6:04:79:46:9d: d1:50:f4:ac:ad:57:c6:a3:f2:01:6b:eb:41:48:e8:f8:5a:18: 39:ba:ca:d0:b2:22:44:ec:54:52:60:4c:c6:2b:eb:7a:cc:91: 73:1d:ed:0d:f4:b4:08:8f:99:d6:cd:8d:da:af:c2:f5:6c:8d: 00:82:f9:5a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE1G7YgtcOw6DVY9yUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMyNDE3NDY0NVoXDTI4MDYyNjE3NDY0NVowLzEtMCsGA1UEAxMk MDk3MTBkYzQtMWQ5MS00NmRmLTk3NTQtZmFiNzRhNGVhYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxAFjCir15NDufxOEshJkWlWu6q09oCHkxgd XdiriIuVY/IQsVlxzNpLeQsag5ZBCnFdgQ3MD4/vPfJkFyVqwc0EIh4HNHnsB3zS h75PV7SlgbzR5LkBrYO4kIg8KeUmhY8cVdxqJrCeuhPv46oa08TUH/W+SmeYaxQF QXaf6JWxpcMtwKbICl2rXFdlxfd4yVoAkxsAFh2G69ClxNjcwo+h1rrI0mZigLGL 1ppzGb1Ro13tr6w/4i39eBK9cXAGgDaFHrB3DN5cxlpE2ebv4JdjN/c3C0ApkiEx bBqY+PRQ4YD37sktfGfnUJySMTSiV5/NfhMasSptU7zE1ZaQcQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJN37lBoyhMVt6dMQ0ThQnnnI65lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w OTcxMGRjNC0xZDkxLTQ2ZGYtOTc1NC1mYWI3NGE0ZWFhY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA5NzEwZGM0LTFkOTEtNDZkZi05 NzU0LWZhYjc0YTRlYWFjZC8wOTcxMGRjNC0xZDkxLTQ2ZGYtOTc1NC1mYWI3NGE0 ZWFhY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiNeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACDIq8mS8MlINNJkAp8Jgu+1N1cQ 1e2S3FK2a12K07M1X8dH+wJIARecX24s/7D4Si0UfMmUnYcl3xhYQNS6GzTcP4Uu OkpGtLVcTEkb7wAifEDj2yRztNTTBUofceUbOyb0hRbTmjPeZS8QM9pGOGA+1vPq VZ31G+ktpjwIUUd+TCkp66k2iVxbvcVJ5yyoHNgPIhvP8sOCLKKeL7MTBfj0zu2n +FTpO4edVnZbekELfxkqwDYs+99rTG8LLTajbPymBHlGndFQ9KytV8aj8gFr60FI 6PhaGDm6ytCyIkTsVFJgTMYr63rMkXMd7Q30tAiPmdbNjdqvwvVsjQCC+Vo= -----END CERTIFICATE-----Generated at Wed Mar 25 21:22:57 2026 by rpki-client