$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer File: 544240c0-1aad-4163-8ada-3b71180eac4f.cer (raw, json) Hash identifier: p29NXJ88QyOjt73A5TJ2OWtLRwoyCUx9w84m89hWRUM= Subject key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D1F4260B6C20A316BA198F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 12:45:22 +0000 Certificate not after: Mon 12 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 2924 IP: 147.146.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:42:60:b6:c2:0a:31:6b:a1:98:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 10 12:45:22 2026 GMT Not After : Jun 12 12:45:22 2028 GMT Subject: CN=544240c0-1aad-4163-8ada-3b71180eac4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:e7:de:99:7d:49:3a:e2:d1:41:e7:a4:4d: 92:c8:89:dd:20:d0:ca:8c:31:d0:ff:75:e1:2e:8e: 0c:5c:ea:19:36:b4:8d:05:84:31:63:07:25:b3:9f: b2:12:21:b0:32:bd:ee:9d:21:3c:bb:9d:df:35:a7: 3f:6f:84:45:84:17:a9:bd:6c:e3:c6:d1:62:c1:93: e5:49:03:a3:27:6b:a3:47:4d:35:a3:b5:19:92:d7: 48:08:01:e3:a5:39:7b:b9:c0:53:d2:54:e8:f1:e1: e4:c4:81:ca:e9:e1:df:e0:07:ed:7c:24:f3:65:a7: 30:ee:f1:3c:f3:7d:69:24:50:5a:26:47:df:3f:d6: 1a:cf:51:20:71:9c:f2:02:19:a3:7e:f6:e5:f4:2a: 12:d1:9a:a4:9a:76:ad:36:fa:a3:39:09:ce:30:3e: 2f:02:1b:62:df:47:9d:2f:52:d4:c9:69:6f:e9:0b: ac:53:4f:f5:64:6d:8d:65:76:89:a1:e2:fd:ef:56: 4d:c9:8c:cf:9f:12:15:d1:88:cb:92:c5:36:3c:de: 10:95:48:eb:b1:da:e8:a8:a7:1e:a0:ac:58:e3:71: 9f:72:41:5b:79:36:6e:87:9c:94:b4:eb:fe:a0:0a: b4:bf:92:c1:a4:e2:54:9d:80:58:09:6a:ba:17:78: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 147.146.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2924 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4a:40:c0:22:11:98:39:ba:39:dc:7f:94:66:e0:3c:d2:45: 21:6f:de:d7:08:6b:92:de:97:56:f8:82:55:9d:13:79:df:7f: d9:de:b1:b7:f3:31:d9:d0:0f:cb:4d:cb:27:75:8f:98:79:cd: 9b:23:2a:70:c7:76:8a:79:ae:fa:ab:2d:60:04:af:e1:ef:fc: 52:2c:00:93:44:bd:61:d4:79:06:c2:91:82:a2:b0:ea:e1:25: f3:b2:51:b4:dc:fe:3a:4d:38:f7:3e:e5:1b:29:e2:4f:5d:bf: 7b:78:1a:98:90:62:a0:28:4a:80:99:0c:03:1d:08:e2:0f:9a: e2:6b:90:c2:29:35:02:55:31:9b:6f:d6:88:71:c5:8f:b1:0c: f4:31:9d:82:ce:fc:85:73:a9:77:14:94:76:35:ad:2b:da:27: ce:57:ae:54:3c:df:fe:f9:a2:e4:ee:d7:c0:db:8d:a9:20:fe: 59:f2:0b:00:09:13:14:de:f7:13:93:89:a7:10:9a:69:36:53: 30:f2:a7:a3:3c:54:bd:dc:b4:a3:e5:36:57:60:99:89:3f:b4: 88:a0:f6:bd:86:d7:38:39:ca:6a:b3:5b:01:46:a3:0d:dd:06: e0:7c:09:b3:eb:99:f4:3e:f4:54:ca:a1:72:52:59:e2:00:73: d6:ec:a1:96 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE0fQmC2wgoxa6GY8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDMxMDEyNDUyMloXDTI4MDYxMjEyNDUyMlowLzEtMCsGA1UEAxMk NTQ0MjQwYzAtMWFhZC00MTYzLThhZGEtM2I3MTE4MGVhYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW7n3pl9STri0UHnpE2SyIndINDKjDHQ/3Xh Lo4MXOoZNrSNBYQxYwcls5+yEiGwMr3unSE8u53fNac/b4RFhBepvWzjxtFiwZPl SQOjJ2ujR001o7UZktdICAHjpTl7ucBT0lTo8eHkxIHK6eHf4AftfCTzZacw7vE8 831pJFBaJkffP9Yaz1EgcZzyAhmjfvbl9CoS0ZqkmnatNvqjOQnOMD4vAhti30ed L1LUyWlv6QusU0/1ZG2NZXaJoeL971ZNyYzPnxIV0YjLksU2PN4QlUjrsdroqKce oKxY43GfckFbeTZuh5yUtOv+oAq0v5LBpOJUnYBYCWq6F3imPwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFKewlltIAVZ64EKan34MPkKau1kdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81 NDQyNDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcxMTgwZWFjNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzU0NDI0MGMwLTFhYWQtNDE2My04 YWRhLTNiNzExODBlYWM0Zi81NDQyNDBjMC0xYWFkLTQxNjMtOGFkYS0zYjcxMTgw ZWFjNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCTkjAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIL bDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBASkDAIhGYObo53H+UZuA80kUhb97XCGuS3pdW+IJVnRN533/Z 3rG38zHZ0A/LTcsndY+Yec2bIypwx3aKea76qy1gBK/h7/xSLACTRL1h1HkGwpGC orDq4SXzslG03P46TTj3PuUbKeJPXb97eBqYkGKgKEqAmQwDHQjiD5ria5DCKTUC VTGbb9aIccWPsQz0MZ2CzvyFc6l3FJR2Na0r2ifOV65UPN/++aLk7tfA242pIP5Z 8gsACRMU3vcTk4mnEJppNlMw8qejPFS93LSj5TZXYJmJP7SIoPa9htc4Ocpqs1sB RqMN3QbgfAmz65n0PvRUyqFyUlniAHPW7KGW -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:15 2026 by rpki-client