$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5.cer File: 6e093d22-0e04-4f30-8669-9e234d6b3fc5.cer (raw, json) Hash identifier: /Uqmi2ts45rZvbAdUCtd/jSdzmp0uScQl/4ILY9isAs= Subject key identifier: 35:B2:9C:DE:9D:FF:D4:93:E3:3F:58:84:EB:26:69:27:F5:10:7C:2C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584DD088C5216459CE68B87EB200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/6e093d22-0e04-4f30-8669-9e234d6b3fc5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 00:45:17 +0000 Certificate not after: Tue 15 Aug 2028 00:45:17 +0000 Subordinate resources: AS: 395400 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:88:c5:21:64:59:ce:68:b8:7e:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 13 00:45:17 2026 GMT Not After : Aug 15 00:45:17 2028 GMT Subject: CN=6e093d22-0e04-4f30-8669-9e234d6b3fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:75:ce:5f:81:9b:8c:fe:a1:ce:c9:ba:bc: 70:e7:56:46:d3:ca:1b:9c:b6:3e:9b:02:0b:d5:bd: 93:4b:b1:03:64:d9:e7:d2:7a:45:55:f7:50:49:75: c2:e5:74:89:e4:91:c4:fe:d6:66:cf:d1:c4:06:36: e4:06:b6:31:ff:a4:45:33:8c:ce:0d:35:11:23:b9: b0:05:3c:e7:c0:d6:ee:9a:66:c6:e9:1d:77:ff:9a: 77:15:9e:9b:bf:26:af:c8:29:77:0d:52:5d:39:b4: d1:04:b5:8d:9a:3e:ad:b9:43:23:a8:4b:b0:b0:04: af:4e:e1:76:68:c5:07:2a:eb:03:dd:0d:4c:c8:e3: 84:44:26:9b:98:d3:81:68:20:e0:cc:12:bd:e5:d9: c2:65:ee:e5:d7:1d:aa:b1:a4:4d:ed:8d:68:80:b1: d1:59:e4:12:f7:1c:fc:a1:8e:46:cc:33:46:f1:79: 27:10:fe:a2:38:34:4b:18:c3:cc:f9:5b:32:82:7a: d6:b8:34:6a:c9:fe:4d:d7:9d:c1:c2:a6:51:d4:05: 30:ba:9e:57:5b:0c:af:76:86:1c:1e:b0:d7:04:96: 7d:d1:77:2d:a7:e5:f7:cd:1e:2e:06:0e:47:f5:d0: fb:29:ea:f5:2e:99:a0:8b:d3:ba:5a:54:af:72:9d: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B2:9C:DE:9D:FF:D4:93:E3:3F:58:84:EB:26:69:27:F5:10:7C:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e093d22-0e04-4f30-8669-9e234d6b3fc5/6e093d22-0e04-4f30-8669-9e234d6b3fc5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395400 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6e:c2:d4:92:73:c0:3a:a8:55:35:05:38:ce:1a:a7:51:df: 28:95:dd:f2:1d:04:5f:dc:1c:46:ed:be:fa:a6:3a:53:49:71: 9e:3a:44:ef:98:a9:c9:c4:d2:dd:dd:ef:c5:d3:21:0e:28:72: 03:f7:a5:42:38:22:ba:d2:ce:0a:86:27:bc:8a:ff:92:27:a0: 2a:de:c6:84:3a:6a:41:59:ca:ae:3d:11:ea:d3:c7:42:c4:87: a3:81:ab:bd:43:f4:e5:bf:f5:19:40:64:48:ad:86:19:37:b3: b5:08:d5:f2:3a:11:b8:6a:6d:9e:cc:17:74:48:a3:21:a7:ec: fd:db:a0:e0:34:3f:22:40:cb:f6:70:9a:1a:03:d4:d4:1e:d2: fa:e3:28:9b:e6:3d:05:9d:99:a8:aa:1a:a9:b7:e1:05:aa:bb: eb:0b:a5:e2:93:a2:e5:b1:a6:ec:47:17:2e:07:a9:7c:23:44: 1a:6a:a6:6d:9c:a7:b7:21:e7:15:dd:ef:46:a1:bd:e1:7e:e4: 8d:7c:b2:94:ec:ba:14:bc:5b:1e:bf:9d:2d:96:79:80:eb:83: 55:47:cc:20:89:c1:d9:ba:90:7c:d0:c2:16:8b:57:77:04:2d: a6:5b:38:d6:11:f1:27:cf:68:d4:0d:09:00:4f:60:9e:10:87: a1:12:ba:72 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE3QiMUhZFnOaLh+sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDUxMzAwNDUxN1oXDTI4MDgxNTAwNDUxN1owLzEtMCsGA1UEAxMk NmUwOTNkMjItMGUwNC00ZjMwLTg2NjktOWUyMzRkNmIzZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooB1zl+Bm4z+oc7Jurxw51ZG08obnLY+mwIL 1b2TS7EDZNnn0npFVfdQSXXC5XSJ5JHE/tZmz9HEBjbkBrYx/6RFM4zODTURI7mw BTznwNbummbG6R13/5p3FZ6bvyavyCl3DVJdObTRBLWNmj6tuUMjqEuwsASvTuF2 aMUHKusD3Q1MyOOERCabmNOBaCDgzBK95dnCZe7l1x2qsaRN7Y1ogLHRWeQS9xz8 oY5GzDNG8XknEP6iODRLGMPM+VsygnrWuDRqyf5N153BwqZR1AUwup5XWwyvdoYc HrDXBJZ90Xctp+X3zR4uBg5H9dD7Ker1Lpmgi9O6WlSvcp14dQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFDWynN6d/9ST4z9YhOsmaSf1EHwsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 ZTA5M2QyMi0wZTA0LTRmMzAtODY2OS05ZTIzNGQ2YjNmYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZlMDkzZDIyLTBlMDQtNGYzMC04 NjY5LTllMjM0ZDZiM2ZjNS82ZTA5M2QyMi0wZTA0LTRmMzAtODY2OS05ZTIzNGQ2 YjNmYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADBuwtSSc8A6qFU1BTjOGqdR3yiV 3fIdBF/cHEbtvvqmOlNJcZ46RO+YqcnE0t3d78XTIQ4ocgP3pUI4IrrSzgqGJ7yK /5InoCrexoQ6akFZyq49EerTx0LEh6OBq71D9OW/9RlAZEithhk3s7UI1fI6Ebhq bZ7MF3RIoyGn7P3boOA0PyJAy/ZwmhoD1NQe0vrjKJvmPQWdmaiqGqm34QWqu+sL peKTouWxpuxHFy4HqXwjRBpqpm2cp7ch5xXd70ahveF+5I18spTsuhS8Wx6/nS2W eYDrg1VHzCCJwdm6kHzQwhaLV3cELaZbONYR8SfPaNQNCQBPYJ4Qh6ESunI= -----END CERTIFICATE-----Generated at Wed May 13 05:49:18 2026 by rpki-client