$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer File: 1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer (raw, json) Hash identifier: ABsOM9pMbaXHENfQt5iN1RdblRykDRnsbALsjD9SWF8= Subject key identifier: AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E507D13FCDA3B2B58E97DBD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Jun 2026 20:45:12 +0000 Certificate not after: Fri 29 Sep 2028 20:45:12 +0000 Subordinate resources: AS: 22390 AS: 26662 AS: 395958 -- 395959 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:7d:13:fc:da:3b:2b:58:e9:7d:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 27 20:45:12 2026 GMT Not After : Sep 29 20:45:12 2028 GMT Subject: CN=1c3c82f0-740b-49fe-8af2-e3786af86e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:15:d2:41:c8:46:1c:c8:20:fe:75:0c:36: e2:1c:7c:75:2d:70:b0:33:cc:f8:ed:c0:a0:4c:81: ae:51:9a:fc:a5:cb:c5:52:fd:56:ab:e9:35:3e:27: 0f:05:03:d8:56:df:73:3d:de:f7:00:9d:0c:18:d6: dd:38:8a:e8:c7:c9:70:7c:6f:19:33:44:f6:33:5f: f0:07:6f:a4:f2:8d:ec:2c:06:64:4a:04:50:3f:3b: dc:71:ac:39:f3:de:e2:71:cd:d5:e3:e4:cd:c0:e7: 76:a2:21:4a:05:0c:65:5e:62:e8:22:29:b2:2c:49: f5:7c:0c:5b:c1:39:31:96:f1:1e:0a:94:ad:f4:3f: ae:1b:98:17:b6:71:fe:e7:1e:61:c4:f7:fa:f3:29: 1d:22:46:cd:a2:4e:70:90:d0:ff:ae:21:94:95:70: b1:b3:db:04:26:9c:eb:36:99:fe:8e:8a:fc:9d:25: 49:d4:1f:6e:a1:14:56:d8:d3:07:1d:8a:96:9e:d4: 37:75:14:4a:67:ac:22:9d:81:4c:9b:eb:48:35:b9: 6f:8c:60:32:b7:5f:fb:3b:2f:76:79:45:cf:7c:fc: 6f:f1:69:95:a5:56:87:55:b6:ff:a1:d1:2b:25:c8: 24:6d:b7:6f:f7:db:a6:61:cf:c4:68:be:3d:aa:5b: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 22390 26662 395958-395959 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:03:d5:71:59:e4:bd:7f:6e:ad:b6:34:ec:69:4b:b1:e5:07: 3c:e6:b3:cf:09:cd:e3:98:dd:d4:c8:d8:cc:ab:14:48:23:34: 51:a7:1f:8a:b1:09:79:20:1c:c5:c3:44:de:16:23:57:8a:5d: a8:2a:48:16:47:d3:9a:44:2c:2a:1f:d8:ee:76:d5:3c:14:9c: c4:5a:4c:5e:0b:59:9b:61:e2:c8:af:4b:f3:08:0d:e8:c7:07: a5:29:68:43:fe:60:de:19:d5:72:1c:d8:7b:e6:90:a8:35:e9: c0:46:ba:9a:3b:d7:96:17:f6:1c:7a:59:3a:5a:05:5f:c6:be: f8:43:db:27:16:da:f8:fb:59:4f:d1:db:b1:5f:00:ac:71:4b: 7c:22:38:16:15:89:bd:f7:39:2c:cc:87:52:01:7f:e8:ae:6d: ac:a0:f2:08:32:59:8b:ea:75:07:01:38:67:75:a0:8b:65:c2: e2:87:9e:2e:71:3b:11:e3:00:c5:05:75:7f:24:fc:d0:08:e9: a9:1a:6a:bf:34:94:7b:51:1c:1c:69:6a:fe:8b:5a:13:96:f8: 5d:ed:06:d0:dc:37:6e:aa:13:09:7b:ce:0b:30:ff:b9:5b:05: 5a:37:b9:02:7c:0d:66:2e:60:f1:ee:09:cc:5d:9d:9c:26:fa: d7:f3:2d:bb -----BEGIN CERTIFICATE----- MIIG9zCCBd+gAwIBAgIUAQ0Mn0MoWE5QfRP82jsrWOl9vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYyNzIwNDUxMloXDTI4MDkyOTIwNDUxMlowLzEtMCsGA1UEAxMk MWMzYzgyZjAtNzQwYi00OWZlLThhZjItZTM3ODZhZjg2ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQV0kHIRhzIIP51DDbiHHx1LXCwM8z47cCg TIGuUZr8pcvFUv1Wq+k1PicPBQPYVt9zPd73AJ0MGNbdOIrox8lwfG8ZM0T2M1/w B2+k8o3sLAZkSgRQPzvccaw5897icc3V4+TNwOd2oiFKBQxlXmLoIimyLEn1fAxb wTkxlvEeCpSt9D+uG5gXtnH+5x5hxPf68ykdIkbNok5wkND/riGUlXCxs9sEJpzr Npn+jor8nSVJ1B9uoRRW2NMHHYqWntQ3dRRKZ6winYFMm+tINblvjGAyt1/7Oy92 eUXPfPxv8WmVpVaHVbb/odErJcgkbbdv99umYc/EaL49qluMXQIDAQABo4IECTCC BAUwHQYDVR0OBBYEFKvFzJjT5FII99ffTQzxoG99GY4lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8x YzNjODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4NmFmODZlM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzFjM2M4MmYwLTc0MGItNDlmZS04 YWYyLWUzNzg2YWY4NmUzYS8xYzNjODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4NmFm ODZlM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwKQYIKwYBBQUH AQgBAf8EGjAYoBYwFAICV3YCAmgmMAoCAwYKtgIDBgq3MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADUD1XFZ 5L1/bq22NOxpS7HlBzzms88JzeOY3dTI2MyrFEgjNFGnH4qxCXkgHMXDRN4WI1eK XagqSBZH05pELCof2O521TwUnMRaTF4LWZth4sivS/MIDejHB6UpaEP+YN4Z1XIc 2HvmkKg16cBGupo715YX9hx6WTpaBV/GvvhD2ycW2vj7WU/R27FfAKxxS3wiOBYV ib33OSzMh1IBf+iubayg8ggyWYvqdQcBOGd1oItlwuKHni5xOxHjAMUFdX8k/NAI 6akaar80lHtRHBxpav6LWhOW+F3tBtDcN26qEwl7zgsw/7lbBVo3uQJ8DWYuYPHu CcxdnZwm+tfzLbs= -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:01 2026 by rpki-client