$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer File: 2f3df651-bde8-4b01-b3c2-405a8caac7dd.cer (raw, json) Hash identifier: +N1PD6pm0w71zRET1rAAScY8XokUP5kp6uax9D+JxnI= Subject key identifier: 98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D27A26CDBD5E23B3D802C9E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Mar 2026 12:45:22 +0000 Certificate not after: Thu 15 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 401494 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:a2:6c:db:d5:e2:3b:3d:80:2c:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 13 12:45:22 2026 GMT Not After : Jun 15 12:45:22 2028 GMT Subject: CN=2f3df651-bde8-4b01-b3c2-405a8caac7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:bb:42:84:c3:1a:46:f3:68:29:de:0a:31: 30:c0:24:28:ca:ec:ca:8b:72:dc:27:d4:37:8b:b7: 68:5e:0c:34:ac:a1:ec:c9:41:f5:65:82:c1:06:7f: aa:b0:27:47:bf:37:8e:9e:cb:be:5b:7f:63:f9:fe: 7e:5d:43:ec:7e:6e:8b:e7:ae:97:0c:42:de:4b:c7: 90:54:6f:8d:ee:e6:91:10:01:21:26:5e:97:80:5b: f6:71:88:ea:01:0c:02:79:00:98:46:67:71:e6:b8: 5f:67:c4:53:7d:c2:d6:bd:41:5a:80:4d:1e:70:50: f6:a7:9d:13:88:01:e6:84:9f:a9:c4:c7:d3:95:76: 26:8e:24:bc:9d:c3:f3:03:0c:09:f7:42:23:f0:b6: c0:a2:bd:4b:d0:1f:4d:91:3d:3e:4d:a0:04:c3:0a: c9:1a:49:b4:87:02:de:4a:c4:1e:76:29:4e:af:af: 80:e2:f5:ec:b1:84:18:e5:96:a0:61:60:c6:f7:55: 0f:60:56:fd:2b:cf:27:86:45:79:c6:ee:03:11:1a: c5:04:b2:25:be:c5:63:0e:43:28:bd:ad:ef:c3:b9: 5a:d7:da:02:f4:43:bd:c5:f8:24:79:ba:ae:c7:02: 70:39:f2:4e:8e:ec:75:c6:21:9f:17:48:85:02:cd: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:78:21:86:ED:9D:35:05:CA:8F:79:3A:AC:13:31:BA:88:62:78:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f3df651-bde8-4b01-b3c2-405a8caac7dd/2f3df651-bde8-4b01-b3c2-405a8caac7dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401494 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a3:1e:6d:f9:69:68:25:ed:fd:21:c0:81:9b:02:2f:c4:46: 69:ab:c2:bd:cc:38:9e:60:aa:00:80:be:fe:8d:ca:50:3b:ef: 5a:ad:26:49:6b:e6:b5:e7:79:07:79:77:13:a9:ed:2f:84:25: 9a:61:b1:41:7e:f5:a6:fa:3f:c7:f3:5c:8b:4d:24:e7:35:aa: 23:f1:ef:ab:65:d3:35:4e:a0:e5:40:71:47:cb:9c:80:57:ae: ec:fc:b3:6d:66:bc:1c:59:14:37:75:36:4b:28:d6:02:ae:9b: 8b:70:3a:5f:c9:ca:cf:41:b6:09:8b:fc:e3:65:76:a0:6e:4c: 88:f5:46:7c:50:ea:18:49:92:4a:df:ff:84:72:fa:37:32:0c: 79:9e:4e:39:2b:f8:2d:de:5c:90:6a:06:49:48:58:0c:34:40: e0:ac:b1:83:96:fa:f7:97:44:2e:58:15:ef:be:5e:64:e5:79: a9:6f:25:06:ae:e1:03:6a:51:66:fe:d1:82:30:8c:b2:95:60: ae:54:d0:6a:d1:ca:0c:dc:f8:80:ac:2b:fb:ea:c4:48:07:0a: a4:90:d1:46:f7:87:02:4d:f8:8e:d7:55:fb:e8:2e:8f:68:63: 0f:9b:51:09:69:ce:62:7b:3a:b8:ba:0e:64:5b:2f:41:66:40: e2:de:2f:dd -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE0nomzb1eI7PYAsnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMzEyNDUyMloXDTI4MDYxNTEyNDUyMlowLzEtMCsGA1UEAxMk MmYzZGY2NTEtYmRlOC00YjAxLWIzYzItNDA1YThjYWFjN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeW7QoTDGkbzaCneCjEwwCQoyuzKi3LcJ9Q3 i7doXgw0rKHsyUH1ZYLBBn+qsCdHvzeOnsu+W39j+f5+XUPsfm6L566XDELeS8eQ VG+N7uaREAEhJl6XgFv2cYjqAQwCeQCYRmdx5rhfZ8RTfcLWvUFagE0ecFD2p50T iAHmhJ+pxMfTlXYmjiS8ncPzAwwJ90Ij8LbAor1L0B9NkT0+TaAEwwrJGkm0hwLe SsQedilOr6+A4vXssYQY5ZagYWDG91UPYFb9K88nhkV5xu4DERrFBLIlvsVjDkMo va3vw7la19oC9EO9xfgkebquxwJwOfJOjux1xiGfF0iFAs39RQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJh4IYbtnTUFyo95OqwTMbqIYnjOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y ZjNkZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVhOGNhYWM3ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJmM2RmNjUxLWJkZTgtNGIwMS1i M2MyLTQwNWE4Y2FhYzdkZC8yZjNkZjY1MS1iZGU4LTRiMDEtYjNjMi00MDVhOGNh YWM3ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiBWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIqjHm35aWgl7f0hwIGbAi/ERmmr wr3MOJ5gqgCAvv6NylA771qtJklr5rXneQd5dxOp7S+EJZphsUF+9ab6P8fzXItN JOc1qiPx76tl0zVOoOVAcUfLnIBXruz8s21mvBxZFDd1Nkso1gKum4twOl/Jys9B tgmL/ONldqBuTIj1RnxQ6hhJkkrf/4Ry+jcyDHmeTjkr+C3eXJBqBklIWAw0QOCs sYOW+veXRC5YFe++XmTlealvJQau4QNqUWb+0YIwjLKVYK5U0GrRygzc+ICsK/vq xEgHCqSQ0Ub3hwJN+I7XVfvoLo9oYw+bUQlpzmJ7Ori6DmRbL0FmQOLeL90= -----END CERTIFICATE-----Generated at Thu Mar 26 07:10:20 2026 by rpki-client