$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a.cer File: 414698c0-81d5-46ea-95ef-95e376ba003a.cer (raw, json) Hash identifier: A7OjDCRq4Vv5NsfnjE+87kHCp3qzZgChXXZNIZ/Y+Pw= Subject key identifier: CB:49:E0:5B:C6:B3:DA:01:8B:C9:49:77:0F:69:F4:E0:EE:A3:8C:BD Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D2907C450BAC3E11AA82B2AA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/414698c0-81d5-46ea-95ef-95e376ba003a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Mar 2026 00:45:22 +0000 Certificate not after: Fri 16 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 40112 IP: 141.246.0.0/16 IP: 192.80.18.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:29:07:c4:50:ba:c3:e1:1a:a8:2b:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 14 00:45:22 2026 GMT Not After : Jun 16 00:45:22 2028 GMT Subject: CN=414698c0-81d5-46ea-95ef-95e376ba003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:39:ff:7d:3b:c7:77:af:50:fa:67:66:f6: 3c:a3:7a:5d:f4:0f:ac:2d:56:36:a9:d4:4e:dd:8a: b2:78:20:50:67:75:e2:dd:15:0b:8c:ac:f5:43:5a: f8:95:8b:87:a0:50:56:81:11:63:b2:8e:03:9b:ef: da:55:2d:90:81:5a:03:4f:0e:b6:9c:3d:d2:cf:a4: 99:64:ae:3e:90:59:da:5d:28:b9:43:f1:56:9d:28: 53:2f:43:f0:49:8b:c8:01:af:8e:f6:5d:2e:89:72: 1a:56:33:24:22:7b:a4:2c:cb:06:0d:1f:ed:13:11: 33:31:cf:31:a4:6c:40:2c:6b:cd:5e:83:3c:8f:7b: cb:06:e4:c9:0e:6c:1d:d2:31:14:ba:eb:0d:53:4a: f3:bd:cb:a5:05:28:e5:e9:fc:cc:f1:90:c2:15:f7: 1c:8d:c0:f2:d7:6e:19:3a:11:ed:bf:8f:15:b7:43: 1c:82:b8:4c:a4:8f:5f:35:d4:f9:fd:03:3b:f1:fa: 0e:1f:2a:48:44:3f:e4:a1:95:3b:47:b8:06:02:64: 30:6d:30:77:7c:0e:f2:f7:92:50:9e:b7:9e:e2:00: eb:28:81:a8:74:89:57:54:bc:80:d8:fc:86:8f:4f: f9:82:e4:2e:2c:9a:6e:b6:25:59:52:ff:9c:11:f3: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:E0:5B:C6:B3:DA:01:8B:C9:49:77:0F:69:F4:E0:EE:A3:8C:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/414698c0-81d5-46ea-95ef-95e376ba003a/414698c0-81d5-46ea-95ef-95e376ba003a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 141.246.0.0/16 192.80.18.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40112 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:56:e4:32:f1:f2:90:be:d2:be:04:c7:ca:21:e7:7d:85:89: 7b:cd:b8:23:ca:5b:6b:55:02:87:4a:88:62:7f:6f:53:3f:64: de:c4:8d:aa:9c:5d:07:de:cc:89:81:ee:42:b4:03:3e:10:41: cb:a8:8c:1a:57:b5:be:8e:6c:f2:be:1f:34:49:91:da:d1:50: c4:7c:cb:1d:26:20:7b:1a:36:24:17:5b:98:62:0e:02:f8:8b: c6:fa:4e:f3:0a:97:9e:f3:10:3a:96:20:7a:f9:9c:69:d3:dd: d6:11:6c:fd:06:d3:49:7b:5f:54:a9:37:d0:eb:86:03:db:d4: 23:06:6c:a8:8a:cc:39:2d:23:63:53:15:d9:5a:ef:13:b0:2d: 6d:15:63:6d:94:e5:26:26:f0:6e:44:6c:a4:9a:a5:ae:67:94: 00:a1:f1:50:e2:55:4f:04:1c:fa:de:c3:bb:43:e0:a1:71:be: 16:a8:42:f1:01:ac:04:7d:73:5a:60:28:b8:05:bd:3c:06:fa: dd:fe:c4:46:e0:39:94:f8:0b:73:ea:90:21:0c:e7:f4:a7:56: 63:c4:17:38:62:df:9d:8c:31:3b:2d:c9:b6:51:b0:5a:59:34: 90:a9:62:bb:2c:70:6a:f6:33:b7:32:26:1c:4a:99:c5:45:6c: 07:c7:45:ca -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE0pB8RQusPhGqgrKqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxNDAwNDUyMloXDTI4MDYxNjAwNDUyMlowLzEtMCsGA1UEAxMk NDE0Njk4YzAtODFkNS00NmVhLTk1ZWYtOTVlMzc2YmEwMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdo5/307x3evUPpnZvY8o3pd9A+sLVY2qdRO 3YqyeCBQZ3Xi3RULjKz1Q1r4lYuHoFBWgRFjso4Dm+/aVS2QgVoDTw62nD3Sz6SZ ZK4+kFnaXSi5Q/FWnShTL0PwSYvIAa+O9l0uiXIaVjMkInukLMsGDR/tExEzMc8x pGxALGvNXoM8j3vLBuTJDmwd0jEUuusNU0rzvculBSjl6fzM8ZDCFfccjcDy124Z OhHtv48Vt0McgrhMpI9fNdT5/QM78foOHypIRD/koZU7R7gGAmQwbTB3fA7y95JQ nree4gDrKIGodIlXVLyA2PyGj0/5guQuLJputiVZUv+cEfOLbwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFMtJ4FvGs9oBi8lJdw9p9ODuo4y9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 MTQ2OThjMC04MWQ1LTQ2ZWEtOTVlZi05NWUzNzZiYTAwM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQxNDY5OGMwLTgxZDUtNDZlYS05 NWVmLTk1ZTM3NmJhMDAzYS80MTQ2OThjMC04MWQ1LTQ2ZWEtOTVlZi05NWUzNzZi YTAwM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCN9gMEAMBQEjAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAnLAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAM1bkMvHykL7SvgTHyiHnfYWJe824I8pba1UCh0qI Yn9vUz9k3sSNqpxdB97MiYHuQrQDPhBBy6iMGle1vo5s8r4fNEmR2tFQxHzLHSYg exo2JBdbmGIOAviLxvpO8wqXnvMQOpYgevmcadPd1hFs/QbTSXtfVKk30OuGA9vU IwZsqIrMOS0jY1MV2VrvE7AtbRVjbZTlJibwbkRspJqlrmeUAKHxUOJVTwQc+t7D u0PgoXG+FqhC8QGsBH1zWmAouAW9PAb63f7ERuA5lPgLc+qQIQzn9KdWY8QXOGLf nYwxOy3JtlGwWlk0kKliuyxwavYztzImHEqZxUVsB8dFyg== -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:26 2026 by rpki-client