$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566.cer File: 8a0d7057-2693-4b5b-b0e4-60b2f43e3566.cer (raw, json) Hash identifier: CyjnR6sQfFLzd5JMIB4MqxFir9IVT6UltU0nWPLpLJM= Subject key identifier: E7:B5:DF:7B:00:9A:D6:02:DF:FB:0C:64:FE:1F:B9:3A:BD:58:5F:40 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DA6A882681F6E3BC571054CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/8a0d7057-2693-4b5b-b0e4-60b2f43e3566.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 00:45:17 +0000 Certificate not after: Mon 31 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 35857 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:a8:82:68:1f:6e:3b:c5:71:05:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 28 00:45:17 2026 GMT Not After : Jul 31 00:45:17 2028 GMT Subject: CN=8a0d7057-2693-4b5b-b0e4-60b2f43e3566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:9e:42:91:c5:08:a6:af:43:85:d2:11:da: a4:de:e7:b3:05:35:41:41:38:7a:f4:95:ff:0a:9b: 1a:e1:1f:a0:28:e3:6b:5a:e6:be:9b:2e:01:8b:c3: 9e:e0:e6:23:c2:09:eb:5d:4f:3e:04:6f:5b:16:93: cd:8e:61:02:68:a6:7b:8c:c6:32:04:3d:53:bb:ab: 4b:a4:2a:b2:45:fe:2b:8c:33:57:da:e3:b5:b7:cf: d0:30:54:b2:38:08:df:b1:3e:e8:fd:26:e8:d3:63: ba:c3:9b:33:2c:87:71:a2:92:36:fb:60:de:85:c8: 1b:49:8a:15:8d:a0:50:62:9d:de:54:aa:68:f3:5b: ac:1c:31:cf:b4:ef:de:27:cc:a3:aa:9c:6f:8d:96: 21:93:f2:a3:7f:51:82:11:f8:50:ae:75:d7:72:ec: 5e:3b:13:7c:7f:77:65:f1:29:ea:88:71:98:a3:c5: 72:68:b8:2f:a0:3d:6d:3d:d4:09:53:58:f2:b6:e6: 39:60:b6:a0:08:47:e6:15:df:62:c8:c0:01:91:15: 61:56:77:bb:c9:a0:06:8a:d6:da:96:6c:20:9c:b0: ed:b7:cf:55:aa:a6:bd:42:36:8b:95:84:a6:f1:c8: 7e:42:26:02:56:b8:ff:34:78:ab:ad:c1:48:be:0f: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:DF:7B:00:9A:D6:02:DF:FB:0C:64:FE:1F:B9:3A:BD:58:5F:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0d7057-2693-4b5b-b0e4-60b2f43e3566/8a0d7057-2693-4b5b-b0e4-60b2f43e3566.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 35857 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e4:ce:84:e7:34:92:70:11:b9:da:d5:e2:ff:12:88:25:9d: 0f:7d:2e:d4:cc:1a:b0:6e:fb:7b:0d:13:de:03:86:ca:7b:4b: b8:e2:df:b4:ee:9c:90:1e:4d:26:b2:a9:90:bb:b7:66:fc:ca: 7f:94:05:4b:64:8f:08:e3:c4:d5:14:e2:83:7b:ef:c1:02:64: 2b:89:8c:a8:9a:86:ff:f1:27:25:d0:9b:8b:3b:44:ac:4b:1b: 90:a1:b8:e1:02:d0:34:4b:bd:00:b6:df:f0:b9:76:6e:09:93: b3:2d:12:92:7b:e5:1d:41:ba:8b:36:15:35:76:75:94:5b:0e: b1:a6:37:45:ea:ce:2c:0a:97:72:57:1e:37:d3:c2:74:24:e8: 85:80:2f:d0:5d:ef:26:22:59:c8:27:2f:22:da:c6:59:96:79: 97:ca:f9:6b:e1:de:c6:86:7c:cd:ea:6f:1d:ee:11:f0:12:06: ef:29:2b:3f:87:b0:31:f9:49:f3:2c:31:97:1e:12:7d:1a:68: 5a:62:0b:5b:c3:fa:b0:5b:1c:2c:72:9f:3e:fe:04:04:c3:39: 68:40:af:bb:4d:a5:eb:18:1b:72:04:01:59:02:c8:4a:30:d6: 30:52:c3:11:d5:88:49:8c:07:06:5c:41:a5:9c:05:d0:fb:4b: 8a:44:03:9e -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE2mqIJoH247xXEFTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyODAwNDUxN1oXDTI4MDczMTAwNDUxN1owLzEtMCsGA1UEAxMk OGEwZDcwNTctMjY5My00YjViLWIwZTQtNjBiMmY0M2UzNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw96eQpHFCKavQ4XSEdqk3uezBTVBQTh69JX/ Cpsa4R+gKONrWua+my4Bi8Oe4OYjwgnrXU8+BG9bFpPNjmECaKZ7jMYyBD1Tu6tL pCqyRf4rjDNX2uO1t8/QMFSyOAjfsT7o/Sbo02O6w5szLIdxopI2+2DehcgbSYoV jaBQYp3eVKpo81usHDHPtO/eJ8yjqpxvjZYhk/Kjf1GCEfhQrnXXcuxeOxN8f3dl 8SnqiHGYo8VyaLgvoD1tPdQJU1jytuY5YLagCEfmFd9iyMABkRVhVne7yaAGitba lmwgnLDtt89Vqqa9QjaLlYSm8ch+QiYCVrj/NHirrcFIvg/c5wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFOe133sAmtYC3/sMZP4fuTq9WF9AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 YTBkNzA1Ny0yNjkzLTRiNWItYjBlNC02MGIyZjQzZTM1NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhhMGQ3MDU3LTI2OTMtNGI1Yi1i MGU0LTYwYjJmNDNlMzU2Ni84YTBkNzA1Ny0yNjkzLTRiNWItYjBlNC02MGIyZjQz ZTM1NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIwRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEbkzoTnNJJwEbna1eL/EoglnQ99 LtTMGrBu+3sNE94Dhsp7S7ji37TunJAeTSayqZC7t2b8yn+UBUtkjwjjxNUU4oN7 78ECZCuJjKiahv/xJyXQm4s7RKxLG5ChuOEC0DRLvQC23/C5dm4Jk7MtEpJ75R1B uos2FTV2dZRbDrGmN0XqziwKl3JXHjfTwnQk6IWAL9Bd7yYiWcgnLyLaxlmWeZfK +Wvh3saGfM3qbx3uEfASBu8pKz+HsDH5SfMsMZceEn0aaFpiC1vD+rBbHCxynz7+ BATDOWhAr7tNpesYG3IEAVkCyEow1jBSwxHViEmMBwZcQaWcBdD7S4pEA54= -----END CERTIFICATE-----Generated at Wed May 13 00:23:26 2026 by rpki-client