$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer File: afc2bf64-2cba-4362-8b12-56844da30e4e.cer (raw, json) Hash identifier: Ac4xhdTzTuVSvNcjplKfUwrnYr1DAgPhkkrn4JdxdYA= Subject key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D159ABF27289E904AF1E8D300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Mar 2026 01:45:20 +0000 Certificate not after: Fri 09 Jun 2028 00:45:20 +0000 Subordinate resources: AS: 14343 IP: 64.26.192.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:9a:bf:27:28:9e:90:4a:f1:e8:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 7 01:45:20 2026 GMT Not After : Jun 9 00:45:20 2028 GMT Subject: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:f8:b6:51:74:54:a6:e4:ea:dc:71:62:77: 33:aa:bc:10:55:b3:55:16:fb:53:a4:11:92:6d:42: e1:b1:98:65:96:be:33:08:7b:d1:28:bb:4d:79:33: c4:8a:ff:72:29:4c:a5:2f:61:72:8d:34:21:28:2e: db:97:45:1f:b3:76:ad:79:b7:36:c1:a4:b3:00:05: 18:8a:aa:0b:97:bd:40:21:e3:23:32:f3:9b:18:43: b5:30:f8:2d:29:2c:d1:73:20:d3:76:16:94:23:89: 00:f7:b7:01:9f:2e:18:3a:48:2b:15:73:f8:8c:75: 89:cd:3b:6e:c7:64:d6:24:5d:ed:77:84:02:13:ee: 6d:86:2e:d2:a8:55:27:b9:21:6e:53:ad:13:19:6f: e5:72:3d:16:c2:68:e9:63:2e:ec:49:c8:d6:f4:1d: ee:4a:04:bb:e1:bb:bb:af:05:59:8d:c3:75:39:93: 74:ab:05:be:69:e6:30:e3:74:eb:83:9a:0e:c0:71: 38:b1:c2:f1:56:68:28:77:3c:df:c1:ec:d1:5f:ea: 20:d3:37:92:ef:fb:a7:c7:14:06:df:8d:b5:83:28: 01:14:a7:66:10:1b:4b:90:40:9c:e3:7a:7b:58:62: ab:b1:df:b4:43:c9:0d:25:6a:62:30:90:5c:f0:de: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.26.192.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9e:ea:ab:35:e1:80:39:81:2c:4d:4c:26:d6:ee:32:29:01: d8:4a:38:e5:f3:90:04:03:5e:dd:9a:6b:ac:20:a1:c5:f4:01: 24:37:cb:ae:6c:93:bd:2c:55:b9:42:4a:4c:0c:00:52:b7:ed: 65:30:32:42:aa:a7:12:40:e4:ad:6a:4b:73:ea:c6:c4:fb:25: 8b:6a:b6:6b:f3:42:7b:5a:a2:73:de:7d:4e:2f:80:1f:5f:86: 6a:0a:73:c7:24:bc:40:e7:8f:e2:d6:ca:5f:c3:df:da:77:e4: fd:ca:02:e8:7a:e3:30:b1:99:03:a7:c5:62:1f:79:b4:01:b7: 31:dc:d0:49:1c:92:07:8d:10:be:13:58:da:8a:44:87:25:23: 62:62:90:d0:5c:b2:c0:94:0c:96:50:fc:61:66:19:29:f4:87: 65:d8:e7:c9:65:91:d6:73:8c:7e:9d:85:bf:9e:98:bc:38:e0: 21:9a:2d:e9:ee:0b:43:94:df:33:4d:f4:46:6a:1e:13:e5:2e: 9d:01:89:af:1d:9d:a1:a1:86:35:d7:58:9a:b9:84:6e:4c:85: 37:50:c7:c5:8a:78:0e:cb:97:6a:09:13:55:63:4a:6c:74:42: 5a:79:41:aa:27:ea:bc:cb:1a:9c:dc:a5:98:6c:20:62:de:a1: ab:5a:fb:db -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0Vmr8nKJ6QSvHo0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwNzAxNDUyMFoXDTI4MDYwOTAwNDUyMFowLzEtMCsGA1UEAxMk YWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMwZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcb4tlF0VKbk6txxYnczqrwQVbNVFvtTpBGS bULhsZhllr4zCHvRKLtNeTPEiv9yKUylL2FyjTQhKC7bl0Ufs3atebc2waSzAAUY iqoLl71AIeMjMvObGEO1MPgtKSzRcyDTdhaUI4kA97cBny4YOkgrFXP4jHWJzTtu x2TWJF3td4QCE+5thi7SqFUnuSFuU60TGW/lcj0WwmjpYy7sScjW9B3uSgS74bu7 rwVZjcN1OZN0qwW+aeYw43Trg5oOwHE4scLxVmgodzzfwezRX+og0zeS7/unxxQG 3421gygBFKdmEBtLkECc43p7WGKrsd+0Q8kNJWpiMJBc8N5XMQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFENdWs0nzQmvyXZjLCh4r3P6n19LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FmYzJiZjY0LTJjYmEtNDM2Mi04 YjEyLTU2ODQ0ZGEzMGU0ZS9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRh MzBlNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAZAGsAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OAcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEABZ7qqzXhgDmBLE1MJtbuMikB2Eo45fOQBANe3ZprrCChxfQB JDfLrmyTvSxVuUJKTAwAUrftZTAyQqqnEkDkrWpLc+rGxPsli2q2a/NCe1qic959 Ti+AH1+GagpzxyS8QOeP4tbKX8Pf2nfk/coC6HrjMLGZA6fFYh95tAG3MdzQSRyS B40QvhNY2opEhyUjYmKQ0FyywJQMllD8YWYZKfSHZdjnyWWR1nOMfp2Fv56YvDjg IZot6e4LQ5TfM030RmoeE+UunQGJrx2doaGGNddYmrmEbkyFN1DHxYp4DsuXagkT VWNKbHRCWnlBqifqvMsanNylmGwgYt6hq1r72w== -----END CERTIFICATE-----Generated at Wed Mar 25 23:06:33 2026 by rpki-client