$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer File: b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer (raw, json) Hash identifier: Tb6v7/sIhHxln+fU/s2kxygl+k3XCZLqb8/UaGtlMuM= Subject key identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D24D7BEAE1E6DD0637DE39D10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Mar 2026 12:45:22 +0000 Certificate not after: Wed 14 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 1074 IP: 141.195.104.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:d7:be:ae:1e:6d:d0:63:7d:e3:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 12 12:45:22 2026 GMT Not After : Jun 14 12:45:22 2028 GMT Subject: CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:83:05:b3:67:05:d7:b0:5e:b1:77:3e:f8: d0:30:98:1d:97:33:87:cd:a1:15:ed:e6:86:61:34: 1a:4a:2d:05:23:52:a9:2f:cc:d9:fc:aa:0b:73:cd: cd:dc:7a:cb:3a:c9:03:53:17:ac:7c:d9:53:91:52: 9f:69:0a:75:ca:ac:ef:e1:84:70:ac:3f:df:76:72: 10:06:b6:1f:5f:af:22:dd:23:fb:16:57:a0:b8:ed: db:03:cb:b1:21:d3:e0:cb:bc:53:84:06:10:44:55: ee:da:92:43:0a:80:47:d0:9d:5f:fb:a4:5c:5f:c7: 72:e6:51:c1:8f:4d:1b:44:52:8f:33:4f:b2:a2:27: 70:e3:56:6e:c7:09:e5:62:d6:9b:e5:fe:31:ff:54: 61:7c:4d:b9:b0:59:4f:48:40:14:46:af:21:e8:f8: fb:2b:fc:51:9f:3a:ae:a1:a3:2c:63:37:16:f0:fa: 13:5c:38:13:00:d8:aa:98:36:40:ff:b7:90:95:21: e9:09:19:90:61:d3:09:f3:8b:fb:8f:1f:7b:40:dd: 87:43:d6:44:0c:d1:fc:0f:f5:9a:08:bd:f9:9a:c3: da:a7:80:bb:a6:30:31:41:44:54:77:70:25:77:ea: 45:f3:c9:0a:5a:06:b2:fa:d4:e7:b6:2a:ca:94:84: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 141.195.104.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1074 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4f:7d:83:73:6b:76:68:78:d9:96:74:9a:48:61:47:37:d6: 91:ac:07:79:76:14:9e:2c:92:9c:90:84:72:76:c1:da:16:92: c4:65:17:ca:02:e3:60:11:8b:62:1d:8f:cd:7b:d3:e9:5e:ec: 98:bf:48:93:7c:4f:41:12:67:c3:e3:20:98:8d:de:c0:ea:07: 9a:63:74:f8:98:e3:d7:c9:81:e6:60:34:b2:26:9c:d9:90:2d: 69:06:d6:c6:0f:f5:8b:cc:e4:9e:dc:65:9e:01:8d:a7:cb:f3: de:13:61:27:8d:5e:cc:bb:b0:83:44:3c:51:17:a3:4a:b5:7f: 50:71:db:3f:44:df:86:67:c4:7a:d6:b6:af:84:ab:ab:27:c9: 68:c4:80:12:cd:46:d6:05:04:cf:c5:a2:0f:19:e9:9d:7d:68: 0c:a2:68:51:57:7d:08:ad:45:13:84:02:4d:27:c1:3e:f2:38: 72:35:f9:93:f4:f2:85:99:b6:00:25:1d:ab:28:36:a7:1a:03: 35:c0:14:44:99:7f:e9:fb:4d:24:b7:24:10:0e:5a:0f:df:a9: eb:c7:06:cf:28:ef:14:f4:4d:3b:63:e0:e6:3a:cd:c6:ea:9e: 6d:b6:f5:a6:6f:f0:c4:68:78:3b:de:9b:d6:3d:01:84:09:70: e4:e2:f6:8e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0k176uHm3QY33jnRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMjEyNDUyMloXDTI4MDYxNDEyNDUyMlowLzEtMCsGA1UEAxMk YjUxNGM5MTItYmJmNi00N2I4LThlNGUtYTgwZDBjYjk4YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sODBbNnBdewXrF3PvjQMJgdlzOHzaEV7eaG YTQaSi0FI1KpL8zZ/KoLc83N3HrLOskDUxesfNlTkVKfaQp1yqzv4YRwrD/fdnIQ BrYfX68i3SP7FleguO3bA8uxIdPgy7xThAYQRFXu2pJDCoBH0J1f+6RcX8dy5lHB j00bRFKPM0+yoidw41ZuxwnlYtab5f4x/1RhfE25sFlPSEAURq8h6Pj7K/xRnzqu oaMsYzcW8PoTXDgTANiqmDZA/7eQlSHpCRmQYdMJ84v7jx97QN2HQ9ZEDNH8D/Wa CL35msPap4C7pjAxQURUd3Ald+pF88kKWgay+tTntirKlIRcCQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAwVBHux7wK3GEPdRipFp92jDY4FMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NTE0YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBkMGNiOThhM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I1MTRjOTEyLWJiZjYtNDdiOC04 ZTRlLWE4MGQwY2I5OGEzZS9iNTE0YzkxMi1iYmY2LTQ3YjgtOGU0ZS1hODBkMGNi OThhM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKNw2gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC BDIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAU99g3Nrdmh42ZZ0mkhhRzfWkawHeXYUniySnJCEcnbB2haS xGUXygLjYBGLYh2PzXvT6V7smL9Ik3xPQRJnw+MgmI3ewOoHmmN0+Jjj18mB5mA0 siac2ZAtaQbWxg/1i8zkntxlngGNp8vz3hNhJ41ezLuwg0Q8URejSrV/UHHbP0Tf hmfEeta2r4SrqyfJaMSAEs1G1gUEz8WiDxnpnX1oDKJoUVd9CK1FE4QCTSfBPvI4 cjX5k/TyhZm2ACUdqyg2pxoDNcAURJl/6ftNJLckEA5aD9+p68cGzyjvFPRNO2Pg 5jrNxuqebbb1pm/wxGh4O96b1j0BhAlw5OL2jg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:11:42 2026 by rpki-client