$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer File: c43335db-c55b-443e-b20c-5c74e1c256c9.cer (raw, json) Hash identifier: bDZ/aUpjpcAMe7sEpNz03zRhiBAMYH0NBXUZhbrITnI= Subject key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3432829E220EBD1EAA8CC6D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 00:45:22 +0000 Certificate not after: Tue 20 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 46264 AS: 54535 IP: 146.197.0.0/16 IP: 156.37.0.0/16 IP: 156.53.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:32:82:9e:22:0e:bd:1e:aa:8c:c6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 18 00:45:22 2026 GMT Not After : Jun 20 00:45:22 2028 GMT Subject: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:01:1d:ab:e4:53:5c:e3:08:6b:27:59:6a: c5:aa:d1:5f:36:1f:ea:16:9c:a5:de:cd:89:b9:35: 2d:d9:9e:d5:52:64:e9:37:ef:9a:16:84:f4:e8:86: 08:34:06:de:2d:54:91:9a:26:00:22:bd:13:82:1f: 08:3d:f7:f3:c7:ff:ef:73:53:9c:ec:4f:1e:24:c3: ce:28:57:f1:f5:9c:1a:1f:28:2f:3b:e5:e3:11:97: ab:ab:28:55:3a:bc:8d:74:c2:dd:fe:f9:05:78:1a: 37:be:27:05:15:13:cb:68:31:00:98:55:f7:3e:38: ff:a0:8d:d5:de:19:d7:98:e1:92:fa:96:8d:23:b0: 46:9f:42:0d:20:14:bc:79:31:c5:95:11:52:62:cd: f8:13:40:77:32:ec:e6:12:28:bc:1c:ae:23:d3:c3: 70:34:fb:a8:a3:b2:e2:7e:f9:98:c2:d0:22:b5:46: c3:36:9b:c7:ea:83:30:3a:65:93:94:56:1c:03:2d: 51:09:ef:90:0f:3f:ed:ba:60:8e:ee:82:71:0e:d7: b1:3c:9e:46:ba:69:1e:65:10:ba:74:c4:36:b0:1e: 80:13:bc:b7:8e:90:9d:7a:e1:2f:48:40:7c:4c:97: df:11:73:98:2c:f5:d0:b0:32:b4:2d:a4:70:64:f1: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 146.197.0.0/16 156.37.0.0/16 156.53.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46264 54535 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7a:11:9a:24:8d:e4:f4:ac:19:3f:8b:36:87:cc:de:3f:97: 1c:f7:53:eb:9b:e8:e8:9a:35:88:9f:a7:4b:a6:f3:cc:03:1c: ba:3c:48:5b:5a:80:b3:1c:d2:97:9d:74:d1:32:c0:f2:d2:1c: 56:68:5e:c1:bb:85:f5:74:b2:3c:c9:5e:e3:66:f4:6d:b0:fd: 3e:ed:7e:96:2e:53:1d:29:69:55:71:35:5f:01:d2:45:b5:2b: 1e:08:63:ac:28:04:8a:ff:fb:0f:e8:dc:8a:ff:c4:ab:1f:75: 99:59:1c:52:01:51:73:e5:13:81:68:8d:7b:4f:f0:fe:b7:a8: 6c:74:57:48:30:fb:41:c7:f2:56:e6:cb:c4:f6:db:bb:5e:1e: 4e:d8:d0:35:fb:90:2f:84:51:2c:94:10:2a:e0:6f:91:1d:18: 9b:a0:f8:a0:f5:c0:f2:dc:56:97:c8:6b:c0:f1:b3:96:41:11: 7e:97:1c:73:d3:0b:22:f2:78:29:d8:dc:ce:58:ec:a2:4b:49: 92:8e:f6:4f:ba:dc:16:29:0b:38:55:53:cc:20:20:a8:0f:0f: 69:7a:5a:d9:f8:65:dd:e2:cd:c3:0f:6f:bc:e6:df:75:3b:bc: 1e:fe:13:05:fe:05:35:f0:63:e4:9f:71:ee:d2:3a:d6:ca:16: 5a:15:77:ac -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE00MoKeIg69HqqMxtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxODAwNDUyMloXDTI4MDYyMDAwNDUyMlowLzEtMCsGA1UEAxMk YzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhUBHavkU1zjCGsnWWrFqtFfNh/qFpyl3s2J uTUt2Z7VUmTpN++aFoT06IYINAbeLVSRmiYAIr0Tgh8IPffzx//vc1Oc7E8eJMPO KFfx9ZwaHygvO+XjEZerqyhVOryNdMLd/vkFeBo3vicFFRPLaDEAmFX3Pjj/oI3V 3hnXmOGS+paNI7BGn0INIBS8eTHFlRFSYs34E0B3MuzmEii8HK4j08NwNPuoo7Li fvmYwtAitUbDNpvH6oMwOmWTlFYcAy1RCe+QDz/tumCO7oJxDtexPJ5GumkeZRC6 dMQ2sB6AE7y3jpCdeuEvSEB8TJffEXOYLPXQsDK0LaRwZPHuBwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMQL2oBbQCG40NSu3Raokopis2XZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M0MzMzNWRiLWM1NWItNDQzZS1i MjBjLTVjNzRlMWMyNTZjOS9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFj MjU2YzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwKAYIKwYBBQUH AQcBAf8EGTAXMBUEAgABMA8DAwCSxQMDAJwlAwMAnDUwHwYIKwYBBQUHAQgBAf8E EDAOoAwwCgIDALS4AgMA1QcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAd3oRmiSN5PSsGT+LNofM3j+XHPdT 65vo6Jo1iJ+nS6bzzAMcujxIW1qAsxzSl5100TLA8tIcVmhewbuF9XSyPMle42b0 bbD9Pu1+li5THSlpVXE1XwHSRbUrHghjrCgEiv/7D+jciv/Eqx91mVkcUgFRc+UT gWiNe0/w/reobHRXSDD7QcfyVubLxPbbu14eTtjQNfuQL4RRLJQQKuBvkR0Ym6D4 oPXA8txWl8hrwPGzlkERfpccc9MLIvJ4KdjczljsoktJko72T7rcFikLOFVTzCAg qA8PaXpa2fhl3eLNww9vvObfdTu8Hv4TBf4FNfBj5J9x7tI61soWWhV3rA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:34:20 2026 by rpki-client