$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a.cer File: c615cdee-8d21-44d3-accf-72fa34a6a55a.cer (raw, json) Hash identifier: AL7GwUalvmkIHqpCUId4LsbKQ/Fi9PP8+D4m0l2urgQ= Subject key identifier: F9:15:23:BC:DE:54:9B:15:B9:A4:66:67:2B:3E:E9:99:6C:20:E7:DA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3F5D3CE2D874BF1BCF250500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/c615cdee-8d21-44d3-accf-72fa34a6a55a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 00:45:21 +0000 Certificate not after: Sat 24 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 35918 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:5d:3c:e2:d8:74:bf:1b:cf:25:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 22 00:45:21 2026 GMT Not After : Jun 24 00:45:21 2028 GMT Subject: CN=c615cdee-8d21-44d3-accf-72fa34a6a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:9d:16:c8:42:64:11:2d:e4:83:8b:3f:d3: 6b:8c:14:53:f1:ac:c6:d0:8a:fa:f1:18:3c:a0:95: cf:54:3b:eb:7e:e6:c4:b9:5a:a5:78:a1:56:17:ba: 94:8b:1a:45:b1:06:e8:65:d5:fb:6e:91:8a:59:61: 39:62:48:92:66:2d:12:ba:2a:bf:70:a6:e8:b0:5c: 7c:95:5f:c1:5e:56:6f:e9:df:7d:d2:0f:41:1f:2a: 7e:6c:2b:5c:76:02:fc:88:f1:6f:09:0e:7f:dc:cd: ac:05:88:53:b2:81:08:f2:9b:73:00:d3:13:71:87: 8c:66:d0:f7:22:8c:13:17:ce:8c:ca:b6:c4:07:dc: c9:83:8b:64:35:c1:df:b6:72:a2:5a:f9:42:cd:e4: c9:1d:e3:46:12:eb:88:cd:45:6b:57:f9:e1:cf:ab: 42:b3:3e:70:84:e6:37:69:5e:f2:d9:bf:04:62:ec: 91:b9:bb:ea:75:e1:5a:f5:1e:2d:a2:62:13:70:e3: 4d:2f:45:40:88:a3:b4:81:c3:fd:0a:bb:d2:61:1e: ac:e4:45:69:7e:ca:b8:56:6b:28:eb:26:0e:b5:d5: 0d:73:75:73:35:6e:f0:83:24:13:44:58:53:b6:b2: 47:16:4b:e4:0c:c3:f9:36:29:bb:c1:76:c4:d6:f0: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:15:23:BC:DE:54:9B:15:B9:A4:66:67:2B:3E:E9:99:6C:20:E7:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/c615cdee-8d21-44d3-accf-72fa34a6a55a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 35918 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:06:91:3d:77:31:c9:cc:65:db:92:3d:83:19:ba:bb:03:37: a5:63:21:a5:57:50:0a:ed:ab:c3:ad:64:c2:73:9a:ba:1b:e7: 07:49:b1:44:f3:6d:71:ec:99:bd:de:b6:1e:2c:66:5b:3b:19: af:c4:77:b3:37:58:ee:df:9b:bd:31:ba:10:25:e2:cb:20:f9: 00:c4:a8:2c:c9:a5:4c:42:52:d2:f7:97:c2:dc:ea:18:27:75: 26:fd:60:fd:3e:02:7d:f6:55:f6:b8:90:65:72:ba:91:b9:f5: 40:45:7c:3a:d7:c9:b1:a7:e8:47:cc:96:8b:b2:3d:51:8b:71: 38:8c:62:c6:13:bb:ac:4c:8c:3c:19:88:21:0b:19:a8:b0:e3: a4:06:ef:06:d5:13:18:b6:c6:07:36:6c:80:29:0b:a9:54:a9: 2c:a6:ea:b1:c5:5d:9d:ce:ea:7a:af:ea:cb:e5:5e:7f:48:ab: 0e:ec:83:ac:27:db:4e:db:ff:28:da:73:d6:76:60:56:8a:f6: 5d:72:9a:bd:a1:32:b5:9d:ef:76:94:0d:5c:83:ad:ae:6a:51: 01:c0:48:5f:16:9a:15:30:d6:f2:f7:3f:c7:06:a3:22:22:29: 71:4e:af:e1:09:58:ca:ae:31:14:ac:63:62:7d:3e:cf:16:ea: 8b:16:ca:d4 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE0/XTzi2HS/G88lBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMjAwNDUyMVoXDTI4MDYyNDAwNDUyMVowLzEtMCsGA1UEAxMk YzYxNWNkZWUtOGQyMS00NGQzLWFjY2YtNzJmYTM0YTZhNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9GdFshCZBEt5IOLP9NrjBRT8azG0Ir68Rg8 oJXPVDvrfubEuVqleKFWF7qUixpFsQboZdX7bpGKWWE5YkiSZi0Suiq/cKbosFx8 lV/BXlZv6d990g9BHyp+bCtcdgL8iPFvCQ5/3M2sBYhTsoEI8ptzANMTcYeMZtD3 IowTF86MyrbEB9zJg4tkNcHftnKiWvlCzeTJHeNGEuuIzUVrV/nhz6tCsz5whOY3 aV7y2b8EYuyRubvqdeFa9R4tomITcONNL0VAiKO0gcP9CrvSYR6s5EVpfsq4Vmso 6yYOtdUNc3VzNW7wgyQTRFhTtrJHFkvkDMP5Nim7wXbE1vDFnwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFPkVI7zeVJsVuaRmZys+6ZlsIOfaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NjE1Y2RlZS04ZDIxLTQ0ZDMtYWNjZi03MmZhMzRhNmE1NWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M2MTVjZGVlLThkMjEtNDRkMy1h Y2NmLTcyZmEzNGE2YTU1YS9jNjE1Y2RlZS04ZDIxLTQ0ZDMtYWNjZi03MmZhMzRh NmE1NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIxOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIMGkT13McnMZduSPYMZursDN6Vj IaVXUArtq8OtZMJzmrob5wdJsUTzbXHsmb3eth4sZls7Ga/Ed7M3WO7fm70xuhAl 4ssg+QDEqCzJpUxCUtL3l8Lc6hgndSb9YP0+An32Vfa4kGVyupG59UBFfDrXybGn 6EfMlouyPVGLcTiMYsYTu6xMjDwZiCELGaiw46QG7wbVExi2xgc2bIApC6lUqSym 6rHFXZ3O6nqv6svlXn9Iqw7sg6wn207b/yjac9Z2YFaK9l1ymr2hMrWd73aUDVyD ra5qUQHASF8WmhUw1vL3P8cGoyIiKXFOr+EJWMquMRSsY2J9Ps8W6osWytQ= -----END CERTIFICATE-----Generated at Wed Mar 25 23:07:46 2026 by rpki-client