$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer File: da5097c7-8b09-41b1-89c6-66fd84a2c3f5.cer (raw, json) Hash identifier: FVfkW5jfHwaHmGOTSSZfmCjn9K+OgRZsPPPt0Zq52lI= Subject key identifier: 00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DC98E108173B6939E1AE46800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 May 2026 12:45:17 +0000 Certificate not after: Sat 12 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 397441 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:8e:10:81:73:b6:93:9e:1a:e4:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 10 12:45:17 2026 GMT Not After : Aug 12 12:45:17 2028 GMT Subject: CN=da5097c7-8b09-41b1-89c6-66fd84a2c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:69:f6:22:18:cf:ae:86:4a:89:71:a5:d7: 15:11:4a:9b:44:9b:ff:de:aa:b9:ef:49:36:11:35: 98:cf:fc:c2:9a:25:7a:b8:01:ed:0e:87:52:df:d6: c9:78:3c:d2:0c:d0:73:0e:88:44:23:b3:e4:a1:53: 1a:ae:c5:bb:33:b9:2f:51:4e:41:f0:ef:c1:79:6c: e8:15:92:70:78:c6:bc:d4:b3:3e:99:d8:56:3f:8a: 0d:0a:5d:5f:92:11:87:dd:ea:4f:ee:57:bd:83:fa: 08:8a:56:c4:a0:45:a7:a8:31:2e:a7:1c:35:a1:e5: 0b:e0:0f:c9:4f:99:5e:1c:65:8b:db:1d:5f:0c:67: dd:8a:71:88:28:42:1c:d5:36:6a:0f:32:11:d6:54: 9a:ad:fa:55:66:38:5b:a4:02:b9:b5:aa:50:41:ab: 5e:20:58:a2:07:ab:5e:61:70:05:bf:ee:ad:41:13: d5:16:6c:ec:3a:25:08:0c:cd:10:c7:9d:76:36:4e: 11:8b:b3:1c:fa:85:c3:45:34:61:e4:c9:32:5f:03: c2:00:0c:94:8f:3e:ff:81:0f:7f:6e:7a:53:b5:3d: 83:3a:23:24:0d:92:29:91:53:bd:bd:4b:1a:2f:92: 80:5c:d2:26:18:fc:39:c5:25:49:31:f9:10:a8:40: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:52:61:6D:30:39:FB:D2:41:2F:7F:64:D5:7E:7F:8C:9F:16:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5097c7-8b09-41b1-89c6-66fd84a2c3f5/da5097c7-8b09-41b1-89c6-66fd84a2c3f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0d:8f:23:9c:9c:62:37:d1:76:33:8e:7c:30:31:3f:11:7d: 01:67:a2:cd:2f:96:f3:6f:1c:c8:b2:28:17:f6:af:d9:5e:9c: e0:dc:63:23:b7:35:51:55:90:14:20:7f:cc:24:67:7d:5f:a0: 45:6c:af:c9:78:f7:68:41:d5:ec:7a:68:05:1c:a4:b9:02:8a: c9:c8:ee:8c:46:b8:c0:f5:88:e0:c8:f7:e5:d0:f9:5e:51:63: 06:f2:4b:cc:8f:52:94:c9:6a:ca:15:51:52:af:5c:c0:27:a7: cd:97:22:f4:f6:c7:b0:83:18:4d:39:79:a2:2d:93:ca:c8:7b: 22:0a:ce:7b:f0:ff:5b:23:38:90:ae:65:11:1f:2b:2d:a7:39: 67:e8:5f:11:45:37:2a:ce:10:4a:cb:2c:5a:bb:08:b9:0c:4d: c5:24:72:7c:4f:f9:1d:11:ca:63:cc:3d:6d:8b:82:42:23:ff: 84:40:bf:ca:2f:b0:0b:2d:2a:cd:8b:ee:59:77:45:59:2e:8a: aa:bc:4d:63:04:e8:5b:24:d9:09:c6:02:43:6e:da:04:5d:d4: e3:3f:aa:24:10:57:7b:54:41:73:61:3f:7e:32:ad:44:22:13: c2:e3:64:b0:de:2a:34:b1:d6:46:43:bf:74:38:52:84:d7:f0: 80:27:99:c5 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE3JjhCBc7aTnhrkaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxMDEyNDUxN1oXDTI4MDgxMjEyNDUxN1owLzEtMCsGA1UEAxMk ZGE1MDk3YzctOGIwOS00MWIxLTg5YzYtNjZmZDg0YTJjM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1p9iIYz66GSolxpdcVEUqbRJv/3qq570k2 ETWYz/zCmiV6uAHtDodS39bJeDzSDNBzDohEI7PkoVMarsW7M7kvUU5B8O/BeWzo FZJweMa81LM+mdhWP4oNCl1fkhGH3epP7le9g/oIilbEoEWnqDEupxw1oeUL4A/J T5leHGWL2x1fDGfdinGIKEIc1TZqDzIR1lSarfpVZjhbpAK5tapQQateIFiiB6te YXAFv+6tQRPVFmzsOiUIDM0Qx512Nk4Ri7Mc+oXDRTRh5MkyXwPCAAyUjz7/gQ9/ bnpTtT2DOiMkDZIpkVO9vUsaL5KAXNImGPw5xSVJMfkQqEDQQQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFADMUmFtMDn70kEvf2TVfn+MnxbcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k YTUwOTdjNy04YjA5LTQxYjEtODljNi02NmZkODRhMmMzZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2RhNTA5N2M3LThiMDktNDFiMS04 OWM2LTY2ZmQ4NGEyYzNmNS9kYTUwOTdjNy04YjA5LTQxYjEtODljNi02NmZkODRh MmMzZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhCBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABMNjyOcnGI30XYzjnwwMT8RfQFn os0vlvNvHMiyKBf2r9lenODcYyO3NVFVkBQgf8wkZ31foEVsr8l492hB1ex6aAUc pLkCisnI7oxGuMD1iODI9+XQ+V5RYwbyS8yPUpTJasoVUVKvXMAnp82XIvT2x7CD GE05eaItk8rIeyIKznvw/1sjOJCuZREfKy2nOWfoXxFFNyrOEErLLFq7CLkMTcUk cnxP+R0RymPMPW2LgkIj/4RAv8ovsAstKs2L7ll3RVkuiqq8TWME6Fsk2QnGAkNu 2gRd1OM/qiQQV3tUQXNhP34yrUQiE8LjZLDeKjSx1kZDv3Q4UoTX8IAnmcU= -----END CERTIFICATE-----Generated at Wed May 13 00:16:33 2026 by rpki-client