$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0086b1ea-5848-4d61-b47f-c425d623379b.cer File: 0086b1ea-5848-4d61-b47f-c425d623379b.cer (raw, json) Hash identifier: 9GEyvb3LGwgZPozPu/ctWY+tWdKkJWjRpaRsoVL1I1A= Subject key identifier: BD:28:DD:7B:1C:CB:D3:59:B3:25:81:7C:6C:0D:9B:36:C9:61:A5:AA Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0EE760265B71EBC58D5F0100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0086b1ea-5848-4d61-b47f-c425d623379b/0086b1ea-5848-4d61-b47f-c425d623379b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0086b1ea-5848-4d61-b47f-c425d623379b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 16:09:05 +0000 Certificate not after: Tue 06 Jun 2028 15:09:05 +0000 Subordinate resources: AS: 396457 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:e7:60:26:5b:71:eb:c5:8d:5f:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 4 16:09:05 2026 GMT Not After : Jun 6 15:09:05 2028 GMT Subject: CN=0086b1ea-5848-4d61-b47f-c425d623379b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:d1:de:20:d1:c6:91:b4:ef:85:86:42:4f: 1c:4f:90:71:23:34:b5:94:59:3b:2a:9c:cd:f4:1d: 73:e3:10:50:ec:f3:80:72:7d:37:a6:e8:9d:e9:ae: fd:c6:9c:d7:a9:b4:09:95:6b:bb:f5:3d:96:d8:6a: 5d:15:27:ed:32:53:44:e7:5e:0e:d7:33:8c:19:67: e8:62:f0:37:e8:1e:17:36:00:dd:d2:fc:dd:b7:e2: 05:2f:17:3f:29:54:de:b8:f2:d9:3b:74:d9:ad:65: 09:70:f0:1b:a7:86:8d:e9:2e:a6:0a:85:60:84:09: 13:69:a4:cb:2c:e7:42:03:3c:aa:c2:3d:77:08:e6: 79:2a:a3:f5:53:00:15:27:58:22:24:b2:d6:38:22: 71:a7:31:4e:5e:68:d2:eb:ac:40:13:14:69:9a:a8: a4:3d:24:bf:25:c8:81:dc:02:e9:4d:30:96:34:5b: 72:1b:3c:d7:8d:8f:05:11:60:c7:64:80:04:eb:75: 13:60:6f:ec:b4:95:86:f4:39:65:19:b3:3c:4c:b9: ba:f7:a3:42:6c:67:ca:b1:8e:d8:52:8d:c1:4d:65: f3:c6:77:86:b8:7e:44:8a:6c:54:09:57:36:03:e8: 4f:8a:b1:28:0a:ca:2b:50:f8:cf:84:2a:45:47:4d: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:28:DD:7B:1C:CB:D3:59:B3:25:81:7C:6C:0D:9B:36:C9:61:A5:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0086b1ea-5848-4d61-b47f-c425d623379b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0086b1ea-5848-4d61-b47f-c425d623379b/0086b1ea-5848-4d61-b47f-c425d623379b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396457 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5d:54:07:de:0b:a9:84:ae:07:35:90:98:a1:94:e8:ff:a8: ff:18:db:a1:5b:da:c6:c3:a0:27:95:54:16:9b:d5:d7:b5:0a: e2:64:72:af:4a:32:e9:12:e6:4d:d1:30:99:7b:ed:36:7d:b2: c3:c7:99:99:3f:08:34:cb:aa:36:42:01:ed:41:5d:fc:b0:6d: 0d:b3:f8:d2:7d:58:50:1b:58:de:ed:d7:d1:4b:35:54:5f:4d: fc:5b:bf:03:8e:7d:8d:84:ed:e9:67:72:64:ee:ae:66:85:bc: 36:89:81:06:d2:cc:e6:f6:9b:4d:84:49:f4:92:f4:b3:ce:10: dd:97:78:68:68:c4:b4:2a:69:5e:41:e7:bc:13:aa:db:c4:f7: 2e:b2:00:52:4b:af:2e:ea:6c:69:55:af:db:2f:35:c5:2c:31: be:85:f8:51:68:e5:a3:ac:66:8f:79:b9:f0:0b:85:a7:ce:d8: 0c:93:b6:d2:de:24:00:9c:8d:ca:7f:d0:d5:6d:62:4f:e4:d5: 46:a0:a1:fe:90:23:de:5f:9b:9f:68:16:df:ba:bb:79:76:aa: f2:b3:39:4c:0c:aa:09:4f:2f:a7:32:b0:d1:02:52:bf:d5:03: fb:03:5b:69:0c:cd:d0:42:fc:1f:05:e3:7b:f3:ae:ba:c9:f6: f6:ba:87:2a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE0O52AmW3HrxY1fAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNDE2MDkwNVoXDTI4MDYwNjE1MDkwNVowLzEtMCsGA1UEAxMk MDA4NmIxZWEtNTg0OC00ZDYxLWI0N2YtYzQyNWQ2MjMzNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNHR3iDRxpG074WGQk8cT5BxIzS1lFk7KpzN 9B1z4xBQ7POAcn03puid6a79xpzXqbQJlWu79T2W2GpdFSftMlNE514O1zOMGWfo YvA36B4XNgDd0vzdt+IFLxc/KVTeuPLZO3TZrWUJcPAbp4aN6S6mCoVghAkTaaTL LOdCAzyqwj13COZ5KqP1UwAVJ1giJLLWOCJxpzFOXmjS66xAExRpmqikPSS/JciB 3ALpTTCWNFtyGzzXjY8FEWDHZIAE63UTYG/stJWG9DllGbM8TLm696NCbGfKsY7Y Uo3BTWXzxneGuH5EimxUCVc2A+hPirEoCsorUPjPhCpFR03MXQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFL0o3Xscy9NZsyWBfGwNmzbJYaWqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w MDg2YjFlYS01ODQ4LTRkNjEtYjQ3Zi1jNDI1ZDYyMzM3OWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzAwODZiMWVhLTU4NDgtNGQ2MS1i NDdmLWM0MjVkNjIzMzc5Yi8wMDg2YjFlYS01ODQ4LTRkNjEtYjQ3Zi1jNDI1ZDYy MzM3OWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgypMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB5dVAfeC6mErgc1kJihlOj/qP8Y 26Fb2sbDoCeVVBab1de1CuJkcq9KMukS5k3RMJl77TZ9ssPHmZk/CDTLqjZCAe1B XfywbQ2z+NJ9WFAbWN7t19FLNVRfTfxbvwOOfY2E7elncmTurmaFvDaJgQbSzOb2 m02ESfSS9LPOEN2XeGhoxLQqaV5B57wTqtvE9y6yAFJLry7qbGlVr9svNcUsMb6F +FFo5aOsZo95ufALhafO2AyTttLeJACcjcp/0NVtYk/k1Uagof6QI95fm59oFt+6 u3l2qvKzOUwMqglPL6cysNECUr/VA/sDW2kMzdBC/B8F43vzrrrJ9va6hyo= -----END CERTIFICATE-----Generated at Wed Mar 25 22:52:57 2026 by rpki-client