$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/096a3c8f-51af-41af-8243-19963fa02172.cer File: 096a3c8f-51af-41af-8243-19963fa02172.cer (raw, json) Hash identifier: 40Mlgv62A7U56ZpisuC0nahhnMtMGyDKQK5bNt7VQI8= Subject key identifier: 92:4A:04:8C:71:D6:BA:2F:33:11:11:38:2F:BA:D9:60:C3:E0:DE:26 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0F0749D924FBC6C775032CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/096a3c8f-51af-41af-8243-19963fa02172/096a3c8f-51af-41af-8243-19963fa02172.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/096a3c8f-51af-41af-8243-19963fa02172/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 17:13:23 +0000 Certificate not after: Tue 06 Jun 2028 16:13:23 +0000 Subordinate resources: AS: 11602 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0f:07:49:d9:24:fb:c6:c7:75:03:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 4 17:13:23 2026 GMT Not After : Jun 6 16:13:23 2028 GMT Subject: CN=096a3c8f-51af-41af-8243-19963fa02172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:20:d5:fd:c5:b8:d7:b0:e7:c3:eb:77:ba: 40:eb:c4:43:d2:66:9b:14:37:2c:fa:6d:4c:98:8e: ee:14:c1:56:0f:d2:88:03:1a:c6:b8:92:4e:3d:8d: 48:12:00:c3:d2:fc:ec:a2:9e:df:07:4a:6b:00:b8: 12:ea:48:e5:1b:90:37:31:15:f9:d0:9e:ad:d1:7a: ea:60:dd:df:8f:20:19:64:f2:0a:24:ba:ba:74:81: 56:78:66:e9:f1:14:2e:8c:cb:87:0e:a1:7a:23:32: e3:9d:9b:e0:77:41:54:9a:fa:ac:ea:b9:6f:34:32: b9:e7:c4:e0:80:fd:a7:b2:7e:34:e5:6a:1d:a6:64: df:cf:8e:1c:44:7c:b8:ca:3c:a6:3c:f5:4a:08:1c: 15:a5:55:e8:8f:a8:d1:85:28:56:92:08:7f:e8:b3: 53:57:73:fa:7c:0d:82:29:d3:6f:67:42:55:88:2d: 08:5c:54:99:ac:ea:77:6a:a1:00:41:fc:0c:1b:cf: 60:64:30:8a:1e:3d:dd:2c:50:49:b2:f8:2d:df:d6: e1:d4:fc:3d:b6:01:75:bf:e4:a1:57:96:cd:c7:a9: fa:95:c9:a7:1e:1e:57:a7:ea:eb:28:f5:80:d5:de: 42:06:7b:7c:4a:82:ff:25:43:6d:a0:61:9b:13:9c: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4A:04:8C:71:D6:BA:2F:33:11:11:38:2F:BA:D9:60:C3:E0:DE:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/096a3c8f-51af-41af-8243-19963fa02172/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/096a3c8f-51af-41af-8243-19963fa02172/096a3c8f-51af-41af-8243-19963fa02172.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11602 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2e:d9:b4:70:08:dc:45:a9:64:5b:25:cc:c8:c1:4f:60:19: c6:94:2e:e3:bf:b4:6c:5a:0b:d1:22:2b:87:7a:5d:9c:e6:1f: 5f:64:00:60:7e:c5:d4:ca:76:c2:3d:db:be:e9:41:b4:d0:f6: 02:39:d1:c8:b4:bd:93:1f:1a:35:7f:58:e0:99:58:8b:22:a8: a3:2b:1d:bc:99:82:86:a3:2f:cd:c1:6a:b6:1c:33:3a:98:92: 87:d9:8c:c8:4e:d3:90:7e:f1:50:9d:85:f4:5e:70:7e:cd:5f: 2a:4d:b0:8b:fd:9a:46:13:e7:78:08:4b:20:a5:e3:d9:36:00: c9:9f:98:64:a0:52:34:d5:9f:c9:45:bd:f8:c1:e8:49:11:2b: 39:f9:ef:e4:7f:fe:c4:b9:98:df:a5:58:24:25:31:ba:bc:6d: 9b:30:02:c9:bd:f0:91:d5:c9:dd:75:31:de:54:64:92:72:1f: 8b:05:72:9e:58:25:4d:0a:ca:f8:4a:85:61:1b:f9:e0:e0:45: 4b:67:a9:51:e8:52:e7:a5:91:40:53:7b:51:e2:78:33:8a:13: a3:55:92:10:95:a2:aa:fe:ff:68:6a:f7:fb:b1:0a:bc:e0:87: 37:3b:7e:ee:02:75:95:24:3d:46:fa:95:db:e5:4f:e4:2c:6a: ca:a2:0f:e6 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE0PB0nZJPvGx3UDLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNDE3MTMyM1oXDTI4MDYwNjE2MTMyM1owLzEtMCsGA1UEAxMk MDk2YTNjOGYtNTFhZi00MWFmLTgyNDMtMTk5NjNmYTAyMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzwg1f3FuNew58Prd7pA68RD0mabFDcs+m1M mI7uFMFWD9KIAxrGuJJOPY1IEgDD0vzsop7fB0prALgS6kjlG5A3MRX50J6t0Xrq YN3fjyAZZPIKJLq6dIFWeGbp8RQujMuHDqF6IzLjnZvgd0FUmvqs6rlvNDK558Tg gP2nsn405WodpmTfz44cRHy4yjymPPVKCBwVpVXoj6jRhShWkgh/6LNTV3P6fA2C KdNvZ0JViC0IXFSZrOp3aqEAQfwMG89gZDCKHj3dLFBJsvgt39bh1Pw9tgF1v+Sh V5bNx6n6lcmnHh5Xp+rrKPWA1d5CBnt8SoL/JUNtoGGbE5yyBwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJJKBIxx1rovMxEROC+62WDD4N4mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w OTZhM2M4Zi01MWFmLTQxYWYtODI0My0xOTk2M2ZhMDIxNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzA5NmEzYzhmLTUxYWYtNDFhZi04 MjQzLTE5OTYzZmEwMjE3Mi8wOTZhM2M4Zi01MWFmLTQxYWYtODI0My0xOTk2M2Zh MDIxNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLVIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcS7ZtHAI3EWpZFslzMjBT2AZxpQu 47+0bFoL0SIrh3pdnOYfX2QAYH7F1Mp2wj3bvulBtND2AjnRyLS9kx8aNX9Y4JlY iyKooysdvJmChqMvzcFqthwzOpiSh9mMyE7TkH7xUJ2F9F5wfs1fKk2wi/2aRhPn eAhLIKXj2TYAyZ+YZKBSNNWfyUW9+MHoSRErOfnv5H/+xLmY36VYJCUxurxtmzAC yb3wkdXJ3XUx3lRkknIfiwVynlglTQrK+EqFYRv54OBFS2epUehS56WRQFN7UeJ4 M4oTo1WSEJWiqv7/aGr3+7EKvOCHNzt+7gJ1lSQ9RvqV2+VP5CxqyqIP5g== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:58 2026 by rpki-client