$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fe1330c5-4df2-41dc-a6bc-f4ce3592e0db.cer File: fe1330c5-4df2-41dc-a6bc-f4ce3592e0db.cer (raw, json) Hash identifier: xg0bJ1q/jgDQYjGA7o+uPTpKVAafK7P6Pk4ivIh2iHw= Subject key identifier: A1:42:4F:DF:A1:C6:F4:D2:24:4D:F1:6D:B5:56:7E:52:89:44:F4:A5 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D3C16F70E5E29B4D5DECAC780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fe1330c5-4df2-41dc-a6bc-f4ce3592e0db/fe1330c5-4df2-41dc-a6bc-f4ce3592e0db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fe1330c5-4df2-41dc-a6bc-f4ce3592e0db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Mar 2026 20:36:21 +0000 Certificate not after: Thu 22 Jun 2028 20:36:21 +0000 Subordinate resources: AS: 18772 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:16:f7:0e:5e:29:b4:d5:de:ca:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 20 20:36:21 2026 GMT Not After : Jun 22 20:36:21 2028 GMT Subject: CN=fe1330c5-4df2-41dc-a6bc-f4ce3592e0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:49:3d:99:e7:bc:ec:fa:1d:e5:e0:5f:09:56: 1d:93:71:37:df:c1:ce:ba:53:bd:39:b8:4a:71:3e: 3c:d7:60:04:3d:f0:15:f5:cb:7c:9a:a8:e0:12:f3: ad:4d:da:3a:b6:a0:44:46:b8:6c:8b:33:2a:e0:7c: 12:ce:15:48:fb:65:67:1e:e4:63:27:c2:b5:12:d8: 71:73:c4:96:11:81:4b:a0:9b:cb:50:40:2b:b1:42: 12:5b:69:72:fd:95:a1:1b:35:90:e6:df:04:5c:25: be:2c:73:84:4c:74:40:d8:4a:d7:74:b4:bf:e0:f1: f7:c0:65:80:98:bb:e7:df:55:64:ec:df:85:b3:4b: 62:91:19:4e:bc:3f:25:35:fb:5d:61:13:b5:42:92: e2:d8:ed:ab:11:61:7a:bf:0e:33:21:57:3d:8b:20: b4:fb:b1:98:30:f0:d8:98:29:76:36:5d:56:fa:af: b6:70:bb:fd:21:a4:b3:af:da:8a:0b:5d:d9:bf:8b: 91:89:eb:78:a5:e3:77:cc:03:3f:3e:f5:87:90:1e: ff:cf:b8:74:11:06:14:a5:b8:0a:79:25:38:65:2a: cc:cf:3d:78:6a:78:47:4b:9c:be:5f:c8:7b:28:65: ee:bd:40:e4:cb:2d:79:82:5f:82:98:ec:40:cb:ff: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:42:4F:DF:A1:C6:F4:D2:24:4D:F1:6D:B5:56:7E:52:89:44:F4:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fe1330c5-4df2-41dc-a6bc-f4ce3592e0db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fe1330c5-4df2-41dc-a6bc-f4ce3592e0db/fe1330c5-4df2-41dc-a6bc-f4ce3592e0db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 18772 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:61:2a:cd:50:b4:b3:21:20:eb:73:27:4c:7a:cd:97:0f:fe: 5a:b1:86:a5:96:4b:99:62:3f:14:05:d8:bd:3b:df:da:59:fd: 7e:26:81:c5:3a:99:88:b1:e2:d9:0d:61:ed:fd:57:27:48:5b: 86:7b:97:25:25:d9:5d:18:a7:8a:3a:f6:96:b2:ac:b7:a3:73: 37:d1:f9:07:89:39:0f:6f:63:79:94:29:cb:d1:61:f8:f6:dd: 17:55:fc:7d:ac:32:67:0c:50:8a:f9:66:60:08:a8:ed:20:07: 42:1c:dd:01:5b:01:ce:be:4b:7c:8f:45:43:c4:8b:db:08:9a: b1:f8:e3:28:75:f0:cb:00:e8:5f:dc:53:d5:39:8b:c9:83:48: 13:ac:d9:2c:1a:54:00:44:6f:76:3e:ad:08:bc:dd:bc:9a:06: 52:ea:f9:27:0f:f8:21:8b:62:46:20:b7:cc:ed:a3:9a:cf:49: b5:9d:2e:75:67:ce:75:d1:10:22:da:20:ff:82:12:5b:e6:28: 7b:6c:2d:f9:f4:8b:c9:6c:b4:ee:e3:a9:a1:35:26:8a:d4:a3: 5b:ea:24:10:2f:64:54:7e:b9:25:b9:5c:39:9b:d2:e6:39:12: 34:ad:7e:0b:bc:fa:5a:46:fc:16:a4:cc:7d:1d:d1:b7:b9:b1: 75:b0:fe:96 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE08FvcOXim01d7Kx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMDIwMzYyMVoXDTI4MDYyMjIwMzYyMVowLzEtMCsGA1UEAxMk ZmUxMzMwYzUtNGRmMi00MWRjLWE2YmMtZjRjZTM1OTJlMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0k9mee87Pod5eBfCVYdk3E338HOulO9ObhK cT4812AEPfAV9ct8mqjgEvOtTdo6tqBERrhsizMq4HwSzhVI+2VnHuRjJ8K1Ethx c8SWEYFLoJvLUEArsUISW2ly/ZWhGzWQ5t8EXCW+LHOETHRA2ErXdLS/4PH3wGWA mLvn31Vk7N+Fs0tikRlOvD8lNftdYRO1QpLi2O2rEWF6vw4zIVc9iyC0+7GYMPDY mCl2Nl1W+q+2cLv9IaSzr9qKC13Zv4uRiet4peN3zAM/PvWHkB7/z7h0EQYUpbgK eSU4ZSrMzz14anhHS5y+X8h7KGXuvUDkyy15gl+CmOxAy/+QjwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFKFCT9+hxvTSJE3xbbVWflKJRPSlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m ZTEzMzBjNS00ZGYyLTQxZGMtYTZiYy1mNGNlMzU5MmUwZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2ZlMTMzMGM1LTRkZjItNDFkYy1h NmJjLWY0Y2UzNTkyZTBkYi9mZTEzMzBjNS00ZGYyLTQxZGMtYTZiYy1mNGNlMzU5 MmUwZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSVQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVmEqzVC0syEg63MnTHrNlw/+WrGG pZZLmWI/FAXYvTvf2ln9fiaBxTqZiLHi2Q1h7f1XJ0hbhnuXJSXZXRinijr2lrKs t6NzN9H5B4k5D29jeZQpy9Fh+PbdF1X8fawyZwxQivlmYAio7SAHQhzdAVsBzr5L fI9FQ8SL2wiasfjjKHXwywDoX9xT1TmLyYNIE6zZLBpUAERvdj6tCLzdvJoGUur5 Jw/4IYtiRiC3zO2jms9JtZ0udWfOddEQItog/4ISW+Yoe2wt+fSLyWy07uOpoTUm itSjW+okEC9kVH65JblcOZvS5jkSNK1+C7z6Wkb8FqTMfR3Rt7mxdbD+lg== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:55 2026 by rpki-client