$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.cer File: 2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.cer (raw, json) Hash identifier: mY1UFprqDSljAA+9k4kd5B6N6KaFT/bE+SQ4jCkV/B0= Subject key identifier: 15:6A:0C:DF:F9:DD:AF:A3:ED:3F:C7:FA:1F:B9:E8:AF:C0:79:E6:2A Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D83C2F5E4DA09434CD16EAF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Apr 2026 12:45:17 +0000 Certificate not after: Tue 18 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 932 AS: 6134 AS: 54467 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:c2:f5:e4:da:09:43:4c:d1:6e:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 15 12:45:17 2026 GMT Not After : Jul 18 12:45:17 2028 GMT Subject: CN=2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:23:90:be:20:27:9f:5c:12:bc:69:39:96: 84:1a:51:dc:99:b7:f9:42:3d:e5:56:56:c3:6b:88: a1:9d:5c:53:cc:0c:e6:26:8a:46:fd:3e:23:17:b8: 57:d9:13:6e:d1:40:ed:6f:00:f6:18:6a:78:97:d1: ce:29:57:96:89:83:70:c9:0f:f6:02:e4:f7:60:e5: 0a:e7:65:cf:7a:4a:13:35:b0:0e:3d:53:65:8a:b3: fe:d2:7e:05:84:43:bf:4c:fb:2e:10:c2:cf:6b:c9: e4:96:6a:63:72:89:0a:6b:8c:75:3b:02:75:63:50: cf:c7:b4:41:4a:70:f8:18:3c:67:e2:ff:43:74:76: 3b:c3:59:b1:44:e0:e0:04:e8:10:df:80:c7:b6:03: 73:72:00:da:8b:59:cf:d1:b2:eb:f6:84:84:66:e2: 8a:7c:83:ea:ee:25:18:4a:46:c2:85:75:c6:d0:1f: 37:28:e6:5c:b6:ba:42:e1:3b:1f:b4:84:a4:5d:a9: 12:07:45:cd:25:3b:88:7e:0f:44:9b:ae:4b:43:62: 15:f4:2c:be:2e:5e:a1:4b:2b:be:66:67:63:07:26: a9:df:ba:5e:8b:eb:d9:71:5c:00:f7:91:33:c0:58: 62:58:75:49:4d:a7:db:77:74:58:51:6a:6a:69:a9: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6A:0C:DF:F9:DD:AF:A3:ED:3F:C7:FA:1F:B9:E8:AF:C0:79:E6:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 932 6134 54467 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7a:4e:53:0e:b5:4c:ba:1b:43:cf:ab:bc:e0:a1:4e:c3:48: 0a:c3:e6:10:44:f3:8e:b6:f2:2e:2b:55:0c:37:5c:67:1a:85: d9:42:cf:bb:c7:1f:bf:ec:fa:8c:40:04:4b:5e:73:46:37:d5: 9c:64:6e:5d:a6:cd:2f:46:5a:d5:0a:99:08:ac:94:d6:41:c4: be:22:d4:d1:fd:31:d2:40:a5:9d:a6:ca:d6:ac:ce:c5:9f:9b: 8a:af:a8:74:b3:6a:19:0b:7c:71:65:7f:ad:38:3f:82:52:a1: 98:aa:92:ea:76:54:e5:52:6a:9f:39:38:b1:59:18:72:50:1e: 94:1a:c4:be:e1:f2:c8:83:8f:3a:12:16:02:03:4b:ee:d5:93: 69:e1:54:05:c9:9a:0b:7e:ba:49:9f:d8:06:1a:dc:b6:09:db: 40:0d:77:40:d4:c0:2d:e5:db:71:e3:fb:28:49:b6:f4:ce:5a: 6c:fe:96:b2:86:1f:fd:62:55:df:fd:a7:6e:f2:2b:04:5c:66: 4a:3d:2e:d9:d2:ad:23:ab:a6:90:af:43:37:f0:90:00:27:cd: 20:a8:3b:93:8a:41:94:65:ea:9f:3d:c5:16:6a:71:e5:33:0b: 94:9c:31:dc:9d:59:f4:e3:28:a7:91:3e:df:a4:ef:6e:ea:d0: 7b:99:a3:5a -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE2DwvXk2glDTNFur4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDQxNTEyNDUxN1oXDTI4MDcxODEyNDUxN1owLzEtMCsGA1UEAxMk MmJjZTFkYmUtZjczYS00NmVkLThiNzYtYjJmZDUxZWNhZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+8jkL4gJ59cErxpOZaEGlHcmbf5Qj3lVlbD a4ihnVxTzAzmJopG/T4jF7hX2RNu0UDtbwD2GGp4l9HOKVeWiYNwyQ/2AuT3YOUK 52XPekoTNbAOPVNlirP+0n4FhEO/TPsuEMLPa8nklmpjcokKa4x1OwJ1Y1DPx7RB SnD4GDxn4v9DdHY7w1mxRODgBOgQ34DHtgNzcgDai1nP0bLr9oSEZuKKfIPq7iUY SkbChXXG0B83KOZctrpC4TsftISkXakSB0XNJTuIfg9Em65LQ2IV9Cy+Ll6hSyu+ ZmdjByap37pei+vZcVwA95EzwFhiWHVJTafbd3RYUWpqaanhjQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFBVqDN/53a+j7T/H+h+56K/AeeYqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y YmNlMWRiZS1mNzNhLTQ2ZWQtOGI3Ni1iMmZkNTFlY2FmYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiY2UxZGJlLWY3M2EtNDZlZC04 Yjc2LWIyZmQ1MWVjYWZiYy8yYmNlMWRiZS1mNzNhLTQ2ZWQtOGI3Ni1iMmZkNTFl Y2FmYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIgYIKwYBBQUH AQgBAf8EEzARoA8wDQICA6QCAhf2AgMA1MMwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc3pOUw61TLobQ8+r vOChTsNICsPmEETzjrbyLitVDDdcZxqF2ULPu8cfv+z6jEAES15zRjfVnGRuXabN L0Za1QqZCKyU1kHEviLU0f0x0kClnabK1qzOxZ+biq+odLNqGQt8cWV/rTg/glKh mKqS6nZU5VJqnzk4sVkYclAelBrEvuHyyIOPOhIWAgNL7tWTaeFUBcmaC366SZ/Y BhrctgnbQA13QNTALeXbceP7KEm29M5abP6WsoYf/WJV3/2nbvIrBFxmSj0u2dKt I6umkK9DN/CQACfNIKg7k4pBlGXqnz3FFmpx5TMLlJwx3J1Z9OMop5E+36TvburQ e5mjWg== -----END CERTIFICATE-----Generated at Fri Apr 17 01:24:03 2026 by rpki-client