$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae.cer File: 4de3fae5-9a77-43c6-9f06-0287f1e08fae.cer (raw, json) Hash identifier: dQJ/6rjycDf8WrNM1nCiCuGqqEFtvr6Ul17znkm82to= Subject key identifier: FF:F4:00:BD:82:75:AE:4A:22:16:EA:90:0F:D2:3B:42:3B:18:83:4F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E9D42E31A01810776D449DA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/4de3fae5-9a77-43c6-9f06-0287f1e08fae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jul 2026 08:45:11 +0000 Certificate not after: Fri 27 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 26046 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:42:e3:1a:01:81:07:76:d4:49:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 25 08:45:11 2026 GMT Not After : Oct 27 08:45:11 2028 GMT Subject: CN=4de3fae5-9a77-43c6-9f06-0287f1e08fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:fc:d5:87:1f:2f:4e:23:b0:ad:c6:fb:dc: 76:fe:56:1d:d3:89:b0:a2:7f:55:e9:ca:91:4b:97: 87:55:92:2a:ed:cb:d0:ba:07:d4:3c:73:fa:1e:c3: e0:e9:69:75:66:88:a9:ca:da:de:5f:bb:dc:a7:78: f2:33:3e:d3:75:bf:87:f0:21:67:2c:34:1a:0a:c3: c1:9b:81:27:de:0a:3f:85:e5:56:85:14:c6:ab:28: 8c:51:3e:58:b1:d7:93:e3:27:59:4c:71:db:c9:63: 49:5b:2f:e8:51:5d:ab:f6:05:92:20:90:ac:fa:a3: 7b:19:fc:f6:87:95:99:bf:00:7e:c7:9b:ac:8b:2e: 83:11:aa:c4:a7:5d:c1:84:97:c2:43:c6:3a:fe:dc: 9f:c9:59:42:da:aa:73:4e:4b:71:c3:a7:c1:fb:27: 28:f6:58:e8:c6:44:e2:02:18:d4:4c:a9:a5:d3:74: d4:8e:d1:9b:f5:6b:d2:4a:3d:1f:b0:79:15:53:38: 9d:14:26:c7:2d:be:9d:a7:0a:70:75:fd:6c:c0:70: 60:3e:c3:4b:34:c8:f6:b1:4c:25:d2:96:08:4d:b5: 8e:78:a5:39:86:97:b7:1f:15:c9:cd:88:de:ac:17: 30:43:c4:42:28:b8:87:d8:04:51:4e:8f:c8:1a:3c: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F4:00:BD:82:75:AE:4A:22:16:EA:90:0F:D2:3B:42:3B:18:83:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4de3fae5-9a77-43c6-9f06-0287f1e08fae/4de3fae5-9a77-43c6-9f06-0287f1e08fae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 26046 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0b:ae:67:3e:ed:72:20:7e:27:b6:4b:51:fb:46:0c:bf:cd: ab:69:5b:67:25:00:68:23:1d:85:bf:3e:27:05:fb:e9:c0:be: 1d:6d:2f:dd:91:de:0d:a1:55:f9:3a:8d:2a:5d:15:25:f7:7c: dd:40:45:96:0a:11:1a:c9:73:9b:5c:08:37:3c:7a:84:53:fa: 5e:d4:44:80:49:33:91:45:57:49:14:a5:46:c2:17:4f:96:2c: 65:33:6a:99:84:98:99:29:75:2a:22:ee:b2:81:6f:46:a9:86: b5:f8:97:3a:27:8f:62:f5:ad:18:02:12:22:e5:7d:04:92:e7: f0:fc:19:fe:28:7e:e7:87:b2:ea:2b:75:00:68:cc:2a:33:00: b0:53:d3:1f:0c:34:ec:5d:4c:da:61:fe:57:1a:70:3b:b2:99: 56:c0:63:16:53:96:ea:c8:b9:cb:d1:71:43:ed:2a:20:da:08: aa:4d:4c:a1:3b:c7:fd:cb:82:eb:ab:af:9a:fe:9e:73:dd:ef: 56:bc:d3:c1:4a:28:73:72:3e:f2:27:d4:68:a2:b8:47:f7:74: d8:88:24:55:2a:b9:1f:1f:f5:cb:f5:d9:82:63:89:d6:e3:42: a0:03:21:0a:60:87:41:91:0d:ff:7b:ec:39:0d:7a:a7:5c:ff: 85:7d:ad:6b -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE6dQuMaAYEHdtRJ2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcyNTA4NDUxMVoXDTI4MTAyNzA4NDUxMVowLzEtMCsGA1UEAxMk NGRlM2ZhZTUtOWE3Ny00M2M2LTlmMDYtMDI4N2YxZTA4ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7H81YcfL04jsK3G+9x2/lYd04mwon9V6cqR S5eHVZIq7cvQugfUPHP6HsPg6Wl1ZoipytreX7vcp3jyMz7Tdb+H8CFnLDQaCsPB m4En3go/heVWhRTGqyiMUT5YsdeT4ydZTHHbyWNJWy/oUV2r9gWSIJCs+qN7Gfz2 h5WZvwB+x5usiy6DEarEp13BhJfCQ8Y6/tyfyVlC2qpzTktxw6fB+yco9ljoxkTi AhjUTKml03TUjtGb9WvSSj0fsHkVUzidFCbHLb6dpwpwdf1swHBgPsNLNMj2sUwl 0pYITbWOeKU5hpe3HxXJzYjerBcwQ8RCKLiH2ARRTo/IGjz+kwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFP/0AL2Cda5KIhbqkA/SO0I7GINPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ZGUzZmFlNS05YTc3LTQzYzYtOWYwNi0wMjg3ZjFlMDhmYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRkZTNmYWU1LTlhNzctNDNjNi05 ZjA2LTAyODdmMWUwOGZhZS80ZGUzZmFlNS05YTc3LTQzYzYtOWYwNi0wMjg3ZjFl MDhmYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZb4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmguuZz7tciB+J7ZLUftGDL/Nq2lb ZyUAaCMdhb8+JwX76cC+HW0v3ZHeDaFV+TqNKl0VJfd83UBFlgoRGslzm1wINzx6 hFP6XtREgEkzkUVXSRSlRsIXT5YsZTNqmYSYmSl1KiLusoFvRqmGtfiXOiePYvWt GAISIuV9BJLn8PwZ/ih+54ey6it1AGjMKjMAsFPTHww07F1M2mH+VxpwO7KZVsBj FlOW6si5y9FxQ+0qINoIqk1MoTvH/cuC66uvmv6ec93vVrzTwUooc3I+8ifUaKK4 R/d02IgkVSq5Hx/1y/XZgmOJ1uNCoAMhCmCHQZEN/3vsOQ16p1z/hX2taw== -----END CERTIFICATE-----Generated at Tue Jul 28 17:19:16 2026 by rpki-client