$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5c9b06b-0b31-4e01-8e63-82b87d9fed36.cer File: d5c9b06b-0b31-4e01-8e63-82b87d9fed36.cer (raw, json) Hash identifier: kmPeSw02jxrZulOOkTKH+94LAJe1/JActs9hD9ev08g= Subject key identifier: 04:A5:9C:DF:8C:0E:0F:1E:E5:FA:3F:50:BD:02:17:54:9E:DF:C4:16 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CAA1F69DA949255DC566B4BB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5c9b06b-0b31-4e01-8e63-82b87d9fed36/d5c9b06b-0b31-4e01-8e63-82b87d9fed36.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5c9b06b-0b31-4e01-8e63-82b87d9fed36/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Jan 2026 13:45:21 +0000 Certificate not after: Mon 01 May 2028 12:45:21 +0000 Subordinate resources: AS: 398721 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:1f:69:da:94:92:55:dc:56:6b:4b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 27 13:45:21 2026 GMT Not After : May 1 12:45:21 2028 GMT Subject: CN=d5c9b06b-0b31-4e01-8e63-82b87d9fed36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:18:4c:8b:d0:17:ac:01:93:c4:ee:b1:39: 6f:00:15:b9:89:77:c2:c6:f7:55:3f:d7:1f:0f:5d: aa:ed:a4:76:84:d7:3a:fc:ae:b9:98:e5:39:6f:52: e1:c5:6c:ad:7b:0d:a2:45:9c:b8:02:77:a7:b7:9c: 0c:cd:68:55:e9:8c:91:64:ea:b7:ec:b8:ff:80:3b: 2b:12:ca:66:f0:98:1c:d3:95:e7:f7:fb:47:84:b2: e9:33:06:a1:bf:26:fe:30:b7:a8:99:66:f5:86:ea: 4d:64:3a:85:8b:fd:25:07:db:de:24:86:d1:41:18: 44:14:64:fd:fc:86:a1:f4:42:fd:e8:15:c8:2f:40: d0:18:b7:3e:75:dd:1f:94:e5:a7:52:3c:75:00:af: c2:58:87:31:c5:29:7f:67:c2:11:05:b1:10:03:d1: a4:5b:a8:3b:ad:7c:f6:80:15:86:e9:9a:05:8a:50: 68:19:a1:36:6e:62:9c:0b:8d:db:97:c6:cb:4a:2c: 6a:3b:47:07:9c:42:f6:ff:13:72:d9:27:9b:dd:51: d5:77:c8:cc:64:f5:fe:02:58:73:11:81:9f:f2:8f: 05:b0:1b:3f:1a:e7:c0:65:49:c4:89:08:d8:2c:87: 1c:b4:ea:d4:25:b1:83:d5:ec:72:b7:33:82:1c:2c: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:9C:DF:8C:0E:0F:1E:E5:FA:3F:50:BD:02:17:54:9E:DF:C4:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5c9b06b-0b31-4e01-8e63-82b87d9fed36/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d5c9b06b-0b31-4e01-8e63-82b87d9fed36/d5c9b06b-0b31-4e01-8e63-82b87d9fed36.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 398721 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:58:27:49:ea:d1:d2:dc:ee:77:b4:1c:ca:33:e6:e1:7e:23: 26:f8:e9:57:8d:96:cb:a5:59:13:9e:ec:43:93:1c:91:21:51: 71:92:63:51:b2:0f:85:87:1b:61:a9:84:29:f3:7e:dc:66:eb: a0:88:52:d7:89:48:90:af:05:03:83:66:3b:26:9f:a8:0e:57: 3b:d8:7a:8a:dc:28:35:ec:c3:98:8e:e0:67:89:0f:b0:01:53: ea:fe:68:14:74:bd:66:aa:ad:ee:2a:8b:94:f0:60:08:86:36: 46:30:0b:84:4a:5b:bd:71:87:41:8f:b3:f4:b7:35:a8:60:aa: ff:e3:6b:b2:fb:04:b0:a2:99:80:17:5f:8c:a1:c3:6c:66:91: 64:88:89:b7:2b:60:ff:66:b0:31:b6:94:2a:9e:cc:18:c0:7b: 7f:9a:fc:e0:ca:f6:33:7b:05:bd:bd:0a:89:83:a5:a1:61:4d: ee:ee:9c:67:9e:cc:07:35:f4:f1:4f:9f:7e:33:c1:c5:a3:9a: fd:b9:6e:e3:78:73:4e:6f:02:a7:a8:33:f1:23:10:ed:8e:11: 69:d3:39:95:aa:16:ff:9e:91:7c:47:62:6a:c9:20:0e:7c:b8: 6c:32:67:19:d8:6b:30:a3:72:68:f1:8e:9e:9b:51:d7:d8:a7: 37:8b:7f:b2 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEyqH2nalJJV3FZrS7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDEyNzEzNDUyMVoXDTI4MDUwMTEyNDUyMVowLzEtMCsGA1UEAxMk ZDVjOWIwNmItMGIzMS00ZTAxLThlNjMtODJiODdkOWZlZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPwYTIvQF6wBk8TusTlvABW5iXfCxvdVP9cf D12q7aR2hNc6/K65mOU5b1LhxWytew2iRZy4Anent5wMzWhV6YyRZOq37Lj/gDsr Espm8Jgc05Xn9/tHhLLpMwahvyb+MLeomWb1hupNZDqFi/0lB9veJIbRQRhEFGT9 /Iah9EL96BXIL0DQGLc+dd0flOWnUjx1AK/CWIcxxSl/Z8IRBbEQA9GkW6g7rXz2 gBWG6ZoFilBoGaE2bmKcC43bl8bLSixqO0cHnEL2/xNy2Seb3VHVd8jMZPX+Alhz EYGf8o8FsBs/GufAZUnEiQjYLIcctOrUJbGD1exytzOCHCzuLwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFASlnN+MDg8e5fo/UL0CF1Se38QWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k NWM5YjA2Yi0wYjMxLTRlMDEtOGU2My04MmI4N2Q5ZmVkMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Q1YzliMDZiLTBiMzEtNGUwMS04 ZTYzLTgyYjg3ZDlmZWQzNi9kNWM5YjA2Yi0wYjMxLTRlMDEtOGU2My04MmI4N2Q5 ZmVkMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhWBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEFYJ0nq0dLc7ne0HMoz5uF+Iyb4 6VeNlsulWROe7EOTHJEhUXGSY1GyD4WHG2GphCnzftxm66CIUteJSJCvBQODZjsm n6gOVzvYeorcKDXsw5iO4GeJD7ABU+r+aBR0vWaqre4qi5TwYAiGNkYwC4RKW71x h0GPs/S3Nahgqv/ja7L7BLCimYAXX4yhw2xmkWSIibcrYP9msDG2lCqezBjAe3+a /ODK9jN7Bb29ComDpaFhTe7unGeezAc19PFPn34zwcWjmv25buN4c05vAqeoM/Ej EO2OEWnTOZWqFv+ekXxHYmrJIA58uGwyZxnYazCjcmjxjp6bUdfYpzeLf7I= -----END CERTIFICATE-----Generated at Mon Mar 2 00:26:31 2026 by rpki-client