$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.cer File: 1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.cer (raw, json) Hash identifier: nBkI/l9zvlnyN8qQvE5VOBVzfRhzP+/JVtdXjmRXJ0k= Subject key identifier: 09:CE:CB:55:BF:45:B3:7A:BA:28:DE:59:D4:62:33:4D:CF:AB:69:B1 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D4EB801E04B0329853D48BC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Mar 2026 12:45:22 +0000 Certificate not after: Thu 29 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 22828 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:b8:01:e0:4b:03:29:85:3d:48:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 27 12:45:22 2026 GMT Not After : Jun 29 12:45:22 2028 GMT Subject: CN=1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:f1:90:01:d9:1e:de:33:80:11:85:94:62: 63:9d:ba:72:9e:6a:a5:2c:24:4e:7f:67:c3:d0:c8: 36:18:2c:6c:e9:26:fa:c8:d6:33:3c:90:e5:e9:d0: b9:e8:7a:3d:d6:35:76:7a:1e:b3:fc:a2:65:d3:9f: 8f:d2:b4:ea:cf:0a:68:9d:bc:38:fa:ce:c6:0b:29: 8d:74:f6:0f:21:5e:b6:49:24:72:31:74:24:84:79: ee:31:02:2b:14:0a:92:a2:fc:bf:57:97:dc:ee:5f: 24:9f:0b:dc:65:90:63:d4:b5:0c:a6:0e:10:09:02: e4:f2:ac:bf:ee:3a:9f:1b:48:ee:72:b0:d6:3a:5f: 7d:ee:4b:c7:e4:a8:4d:e1:1c:09:3e:cc:eb:77:35: d1:bd:72:86:95:2c:b2:1f:c1:db:cd:75:60:3c:6e: a3:c7:32:79:cd:56:83:12:e4:a2:4b:75:54:31:93: b3:4d:c2:fe:92:1d:10:6e:28:28:70:97:1d:b2:d9: 35:9e:1a:7b:e2:64:7b:0b:20:89:19:e6:3a:d5:33: 59:70:61:ce:8d:97:31:8b:e5:81:de:f0:18:e5:3d: e3:5a:81:fd:cf:a6:8a:be:c1:59:f3:b0:10:7e:80: 1c:0d:1e:14:75:be:9c:94:b8:37:b4:73:8b:0d:8c: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CE:CB:55:BF:45:B3:7A:BA:28:DE:59:D4:62:33:4D:CF:AB:69:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa/1cc4cb7f-5e74-4be4-b1f8-4165bf8c29aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 22828 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8d:d2:cf:3b:df:14:f0:d0:0a:83:63:3a:ab:a8:3a:5e:93: 6d:0c:1c:f0:a7:95:4c:0e:5c:63:5b:96:55:be:73:5a:70:03: e6:de:c0:76:61:55:5b:c3:67:3e:40:59:33:85:e0:bf:b4:d3: 31:55:d7:b0:25:4c:7a:dd:76:3d:0c:49:e2:ef:93:69:0b:c2: 85:7f:65:d4:a7:41:7a:31:b7:af:be:aa:ba:80:0a:9a:e9:08: 4e:00:90:04:29:53:a8:33:d8:4d:04:c5:b5:19:17:2d:c4:5d: 4a:03:2a:d3:aa:8b:a5:11:5a:11:0e:c8:73:7b:8d:53:4f:70: 0f:ae:f0:3f:40:c8:10:58:a0:11:dd:29:eb:e8:4f:0d:78:43: 6c:ee:3e:9d:d3:c7:6e:c0:6e:73:0e:c4:4b:8b:3d:3b:ab:1c: 74:e9:f0:45:80:b9:0d:b4:27:d9:93:c9:44:d7:83:e7:e3:ec: fb:01:f6:9e:5b:63:ed:78:09:31:9f:36:b0:0e:21:91:93:0d: 9d:d4:b7:29:e8:bb:e4:bf:b5:bf:24:4b:85:11:50:1f:73:a7: b5:af:88:3b:b3:b8:09:d3:eb:f4:88:a0:62:a8:3a:42:60:a1: 31:29:b5:c0:93:66:e7:24:56:fd:f6:19:54:93:47:42:c6:cc: d3:4f:17:47 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE1OuAHgSwMphT1IvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyNzEyNDUyMloXDTI4MDYyOTEyNDUyMlowLzEtMCsGA1UEAxMk MWNjNGNiN2YtNWU3NC00YmU0LWIxZjgtNDE2NWJmOGMyOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy7xkAHZHt4zgBGFlGJjnbpynmqlLCROf2fD 0Mg2GCxs6Sb6yNYzPJDl6dC56Ho91jV2eh6z/KJl05+P0rTqzwponbw4+s7GCymN dPYPIV62SSRyMXQkhHnuMQIrFAqSovy/V5fc7l8knwvcZZBj1LUMpg4QCQLk8qy/ 7jqfG0jucrDWOl997kvH5KhN4RwJPszrdzXRvXKGlSyyH8HbzXVgPG6jxzJ5zVaD EuSiS3VUMZOzTcL+kh0QbigocJcdstk1nhp74mR7CyCJGeY61TNZcGHOjZcxi+WB 3vAY5T3jWoH9z6aKvsFZ87AQfoAcDR4Udb6clLg3tHOLDYyZXwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFAnOy1W/RbN6uijeWdRiM03Pq2mxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x Y2M0Y2I3Zi01ZTc0LTRiZTQtYjFmOC00MTY1YmY4YzI5YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFjYzRjYjdmLTVlNzQtNGJlNC1i MWY4LTQxNjViZjhjMjlhYS8xY2M0Y2I3Zi01ZTc0LTRiZTQtYjFmOC00MTY1YmY4 YzI5YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWSwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR43SzzvfFPDQCoNjOquoOl6TbQwc 8KeVTA5cY1uWVb5zWnAD5t7AdmFVW8NnPkBZM4Xgv7TTMVXXsCVMet12PQxJ4u+T aQvChX9l1KdBejG3r76quoAKmukITgCQBClTqDPYTQTFtRkXLcRdSgMq06qLpRFa EQ7Ic3uNU09wD67wP0DIEFigEd0p6+hPDXhDbO4+ndPHbsBucw7ES4s9O6scdOnw RYC5DbQn2ZPJRNeD5+Ps+wH2nltj7XgJMZ82sA4hkZMNndS3Kei75L+1vyRLhRFQ H3Onta+IO7O4CdPr9IigYqg6QmChMSm1wJNm5yRW/fYZVJNHQsbM008XRw== -----END CERTIFICATE-----Generated at Fri Apr 17 03:09:55 2026 by rpki-client