$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791.cer File: 424ca99e-61db-453c-8a64-a3bd9294a791.cer (raw, json) Hash identifier: buS50WWgu7kU3CdBswLEegM+ZDM5l/Izms4zDY2Tc1o= Subject key identifier: 3E:7C:F2:FE:58:7C:15:83:8F:FD:69:5B:FC:E3:42:C4:D6:69:FC:3C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CB27F7B5D662C12DA0B5B7980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/424ca99e-61db-453c-8a64-a3bd9294a791.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:45:23 +0000 Certificate not after: Thu 04 May 2028 12:45:23 +0000 Subordinate resources: AS: 17369 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:7f:7b:5d:66:2c:12:da:0b:5b:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 30 13:45:23 2026 GMT Not After : May 4 12:45:23 2028 GMT Subject: CN=424ca99e-61db-453c-8a64-a3bd9294a791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:96:02:4d:6e:d2:ea:64:97:f7:8e:d3:48: 20:1c:13:b3:d5:8f:68:21:8f:6a:7b:e4:7a:da:d9: 3f:f2:37:18:59:f7:93:48:20:ed:ad:f6:18:11:ec: 67:f6:b7:fb:ab:71:b6:7d:c6:50:53:88:e1:9a:02: d3:d0:32:63:f1:46:c4:fc:12:67:20:b5:d6:91:eb: 51:5f:8a:ee:4a:c5:70:1f:1c:05:97:49:2e:01:fb: e2:2f:73:c9:4c:84:41:26:40:0b:1a:91:28:53:18: fd:69:ff:c3:ea:8f:4f:32:bb:3c:be:a9:87:fe:f1: 8f:9b:3f:c2:8f:d4:e0:4f:2e:ae:7b:33:7b:8b:48: ba:d9:72:ba:c9:7e:fd:b7:97:8a:22:d3:31:8f:77: 26:a3:83:12:74:94:d7:58:0d:f2:1c:c6:90:9e:45: 62:45:06:c5:72:05:d1:b6:b6:e6:24:e4:d4:16:e6: 9d:02:e7:25:c9:13:5e:77:16:62:0e:1d:a7:6f:65: 19:a3:c6:6e:07:bd:3a:c2:62:63:7f:be:4e:bd:f2: f8:70:b2:e5:bc:f3:56:e4:c3:6e:6d:e8:08:a8:6f: 2a:0f:18:0d:cb:a0:8f:fe:4d:f4:2b:3e:8d:3b:11: 77:87:41:f4:79:e7:a7:b2:2b:7f:81:a6:43:32:28: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7C:F2:FE:58:7C:15:83:8F:FD:69:5B:FC:E3:42:C4:D6:69:FC:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/424ca99e-61db-453c-8a64-a3bd9294a791.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 17369 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:71:34:44:e7:bc:8c:f9:a6:66:16:91:c6:71:4e:79:c0:fb: e1:9d:02:51:2f:4a:63:bf:ed:0c:b4:71:d1:c3:bb:71:59:98: bb:49:f1:1f:f0:c3:0a:79:ac:07:d0:69:60:07:4c:97:ce:4c: 5e:2d:02:3f:46:75:d7:66:4c:79:8d:91:a6:e8:0e:5d:05:03: 1d:62:d0:d0:93:a3:87:94:24:58:e9:b4:d8:14:df:5f:0a:8c: 44:7d:cb:7b:02:45:11:ba:16:02:e2:5c:d3:a4:4d:05:48:69: fe:3f:ec:d7:5a:ad:54:3d:65:a8:d7:6b:c7:33:1c:fa:fa:32: bc:01:bc:da:bb:4d:30:22:ec:b6:ff:fb:4f:f1:55:04:ae:c0: c5:5a:1f:ac:2b:6c:6a:7c:27:1f:91:4c:13:c8:b5:b2:0a:50: 3c:97:ee:43:75:19:8c:6f:8d:74:9f:36:29:78:be:96:e3:72: d9:1f:69:c0:a9:da:60:e1:1f:0f:52:42:68:1e:99:2c:cf:7b: 10:04:ca:63:c7:cf:1e:27:a2:b3:9c:1e:fa:fd:22:d4:9f:63: a5:f3:83:e1:84:6b:86:26:cb:72:56:c4:be:88:b9:57:c0:eb: 64:ab:80:78:86:b0:c9:d1:74:29:f0:b7:67:30:87:03:47:a2: 7b:e5:a8:0b -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEyyf3tdZiwS2gtbeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEzMDEzNDUyM1oXDTI4MDUwNDEyNDUyM1owLzEtMCsGA1UEAxMk NDI0Y2E5OWUtNjFkYi00NTNjLThhNjQtYTNiZDkyOTRhNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbuWAk1u0upkl/eO00ggHBOz1Y9oIY9qe+R6 2tk/8jcYWfeTSCDtrfYYEexn9rf7q3G2fcZQU4jhmgLT0DJj8UbE/BJnILXWketR X4ruSsVwHxwFl0kuAfviL3PJTIRBJkALGpEoUxj9af/D6o9PMrs8vqmH/vGPmz/C j9TgTy6uezN7i0i62XK6yX79t5eKItMxj3cmo4MSdJTXWA3yHMaQnkViRQbFcgXR trbmJOTUFuadAuclyRNedxZiDh2nb2UZo8ZuB706wmJjf75OvfL4cLLlvPNW5MNu begIqG8qDxgNy6CP/k30Kz6NOxF3h0H0eeensit/gaZDMijKhwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFD588v5YfBWDj/1pW/zjQsTWafw8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 MjRjYTk5ZS02MWRiLTQ1M2MtOGE2NC1hM2JkOTI5NGE3OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQyNGNhOTllLTYxZGItNDUzYy04 YTY0LWEzYmQ5Mjk0YTc5MS80MjRjYTk5ZS02MWRiLTQ1M2MtOGE2NC1hM2JkOTI5 NGE3OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQ9kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf3E0ROe8jPmmZhaRxnFOecD74Z0C US9KY7/tDLRx0cO7cVmYu0nxH/DDCnmsB9BpYAdMl85MXi0CP0Z112ZMeY2RpugO XQUDHWLQ0JOjh5QkWOm02BTfXwqMRH3LewJFEboWAuJc06RNBUhp/j/s11qtVD1l qNdrxzMc+voyvAG82rtNMCLstv/7T/FVBK7AxVofrCtsanwnH5FME8i1sgpQPJfu Q3UZjG+NdJ82KXi+luNy2R9pwKnaYOEfD1JCaB6ZLM97EATKY8fPHieis5we+v0i 1J9jpfOD4YRrhibLclbEvoi5V8DrZKuAeIawydF0KfC3ZzCHA0eie+WoCw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:51 2026 by rpki-client