$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/49d011d3-e288-4ade-a4bd-6cbd58001882.cer File: 49d011d3-e288-4ade-a4bd-6cbd58001882.cer (raw, json) Hash identifier: FxEPqkDk2BCLq80nMnZ9EQpfhI1K1/QTfY3TjBHfciQ= Subject key identifier: 59:F8:34:8F:5E:4E:5E:63:79:5D:8D:A8:07:63:2A:E8:1C:37:49:5C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CBDAA375B630F4DAF85FCDE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/49d011d3-e288-4ade-a4bd-6cbd58001882/49d011d3-e288-4ade-a4bd-6cbd58001882.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/49d011d3-e288-4ade-a4bd-6cbd58001882/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Feb 2026 13:45:22 +0000 Certificate not after: Mon 08 May 2028 12:45:22 +0000 Subordinate resources: AS: 30431 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:aa:37:5b:63:0f:4d:af:85:fc:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 3 13:45:22 2026 GMT Not After : May 8 12:45:22 2028 GMT Subject: CN=49d011d3-e288-4ade-a4bd-6cbd58001882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:66:22:44:53:ff:d6:1f:3a:c6:ff:51:dd: bd:fa:ed:24:e6:88:07:8d:b8:6c:aa:ff:59:db:6b: eb:19:08:f7:47:ec:2f:59:48:fc:58:46:dd:64:53: f8:bc:01:e1:7e:0f:9b:93:e5:e0:21:8d:0d:6b:38: 6d:3a:3e:31:bd:57:3c:2a:78:b9:17:13:60:d8:78: f1:c7:59:46:c4:b7:43:eb:13:95:e6:43:4c:21:04: 5d:6e:7d:61:d8:9a:76:31:93:fa:85:97:11:c8:f3: e5:3f:ad:87:8f:38:06:5b:f2:3f:28:69:bb:b4:e9: 89:f8:61:00:71:54:63:89:c8:e3:9d:6c:8f:65:f4: cd:df:e1:9a:82:97:a5:a9:3c:07:17:6e:f0:f8:22: de:d4:09:fe:9d:5d:ee:f8:ba:df:77:62:91:61:4a: 21:ff:39:f3:c5:19:15:63:21:66:ab:19:e8:63:39: f7:d8:80:06:01:c9:73:34:ed:df:03:e3:9f:0a:63: 39:ed:b3:c8:b9:cd:9d:76:d9:e3:d2:d0:95:dd:b8: ab:b6:b6:3f:d9:ad:3f:55:c8:04:06:bc:41:04:86: f5:3a:04:ac:42:52:ad:22:d4:8a:24:b1:bb:09:a5: 9d:66:8f:39:69:85:b8:5b:f2:a7:da:c5:21:4b:24: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F8:34:8F:5E:4E:5E:63:79:5D:8D:A8:07:63:2A:E8:1C:37:49:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/49d011d3-e288-4ade-a4bd-6cbd58001882/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/49d011d3-e288-4ade-a4bd-6cbd58001882/49d011d3-e288-4ade-a4bd-6cbd58001882.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 30431 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c7:81:86:17:87:a3:96:96:80:87:81:a6:b7:d3:18:48:1d: 05:9b:a6:c6:d0:b1:5b:26:68:04:d9:d4:8a:d6:d8:f0:d7:b0: ff:d5:03:e4:d1:74:47:b0:43:3e:75:85:d8:eb:af:90:78:fa: 3d:03:f3:fd:a1:70:af:ff:b5:0d:7b:b7:5b:4b:82:52:2b:3d: f0:71:47:56:3b:88:f2:42:99:0b:54:07:47:df:61:58:30:6d: b4:47:95:f6:93:50:17:ae:e0:ce:34:0d:69:6c:e8:3c:7d:12: 7d:92:83:e6:ee:dd:55:52:41:60:a8:f7:35:99:e6:a9:c1:2a: 71:1b:12:9c:8f:d2:ad:f6:06:e2:e5:d1:c9:74:15:1a:37:6f: cb:20:41:4c:f5:9f:95:cb:d5:f8:86:cb:01:ef:94:0f:18:ec: ee:cb:76:e0:6d:00:7b:d1:53:bc:f7:0c:5b:e8:43:39:81:e2: ee:a6:5f:81:2b:64:d4:60:14:83:ad:22:82:2b:9e:02:81:dc: d6:7f:4f:a2:8a:63:d0:06:7c:ab:e9:3b:47:44:cd:55:c2:7f: 49:a0:6a:35:bc:e0:f2:a1:2d:0d:43:b5:70:39:9a:21:f5:19: d4:0a:c9:c6:1d:a6:da:e4:18:f2:b4:68:77:18:a5:c4:a0:19: 9f:a9:45:4c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEy9qjdbYw9Nr4X83gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMzEzNDUyMloXDTI4MDUwODEyNDUyMlowLzEtMCsGA1UEAxMk NDlkMDExZDMtZTI4OC00YWRlLWE0YmQtNmNiZDU4MDAxODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FmIkRT/9YfOsb/Ud29+u0k5ogHjbhsqv9Z 22vrGQj3R+wvWUj8WEbdZFP4vAHhfg+bk+XgIY0NazhtOj4xvVc8Kni5FxNg2Hjx x1lGxLdD6xOV5kNMIQRdbn1h2Jp2MZP6hZcRyPPlP62HjzgGW/I/KGm7tOmJ+GEA cVRjicjjnWyPZfTN3+GagpelqTwHF27w+CLe1An+nV3u+Lrfd2KRYUoh/znzxRkV YyFmqxnoYzn32IAGAclzNO3fA+OfCmM57bPIuc2ddtnj0tCV3birtrY/2a0/VcgE BrxBBIb1OgSsQlKtItSKJLG7CaWdZo85aYW4W/Kn2sUhSySv6wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFFn4NI9eTl5jeV2NqAdjKugcN0lcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 OWQwMTFkMy1lMjg4LTRhZGUtYTRiZC02Y2JkNTgwMDE4ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ5ZDAxMWQzLWUyODgtNGFkZS1h NGJkLTZjYmQ1ODAwMTg4Mi80OWQwMTFkMy1lMjg4LTRhZGUtYTRiZC02Y2JkNTgw MDE4ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdt8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGseBhheHo5aWgIeBprfTGEgdBZum xtCxWyZoBNnUitbY8New/9UD5NF0R7BDPnWF2OuvkHj6PQPz/aFwr/+1DXu3W0uC Uis98HFHVjuI8kKZC1QHR99hWDBttEeV9pNQF67gzjQNaWzoPH0SfZKD5u7dVVJB YKj3NZnmqcEqcRsSnI/SrfYG4uXRyXQVGjdvyyBBTPWflcvV+IbLAe+UDxjs7st2 4G0Ae9FTvPcMW+hDOYHi7qZfgStk1GAUg60igiueAoHc1n9Poopj0AZ8q+k7R0TN VcJ/SaBqNbzg8qEtDUO1cDmaIfUZ1ArJxh2m2uQY8rRodxilxKAZn6lFTA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:16:02 2026 by rpki-client