$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7649cb08-1855-4aec-84e8-8d0c77ddab68.cer File: 7649cb08-1855-4aec-84e8-8d0c77ddab68.cer (raw, json) Hash identifier: G+pWQwv74BKM1wFoz1l+o+ZFm8jFFTh+CoXmuLC/FYU= Subject key identifier: E0:C5:41:35:86:0A:62:E5:0E:46:C4:2B:3B:19:8B:9F:E2:CA:B8:41 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CBADF87A8F922D3769A391080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7649cb08-1855-4aec-84e8-8d0c77ddab68/7649cb08-1855-4aec-84e8-8d0c77ddab68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7649cb08-1855-4aec-84e8-8d0c77ddab68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 13:45:22 +0000 Certificate not after: Sun 07 May 2028 12:45:22 +0000 Subordinate resources: AS: 395143 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:df:87:a8:f9:22:d3:76:9a:39:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 2 13:45:22 2026 GMT Not After : May 7 12:45:22 2028 GMT Subject: CN=7649cb08-1855-4aec-84e8-8d0c77ddab68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:52:c5:52:8b:19:96:89:fa:55:e6:06:9a:96: 40:1a:79:a1:1a:16:60:e8:31:90:f5:a3:6f:ed:1d: 70:a4:01:75:62:c2:5d:b2:f2:78:f0:e7:60:3c:b6: 5b:0d:e4:59:81:9a:6f:bd:85:00:70:f5:52:ca:10: b2:48:61:c4:1a:55:70:4f:89:43:4a:45:cb:28:44: 69:2c:fd:e9:99:d2:21:6c:93:b9:20:e9:64:ef:70: 3b:47:5c:e2:f3:ba:c9:7e:5f:ce:70:ae:67:28:16: d9:b2:16:8a:55:51:0e:29:b9:57:79:88:2e:b5:fa: aa:bf:ed:23:18:ce:1b:d9:33:ea:ef:22:f9:09:56: 87:e4:95:2e:98:87:e2:f1:d7:52:6d:71:5b:68:4f: ef:51:1f:07:c3:73:f7:43:33:90:97:42:d8:ce:0c: 6c:01:34:a5:b5:ff:ed:57:6f:8d:2e:0c:cd:57:e9: 8e:fb:86:6b:fb:99:3d:8e:49:c2:97:f7:ce:62:80: d4:7a:d9:f9:e9:59:6e:36:96:3b:f3:47:39:25:e7: 70:55:86:4e:52:55:15:23:28:6c:70:25:6e:19:9b: b7:b5:d3:b6:7a:33:fc:3e:61:29:13:cd:ae:dc:cd: 5a:35:f1:64:8b:3e:7d:d0:4e:49:2d:2d:90:aa:42: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C5:41:35:86:0A:62:E5:0E:46:C4:2B:3B:19:8B:9F:E2:CA:B8:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7649cb08-1855-4aec-84e8-8d0c77ddab68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7649cb08-1855-4aec-84e8-8d0c77ddab68/7649cb08-1855-4aec-84e8-8d0c77ddab68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395143 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:32:e4:67:d0:93:da:73:90:c8:b0:8f:f7:44:79:5e:99:98: 6d:6d:78:99:41:12:a3:17:9a:39:5d:61:94:3a:33:77:a1:87: c2:8b:2b:b1:06:29:e1:d1:a0:25:09:b8:e5:5c:53:03:e1:a6: 64:db:1d:ba:ff:39:e2:b8:09:8a:6d:c3:0d:1d:d0:2f:91:7e: ac:26:97:f6:48:42:b6:b6:a2:aa:e9:62:45:5a:dd:2b:95:5a: 9f:c4:5d:09:90:3c:cb:a7:35:0a:4d:22:e5:88:b1:32:af:5c: 49:12:cc:d7:05:6e:d1:7f:f8:5b:4f:71:11:f1:3f:1b:27:38: 7e:f6:ca:d5:d3:d5:30:e6:57:b2:0d:31:58:28:d7:74:bf:ae: d1:82:90:08:c9:ee:6b:f1:48:f9:02:2a:dc:aa:f4:06:b5:96: 47:57:a3:77:9d:c7:10:66:5a:c0:9c:56:96:02:13:f2:f1:fe: f8:ed:38:a6:c6:1f:ab:e1:9c:b4:22:63:72:aa:a7:a6:c4:cd: 29:4d:2a:f2:8a:10:bd:19:a8:4e:8c:e1:45:f3:78:98:e0:6a: 34:3d:80:6c:ee:6d:f3:d2:b1:01:d1:58:79:87:aa:b8:0a:4b: 20:c2:b4:f7:1f:ad:c1:8c:7e:77:1b:1f:c0:ba:1a:88:3e:11: 58:da:d3:56 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEy634eo+SLTdpo5EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMjEzNDUyMloXDTI4MDUwNzEyNDUyMlowLzEtMCsGA1UEAxMk NzY0OWNiMDgtMTg1NS00YWVjLTg0ZTgtOGQwYzc3ZGRhYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVLFUosZlon6VeYGmpZAGnmhGhZg6DGQ9aNv 7R1wpAF1YsJdsvJ48OdgPLZbDeRZgZpvvYUAcPVSyhCySGHEGlVwT4lDSkXLKERp LP3pmdIhbJO5IOlk73A7R1zi87rJfl/OcK5nKBbZshaKVVEOKblXeYgutfqqv+0j GM4b2TPq7yL5CVaH5JUumIfi8ddSbXFbaE/vUR8Hw3P3QzOQl0LYzgxsATSltf/t V2+NLgzNV+mO+4Zr+5k9jknCl/fOYoDUetn56VluNpY780c5JedwVYZOUlUVIyhs cCVuGZu3tdO2ejP8PmEpE82u3M1aNfFkiz590E5JLS2QqkLYlQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFODFQTWGCmLlDkbEKzsZi5/iyrhBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 NjQ5Y2IwOC0xODU1LTRhZWMtODRlOC04ZDBjNzdkZGFiNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzc2NDljYjA4LTE4NTUtNGFlYy04 NGU4LThkMGM3N2RkYWI2OC83NjQ5Y2IwOC0xODU1LTRhZWMtODRlOC04ZDBjNzdk ZGFiNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgeHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEUy5GfQk9pzkMiwj/dEeV6ZmG1t eJlBEqMXmjldYZQ6M3ehh8KLK7EGKeHRoCUJuOVcUwPhpmTbHbr/OeK4CYptww0d 0C+Rfqwml/ZIQra2oqrpYkVa3SuVWp/EXQmQPMunNQpNIuWIsTKvXEkSzNcFbtF/ +FtPcRHxPxsnOH72ytXT1TDmV7INMVgo13S/rtGCkAjJ7mvxSPkCKtyq9Aa1lkdX o3edxxBmWsCcVpYCE/Lx/vjtOKbGH6vhnLQiY3Kqp6bEzSlNKvKKEL0ZqE6M4UXz eJjgajQ9gGzubfPSsQHRWHmHqrgKSyDCtPcfrcGMfncbH8C6Gog+EVja01Y= -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:08 2026 by rpki-client