$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04bf9c2b-7857-41bd-8811-ff6634b2ebed.cer File: 04bf9c2b-7857-41bd-8811-ff6634b2ebed.cer (raw, json) Hash identifier: foQZNMheTmNXHk9tVMHzZigVcW5XnOkxLRMQTOIDemE= Subject key identifier: C5:7C:0B:DE:29:70:DB:E7:8C:FC:19:88:04:C3:78:EA:CB:F3:71:B4 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584CCB9FA2CAA85AF5D191AA28A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04bf9c2b-7857-41bd-8811-ff6634b2ebed/04bf9c2b-7857-41bd-8811-ff6634b2ebed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04bf9c2b-7857-41bd-8811-ff6634b2ebed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Feb 2026 13:45:22 +0000 Certificate not after: Sat 13 May 2028 12:45:22 +0000 Subordinate resources: AS: 399245 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:9f:a2:ca:a8:5a:f5:d1:91:aa:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 8 13:45:22 2026 GMT Not After : May 13 12:45:22 2028 GMT Subject: CN=04bf9c2b-7857-41bd-8811-ff6634b2ebed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0f:95:b7:fe:dc:cb:21:6f:00:c7:c4:f9:29: ba:c2:05:6c:8a:5d:3f:17:c3:05:99:b8:3c:f6:21: cb:c6:a7:32:84:20:05:30:08:2e:b2:1a:fb:7b:1e: 80:0f:9f:70:9e:65:6c:51:71:cb:9f:cf:3e:f5:c2: 06:18:5f:9e:a8:00:50:ee:8b:45:18:42:4b:09:8f: ea:a2:61:d9:dd:ca:7a:5e:bb:0e:91:bb:b9:e6:38: ac:26:7e:aa:9e:7d:df:5e:39:03:14:87:7d:95:5a: 91:34:2c:e7:64:c8:91:7b:61:e6:9f:18:2b:c2:a4: 85:3a:dc:21:73:b3:ad:36:4e:0c:0e:e2:59:16:9f: 02:87:2d:47:30:5d:8a:43:a0:64:aa:15:15:b2:08: 58:4e:89:47:63:5c:1a:bd:d9:dd:76:0e:13:c1:3b: f2:09:c1:3e:e6:07:b6:ca:f6:c5:6e:34:9b:ad:a8: 6a:7a:31:a9:91:c3:e6:69:85:51:2e:e1:62:99:7c: 6c:c4:10:58:5d:11:75:96:78:14:91:e0:a6:94:d3: 61:42:0a:79:d6:b2:81:a3:91:de:43:5c:e5:8c:ba: d8:86:d4:54:cb:ce:b6:ca:a7:4c:59:dd:9e:2f:dd: 96:a5:3b:ba:87:f0:33:94:74:c2:ea:77:b1:6e:54: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7C:0B:DE:29:70:DB:E7:8C:FC:19:88:04:C3:78:EA:CB:F3:71:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04bf9c2b-7857-41bd-8811-ff6634b2ebed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04bf9c2b-7857-41bd-8811-ff6634b2ebed/04bf9c2b-7857-41bd-8811-ff6634b2ebed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399245 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6d:d8:eb:51:2c:3c:c2:04:67:42:c2:a7:97:25:5e:7b:7a: 54:7c:90:f1:44:50:81:7f:ed:c7:f7:f7:2e:95:ce:ec:a9:0f: 20:79:ff:09:16:ea:e2:da:5c:67:ef:11:94:d9:1c:2e:ba:4b: 96:cc:40:20:65:52:d7:39:ca:e1:b8:44:1c:35:56:fc:d8:e4: 5c:ae:cc:9c:49:81:2a:b9:ea:1e:17:50:90:61:6e:e9:94:3c: cb:81:ae:b1:e1:bf:25:55:70:e3:47:9c:eb:0f:9a:67:9d:98: 55:63:fb:13:5d:2e:04:5d:f5:8a:76:34:d7:c1:ff:65:b3:34: 03:69:44:c1:24:38:02:9e:2e:a2:32:b5:32:fe:5c:a4:e0:b2: 5d:eb:6a:3d:97:2c:f9:6f:fd:2c:c4:87:d8:f8:b8:ef:fd:d2: ff:90:32:0a:08:9b:fa:d0:fd:ec:6d:6d:7d:7c:b6:2f:3f:0d: 7d:de:11:05:0a:f8:8e:0f:b7:82:65:7b:ff:64:45:17:c5:ad: 6c:f6:c8:3c:9f:ee:ba:87:12:4c:0b:d4:db:cc:91:5a:25:e2: 61:7c:6f:e3:00:e3:0d:32:a9:9d:a0:a1:f6:c6:6a:a6:e8:70: 79:84:ca:bd:85:22:5b:53:97:e5:23:2e:30:bf:4f:24:4d:ce: 93:f0:59:7c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEzLn6LKqFr10ZGqKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDIwODEzNDUyMloXDTI4MDUxMzEyNDUyMlowLzEtMCsGA1UEAxMk MDRiZjljMmItNzg1Ny00MWJkLTg4MTEtZmY2NjM0YjJlYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w+Vt/7cyyFvAMfE+Sm6wgVsil0/F8MFmbg8 9iHLxqcyhCAFMAgushr7ex6AD59wnmVsUXHLn88+9cIGGF+eqABQ7otFGEJLCY/q omHZ3cp6XrsOkbu55jisJn6qnn3fXjkDFId9lVqRNCznZMiRe2HmnxgrwqSFOtwh c7OtNk4MDuJZFp8Chy1HMF2KQ6BkqhUVsghYTolHY1wavdnddg4TwTvyCcE+5ge2 yvbFbjSbrahqejGpkcPmaYVRLuFimXxsxBBYXRF1lngUkeCmlNNhQgp51rKBo5He Q1zljLrYhtRUy862yqdMWd2eL92WpTu6h/AzlHTC6nexblTNpwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFMV8C94pcNvnjPwZiATDeOrL83G0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w NGJmOWMyYi03ODU3LTQxYmQtODgxMS1mZjY2MzRiMmViZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA0YmY5YzJiLTc4NTctNDFiZC04 ODExLWZmNjYzNGIyZWJlZC8wNGJmOWMyYi03ODU3LTQxYmQtODgxMS1mZjY2MzRi MmViZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBheNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKVt2OtRLDzCBGdCwqeXJV57elR8 kPFEUIF/7cf39y6VzuypDyB5/wkW6uLaXGfvEZTZHC66S5bMQCBlUtc5yuG4RBw1 VvzY5FyuzJxJgSq56h4XUJBhbumUPMuBrrHhvyVVcONHnOsPmmedmFVj+xNdLgRd 9Yp2NNfB/2WzNANpRMEkOAKeLqIytTL+XKTgsl3raj2XLPlv/SzEh9j4uO/90v+Q MgoIm/rQ/extbX18ti8/DX3eEQUK+I4Pt4Jle/9kRRfFrWz2yDyf7rqHEkwL1NvM kVol4mF8b+MA4w0yqZ2gofbGaqbocHmEyr2FIltTl+UjLjC/TyRNzpPwWXw= -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:40 2026 by rpki-client