$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.cer File: 07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.cer (raw, json) Hash identifier: AL7fMk5luOHZMrj36GRQtb9oebpLoqAGRrjXbdRL3hE= Subject key identifier: 2C:DD:74:80:D3:99:BC:F5:CF:A6:B7:70:BD:1A:CF:E3:E3:7C:50:92 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584E0C17506EA5E978928DCE2250 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jun 2026 08:45:11 +0000 Certificate not after: Tue 05 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 399498 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:17:50:6e:a5:e9:78:92:8d:ce:22:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Jun 3 08:45:11 2026 GMT Not After : Sep 5 08:45:11 2028 GMT Subject: CN=07a2ea2d-5c35-4668-851f-c5ac6ed1e66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:74:c9:0d:1d:2d:c0:fe:f7:47:7d:5b:ab: fe:fb:79:4d:bf:c3:3b:c9:0b:ba:3b:25:34:fc:41: 14:17:ce:ff:89:f9:b0:40:8d:98:73:95:18:44:14: df:70:3e:2f:2b:c0:57:a2:ca:85:15:21:0f:9d:0c: 75:51:b1:0a:18:5e:7d:bd:ab:31:b4:96:32:7c:32: e3:5f:81:01:3c:c7:10:1f:6b:e8:ff:eb:f5:4e:38: 1e:61:a7:cb:07:1b:aa:f2:b4:86:d0:20:7d:3a:93: ff:2d:0d:ce:f0:53:c1:1f:98:4a:69:8a:f0:3e:73: 1b:c4:f5:f8:d1:6a:49:22:86:e4:58:92:37:cf:24: a1:30:cb:18:5e:64:e1:9f:96:4f:f2:38:e8:a7:64: 07:ac:95:b0:31:a0:63:0d:39:bb:9e:6a:f4:f7:2c: 0a:23:08:62:26:8e:c2:c2:b9:3e:28:f5:7e:ec:db: be:1d:4d:32:ba:1d:d5:e9:8f:03:c5:30:de:09:80: 30:c7:3d:11:1d:a7:f2:fe:d8:79:49:39:ac:48:f4: b5:57:13:80:a8:64:76:31:62:02:01:cf:c8:80:d3: 49:bd:c6:d2:a6:c1:65:2f:6b:b3:8a:61:2d:c1:84: 37:75:74:78:f9:bd:7c:8a:8d:7d:7b:b2:b3:36:f0: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DD:74:80:D3:99:BC:F5:CF:A6:B7:70:BD:1A:CF:E3:E3:7C:50:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a/07a2ea2d-5c35-4668-851f-c5ac6ed1e66a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399498 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:75:3f:3f:f4:aa:b8:1d:3d:ce:d0:68:c6:d1:7a:27:9b:4f: 5e:a0:58:d2:cd:46:c4:15:8b:88:22:71:a8:91:fe:11:9d:b4: da:3d:30:33:38:06:69:d3:9e:34:3a:b7:5c:a5:b0:9e:0b:f3: 41:04:46:27:23:89:b2:8a:04:54:1f:c6:4a:b4:c4:d9:94:05: 94:97:91:fb:b4:01:10:5f:56:14:4a:79:5d:ec:c7:f6:3d:27: 83:19:ed:63:29:2d:3d:17:47:f3:7a:df:5a:0e:e9:20:19:d3: 01:3b:fe:9f:16:aa:73:b0:e6:7d:64:49:22:d9:fd:1e:9e:ff: 84:34:2f:cc:64:47:c1:a0:4f:15:97:dc:00:d4:e3:57:71:46: 79:da:73:1a:67:e7:23:b4:44:41:88:05:ac:39:b1:ba:48:b4: c4:3b:c1:38:dc:8c:28:15:b3:9a:fa:3c:91:f1:23:47:fc:a5: 8b:72:f7:c7:43:0e:d6:92:9e:02:3f:49:eb:a6:89:b7:d3:2f: 79:c3:5a:22:15:61:f6:d2:ed:a0:82:cf:a3:38:37:7e:aa:53: 4b:81:bc:fa:ec:73:1e:8a:49:67:64:63:38:b1:b6:bb:b5:13: 48:5f:15:5f:49:69:79:f5:cf:19:d8:5c:93:a2:5b:f4:c6:a8: 39:89:a3:20 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE4MF1Bupel4ko3OIlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDYwMzA4NDUxMVoXDTI4MDkwNTA4NDUxMVowLzEtMCsGA1UEAxMk MDdhMmVhMmQtNWMzNS00NjY4LTg1MWYtYzVhYzZlZDFlNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxp0yQ0dLcD+90d9W6v++3lNv8M7yQu6OyU0 /EEUF87/ifmwQI2Yc5UYRBTfcD4vK8BXosqFFSEPnQx1UbEKGF59vasxtJYyfDLj X4EBPMcQH2vo/+v1TjgeYafLBxuq8rSG0CB9OpP/LQ3O8FPBH5hKaYrwPnMbxPX4 0WpJIobkWJI3zyShMMsYXmThn5ZP8jjop2QHrJWwMaBjDTm7nmr09ywKIwhiJo7C wrk+KPV+7Nu+HU0yuh3V6Y8DxTDeCYAwxz0RHafy/th5STmsSPS1VxOAqGR2MWIC Ac/IgNNJvcbSpsFlL2uzimEtwYQ3dXR4+b18io19e7KzNvCXaQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFCzddIDTmbz1z6a3cL0az+PjfFCSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8w N2EyZWEyZC01YzM1LTQ2NjgtODUxZi1jNWFjNmVkMWU2NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzA3YTJlYTJkLTVjMzUtNDY2OC04 NTFmLWM1YWM2ZWQxZTY2YS8wN2EyZWEyZC01YzM1LTQ2NjgtODUxZi1jNWFjNmVk MWU2NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhiKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHB1Pz/0qrgdPc7QaMbReiebT16g WNLNRsQVi4gicaiR/hGdtNo9MDM4BmnTnjQ6t1ylsJ4L80EERicjibKKBFQfxkq0 xNmUBZSXkfu0ARBfVhRKeV3sx/Y9J4MZ7WMpLT0XR/N631oO6SAZ0wE7/p8WqnOw 5n1kSSLZ/R6e/4Q0L8xkR8GgTxWX3ADU41dxRnnacxpn5yO0REGIBaw5sbpItMQ7 wTjcjCgVs5r6PJHxI0f8pYty98dDDtaSngI/SeumibfTL3nDWiIVYfbS7aCCz6M4 N36qU0uBvPrscx6KSWdkYzixtru1E0hfFV9JaXn1zxnYXJOiW/TGqDmJoyA= -----END CERTIFICATE-----Generated at Sat Jun 13 07:22:23 2026 by rpki-client