$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer File: a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer (raw, json) Hash identifier: ZH7Mq/4y3cz2IbKF8ZtJhttSuV/uEicJRXNC6dgLLZE= Subject key identifier: 41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D67D81E6BB6557D836E60C7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Apr 2026 12:45:17 +0000 Certificate not after: Sat 08 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 30484 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:d8:1e:6b:b6:55:7d:83:6e:60:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 5 12:45:17 2026 GMT Not After : Jul 8 12:45:17 2028 GMT Subject: CN=a543a7f7-4aa0-4c84-8a59-004c26b0e5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:7a:98:2c:53:08:35:bf:3e:a3:9b:7a:74: 4a:6c:0a:c5:bc:18:90:93:69:6b:9a:99:df:6e:ab: 28:55:4f:40:73:7a:b2:21:4b:9b:7f:d1:55:ff:a1: 48:76:99:3b:ad:c9:7a:04:2a:52:71:b5:ea:5d:74: 9b:d4:49:f4:4a:45:e9:a0:eb:82:b1:c4:63:29:59: 31:72:f4:84:5b:bd:11:e7:54:8b:3f:e5:7f:66:d9: 41:17:4a:81:8a:5e:e3:3d:a8:55:06:e5:c4:24:80: 98:51:68:82:80:d2:fc:46:ca:6d:6b:a5:74:87:e5: 96:a3:9a:db:14:8f:2e:d8:f6:72:8b:67:9e:80:49: 6d:06:12:3c:ec:26:c5:59:41:a0:95:1d:20:63:16: b1:53:29:d3:7d:d2:e3:2a:72:f7:76:3b:f9:cb:bd: 68:12:1a:f9:2b:28:54:6f:3f:ad:ca:f8:1f:94:8f: de:26:81:45:eb:c7:5a:6f:ff:af:56:87:a3:07:e3: fd:4f:c7:6b:fd:6f:60:2e:9f:4a:8d:0d:85:c4:c8: df:46:13:c1:9e:a7:36:8a:8d:14:b0:0a:2b:ed:2c: 6b:cc:7f:9d:52:08:40:1c:d3:89:ea:c5:15:2f:4a: 02:f1:05:9e:1d:05:6b:0b:8a:53:b1:8e:13:a3:4d: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 30484 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:77:87:c5:67:c7:9b:05:82:98:48:fc:c4:87:73:3d:d4:13: bd:8d:11:50:34:69:02:0a:74:d7:fe:a8:33:38:a9:86:f9:8d: 49:fb:9f:c0:ca:3b:a1:9d:2e:bd:5b:a3:36:3e:45:4b:51:58: 23:47:2a:d5:3f:1e:9e:4e:64:5e:a6:88:3e:82:03:fc:5c:ef: 37:be:33:68:8a:46:ed:9a:ff:2e:de:44:8c:4e:d7:d0:b8:1e: ee:6d:47:63:58:e9:bd:3e:a1:03:2d:53:5b:80:80:c4:4a:57: 0f:c8:86:19:a7:01:42:3d:0e:f2:79:42:bd:27:78:53:f0:63: 45:0c:b4:75:b3:7a:da:b4:08:b0:b1:51:a0:bc:b7:82:c6:e0: 47:a1:da:a6:09:ec:cb:05:fc:1f:ec:20:15:e9:4f:b6:94:b3: b2:7b:a7:88:2e:c6:fa:49:c0:f6:34:56:33:76:98:e9:a1:9e: 65:37:0d:4a:f5:6e:b9:42:b4:7c:0a:72:a5:40:ea:e5:30:3e: 42:e9:19:ac:91:6b:c4:22:52:48:01:9a:1d:bf:2a:5a:de:6c: 2a:9d:8c:8f:cd:0b:f9:07:bb:80:f8:e5:f7:74:98:ef:04:e0: a6:d6:4d:66:e1:66:7c:bc:f7:34:cf:d4:0f:c8:36:35:17:73: 15:2e:2c:a8 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE1n2B5rtlV9g25gx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQwNTEyNDUxN1oXDTI4MDcwODEyNDUxN1owLzEtMCsGA1UEAxMk YTU0M2E3ZjctNGFhMC00Yzg0LThhNTktMDA0YzI2YjBlNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkd6mCxTCDW/PqObenRKbArFvBiQk2lrmpnf bqsoVU9Ac3qyIUubf9FV/6FIdpk7rcl6BCpScbXqXXSb1En0SkXpoOuCscRjKVkx cvSEW70R51SLP+V/ZtlBF0qBil7jPahVBuXEJICYUWiCgNL8Rspta6V0h+WWo5rb FI8u2PZyi2eegEltBhI87CbFWUGglR0gYxaxUynTfdLjKnL3djv5y71oEhr5KyhU bz+tyvgflI/eJoFF68dab/+vVoejB+P9T8dr/W9gLp9KjQ2FxMjfRhPBnqc2io0U sAor7SxrzH+dUghAHNOJ6sUVL0oC8QWeHQVrC4pTsY4To012BwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFEEgSG1AS7v/1mPiJJooc7DFAFvBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h NTQzYTdmNy00YWEwLTRjODQtOGE1OS0wMDRjMjZiMGU1YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2E1NDNhN2Y3LTRhYTAtNGM4NC04 YTU5LTAwNGMyNmIwZTViNi9hNTQzYTdmNy00YWEwLTRjODQtOGE1OS0wMDRjMjZi MGU1YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdxQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXneHxWfHmwWCmEj8xIdzPdQTvY0R UDRpAgp01/6oMziphvmNSfufwMo7oZ0uvVujNj5FS1FYI0cq1T8enk5kXqaIPoID /FzvN74zaIpG7Zr/Lt5EjE7X0Lge7m1HY1jpvT6hAy1TW4CAxEpXD8iGGacBQj0O 8nlCvSd4U/BjRQy0dbN62rQIsLFRoLy3gsbgR6HapgnsywX8H+wgFelPtpSzsnun iC7G+knA9jRWM3aY6aGeZTcNSvVuuUK0fApypUDq5TA+QukZrJFrxCJSSAGaHb8q Wt5sKp2Mj80L+Qe7gPjl93SY7wTgptZNZuFmfLz3NM/UD8g2NRdzFS4sqA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:22 2026 by rpki-client