$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer File: f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer (raw, json) Hash identifier: kdB+QPL1zVVVSM2EtxEvV+x2dvW+akmar39PxFIQ3QU= Subject key identifier: 79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D83C2F54A566026554392FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Apr 2026 12:45:17 +0000 Certificate not after: Tue 18 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 14695 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:c2:f5:4a:56:60:26:55:43:92:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 15 12:45:17 2026 GMT Not After : Jul 18 12:45:17 2028 GMT Subject: CN=f421b0e5-f1f1-43bc-9512-cc17251b2b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:1a:9e:48:7f:26:7c:8e:ca:bd:96:35:52: 81:26:44:f8:6a:bc:b0:46:a0:08:72:7c:b3:c1:7c: d0:40:4d:f4:71:8c:95:07:11:24:72:54:bc:c8:83: a2:9d:14:66:3b:55:bd:25:c2:b2:52:6b:40:46:4c: 3e:50:d3:23:d1:8e:a0:b3:58:bc:39:16:ad:23:9a: 35:17:20:04:73:84:7a:fb:b9:ec:45:0f:f4:85:f0: db:ee:15:4a:b0:f9:f7:48:b6:ce:44:b5:ba:83:54: db:2d:8a:5c:a0:15:8d:bc:16:18:8b:e9:f4:49:79: 24:1c:6e:18:98:22:07:7d:b1:f4:2f:d8:97:d1:af: d9:26:7b:34:15:85:7e:76:d0:de:e8:10:83:7a:ba: fa:40:b7:0e:cb:53:f5:63:8c:e4:98:86:5d:f2:1e: a1:7b:23:56:18:a7:03:57:13:4e:f1:ce:2f:99:67: 6e:75:24:05:af:a0:a2:a7:9b:08:2c:bb:98:31:78: 52:56:a0:1b:cb:5e:66:12:76:c9:e1:e8:f7:86:7b: ee:fc:e6:d9:0c:80:e6:42:f8:8e:89:73:1e:e2:68: 69:af:84:53:91:5a:f5:c1:cf:2c:26:0c:2c:f2:b1: 42:89:81:eb:fe:cd:a1:6b:4f:2e:4e:4c:39:4e:38: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14695 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ef:19:a6:4f:58:82:ed:20:8b:78:77:2f:9e:e4:ba:01:88: cf:5d:4f:af:ef:64:81:6d:9e:35:62:a4:2b:94:35:3d:d0:9a: 8d:89:64:05:f3:7a:d9:5a:ee:cc:ae:c1:9a:fb:4e:8d:71:bf: 40:15:c5:f8:20:fe:ef:cf:92:69:9e:25:f1:de:65:50:d0:1a: 4f:ef:67:ba:04:68:b1:79:47:94:29:71:0b:2c:40:30:c0:4c: 4c:91:aa:80:16:31:76:ae:c0:e6:bc:3d:4f:f8:7c:ee:f7:d1: ed:fe:8a:f4:d9:f1:e5:b8:d8:11:ac:25:b6:b9:d4:78:7f:3f: c2:0f:ab:3b:68:17:c1:60:8e:a2:95:fe:14:10:33:ca:2f:9f: ca:da:14:6c:86:39:e5:98:0a:b7:16:51:f8:63:21:f8:dd:a4: 29:89:e4:b3:68:27:79:51:2d:e2:76:d9:4b:46:b9:ef:9c:3a: b6:a5:73:04:ac:bb:8a:6c:3c:6c:c7:93:2c:d8:77:e3:16:a5: bb:57:d2:6f:3f:41:66:fd:dd:f7:1d:d5:0b:7b:d4:c9:31:86: 7e:51:7c:ea:ce:f1:da:29:ca:1f:ac:96:84:6c:60:6a:ca:3f: 9c:49:a6:35:af:3f:78:30:98:89:e6:76:96:85:51:df:8b:bb: 44:aa:33:1c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE2DwvVKVmAmVUOS/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDQxNTEyNDUxN1oXDTI4MDcxODEyNDUxN1owLzEtMCsGA1UEAxMk ZjQyMWIwZTUtZjFmMS00M2JjLTk1MTItY2MxNzI1MWIyYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkccankh/JnyOyr2WNVKBJkT4arywRqAIcnyz wXzQQE30cYyVBxEkclS8yIOinRRmO1W9JcKyUmtARkw+UNMj0Y6gs1i8ORatI5o1 FyAEc4R6+7nsRQ/0hfDb7hVKsPn3SLbORLW6g1TbLYpcoBWNvBYYi+n0SXkkHG4Y mCIHfbH0L9iX0a/ZJns0FYV+dtDe6BCDerr6QLcOy1P1Y4zkmIZd8h6heyNWGKcD VxNO8c4vmWdudSQFr6Cip5sILLuYMXhSVqAby15mEnbJ4ej3hnvu/ObZDIDmQviO iXMe4mhpr4RTkVr1wc8sJgws8rFCiYHr/s2ha08uTkw5TjjHhwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHkDgytHVQvfCreS75rOkxP1XSGoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m NDIxYjBlNS1mMWYxLTQzYmMtOTUxMi1jYzE3MjUxYjJiNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2Y0MjFiMGU1LWYxZjEtNDNiYy05 NTEyLWNjMTcyNTFiMmI3Ny9mNDIxYjBlNS1mMWYxLTQzYmMtOTUxMi1jYzE3MjUx YjJiNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOWcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD+8Zpk9Ygu0gi3h3L57kugGIz11P r+9kgW2eNWKkK5Q1PdCajYlkBfN62VruzK7BmvtOjXG/QBXF+CD+78+SaZ4l8d5l UNAaT+9nugRosXlHlClxCyxAMMBMTJGqgBYxdq7A5rw9T/h87vfR7f6K9Nnx5bjY EawltrnUeH8/wg+rO2gXwWCOopX+FBAzyi+fytoUbIY55ZgKtxZR+GMh+N2kKYnk s2gneVEt4nbZS0a575w6tqVzBKy7imw8bMeTLNh34xalu1fSbz9BZv3d9x3VC3vU yTGGflF86s7x2inKH6yWhGxgaso/nEmmNa8/eDCYieZ2loVR34u7RKozHA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:52:04 2026 by rpki-client