$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa.cer File: c428d8f6-c296-4695-bec2-37368886f4fa.cer (raw, json) Hash identifier: hge0UWnURX10qDv2id6r4mtQLPg+m/LsLlaXgjeynEs= Subject key identifier: 0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D52E7FBFCCCD116ED45AC2280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Mar 2026 00:45:17 +0000 Certificate not after: Sat 01 Jul 2028 00:45:17 +0000 Subordinate resources: AS: 399654 IP: 192.64.13.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:e7:fb:fc:cc:d1:16:ed:45:ac:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 29 00:45:17 2026 GMT Not After : Jul 1 00:45:17 2028 GMT Subject: CN=c428d8f6-c296-4695-bec2-37368886f4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cf:cb:b9:92:af:1b:01:c0:28:21:a6:e5:de: 30:2f:9d:31:57:78:c4:4b:14:96:00:f0:8d:b7:3d: a3:f6:1f:1c:60:54:80:be:2b:3c:f8:98:cc:1a:c0: 0a:f4:15:3e:48:39:df:46:a3:67:c5:ee:e1:cd:5f: 9c:81:b0:ba:de:60:f7:0c:f5:d8:3e:fd:b4:c4:e3: 15:74:be:41:fc:b9:d4:78:65:ca:97:90:87:1d:c6: d5:3c:f3:3f:54:76:d7:f6:54:51:cf:94:31:c8:20: 14:85:8c:22:c8:ed:ed:2a:62:d1:2b:69:f8:9a:95: a4:05:c4:cc:cc:82:30:bf:c7:5e:b7:e3:41:a2:37: 95:e4:bc:9d:92:e8:6c:09:c1:dd:31:36:49:e3:92: c2:89:a5:42:1a:57:aa:ce:0b:66:71:a9:a7:8f:a4: 3e:00:05:bd:2e:a0:19:38:53:6f:89:6c:98:c5:9b: 54:9f:1f:e1:3d:59:65:a6:ff:92:af:8f:9d:24:cd: 15:a0:55:f8:be:43:a1:89:c4:29:b6:41:1a:8e:c5: 35:0e:a8:3c:85:67:90:99:92:1d:58:49:62:56:90: 67:21:c8:7d:ab:e0:ea:2f:0f:32:c1:5c:6e:e5:a1: 65:68:ce:4f:be:e5:52:d9:08:fa:fd:e5:e0:f8:ed: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:A5:41:B2:58:7E:61:BD:4B:EF:6E:31:2E:A9:37:26:D6:DB:90 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c428d8f6-c296-4695-bec2-37368886f4fa/c428d8f6-c296-4695-bec2-37368886f4fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 192.64.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399654 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:52:0e:dc:c6:fa:45:4b:93:e9:46:9e:53:3e:5f:0b:ac:ec: f2:8b:07:74:c2:f2:2f:74:2f:7e:a4:7d:5c:a9:2c:74:b1:62: 0c:1d:0f:a6:ce:92:7f:7b:41:22:f5:65:9a:13:f6:e6:bf:ad: 16:8f:f2:32:e3:97:7d:2d:1e:f2:f7:fb:e5:4c:39:59:51:46: ea:c5:c2:b4:a0:8f:d2:dc:24:66:ac:61:ed:7f:38:a1:34:da: 4d:4c:97:ee:58:76:7a:bb:49:19:61:9a:99:e1:74:f3:3c:38: e5:f1:b4:b9:a3:9d:14:47:70:d5:8d:09:df:a4:e8:fa:0b:15: 94:8b:2e:21:36:7b:81:26:c9:bf:29:a5:a1:b3:94:65:66:b4: de:5c:05:5b:79:46:05:92:44:d5:dd:75:06:64:da:57:d6:84: 54:7f:80:ed:0b:0f:10:b3:e6:07:8f:45:ab:4b:0e:38:90:15: 4f:5b:76:48:94:2a:9b:c6:09:fa:66:3e:aa:84:bf:d9:6b:37: a7:4f:3f:0e:81:dc:fa:a8:f3:33:74:0a:3d:40:8e:92:3d:4b: 3b:8e:dd:35:e3:12:1c:cc:ab:d1:83:c4:39:3c:99:7b:9c:fc: ec:22:4e:14:83:b1:a9:64:3c:d7:26:fd:9d:6a:7d:13:39:35: d1:2f:8a:10 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1S5/v8zNEW7UWsIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyOTAwNDUxN1oXDTI4MDcwMTAwNDUxN1owLzEtMCsGA1UEAxMk YzQyOGQ4ZjYtYzI5Ni00Njk1LWJlYzItMzczNjg4ODZmNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s/LuZKvGwHAKCGm5d4wL50xV3jESxSWAPCN tz2j9h8cYFSAvis8+JjMGsAK9BU+SDnfRqNnxe7hzV+cgbC63mD3DPXYPv20xOMV dL5B/LnUeGXKl5CHHcbVPPM/VHbX9lRRz5QxyCAUhYwiyO3tKmLRK2n4mpWkBcTM zIIwv8det+NBojeV5LydkuhsCcHdMTZJ45LCiaVCGleqzgtmcamnj6Q+AAW9LqAZ OFNviWyYxZtUnx/hPVllpv+Sr4+dJM0VoFX4vkOhicQptkEajsU1Dqg8hWeQmZId WEliVpBnIch9q+DqLw8ywVxu5aFlaM5PvuVS2Qj6/eXg+O01FQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAuVpUGyWH5hvUvvbjEuqTcm1tuQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j NDI4ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2ODg4NmY0ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M0MjhkOGY2LWMyOTYtNDY5NS1i ZWMyLTM3MzY4ODg2ZjRmYS9jNDI4ZDhmNi1jMjk2LTQ2OTUtYmVjMi0zNzM2ODg4 NmY0ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAQA0wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhkmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJtSDtzG+kVLk+lGnlM+Xwus7PKLB3TC8i90L36kfVypLHSx YgwdD6bOkn97QSL1ZZoT9ua/rRaP8jLjl30tHvL3++VMOVlRRurFwrSgj9LcJGas Ye1/OKE02k1Ml+5Ydnq7SRlhmpnhdPM8OOXxtLmjnRRHcNWNCd+k6PoLFZSLLiE2 e4Emyb8ppaGzlGVmtN5cBVt5RgWSRNXddQZk2lfWhFR/gO0LDxCz5gePRatLDjiQ FU9bdkiUKpvGCfpmPqqEv9lrN6dPPw6B3Pqo8zN0Cj1AjpI9SzuO3TXjEhzMq9GD xDk8mXuc/OwiThSDsalkPNcm/Z1qfRM5NdEvihA= -----END CERTIFICATE-----Generated at Fri Apr 17 03:51:52 2026 by rpki-client