$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb.cer File: d900f6ff-5951-411a-94f6-c99157d899eb.cer (raw, json) Hash identifier: ILw+EBpVQHnkN/rxbjIxETE+d0bCpU3vahFkssTmV+M= Subject key identifier: 1F:43:DD:01:E2:CE:BF:C1:51:9A:E8:C2:3B:B5:F1:AA:44:04:CD:43 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E0251EB707EC3F06E12A31540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/d900f6ff-5951-411a-94f6-c99157d899eb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 May 2026 20:45:11 +0000 Certificate not after: Fri 01 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 55227 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:02:51:eb:70:7e:c3:f0:6e:12:a3:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 30 20:45:11 2026 GMT Not After : Sep 1 20:45:11 2028 GMT Subject: CN=d900f6ff-5951-411a-94f6-c99157d899eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:72:26:85:5a:53:4b:40:54:aa:53:e7:e9: d0:0a:37:4c:21:6e:6a:7c:30:f3:67:e5:3e:85:f6: 15:61:f6:e3:e1:d5:89:69:66:94:41:71:28:82:6e: a9:60:04:09:09:d5:e3:9b:45:52:f0:1f:c7:f6:30: 30:a5:aa:72:80:3e:7d:ad:fb:93:28:ff:49:43:e0: ee:d2:98:08:30:0f:db:47:d0:4a:96:08:36:ad:d7: c8:10:f5:2c:34:7e:3f:03:5b:a9:6f:cf:fe:6b:94: 81:dc:c7:ab:c3:fb:39:0e:ce:a8:5a:78:68:b6:28: 7c:ad:a9:1b:6a:86:3a:49:e6:bc:7d:4f:97:64:75: 52:a3:f0:6a:62:09:48:fb:24:ad:5c:20:11:83:8d: 6b:e7:93:16:4b:b0:3b:93:41:85:a7:c7:40:1a:35: 85:f1:ee:0f:c4:ad:63:9e:f5:4f:52:ed:1c:99:7d: 11:7d:c4:02:c4:80:46:86:99:e4:de:5b:06:cf:b9: 45:b2:53:70:9a:90:74:4b:38:b6:d8:2c:0e:6a:d8: da:cb:12:0a:8f:83:28:24:37:ab:05:13:c4:d0:15: c4:5b:8d:ba:bd:3e:07:ec:ac:d8:80:66:21:78:35: 72:3c:b4:8e:69:94:b5:6e:15:dc:12:48:66:b4:b0: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:DD:01:E2:CE:BF:C1:51:9A:E8:C2:3B:B5:F1:AA:44:04:CD:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d900f6ff-5951-411a-94f6-c99157d899eb/d900f6ff-5951-411a-94f6-c99157d899eb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 55227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3c:9d:23:15:6a:3f:74:40:13:e6:f3:53:ee:c2:6e:96:6f: 38:0e:cf:da:cb:ba:df:45:62:86:44:6e:d5:25:45:2f:65:46: 0e:79:2d:d3:2e:9e:0d:49:94:62:cd:e2:47:fa:f3:1d:9d:c0: 52:6d:64:4e:77:b1:84:e3:b6:50:eb:5c:a1:a1:47:bb:d2:f9: d9:b1:3c:c3:20:81:5a:3e:05:8a:94:91:e1:b1:52:bd:e1:f1: 31:1f:4a:02:cd:9f:69:d9:a6:b8:6c:10:5e:dc:7d:db:fe:2c: c0:32:c5:88:5e:47:75:2d:7d:09:a8:9a:1c:8a:74:4d:2e:73: 72:a1:62:06:41:18:1d:19:06:16:19:da:ed:a9:2f:b7:6b:65: 8b:1a:04:36:1c:0b:ba:2c:d8:8e:13:2d:b8:50:67:1d:e9:39: 49:80:2b:2b:49:17:94:44:2b:43:b0:ab:46:04:b9:39:bf:d1: 4d:33:92:58:db:48:b2:1c:25:02:0a:fb:cc:93:b3:2f:ca:32: 8f:d2:d7:11:f5:cd:24:42:e1:f2:bd:a4:43:48:ae:fd:4f:21: 3e:8e:0c:32:c1:dd:f3:65:38:42:18:82:13:58:12:65:67:1a: c2:4f:50:cc:62:02:bf:3c:71:af:e0:07:44:b8:ee:f1:42:69: f0:2c:12:42 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE4CUetwfsPwbhKjFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUzMDIwNDUxMVoXDTI4MDkwMTIwNDUxMVowLzEtMCsGA1UEAxMk ZDkwMGY2ZmYtNTk1MS00MTFhLTk0ZjYtYzk5MTU3ZDg5OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshRyJoVaU0tAVKpT5+nQCjdMIW5qfDDzZ+U+ hfYVYfbj4dWJaWaUQXEogm6pYAQJCdXjm0VS8B/H9jAwpapygD59rfuTKP9JQ+Du 0pgIMA/bR9BKlgg2rdfIEPUsNH4/A1upb8/+a5SB3Merw/s5Ds6oWnhotih8rakb aoY6Sea8fU+XZHVSo/BqYglI+yStXCARg41r55MWS7A7k0GFp8dAGjWF8e4PxK1j nvVPUu0cmX0RfcQCxIBGhpnk3lsGz7lFslNwmpB0Szi22CwOatjayxIKj4MoJDer BRPE0BXEW426vT4H7KzYgGYheDVyPLSOaZS1bhXcEkhmtLA2XwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFB9D3QHizr/BUZrowju18apEBM1DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k OTAwZjZmZi01OTUxLTQxMWEtOTRmNi1jOTkxNTdkODk5ZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q5MDBmNmZmLTU5NTEtNDExYS05 NGY2LWM5OTE1N2Q4OTllYi9kOTAwZjZmZi01OTUxLTQxMWEtOTRmNi1jOTkxNTdk ODk5ZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANe7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKo8nSMVaj90QBPm81Puwm6WbzgO z9rLut9FYoZEbtUlRS9lRg55LdMung1JlGLN4kf68x2dwFJtZE53sYTjtlDrXKGh R7vS+dmxPMMggVo+BYqUkeGxUr3h8TEfSgLNn2nZprhsEF7cfdv+LMAyxYheR3Ut fQmomhyKdE0uc3KhYgZBGB0ZBhYZ2u2pL7drZYsaBDYcC7os2I4TLbhQZx3pOUmA KytJF5REK0Owq0YEuTm/0U0zkljbSLIcJQIK+8yTsy/KMo/S1xH1zSRC4fK9pENI rv1PIT6ODDLB3fNlOEIYghNYEmVnGsJPUMxiAr88ca/gB0S47vFCafAsEkI= -----END CERTIFICATE-----Generated at Sat Jun 13 08:10:47 2026 by rpki-client