$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4e367936-dd50-44a0-9e0b-8f5e83dc607b.cer File: 4e367936-dd50-44a0-9e0b-8f5e83dc607b.cer (raw, json) Hash identifier: zHecUkRMVhu8UUh4QAmdM5gBWMuajcBtGylSd7P/LpA= Subject key identifier: A0:D3:76:92:06:22:6C:E3:1F:19:E2:C5:B2:1E:BE:A3:D1:A6:C7:65 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD4F0AD97EB083F79AE9A6410 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4e367936-dd50-44a0-9e0b-8f5e83dc607b/4e367936-dd50-44a0-9e0b-8f5e83dc607b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4e367936-dd50-44a0-9e0b-8f5e83dc607b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 21:50:57 +0000 Certificate not after: Tue 16 May 2028 20:50:57 +0000 Subordinate resources: AS: 399939 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:f0:ad:97:eb:08:3f:79:ae:9a:64:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 11 21:50:57 2026 GMT Not After : May 16 20:50:57 2028 GMT Subject: CN=4e367936-dd50-44a0-9e0b-8f5e83dc607b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:21:7d:8b:08:94:75:23:b6:a1:e1:31:74: 30:c2:7c:19:2d:e6:60:c4:d1:e3:f9:29:f7:75:f3: 6f:3f:12:e1:a5:73:c8:64:4d:de:1c:63:8d:a2:2d: 57:c3:87:38:be:26:f2:6b:22:54:38:30:5b:16:00: 34:3d:92:e9:d6:39:30:99:65:74:4d:98:ad:ec:cd: 5b:96:67:e9:77:20:42:54:64:84:b0:73:99:c8:66: 00:72:6a:a6:a1:2a:fe:a7:d4:bd:c6:7b:c4:dc:56: 61:f4:6c:1d:28:45:e6:b9:72:4e:11:1f:10:9e:a1: 84:64:5b:4f:66:33:9c:3c:38:bd:7a:97:60:ff:0c: 76:a8:5e:a4:9d:49:b6:ec:2d:a7:e5:8f:dd:2f:bb: 53:c9:49:84:18:6b:8b:a2:4f:bc:37:75:97:7f:ec: b0:51:88:00:81:21:b2:f7:a4:b3:e4:fc:83:34:14: e6:8e:aa:fc:17:57:00:04:c2:9c:83:8f:cd:b9:32: 3b:5f:72:5a:9a:8e:df:62:f3:66:22:72:40:94:df: cd:40:a3:17:35:0a:b1:75:ac:20:c8:17:c2:60:c9: d6:dd:be:bd:25:6a:f3:a6:99:38:52:03:0c:d7:94: d3:5b:f3:af:a4:ea:92:cc:a6:7f:5d:a0:fd:33:23: 76:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:76:92:06:22:6C:E3:1F:19:E2:C5:B2:1E:BE:A3:D1:A6:C7:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4e367936-dd50-44a0-9e0b-8f5e83dc607b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4e367936-dd50-44a0-9e0b-8f5e83dc607b/4e367936-dd50-44a0-9e0b-8f5e83dc607b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399939 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:22:d9:63:28:0d:4f:85:a4:3f:2b:22:c4:9b:bd:8f:69:ba: da:8d:2c:a3:7c:94:14:4b:00:bc:aa:50:ba:b7:02:2c:ec:c9: 27:ec:5d:43:6b:63:0b:df:98:d9:d8:59:fc:fd:12:f2:14:98: eb:bc:4b:86:0e:ab:91:f6:5d:bc:7d:74:ef:4d:b5:e6:10:f3: fe:e3:2f:20:59:4d:79:97:58:38:c0:67:29:90:c6:a2:29:93: 15:a1:6b:de:a7:a3:79:b9:dd:09:de:40:39:03:8b:44:ca:5b: 42:7c:31:33:e4:3f:d5:f1:11:53:a3:ab:fe:d6:ab:b9:c5:af: 7a:6f:09:5f:fa:ac:61:75:7e:43:15:98:ff:6b:50:40:83:47: f3:a7:c1:5c:d2:56:a6:c0:e8:92:25:e1:75:cc:81:05:30:fc: ad:5b:d3:72:e0:c5:82:15:c3:9f:a0:60:2b:89:c2:4d:c1:c3: 97:cc:f9:ac:75:6c:db:4f:06:0e:07:3b:9c:55:ea:81:8e:af: f9:8a:09:da:49:e8:e2:77:06:e0:53:51:c1:2a:77:b2:8f:44: 0c:51:c4:de:a0:4e:f8:37:52:86:39:85:76:1a:4b:63:d0:d4: 84:c0:d7:4f:37:6f:c7:69:67:b5:97:82:a8:67:aa:bc:b8:35: d7:33:47:40 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEzU8K2X6wg/ea6aZBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMTIxNTA1N1oXDTI4MDUxNjIwNTA1N1owLzEtMCsGA1UEAxMk NGUzNjc5MzYtZGQ1MC00NGEwLTllMGItOGY1ZTgzZGM2MDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzwhfYsIlHUjtqHhMXQwwnwZLeZgxNHj+Sn3 dfNvPxLhpXPIZE3eHGONoi1Xw4c4vibyayJUODBbFgA0PZLp1jkwmWV0TZit7M1b lmfpdyBCVGSEsHOZyGYAcmqmoSr+p9S9xnvE3FZh9GwdKEXmuXJOER8QnqGEZFtP ZjOcPDi9epdg/wx2qF6knUm27C2n5Y/dL7tTyUmEGGuLok+8N3WXf+ywUYgAgSGy 96Sz5PyDNBTmjqr8F1cABMKcg4/NuTI7X3Jamo7fYvNmInJAlN/NQKMXNQqxdawg yBfCYMnW3b69JWrzppk4UgMM15TTW/OvpOqSzKZ/XaD9MyN2dQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFKDTdpIGImzjHxnixbIevqPRpsdlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 ZTM2NzkzNi1kZDUwLTQ0YTAtOWUwYi04ZjVlODNkYzYwN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzRlMzY3OTM2LWRkNTAtNDRhMC05 ZTBiLThmNWU4M2RjNjA3Yi80ZTM2NzkzNi1kZDUwLTQ0YTAtOWUwYi04ZjVlODNk YzYwN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhpDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHUi2WMoDU+FpD8rIsSbvY9putqN LKN8lBRLALyqULq3AizsySfsXUNrYwvfmNnYWfz9EvIUmOu8S4YOq5H2Xbx9dO9N teYQ8/7jLyBZTXmXWDjAZymQxqIpkxWha96no3m53QneQDkDi0TKW0J8MTPkP9Xx EVOjq/7Wq7nFr3pvCV/6rGF1fkMVmP9rUECDR/OnwVzSVqbA6JIl4XXMgQUw/K1b 03LgxYIVw5+gYCuJwk3Bw5fM+ax1bNtPBg4HO5xV6oGOr/mKCdpJ6OJ3BuBTUcEq d7KPRAxRxN6gTvg3UoY5hXYaS2PQ1ITA1083b8dpZ7WXgqhnqry4NdczR0A= -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:12 2026 by rpki-client