$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1248d6c-684f-4e27-a13a-f03550b4c759.cer File: d1248d6c-684f-4e27-a13a-f03550b4c759.cer (raw, json) Hash identifier: Q6N7vQh1sepuG4zfO7rsSScXxnkm5dBEpK2zCt6CgXo= Subject key identifier: 69:71:BE:CA:35:26:1E:5F:BB:C4:44:31:A6:C3:5D:16:B9:CD:4D:12 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CAD0E8F7394EFAF4467F31FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1248d6c-684f-4e27-a13a-f03550b4c759/d1248d6c-684f-4e27-a13a-f03550b4c759.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1248d6c-684f-4e27-a13a-f03550b4c759/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 14:58:49 +0000 Certificate not after: Tue 02 May 2028 13:58:49 +0000 Subordinate resources: AS: 16857 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ad:0e:8f:73:94:ef:af:44:67:f3:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 28 14:58:49 2026 GMT Not After : May 2 13:58:49 2028 GMT Subject: CN=d1248d6c-684f-4e27-a13a-f03550b4c759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:ae:c9:d6:c8:7b:6a:3b:71:9c:8e:86:ca: 66:6a:5e:f9:61:7b:34:4a:44:09:27:10:08:79:e6: 83:d8:88:57:8a:ac:b3:1f:78:48:d0:2b:30:66:92: e4:e6:4d:00:15:d4:e9:d1:65:88:ee:44:66:21:e4: 3b:db:4a:01:88:eb:e2:c5:eb:66:c5:eb:b2:61:a2: 09:1e:ce:e2:d4:66:61:c9:df:91:19:9a:14:32:3d: 45:90:94:56:22:51:3a:86:3b:e1:26:6c:52:cf:d7: e2:d1:39:5d:a7:f5:f1:81:26:0a:79:cc:b2:a0:39: ce:ab:fd:c2:64:bc:fc:9a:d6:19:87:1d:22:01:e4: 41:f4:29:53:0c:94:9d:77:20:63:f5:d5:a1:66:f5: 66:41:0a:37:5e:9a:15:1a:44:ce:15:6f:3c:5c:f0: 6f:23:5e:68:13:1b:99:6d:42:18:97:65:92:6d:e4: 7a:af:3b:12:b7:15:23:c6:88:e9:de:fc:96:3b:ef: bc:16:0e:46:ef:ef:f4:cd:bf:d3:88:fe:43:7f:6a: 2d:27:c1:73:ff:b1:7b:69:ef:e6:a8:0f:a1:a9:aa: 8c:8e:e8:a3:80:fe:5b:a2:8a:d4:eb:29:fa:79:7b: 3a:a7:d7:d8:d5:b8:67:0d:1b:8c:4e:ba:17:40:63: 0b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:71:BE:CA:35:26:1E:5F:BB:C4:44:31:A6:C3:5D:16:B9:CD:4D:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1248d6c-684f-4e27-a13a-f03550b4c759/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1248d6c-684f-4e27-a13a-f03550b4c759/d1248d6c-684f-4e27-a13a-f03550b4c759.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 16857 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:93:00:3f:21:00:17:40:f8:d5:38:c7:c7:76:9b:66:8b:d8: e3:b4:ea:8a:bb:56:b6:f9:1b:6f:a1:0a:e6:5a:91:fc:6e:01: ef:17:6b:df:83:64:e4:c6:4d:92:8f:3e:ed:c9:ee:31:e3:82: 4f:84:2b:47:8c:b2:d4:48:81:cb:3e:8d:b4:31:07:2f:58:b3: e7:4f:fb:d9:fc:33:69:6f:de:d2:d5:2b:f2:80:a7:23:2d:85: a6:98:65:40:d2:31:ae:61:e1:77:04:7b:14:48:3e:b8:ee:4b: 14:ab:c7:0a:15:9e:df:d9:56:89:6e:21:ce:c4:3d:9e:e9:6b: 40:87:67:9c:fb:51:84:a2:67:9f:2d:7f:9a:ff:26:b3:4c:5b: a6:39:7b:25:ea:0e:99:60:82:b1:cb:98:7f:3e:6f:dc:2e:19: d2:5f:62:e4:8f:63:35:c9:fe:f0:e2:2f:6a:a4:21:4b:17:fd: 56:3b:89:ae:d8:71:a9:f5:be:75:56:27:7d:6c:2e:2e:37:7d: c1:b2:96:7b:b5:4f:44:45:7e:82:46:74:77:10:da:96:14:9c: b9:3e:bc:c1:f2:fb:88:9d:ee:9c:fd:f1:e7:c9:ad:e3:98:21: 6e:c2:5e:40:a3:4f:25:c8:c5:d6:ec:f7:1d:be:57:df:38:c0: 91:a8:10:32 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEytDo9zlO+vRGfzH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyODE0NTg0OVoXDTI4MDUwMjEzNTg0OVowLzEtMCsGA1UEAxMk ZDEyNDhkNmMtNjg0Zi00ZTI3LWExM2EtZjAzNTUwYjRjNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyuuydbIe2o7cZyOhspmal75YXs0SkQJJxAI eeaD2IhXiqyzH3hI0CswZpLk5k0AFdTp0WWI7kRmIeQ720oBiOvixetmxeuyYaIJ Hs7i1GZhyd+RGZoUMj1FkJRWIlE6hjvhJmxSz9fi0Tldp/XxgSYKecyyoDnOq/3C ZLz8mtYZhx0iAeRB9ClTDJSddyBj9dWhZvVmQQo3XpoVGkTOFW88XPBvI15oExuZ bUIYl2WSbeR6rzsStxUjxojp3vyWO++8Fg5G7+/0zb/TiP5Df2otJ8Fz/7F7ae/m qA+hqaqMjuijgP5boorU6yn6eXs6p9fY1bhnDRuMTroXQGML4QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFGlxvso1Jh5fu8REMabDXRa5zU0SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k MTI0OGQ2Yy02ODRmLTRlMjctYTEzYS1mMDM1NTBiNGM3NTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2QxMjQ4ZDZjLTY4NGYtNGUyNy1h MTNhLWYwMzU1MGI0Yzc1OS9kMTI0OGQ2Yy02ODRmLTRlMjctYTEzYS1mMDM1NTBi NGM3NTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQdkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnJMAPyEAF0D41TjHx3abZovY47Tq irtWtvkbb6EK5lqR/G4B7xdr34Nk5MZNko8+7cnuMeOCT4QrR4yy1EiByz6NtDEH L1iz50/72fwzaW/e0tUr8oCnIy2FpphlQNIxrmHhdwR7FEg+uO5LFKvHChWe39lW iW4hzsQ9nulrQIdnnPtRhKJnny1/mv8ms0xbpjl7JeoOmWCCscuYfz5v3C4Z0l9i 5I9jNcn+8OIvaqQhSxf9VjuJrthxqfW+dVYnfWwuLjd9wbKWe7VPREV+gkZ0dxDa lhScuT68wfL7iJ3unP3x58mt45ghbsJeQKNPJcjF1uz3Hb5X3zjAkagQMg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:24:12 2026 by rpki-client