$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1d4f6d0-7086-4ab9-8083-3f00b5a00612.cer File: f1d4f6d0-7086-4ab9-8083-3f00b5a00612.cer (raw, json) Hash identifier: mzhK+/9Xe+BoIi9cGxxJzjnCXRs1P4vP4DGq60l7sKY= Subject key identifier: D6:BF:4B:19:5B:23:D6:8D:62:4A:A0:31:C7:0B:DD:74:21:09:9E:61 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CBB933F7264EAC3063BE2E180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1d4f6d0-7086-4ab9-8083-3f00b5a00612/f1d4f6d0-7086-4ab9-8083-3f00b5a00612.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1d4f6d0-7086-4ab9-8083-3f00b5a00612/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 19:47:29 +0000 Certificate not after: Sun 07 May 2028 18:47:29 +0000 Subordinate resources: AS: 46784 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bb:93:3f:72:64:ea:c3:06:3b:e2:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 2 19:47:29 2026 GMT Not After : May 7 18:47:29 2028 GMT Subject: CN=f1d4f6d0-7086-4ab9-8083-3f00b5a00612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:78:58:6e:8a:e9:56:9f:2e:0b:ad:52:2f: 05:46:33:9d:c0:33:ad:39:5d:d4:b4:1e:f7:24:ae: e2:c6:8c:e6:40:e3:c6:96:4e:e6:b3:ed:77:e1:d3: 7d:2a:9e:7b:88:dc:38:b1:f3:00:68:dd:34:e8:3b: 46:c9:3e:ac:8c:8e:b2:8d:8a:ab:3f:1d:80:b8:02: 65:02:b6:2c:fa:02:4f:eb:6e:99:2c:42:93:5d:1b: 38:36:2c:6d:64:b6:13:98:67:31:1e:5f:00:a8:54: c8:93:be:22:e6:12:4b:f8:59:e9:ff:2c:8d:4c:40: 1c:33:84:44:cf:4a:2a:b0:b6:26:e3:9a:52:14:0d: 88:98:53:71:6f:b3:12:a5:fe:98:74:45:90:7b:b4: 11:42:7e:a8:2f:62:e6:1c:6b:72:c4:db:8d:99:8d: e7:de:eb:85:f8:69:bd:ac:eb:14:df:97:23:77:2e: cc:7b:28:64:1a:f3:bd:4f:b3:c3:11:6f:92:b4:4b: a1:ae:27:0e:8c:6c:71:be:c7:24:1a:76:67:2b:30: b5:cd:5d:ef:f7:f2:51:18:59:06:26:43:8a:9a:ff: cd:53:29:8c:64:29:c4:5a:8c:e4:37:a3:df:68:8d: aa:fb:57:b3:c6:0a:c9:d7:45:37:0f:47:8a:74:64: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:4B:19:5B:23:D6:8D:62:4A:A0:31:C7:0B:DD:74:21:09:9E:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1d4f6d0-7086-4ab9-8083-3f00b5a00612/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f1d4f6d0-7086-4ab9-8083-3f00b5a00612/f1d4f6d0-7086-4ab9-8083-3f00b5a00612.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 46784 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ea:76:88:14:eb:91:1a:d2:6a:1d:b9:e3:76:6f:eb:bc:50: 5f:ee:d5:a9:c0:71:f8:30:c3:c6:86:b5:4e:5a:ca:3e:d2:58: cc:c9:e2:2e:1c:4f:3b:44:47:2a:e7:f7:89:68:65:bd:75:22: a8:87:f8:02:2f:65:71:57:f8:94:93:12:a0:53:4f:39:99:fd: 72:e7:b7:d1:9e:de:68:df:4a:8a:c0:97:f5:c6:21:43:e6:eb: 2a:94:28:2b:7c:31:25:b7:f1:8c:69:17:61:95:49:68:44:4a: 15:28:d5:65:74:1a:21:ea:a6:cf:57:de:d7:11:ea:f8:1d:15: c6:a3:3c:3c:13:47:fd:46:05:84:2b:49:10:a5:99:a4:96:00: 99:44:42:de:40:a1:61:aa:08:98:28:fd:e7:47:ad:91:3c:40: c0:f8:1f:b1:ac:45:c0:b3:fd:84:28:80:78:a9:41:42:56:a5: 5d:07:b2:d6:55:25:84:58:41:5d:15:d0:b6:2c:df:5d:69:cc: 49:38:69:26:0c:4b:f9:91:66:53:fa:2c:9d:d8:2b:c6:09:d0: 18:d2:0e:09:64:dd:11:8b:14:d7:6f:f5:cb:e3:61:01:16:fa: cd:d2:1f:29:ad:6e:5b:c7:a9:76:d2:47:c4:ef:c5:dc:99:bd: 60:8e:2e:90 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEy7kz9yZOrDBjvi4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwMjE5NDcyOVoXDTI4MDUwNzE4NDcyOVowLzEtMCsGA1UEAxMk ZjFkNGY2ZDAtNzA4Ni00YWI5LTgwODMtM2YwMGI1YTAwNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK54WG6K6VafLgutUi8FRjOdwDOtOV3UtB73 JK7ixozmQOPGlk7ms+134dN9Kp57iNw4sfMAaN006DtGyT6sjI6yjYqrPx2AuAJl ArYs+gJP626ZLEKTXRs4NixtZLYTmGcxHl8AqFTIk74i5hJL+Fnp/yyNTEAcM4RE z0oqsLYm45pSFA2ImFNxb7MSpf6YdEWQe7QRQn6oL2LmHGtyxNuNmY3n3uuF+Gm9 rOsU35cjdy7MeyhkGvO9T7PDEW+StEuhricOjGxxvsckGnZnKzC1zV3v9/JRGFkG JkOKmv/NUymMZCnEWozkN6PfaI2q+1ezxgrJ10U3D0eKdGQ3hQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFNa/SxlbI9aNYkqgMccL3XQhCZ5hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m MWQ0ZjZkMC03MDg2LTRhYjktODA4My0zZjAwYjVhMDA2MTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2YxZDRmNmQwLTcwODYtNGFiOS04 MDgzLTNmMDBiNWEwMDYxMi9mMWQ0ZjZkMC03MDg2LTRhYjktODA4My0zZjAwYjVh MDA2MTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALbAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADTqdogU65Ea0modueN2b+u8UF/u 1anAcfgww8aGtU5ayj7SWMzJ4i4cTztERyrn94loZb11IqiH+AIvZXFX+JSTEqBT TzmZ/XLnt9Ge3mjfSorAl/XGIUPm6yqUKCt8MSW38YxpF2GVSWhEShUo1WV0GiHq ps9X3tcR6vgdFcajPDwTR/1GBYQrSRClmaSWAJlEQt5AoWGqCJgo/edHrZE8QMD4 H7GsRcCz/YQogHipQUJWpV0HstZVJYRYQV0V0LYs311pzEk4aSYMS/mRZlP6LJ3Y K8YJ0BjSDglk3RGLFNdv9cvjYQEW+s3SHymtblvHqXbSR8TvxdyZvWCOLpA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:06:34 2026 by rpki-client