$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9afe9028-0b69-4a43-bd76-6b10ecf761b8.cer File: 9afe9028-0b69-4a43-bd76-6b10ecf761b8.cer (raw, json) Hash identifier: OL56QThZtq6fuVDfHI5iPM1JVlrqM9MDUg+qJz/ebLY= Subject key identifier: 18:7F:8B:19:91:D1:4C:11:29:35:B4:EE:8C:CA:65:38:4C:63:75:AC Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584CACEA1AC39F6833E76B5EC080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9afe9028-0b69-4a43-bd76-6b10ecf761b8/9afe9028-0b69-4a43-bd76-6b10ecf761b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9afe9028-0b69-4a43-bd76-6b10ecf761b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Jan 2026 13:45:22 +0000 Certificate not after: Tue 02 May 2028 12:45:22 +0000 Subordinate resources: AS: 397113 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:ea:1a:c3:9f:68:33:e7:6b:5e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 28 13:45:22 2026 GMT Not After : May 2 12:45:22 2028 GMT Subject: CN=9afe9028-0b69-4a43-bd76-6b10ecf761b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:04:3f:e2:0b:bf:a4:ac:87:b9:38:14:c6: 53:08:0c:a2:c3:ef:ec:db:33:4b:aa:e7:0a:d3:be: 3e:ff:f9:e1:5e:fe:f9:d3:74:8e:da:d2:7b:84:d6: db:37:cd:53:b2:4b:05:1b:58:c7:0f:25:c0:d9:97: 22:02:83:5f:d5:bd:c4:6b:23:3f:5e:53:bd:2d:c5: cb:02:a9:34:88:5c:98:b7:62:26:93:9d:cf:52:f9: fa:49:f6:5f:c2:04:6a:e7:a9:eb:d9:1e:46:e4:97: 82:01:ba:f2:86:da:45:a1:d5:1d:1a:72:dc:7b:50: 3c:af:c4:da:fc:b0:e4:fc:73:31:74:32:cd:09:32: c4:bc:a9:5f:59:37:63:9e:5c:66:e5:f7:09:27:71: ec:82:b1:ae:b8:d4:8c:00:57:b2:47:df:b2:a3:fc: f1:74:dd:06:a8:59:0a:d6:8d:58:b1:4e:50:6b:b7: a9:96:ef:78:5e:b2:60:91:83:91:2e:9b:e9:c5:cf: 2f:05:83:34:14:36:9a:10:f1:b1:89:07:40:74:79: a1:98:56:69:13:22:80:52:cc:13:e0:ea:50:d2:b3: 68:3f:e8:e2:27:34:86:48:d0:70:40:b0:a8:ea:cd: b2:31:64:78:82:62:05:d6:71:a7:4a:cf:f6:b9:6a: a9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:8B:19:91:D1:4C:11:29:35:B4:EE:8C:CA:65:38:4C:63:75:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9afe9028-0b69-4a43-bd76-6b10ecf761b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9afe9028-0b69-4a43-bd76-6b10ecf761b8/9afe9028-0b69-4a43-bd76-6b10ecf761b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397113 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5a:6b:f5:6b:0f:ba:ad:15:9b:03:64:09:02:53:0b:96:44: 0a:fb:61:94:be:d4:12:90:e0:95:c5:fc:34:a3:b3:e2:9d:e0: 55:08:ce:b4:8b:b1:65:69:76:c2:f6:24:e7:b1:06:55:29:48: 3e:e7:d4:bb:2f:77:74:a4:8e:7c:1f:c2:e1:20:08:19:6c:e9: a5:0d:f4:68:65:b4:26:99:42:ae:30:4d:86:be:32:41:83:94: 24:6c:d9:31:22:f4:82:f4:cc:35:13:15:4c:f9:2c:7c:83:86: 43:a6:88:40:89:a9:9f:48:10:6d:e0:fe:82:d2:1f:7d:0d:2b: 58:97:47:dd:bf:b0:3b:49:bf:66:68:f2:08:43:0f:5d:a6:9d: 0e:1e:99:52:44:fd:6a:71:e2:60:39:3e:f2:23:78:ec:49:e1: c9:ed:09:21:d1:3e:03:12:d5:1a:a8:20:89:44:4f:b2:bc:fc: 97:bc:e4:87:b1:3c:0e:ca:f5:53:0e:0c:25:94:38:2c:bf:88: b6:dd:3f:7d:fe:e4:7a:09:b9:34:cd:91:bd:f2:42:37:7d:58: a2:7b:9a:78:92:8d:14:89:fe:62:99:6a:18:e3:e2:ac:bf:70: 93:7c:d2:d5:a0:35:c7:87:b2:bb:bf:8c:5e:74:88:d6:a8:09: 9f:d3:b9:42 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEys6hrDn2gz52tewIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDEyODEzNDUyMloXDTI4MDUwMjEyNDUyMlowLzEtMCsGA1UEAxMk OWFmZTkwMjgtMGI2OS00YTQzLWJkNzYtNmIxMGVjZjc2MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2YEP+ILv6Ssh7k4FMZTCAyiw+/s2zNLqucK 074+//nhXv7503SO2tJ7hNbbN81TsksFG1jHDyXA2ZciAoNf1b3EayM/XlO9LcXL Aqk0iFyYt2Imk53PUvn6SfZfwgRq56nr2R5G5JeCAbryhtpFodUdGnLce1A8r8Ta /LDk/HMxdDLNCTLEvKlfWTdjnlxm5fcJJ3HsgrGuuNSMAFeyR9+yo/zxdN0GqFkK 1o1YsU5Qa7eplu94XrJgkYORLpvpxc8vBYM0FDaaEPGxiQdAdHmhmFZpEyKAUswT 4OpQ0rNoP+jiJzSGSNBwQLCo6s2yMWR4gmIF1nGnSs/2uWqpVQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFBh/ixmR0UwRKTW07ozKZThMY3WsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85 YWZlOTAyOC0wYjY5LTRhNDMtYmQ3Ni02YjEwZWNmNzYxYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzlhZmU5MDI4LTBiNjktNGE0My1i ZDc2LTZiMTBlY2Y3NjFiOC85YWZlOTAyOC0wYjY5LTRhNDMtYmQ3Ni02YjEwZWNm NzYxYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg85MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEpaa/VrD7qtFZsDZAkCUwuWRAr7 YZS+1BKQ4JXF/DSjs+Kd4FUIzrSLsWVpdsL2JOexBlUpSD7n1Lsvd3SkjnwfwuEg CBls6aUN9GhltCaZQq4wTYa+MkGDlCRs2TEi9IL0zDUTFUz5LHyDhkOmiECJqZ9I EG3g/oLSH30NK1iXR92/sDtJv2Zo8ghDD12mnQ4emVJE/Wpx4mA5PvIjeOxJ4cnt CSHRPgMS1RqoIIlET7K8/Je85IexPA7K9VMODCWUOCy/iLbdP33+5HoJuTTNkb3y Qjd9WKJ7mniSjRSJ/mKZahjj4qy/cJN80tWgNceHsru/jF50iNaoCZ/TuUI= -----END CERTIFICATE-----Generated at Mon Feb 23 16:11:53 2026 by rpki-client