$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03.cer File: 33f69806-aa5e-435d-a2a8-c80e5f6e4a03.cer (raw, json) Hash identifier: F+yxy1HDIWhsrxy7NG9Bx21DDcq+LW+NPiZP3qXT+0A= Subject key identifier: 77:53:42:B0:47:61:1C:8F:8D:7A:61:74:D4:86:0D:32:E3:6C:95:24 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DEB0E4586174FD33C09611188 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/33f69806-aa5e-435d-a2a8-c80e5f6e4a03.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 May 2026 12:45:17 +0000 Certificate not after: Thu 24 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 54078 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:0e:45:86:17:4f:d3:3c:09:61:11:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 22 12:45:17 2026 GMT Not After : Aug 24 12:45:17 2028 GMT Subject: CN=33f69806-aa5e-435d-a2a8-c80e5f6e4a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:fb:9c:94:74:e6:5d:3c:35:c8:ac:85:4f: d6:87:83:bf:ec:7f:19:1d:2f:5c:ff:60:6c:12:91: 6d:ba:5b:04:7d:c9:30:5b:0b:ce:7f:06:5a:3f:10: 12:31:c3:8d:4f:31:7c:10:d6:f2:12:48:61:75:16: d9:c6:4f:b0:b9:5c:d3:4e:86:b7:c9:72:f6:99:c9: 22:af:be:d3:0c:db:03:94:fd:cb:16:74:b6:d0:90: 70:52:7c:27:4b:e6:d5:a6:43:9b:d9:d8:0d:86:1a: 8a:0f:94:e8:d2:f5:a9:61:05:34:94:ae:59:73:13: b8:e4:bb:50:63:f7:ef:40:6e:0d:4f:41:0e:66:47: ab:8f:d7:aa:e5:4a:72:d9:21:a2:90:c4:aa:40:a3: bf:20:dd:7b:7b:9e:8d:59:91:58:fe:9d:c9:91:62: 33:a1:8e:3c:32:17:cd:ee:10:5d:65:29:ae:d8:51: 2b:8e:4c:94:04:fe:ad:5f:82:0e:eb:06:a9:f0:2a: de:9b:34:ba:9e:ac:d1:3a:f7:31:c9:33:d4:a0:9a: 66:31:b7:b6:56:23:99:22:13:5c:d3:3b:8f:7a:a2: 6a:f3:3e:06:e7:46:8e:ef:9e:d7:3e:ed:b1:3d:72: b4:3d:9a:13:7f:26:05:d3:fb:50:00:b3:07:6d:51: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:53:42:B0:47:61:1C:8F:8D:7A:61:74:D4:86:0D:32:E3:6C:95:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/33f69806-aa5e-435d-a2a8-c80e5f6e4a03/33f69806-aa5e-435d-a2a8-c80e5f6e4a03.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 54078 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:32:be:4d:1a:60:b7:6b:1a:08:ae:24:95:0b:80:9e:fe:6a: 92:6d:8e:99:7b:a4:87:9e:36:b6:38:b6:17:c2:ae:64:d1:2d: 1e:77:7b:a0:6b:ab:04:a1:5a:dd:30:e1:92:3c:07:48:17:12: 99:88:dc:80:7f:68:22:3e:3f:ec:7c:dc:12:17:0d:2c:d3:61: 7b:77:06:c7:39:1e:ec:d1:b9:ba:32:8a:95:5f:ba:45:82:f3: 6c:8f:78:df:35:6d:1d:97:df:c9:de:fe:61:8a:6d:0b:c7:00: 75:f0:4c:83:5f:02:0f:4b:1d:2e:c7:c6:b4:0a:9a:fb:15:90: 9a:9b:d4:da:b7:67:1e:3b:62:e7:d3:a7:70:d5:66:47:ef:dc: 81:ca:18:9a:e5:78:02:c6:55:5e:70:7e:23:b3:82:34:97:f4: f1:1b:17:2e:ee:a3:da:e8:0f:38:1c:dd:ee:46:09:8c:57:ee: fb:c0:00:18:15:ad:36:d4:29:3b:5a:53:58:ee:c5:58:bd:a7: 7a:bd:62:cf:df:95:d1:86:2f:88:0d:7b:81:f0:f0:bf:ad:38: 88:48:6c:f2:5d:33:53:b0:6f:b4:97:4f:ec:39:94:db:60:c0: a5:e2:a8:bc:2e:e1:1e:fe:c9:ee:58:6c:36:23:fb:4a:82:14: 10:19:23:6e -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE3rDkWGF0/TPAlhEYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDUyMjEyNDUxN1oXDTI4MDgyNDEyNDUxN1owLzEtMCsGA1UEAxMk MzNmNjk4MDYtYWE1ZS00MzVkLWEyYTgtYzgwZTVmNmU0YTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xz7nJR05l08NcishU/Wh4O/7H8ZHS9c/2Bs EpFtulsEfckwWwvOfwZaPxASMcONTzF8ENbyEkhhdRbZxk+wuVzTToa3yXL2mcki r77TDNsDlP3LFnS20JBwUnwnS+bVpkOb2dgNhhqKD5To0vWpYQU0lK5ZcxO45LtQ Y/fvQG4NT0EOZkerj9eq5Upy2SGikMSqQKO/IN17e56NWZFY/p3JkWIzoY48MhfN 7hBdZSmu2FErjkyUBP6tX4IO6wap8CremzS6nqzROvcxyTPUoJpmMbe2ViOZIhNc 0zuPeqJq8z4G50aO757XPu2xPXK0PZoTfyYF0/tQALMHbVGwlQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFHdTQrBHYRyPjXphdNSGDTLjbJUkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z M2Y2OTgwNi1hYTVlLTQzNWQtYTJhOC1jODBlNWY2ZTRhMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMzZjY5ODA2LWFhNWUtNDM1ZC1h MmE4LWM4MGU1ZjZlNGEwMy8zM2Y2OTgwNi1hYTVlLTQzNWQtYTJhOC1jODBlNWY2 ZTRhMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANM+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKAyvk0aYLdrGgiuJJULgJ7+apJt jpl7pIeeNrY4thfCrmTRLR53e6BrqwShWt0w4ZI8B0gXEpmI3IB/aCI+P+x83BIX DSzTYXt3Bsc5HuzRuboyipVfukWC82yPeN81bR2X38ne/mGKbQvHAHXwTINfAg9L HS7HxrQKmvsVkJqb1Nq3Zx47YufTp3DVZkfv3IHKGJrleALGVV5wfiOzgjSX9PEb Fy7uo9roDzgc3e5GCYxX7vvAABgVrTbUKTtaU1juxVi9p3q9Ys/fldGGL4gNe4Hw 8L+tOIhIbPJdM1Owb7SXT+w5lNtgwKXiqLwu4R7+ye5YbDYj+0qCFBAZI24= -----END CERTIFICATE-----Generated at Sun May 24 01:06:11 2026 by rpki-client