$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d994cd70-cf4f-4e9e-a10d-3ed53da734bd.cer File: d994cd70-cf4f-4e9e-a10d-3ed53da734bd.cer (raw, json) Hash identifier: cAUORPrGj82CEZ5peyX4zuGkRbpw4xq0++muboWVjzU= Subject key identifier: CD:27:CE:98:CE:08:DD:56:D1:F6:B4:B7:DF:21:21:44:4C:63:CC:DD Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584DAB87280B32E34EF5AB65EB20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d994cd70-cf4f-4e9e-a10d-3ed53da734bd/d994cd70-cf4f-4e9e-a10d-3ed53da734bd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d994cd70-cf4f-4e9e-a10d-3ed53da734bd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Apr 2026 18:37:08 +0000 Certificate not after: Tue 01 Aug 2028 18:37:08 +0000 Subordinate resources: AS: 62667 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:87:28:0b:32:e3:4e:f5:ab:65:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Apr 29 18:37:08 2026 GMT Not After : Aug 1 18:37:08 2028 GMT Subject: CN=d994cd70-cf4f-4e9e-a10d-3ed53da734bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:83:1f:1e:4d:55:c1:e3:58:c2:7c:c3:44: 87:e7:23:91:b0:a7:47:a8:20:b0:aa:52:07:17:33: ee:29:c4:19:30:8d:4e:f4:12:26:b9:38:79:1c:68: 68:48:d4:08:ca:bc:8e:93:5d:24:55:99:a4:fd:d4: 27:8d:46:75:40:91:f9:f9:f9:7b:8d:e2:7b:14:c5: 18:57:97:78:63:d3:08:23:60:50:23:5a:7c:34:53: e2:b6:42:77:4d:ab:97:0a:e1:52:53:d7:33:41:9c: 21:24:bd:33:00:62:14:47:d5:ba:92:93:82:69:61: c2:aa:62:9e:07:c9:e7:4c:3e:2a:29:3c:22:2d:fe: be:05:06:bf:47:f2:33:fd:ae:bd:d3:2c:a4:b3:83: 53:5c:d9:4f:6f:2a:e2:d0:18:24:d5:2d:37:12:51: ef:e7:63:32:93:00:ca:e9:fb:e5:21:2d:8c:26:ca: ba:43:58:27:c5:df:d8:2c:ed:b7:77:d6:66:96:bf: 85:6e:fa:5c:e9:7a:00:a1:ec:be:b2:a8:ad:f1:59: 79:60:98:d4:dc:47:c0:63:6c:3a:13:4b:9b:61:24: 98:1d:2b:d9:ec:ae:5b:d2:0f:25:71:f6:ab:8e:37: a2:38:79:0e:7c:01:32:c6:98:fc:a7:28:ab:c1:b7: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:27:CE:98:CE:08:DD:56:D1:F6:B4:B7:DF:21:21:44:4C:63:CC:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d994cd70-cf4f-4e9e-a10d-3ed53da734bd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d994cd70-cf4f-4e9e-a10d-3ed53da734bd/d994cd70-cf4f-4e9e-a10d-3ed53da734bd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 62667 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a4:cf:fd:c9:1c:75:48:ad:a2:10:21:27:47:7b:7b:c6:36: 24:ec:f6:53:a2:fa:07:d2:90:00:20:be:8c:e4:8d:4f:96:f2: 82:b1:66:a0:ff:d2:6c:e4:95:bf:5e:0b:dd:10:00:e4:9b:9b: 4e:d7:56:a0:51:19:4f:c9:b7:07:b4:4c:88:ec:e6:6b:12:ae: 48:e5:bb:9a:ce:27:b2:50:ec:0e:48:00:14:7e:6d:61:97:5c: 82:03:d0:da:e8:ee:cd:f1:3d:b1:74:b3:19:81:0f:1f:10:41: 41:2d:95:f0:15:97:d6:0b:8d:8e:dc:99:36:9f:95:6e:23:47: a0:17:5f:0a:c1:6d:d5:65:08:16:fc:8a:8b:fc:9a:b5:df:81: 0e:d4:94:dd:1a:95:73:6d:55:14:9b:59:52:9b:c2:8c:65:e3: 2e:a3:75:1a:aa:2c:68:92:79:e2:4a:af:27:7d:5a:60:4e:24: e2:8b:28:a9:9a:24:1d:48:fe:94:c5:7a:d4:e9:2d:67:86:01: c6:5a:ee:24:c5:1c:61:0d:5e:0a:78:76:b9:b9:9e:a4:2c:b7: c1:bc:a4:be:23:54:9e:50:c0:d7:71:6c:4e:90:91:19:5a:db: b3:09:a1:63:15:9d:50:6f:de:2f:c9:c4:4f:72:fd:8e:83:36: fe:94:97:38 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE2rhygLMuNO9atl6yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDQyOTE4MzcwOFoXDTI4MDgwMTE4MzcwOFowLzEtMCsGA1UEAxMk ZDk5NGNkNzAtY2Y0Zi00ZTllLWExMGQtM2VkNTNkYTczNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmqDHx5NVcHjWMJ8w0SH5yORsKdHqCCwqlIH FzPuKcQZMI1O9BImuTh5HGhoSNQIyryOk10kVZmk/dQnjUZ1QJH5+fl7jeJ7FMUY V5d4Y9MII2BQI1p8NFPitkJ3TauXCuFSU9czQZwhJL0zAGIUR9W6kpOCaWHCqmKe B8nnTD4qKTwiLf6+BQa/R/Iz/a690yyks4NTXNlPbyri0Bgk1S03ElHv52MykwDK 6fvlIS2MJsq6Q1gnxd/YLO23d9Zmlr+Fbvpc6XoAoey+sqit8Vl5YJjU3EfAY2w6 E0ubYSSYHSvZ7K5b0g8lcfarjjeiOHkOfAEyxpj8pyirwbeOnwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFM0nzpjOCN1W0fa0t98hIURMY8zdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k OTk0Y2Q3MC1jZjRmLTRlOWUtYTEwZC0zZWQ1M2RhNzM0YmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Q5OTRjZDcwLWNmNGYtNGU5ZS1h MTBkLTNlZDUzZGE3MzRiZC9kOTk0Y2Q3MC1jZjRmLTRlOWUtYTEwZC0zZWQ1M2Rh NzM0YmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPTLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH2kz/3JHHVIraIQISdHe3vGNiTs 9lOi+gfSkAAgvozkjU+W8oKxZqD/0mzklb9eC90QAOSbm07XVqBRGU/Jtwe0TIjs 5msSrkjlu5rOJ7JQ7A5IABR+bWGXXIID0Nro7s3xPbF0sxmBDx8QQUEtlfAVl9YL jY7cmTaflW4jR6AXXwrBbdVlCBb8iov8mrXfgQ7UlN0alXNtVRSbWVKbwoxl4y6j dRqqLGiSeeJKryd9WmBOJOKLKKmaJB1I/pTFetTpLWeGAcZa7iTFHGENXgp4drm5 nqQst8G8pL4jVJ5QwNdxbE6QkRla27MJoWMVnVBv3i/JxE9y/Y6DNv6Ulzg= -----END CERTIFICATE-----Generated at Thu Apr 30 12:40:07 2026 by rpki-client