$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a37ac31-fa45-48e3-86d4-853620407a6d.cer File: 4a37ac31-fa45-48e3-86d4-853620407a6d.cer (raw, json) Hash identifier: 2Fjunl0H3bzeQ/hVwr+epiq6I4h2buXP4Pq58Y++jfE= Subject key identifier: 9F:40:E9:EA:B1:15:0C:E8:EE:5F:3F:37:7C:3B:FD:AF:9F:D4:93:78 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DD02C420C931AB88B89DBB300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a37ac31-fa45-48e3-86d4-853620407a6d/4a37ac31-fa45-48e3-86d4-853620407a6d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a37ac31-fa45-48e3-86d4-853620407a6d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 21:38:53 +0000 Certificate not after: Mon 14 Aug 2028 21:38:53 +0000 Subordinate resources: AS: 402479 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:2c:42:0c:93:1a:b8:8b:89:db:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 12 21:38:53 2026 GMT Not After : Aug 14 21:38:53 2028 GMT Subject: CN=4a37ac31-fa45-48e3-86d4-853620407a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:11:a4:8d:81:ee:ea:3f:7d:f5:f7:2e:5e: 72:9c:41:69:f8:f6:5a:c6:55:ac:1e:08:1b:6a:9b: d7:63:10:2e:4c:bb:35:e0:be:a2:90:11:1e:c7:fe: 64:6b:48:20:de:7b:ee:1d:f2:4d:74:80:f0:2a:78: aa:b5:97:54:05:0d:74:02:00:a9:d5:3b:23:5f:16: 7a:8f:a7:ce:0f:d7:9b:e2:4f:2b:15:f9:b1:62:30: bd:20:e4:4b:c9:61:33:6d:51:4e:42:cf:0d:2c:b7: d1:da:27:d0:77:20:34:03:50:23:e0:79:53:14:75: f8:54:ef:45:86:8c:89:f4:6d:a0:f6:96:3d:48:23: 68:f3:8d:32:32:97:b1:4f:49:b5:a2:d1:3d:95:c6: fa:64:cd:84:b3:24:4e:be:31:ec:2a:33:44:1f:78: 68:c9:2a:b7:20:89:ae:2e:ab:ed:bb:0b:08:1c:22: 53:f9:1f:d5:bc:34:8e:c1:57:0d:f0:91:9f:ef:ed: 3a:dd:6a:79:df:1d:4f:cc:52:fe:15:17:a3:44:91: 04:2c:57:75:90:03:10:22:25:a4:e3:af:b4:ab:36: 0d:f8:68:2f:f7:84:f5:be:37:78:5a:48:e7:ff:31: 7f:e4:17:e3:59:89:a9:73:35:23:b5:2e:06:2c:8b: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:40:E9:EA:B1:15:0C:E8:EE:5F:3F:37:7C:3B:FD:AF:9F:D4:93:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a37ac31-fa45-48e3-86d4-853620407a6d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a37ac31-fa45-48e3-86d4-853620407a6d/4a37ac31-fa45-48e3-86d4-853620407a6d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402479 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:62:98:03:4e:83:39:52:d8:e0:56:da:d9:6c:fe:d0:05:90: 64:b1:10:b0:88:0e:c6:3a:c8:89:0f:48:5e:f0:09:ea:f5:1c: f3:82:fe:61:d4:a3:65:3e:99:aa:89:93:9e:77:05:62:c4:52: d2:cf:2a:5e:bd:2c:9b:66:d4:c4:0d:d2:95:c5:25:87:49:e7: 4e:54:a2:4f:b9:9e:6c:f3:b5:4e:1e:23:25:1f:6c:d4:b8:cc: 47:f0:eb:e2:41:69:49:6c:cc:e3:1b:5e:b0:0f:f3:4a:6c:cc: 0a:72:6a:9c:ad:69:28:9c:24:ab:23:af:7d:21:8d:31:96:e8: b1:1d:15:8b:13:b6:19:c3:00:48:5e:f4:c5:a1:dd:dc:0c:0d: e1:03:cb:d7:63:5c:f9:03:41:46:f0:d3:6e:2c:2b:79:14:a4: c1:c1:fa:81:2e:0a:41:ad:e4:a5:9f:49:c3:e9:52:a7:24:47: 1a:b0:31:9a:b8:ed:fb:ea:38:49:d4:5d:5b:7f:a2:30:2a:d1: 4b:37:1a:07:94:0f:22:16:56:77:aa:70:e3:df:fe:72:28:f5: 9b:ba:a5:4b:61:b5:6d:05:b5:92:7a:bd:a8:94:8c:b8:a6:80: 1c:92:43:da:ee:3a:07:c1:4b:28:27:e2:88:98:05:54:23:76: 43:6b:7f:4f -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE3QLEIMkxq4i4nbswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUxMjIxMzg1M1oXDTI4MDgxNDIxMzg1M1owLzEtMCsGA1UEAxMk NGEzN2FjMzEtZmE0NS00OGUzLTg2ZDQtODUzNjIwNDA3YTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZQRpI2B7uo/ffX3Ll5ynEFp+PZaxlWsHggb apvXYxAuTLs14L6ikBEex/5ka0gg3nvuHfJNdIDwKniqtZdUBQ10AgCp1TsjXxZ6 j6fOD9eb4k8rFfmxYjC9IORLyWEzbVFOQs8NLLfR2ifQdyA0A1Aj4HlTFHX4VO9F hoyJ9G2g9pY9SCNo840yMpexT0m1otE9lcb6ZM2EsyROvjHsKjNEH3hoySq3IImu LqvtuwsIHCJT+R/VvDSOwVcN8JGf7+063Wp53x1PzFL+FRejRJEELFd1kAMQIiWk 46+0qzYN+Ggv94T1vjd4Wkjn/zF/5BfjWYmpczUjtS4GLIuh1wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJ9A6eqxFQzo7l8/N3w7/a+f1JN4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 YTM3YWMzMS1mYTQ1LTQ4ZTMtODZkNC04NTM2MjA0MDdhNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzRhMzdhYzMxLWZhNDUtNDhlMy04 NmQ0LTg1MzYyMDQwN2E2ZC80YTM3YWMzMS1mYTQ1LTQ4ZTMtODZkNC04NTM2MjA0 MDdhNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiQvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH9imANOgzlS2OBW2tls/tAFkGSx ELCIDsY6yIkPSF7wCer1HPOC/mHUo2U+maqJk553BWLEUtLPKl69LJtm1MQN0pXF JYdJ505Uok+5nmzztU4eIyUfbNS4zEfw6+JBaUlszOMbXrAP80pszApyapytaSic JKsjr30hjTGW6LEdFYsTthnDAEhe9MWh3dwMDeEDy9djXPkDQUbw024sK3kUpMHB +oEuCkGt5KWfScPpUqckRxqwMZq47fvqOEnUXVt/ojAq0Us3GgeUDyIWVneqcOPf /nIo9Zu6pUthtW0FtZJ6vaiUjLimgBySQ9ruOgfBSygn4oiYBVQjdkNrf08= -----END CERTIFICATE-----Generated at Mon May 25 04:25:54 2026 by rpki-client