$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb.cer File: 998ce6c6-de76-4028-a6fe-ea03cffffbcb.cer (raw, json) Hash identifier: KfMqvivBXPxRQJNeMeBfGNA8dKBzjVSLuPE6vXAG2s4= Subject key identifier: D7:CE:46:2F:71:0B:CD:F0:D8:75:3D:83:D8:EA:23:47:94:6A:7C:61 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D0A7003C439EAC7D669476200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/998ce6c6-de76-4028-a6fe-ea03cffffbcb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Mar 2026 01:45:21 +0000 Certificate not after: Mon 05 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 20383 IP: 199.83.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:70:03:c4:39:ea:c7:d6:69:47:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 3 01:45:21 2026 GMT Not After : Jun 5 00:45:21 2028 GMT Subject: CN=998ce6c6-de76-4028-a6fe-ea03cffffbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:49:bb:9b:be:d9:b0:5c:2b:2d:4d:98:b5: ca:76:79:61:70:e5:fd:2f:a7:96:a4:62:30:3b:71: ce:e6:b5:42:cc:ae:8d:88:c8:a6:1d:63:1d:eb:99: e2:6a:76:51:a7:aa:a4:8e:3c:20:8a:7b:f3:50:7b: 0c:b1:14:eb:e5:25:a9:ab:fd:24:df:65:2e:d7:85: fe:b6:dc:46:7d:ed:e4:c6:a5:98:86:6b:79:04:74: 69:2f:20:f0:aa:96:82:2f:d4:31:bc:7a:dc:91:fe: 81:e4:26:2c:d9:63:96:dd:d0:c6:65:a6:a9:19:47: 10:68:44:d4:71:7e:5c:03:86:5f:44:18:d4:3b:c3: 5d:42:be:c0:99:32:d0:4f:57:f3:c1:45:56:92:e9: 65:5b:55:df:e6:98:8b:df:92:de:de:a2:59:0b:b2: 27:24:6b:01:05:9c:f8:78:56:cb:70:7b:88:60:15: c5:c9:2d:7e:30:16:6b:70:7f:85:0b:54:40:d0:06: 13:b6:f1:65:f1:06:6d:b3:b8:67:2f:05:77:28:f1: 42:15:ea:29:fa:38:b9:ea:08:88:26:c7:0b:07:9e: d7:1d:82:d7:9b:2d:a3:31:7c:62:bb:86:4a:92:58: 2e:a0:5c:8b:75:fe:5f:80:35:24:29:d5:65:08:9b: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:46:2F:71:0B:CD:F0:D8:75:3D:83:D8:EA:23:47:94:6A:7C:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998ce6c6-de76-4028-a6fe-ea03cffffbcb/998ce6c6-de76-4028-a6fe-ea03cffffbcb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 199.83.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20383 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:25:9c:f0:5d:88:8c:58:ea:88:d5:7f:f6:5f:ed:45:9e:5f: ff:c2:c0:00:6e:45:9a:72:63:cc:65:9c:b8:a3:da:98:0b:4a: 7e:08:44:b9:04:2c:fb:fe:84:14:a5:d0:e3:fe:33:4e:67:d8: 0c:b3:8d:10:37:b0:83:ed:8f:ec:5c:df:ea:85:0a:74:cb:22: 64:85:7f:24:54:be:51:54:4b:9e:e9:6c:71:b8:df:c2:df:a4: 6f:7f:3f:bf:85:5d:d2:81:d2:86:66:95:3a:e1:d1:39:91:8c: 23:10:f0:dc:4e:fa:d8:66:4e:4f:a8:07:3b:54:e6:82:5c:54: e1:23:bd:65:58:77:ae:0e:ec:3d:2b:da:32:64:78:01:4e:88: da:fa:5c:2d:78:4e:52:d7:ec:31:17:83:ee:33:2b:44:d5:2b: d1:da:2d:90:8c:15:4a:41:9e:7c:67:b5:a7:70:bd:71:2f:57: e4:2e:4a:dd:2c:a3:7a:be:71:96:b0:9b:44:65:d6:34:0c:29: c8:16:53:22:12:9e:7b:b4:d6:a7:0d:a2:40:28:43:ad:7d:47: 1b:5c:e7:bf:73:39:c5:d0:47:37:fd:6c:1e:12:29:b3:08:fb: d3:f5:dc:1c:87:f5:19:b8:5f:7b:28:dd:1d:b4:a3:c4:28:f3: fd:bf:84:1b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0KcAPEOerH1mlHYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMzAxNDUyMVoXDTI4MDYwNTAwNDUyMVowLzEtMCsGA1UEAxMk OTk4Y2U2YzYtZGU3Ni00MDI4LWE2ZmUtZWEwM2NmZmZmYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrJJu5u+2bBcKy1NmLXKdnlhcOX9L6eWpGIw O3HO5rVCzK6NiMimHWMd65nianZRp6qkjjwginvzUHsMsRTr5SWpq/0k32Uu14X+ ttxGfe3kxqWYhmt5BHRpLyDwqpaCL9QxvHrckf6B5CYs2WOW3dDGZaapGUcQaETU cX5cA4ZfRBjUO8NdQr7AmTLQT1fzwUVWkullW1Xf5piL35Le3qJZC7InJGsBBZz4 eFbLcHuIYBXFyS1+MBZrcH+FC1RA0AYTtvFl8QZts7hnLwV3KPFCFeop+ji56giI JscLB57XHYLXmy2jMXxiu4ZKklguoFyLdf5fgDUkKdVlCJv6bQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNfORi9xC83w2HU9g9jqI0eUanxhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 OThjZTZjNi1kZTc2LTQwMjgtYTZmZS1lYTAzY2ZmZmZiY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk5OGNlNmM2LWRlNzYtNDAyOC1h NmZlLWVhMDNjZmZmZmJjYi85OThjZTZjNi1kZTc2LTQwMjgtYTZmZS1lYTAzY2Zm ZmZiY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHU7QwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC T58wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAQSWc8F2IjFjqiNV/9l/tRZ5f/8LAAG5FmnJjzGWcuKPamAtK fghEuQQs+/6EFKXQ4/4zTmfYDLONEDewg+2P7Fzf6oUKdMsiZIV/JFS+UVRLnuls cbjfwt+kb38/v4Vd0oHShmaVOuHROZGMIxDw3E762GZOT6gHO1TmglxU4SO9ZVh3 rg7sPSvaMmR4AU6I2vpcLXhOUtfsMReD7jMrRNUr0dotkIwVSkGefGe1p3C9cS9X 5C5K3Syjer5xlrCbRGXWNAwpyBZTIhKee7TWpw2iQChDrX1HG1znv3M5xdBHN/1s HhIpswj70/XcHIf1GbhfeyjdHbSjxCjz/b+EGw== -----END CERTIFICATE-----Generated at Tue Mar 3 23:09:07 2026 by rpki-client