$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd.cer File: fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd.cer (raw, json) Hash identifier: LEOBiED8o7VQ8x1Mk99nSkdn3BdcepeBKyzUtqIWMJU= Subject key identifier: 97:AC:8F:47:68:45:FE:18:59:A7:8D:9C:EE:99:09:82:6A:BD:A7:7C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D0A700474668AA78124D4FD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd/fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Mar 2026 01:45:21 +0000 Certificate not after: Mon 05 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 25802 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:70:04:74:66:8a:a7:81:24:d4:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 3 01:45:21 2026 GMT Not After : Jun 5 00:45:21 2028 GMT Subject: CN=fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:75:c5:95:4c:5f:39:4d:77:d8:23:7d:6e: b6:bc:53:a2:94:4f:47:6a:df:74:6f:6d:37:e7:6f: 68:03:26:1a:ea:07:33:18:e5:79:75:2e:f8:5d:05: d8:ad:71:12:8a:75:86:2d:82:29:7e:fa:e1:93:70: 3c:4e:07:af:69:e9:00:a3:f1:63:2d:54:aa:dc:4e: 8f:a5:a8:a5:c6:fd:19:17:d1:df:69:38:ee:03:34: e8:0a:b0:95:af:c4:71:bf:aa:20:57:a6:2f:51:a1: a3:84:82:7d:1f:6c:88:83:43:a1:ec:e5:7d:63:11: b6:1e:3c:e2:2d:d2:39:a9:71:2b:3a:69:13:26:de: f6:74:4a:80:4c:2c:60:fd:c7:0f:59:9a:99:5d:30: 9a:04:be:8f:69:58:1b:08:01:80:78:a7:de:89:ae: 44:69:0f:43:ab:ff:52:08:e8:54:4c:e3:cf:29:f6: 37:8d:d2:ff:15:01:2c:3c:26:bd:6b:2c:c8:72:47: af:ff:f9:c6:d6:d8:d7:a0:17:17:34:26:1a:53:bc: a3:de:8f:5f:09:fc:4d:ab:a7:1b:3f:a3:d9:a4:57: 29:95:7f:50:81:d4:56:e9:dc:80:c4:9a:36:10:38: 91:95:b8:bd:92:79:70:f7:35:44:67:8a:0f:80:e4: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AC:8F:47:68:45:FE:18:59:A7:8D:9C:EE:99:09:82:6A:BD:A7:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd/fef33cbc-3fbc-4b7b-bf65-cd7b3d205cdd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 25802 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f3:cd:6e:9e:c3:2d:23:55:0c:f5:6d:f6:b4:2c:6d:c7:58: f5:b0:40:f4:79:6a:e9:52:14:a5:0a:84:17:12:89:bf:58:44: 78:b6:2d:f7:48:51:08:3f:e8:27:5e:d2:80:1e:98:a2:02:0a: 27:f0:a9:23:b4:2a:70:19:64:2e:46:d6:09:b4:0e:f0:0f:56: ca:d9:32:4f:dc:2f:71:2b:81:b0:a7:2c:56:73:eb:68:5b:92: e7:36:3d:9f:a8:ff:36:15:a6:ac:33:0f:22:a9:7b:30:18:5c: 9b:5a:f8:9d:ac:49:7b:aa:d7:cf:f0:82:52:fb:58:90:0e:62: 25:bd:7a:cb:42:2b:88:2c:66:b1:b5:a4:ae:9b:a6:44:66:3a: 6c:2a:7e:78:8f:ef:1c:af:58:e2:d7:86:d8:4a:c6:4b:5f:55: bd:8c:43:1f:93:4f:15:1b:33:34:b2:b6:8c:31:3c:52:42:69: 3e:cd:ad:64:75:5b:6e:d4:cb:a3:d4:46:a5:f6:a6:3b:7d:f2: 28:0b:c9:e1:f5:41:6a:32:df:6b:29:6f:af:6d:9a:ec:38:71: 22:b4:63:09:02:43:8b:a1:f4:c2:6c:f3:9f:f1:24:8b:ec:56: e5:9c:a3:be:eb:1d:17:f1:cd:9d:fb:ea:18:b2:9e:40:c2:aa: 49:bd:fd:b7 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE0KcAR0ZoqngSTU/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMwMzAxNDUyMVoXDTI4MDYwNTAwNDUyMVowLzEtMCsGA1UEAxMk ZmVmMzNjYmMtM2ZiYy00YjdiLWJmNjUtY2Q3YjNkMjA1Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gl1xZVMXzlNd9gjfW62vFOilE9Hat90b203 529oAyYa6gczGOV5dS74XQXYrXESinWGLYIpfvrhk3A8TgevaekAo/FjLVSq3E6P pailxv0ZF9HfaTjuAzToCrCVr8Rxv6ogV6YvUaGjhIJ9H2yIg0Oh7OV9YxG2Hjzi LdI5qXErOmkTJt72dEqATCxg/ccPWZqZXTCaBL6PaVgbCAGAeKfeia5EaQ9Dq/9S COhUTOPPKfY3jdL/FQEsPCa9ayzIckev//nG1tjXoBcXNCYaU7yj3o9fCfxNq6cb P6PZpFcplX9QgdRW6dyAxJo2EDiRlbi9knlw9zVEZ4oPgOTHEQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJesj0doRf4YWaeNnO6ZCYJqvad8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m ZWYzM2NiYy0zZmJjLTRiN2ItYmY2NS1jZDdiM2QyMDVjZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ZlZjMzY2JjLTNmYmMtNGI3Yi1i ZjY1LWNkN2IzZDIwNWNkZC9mZWYzM2NiYy0zZmJjLTRiN2ItYmY2NS1jZDdiM2Qy MDVjZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZMowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAF/PNbp7DLSNVDPVt9rQsbcdY9bBA 9Hlq6VIUpQqEFxKJv1hEeLYt90hRCD/oJ17SgB6YogIKJ/CpI7QqcBlkLkbWCbQO 8A9WytkyT9wvcSuBsKcsVnPraFuS5zY9n6j/NhWmrDMPIql7MBhcm1r4naxJe6rX z/CCUvtYkA5iJb16y0IriCxmsbWkrpumRGY6bCp+eI/vHK9Y4teG2ErGS19VvYxD H5NPFRszNLK2jDE8UkJpPs2tZHVbbtTLo9RGpfamO33yKAvJ4fVBajLfaylvr22a 7DhxIrRjCQJDi6H0wmzzn/Eki+xW5ZyjvusdF/HNnfvqGLKeQMKqSb39tw== -----END CERTIFICATE-----Generated at Tue Mar 3 23:06:13 2026 by rpki-client