$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d1913ac-95bc-4704-841f-64a25e5f6a12.cer File: 3d1913ac-95bc-4704-841f-64a25e5f6a12.cer (raw, json) Hash identifier: udhRQaf7A93Z0PFZeXEG5LOcrTFirfSVuSPmMLbbCNs= Subject key identifier: F0:54:90:21:75:B3:2C:C9:E9:B1:E2:FC:EA:A4:5F:C4:03:E3:35:B5 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D6AF7DD6E595695F974BEBA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d1913ac-95bc-4704-841f-64a25e5f6a12/3d1913ac-95bc-4704-841f-64a25e5f6a12.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d1913ac-95bc-4704-841f-64a25e5f6a12/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Apr 2026 15:36:41 +0000 Certificate not after: Sun 09 Jul 2028 15:36:41 +0000 Subordinate resources: AS: 16481 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:f7:dd:6e:59:56:95:f9:74:be:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 6 15:36:41 2026 GMT Not After : Jul 9 15:36:41 2028 GMT Subject: CN=3d1913ac-95bc-4704-841f-64a25e5f6a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:4e:d8:5e:3f:2c:dc:a5:c3:85:97:97:94: e4:4a:75:dc:df:48:bb:4b:c0:71:5c:cd:70:d1:02: 51:b2:4e:32:d9:44:67:0e:26:6c:49:86:8a:c1:5d: 38:5a:76:1c:70:e2:14:da:8a:a1:f9:3d:a8:da:56: fa:0d:8b:b9:0e:d0:f2:9e:e3:2a:f6:d5:0e:c9:2c: 13:eb:f3:d8:dc:5b:c1:03:d2:a5:a3:6f:b6:88:7b: 92:fa:5f:ec:12:6e:3b:b4:ad:29:1a:20:a1:2c:b1: ac:55:20:ee:31:5d:fe:cf:ca:e0:b6:9f:62:0a:8b: d7:fd:9e:c6:9c:c8:dd:86:4b:63:be:88:f5:66:38: b1:76:28:ac:fc:b3:ee:e7:0e:3b:ce:38:c5:c4:27: d8:01:75:a6:8a:62:a3:d0:7a:06:8b:cb:10:82:79: 2f:ef:da:0f:eb:d3:f3:24:3a:ff:5b:75:cb:35:56: 1d:86:ca:d7:0e:24:7e:e8:b8:a1:48:60:92:9e:9d: 0e:d0:05:b0:ef:35:7a:0b:c5:08:07:e8:34:75:04: 34:0d:22:4a:17:67:32:dc:2f:84:72:da:ad:2c:0f: 6d:a0:db:fd:5b:a5:93:6b:7d:a4:6b:56:a7:31:e1: c9:8d:40:f2:e0:4e:da:a0:ef:f7:6c:b5:43:e3:2f: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:90:21:75:B3:2C:C9:E9:B1:E2:FC:EA:A4:5F:C4:03:E3:35:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d1913ac-95bc-4704-841f-64a25e5f6a12/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3d1913ac-95bc-4704-841f-64a25e5f6a12/3d1913ac-95bc-4704-841f-64a25e5f6a12.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 16481 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f4:40:fe:10:52:b6:08:ca:ee:62:f2:26:be:87:67:00:bf: b8:d3:32:7c:52:d6:dc:8e:73:8d:90:0f:82:f8:bd:cc:ea:6e: 3b:9f:49:64:c7:07:20:46:8a:8d:5f:ba:64:30:0e:ba:8e:cd: 89:16:9e:66:97:ea:b8:be:a2:fd:f3:1e:b4:a6:b7:9e:c3:a0: d1:7c:3a:fb:c0:9f:27:79:32:60:21:91:d9:86:b9:6d:1d:af: 26:51:c8:43:00:3e:e6:f7:dd:95:12:e1:d1:d5:a9:41:e1:47: 9f:05:65:4a:f7:0a:8a:33:21:11:dd:48:b7:92:88:90:54:0e: 15:67:b4:61:18:fc:5c:f8:ba:76:50:1c:7a:d5:59:1f:f7:ff: 7e:46:42:01:63:d1:37:e6:a6:24:74:e5:ca:39:7a:53:e5:2a: 1c:cf:0a:cb:16:1c:1a:8e:4c:73:61:d2:54:18:38:c4:03:e9: 0b:f4:4b:01:34:36:49:b1:2a:39:f7:2c:3c:20:07:9e:7e:0d: e9:c6:16:3f:03:a4:74:be:79:0c:bb:e2:e4:b2:82:a9:d9:b2: 50:ac:c0:6f:fe:50:ad:14:b4:ef:6d:54:02:d7:6f:da:e3:45: ee:43:55:83:2b:e3:d4:bd:0c:9b:1c:5e:4e:02:ea:dc:af:d4: d7:be:4e:00 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE1q991uWVaV+XS+uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwNjE1MzY0MVoXDTI4MDcwOTE1MzY0MVowLzEtMCsGA1UEAxMk M2QxOTEzYWMtOTViYy00NzA0LTg0MWYtNjRhMjVlNWY2YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjtO2F4/LNylw4WXl5TkSnXc30i7S8BxXM1w 0QJRsk4y2URnDiZsSYaKwV04WnYccOIU2oqh+T2o2lb6DYu5DtDynuMq9tUOySwT 6/PY3FvBA9Klo2+2iHuS+l/sEm47tK0pGiChLLGsVSDuMV3+z8rgtp9iCovX/Z7G nMjdhktjvoj1Zjixdiis/LPu5w47zjjFxCfYAXWmimKj0HoGi8sQgnkv79oP69Pz JDr/W3XLNVYdhsrXDiR+6LihSGCSnp0O0AWw7zV6C8UIB+g0dQQ0DSJKF2cy3C+E ctqtLA9toNv9W6WTa32ka1anMeHJjUDy4E7aoO/3bLVD4y/+lwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPBUkCF1syzJ6bHi/OqkX8QD4zW1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z ZDE5MTNhYy05NWJjLTQ3MDQtODQxZi02NGEyNWU1ZjZhMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzNkMTkxM2FjLTk1YmMtNDcwNC04 NDFmLTY0YTI1ZTVmNmExMi8zZDE5MTNhYy05NWJjLTQ3MDQtODQxZi02NGEyNWU1 ZjZhMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQGEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkvRA/hBStgjK7mLyJr6HZwC/uNMy fFLW3I5zjZAPgvi9zOpuO59JZMcHIEaKjV+6ZDAOuo7NiRaeZpfquL6i/fMetKa3 nsOg0Xw6+8CfJ3kyYCGR2Ya5bR2vJlHIQwA+5vfdlRLh0dWpQeFHnwVlSvcKijMh Ed1It5KIkFQOFWe0YRj8XPi6dlAcetVZH/f/fkZCAWPRN+amJHTlyjl6U+UqHM8K yxYcGo5Mc2HSVBg4xAPpC/RLATQ2SbEqOfcsPCAHnn4N6cYWPwOkdL55DLvi5LKC qdmyUKzAb/5QrRS0721UAtdv2uNF7kNVgyvj1L0MmxxeTgLq3K/U175OAA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:19 2026 by rpki-client