$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a68164ab-b60e-4b47-a06a-21517400fcb8.cer File: a68164ab-b60e-4b47-a06a-21517400fcb8.cer (raw, json) Hash identifier: 9YhIu7iFDORq5ZKL037NZ0WMmNEZrGHvQqr+gTiQVdg= Subject key identifier: 7D:08:EC:9D:6F:77:CC:39:58:FE:7C:7A:D7:BE:F5:34:98:8F:CD:A4 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D5D72BC637716D678106D6420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a68164ab-b60e-4b47-a06a-21517400fcb8/a68164ab-b60e-4b47-a06a-21517400fcb8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a68164ab-b60e-4b47-a06a-21517400fcb8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Apr 2026 19:22:56 +0000 Certificate not after: Tue 04 Jul 2028 19:22:56 +0000 Subordinate resources: AS: 40409 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:72:bc:63:77:16:d6:78:10:6d:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 1 19:22:56 2026 GMT Not After : Jul 4 19:22:56 2028 GMT Subject: CN=a68164ab-b60e-4b47-a06a-21517400fcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:85:2e:c3:ba:e8:2a:3f:74:dc:ee:26:33: 2a:28:4e:e1:a4:60:dd:0a:15:3c:07:84:e2:5e:96: 37:a5:d4:21:f4:11:8d:91:4b:3c:1a:cc:08:3d:5c: da:1a:97:30:0f:c2:ae:43:7b:1a:c1:2c:7d:19:e1: 2a:aa:68:07:e4:ea:a8:74:ed:54:4f:3c:53:c9:d4: 30:3b:12:08:36:b7:f1:60:5e:6f:b9:9b:8f:ca:57: 52:7f:fb:74:c0:5f:7c:37:0c:0e:96:5e:3b:88:c1: 53:1a:d4:bd:3f:2a:3f:81:7b:e9:02:cf:76:f4:ad: 0a:a9:4c:23:0c:1c:fc:48:53:73:94:ab:1d:66:c7: 8e:e4:e7:0e:33:b3:40:52:9f:24:7e:e5:fa:b9:62: 8e:54:53:3d:64:56:22:38:ab:25:6f:69:ec:7e:3d: 36:3d:25:d1:a2:fb:87:9c:28:e6:7a:18:b5:a7:25: 6e:98:4b:ad:1c:d3:de:a3:b3:40:26:ef:19:9c:c8: a5:30:ca:9b:fc:e3:d1:ea:5f:b4:52:58:bd:e8:9e: fc:df:85:7c:9f:62:8c:f5:58:7f:ee:d8:0f:ce:bb: 60:7b:da:83:d5:8f:8b:a3:89:93:d3:86:33:a4:47: d7:f7:e1:1c:b8:e8:ac:9d:97:8d:48:72:59:22:46: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:08:EC:9D:6F:77:CC:39:58:FE:7C:7A:D7:BE:F5:34:98:8F:CD:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a68164ab-b60e-4b47-a06a-21517400fcb8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a68164ab-b60e-4b47-a06a-21517400fcb8/a68164ab-b60e-4b47-a06a-21517400fcb8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 40409 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:82:e9:7f:48:c7:9f:7b:c8:ff:db:5e:cc:f8:56:7b:db:eb: db:cc:64:ad:f0:1e:a8:f0:69:bb:81:a7:a7:0d:b3:54:aa:8c: 3f:ac:7e:2b:ba:0d:2a:3a:67:36:9a:cb:33:eb:ad:b3:1b:c6: 6d:d4:d0:8b:3c:00:0a:7f:71:e4:12:2f:61:af:fc:79:55:1f: c8:bd:cb:57:30:7c:d1:b8:6c:f7:fd:96:70:cb:4a:b2:3a:4f: 7e:77:e5:52:b9:12:19:10:6b:6e:76:93:64:4b:52:cf:95:54: a0:2b:76:11:e9:dd:be:78:ce:3c:14:11:15:7f:45:fb:c3:55: 77:dd:34:c8:84:63:1e:f6:c2:8b:5c:92:81:6d:d9:d9:fb:46: de:18:7a:0b:63:1c:48:c2:21:cf:0b:4f:27:86:a5:e6:8d:59: 80:1f:2d:7d:16:25:57:1f:a5:ee:c2:a1:f9:e2:1a:b3:9e:8f: 79:4e:79:7f:40:80:77:2f:06:dd:bb:b4:96:c8:16:21:e7:7d: 6c:f7:01:6f:38:c1:31:5d:c9:ee:d1:9c:5e:f4:d0:ba:e3:2b: 0a:88:eb:aa:c6:40:20:f3:e8:63:ef:58:bf:ae:1c:9b:fd:62: 87:eb:ed:82:8b:f1:d0:38:95:56:dd:53:41:35:2a:8d:e6:15: 67:06:48:97 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE1dcrxjdxbWeBBtZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMTE5MjI1NloXDTI4MDcwNDE5MjI1NlowLzEtMCsGA1UEAxMk YTY4MTY0YWItYjYwZS00YjQ3LWEwNmEtMjE1MTc0MDBmY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZSFLsO66Co/dNzuJjMqKE7hpGDdChU8B4Ti XpY3pdQh9BGNkUs8GswIPVzaGpcwD8KuQ3sawSx9GeEqqmgH5OqodO1UTzxTydQw OxIINrfxYF5vuZuPyldSf/t0wF98NwwOll47iMFTGtS9Pyo/gXvpAs929K0KqUwj DBz8SFNzlKsdZseO5OcOM7NAUp8kfuX6uWKOVFM9ZFYiOKslb2nsfj02PSXRovuH nCjmehi1pyVumEutHNPeo7NAJu8ZnMilMMqb/OPR6l+0Uli96J7834V8n2KM9Vh/ 7tgPzrtge9qD1Y+Lo4mT04YzpEfX9+EcuOisnZeNSHJZIkbCXQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFH0I7J1vd8w5WP58ete+9TSYj82kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h NjgxNjRhYi1iNjBlLTRiNDctYTA2YS0yMTUxNzQwMGZjYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2E2ODE2NGFiLWI2MGUtNGI0Ny1h MDZhLTIxNTE3NDAwZmNiOC9hNjgxNjRhYi1iNjBlLTRiNDctYTA2YS0yMTUxNzQw MGZjYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJ3ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC2C6X9Ix597yP/bXsz4Vnvb69vM ZK3wHqjwabuBp6cNs1SqjD+sfiu6DSo6ZzaayzPrrbMbxm3U0Is8AAp/ceQSL2Gv /HlVH8i9y1cwfNG4bPf9lnDLSrI6T3535VK5EhkQa252k2RLUs+VVKArdhHp3b54 zjwUERV/RfvDVXfdNMiEYx72wotckoFt2dn7Rt4YegtjHEjCIc8LTyeGpeaNWYAf LX0WJVcfpe7CofniGrOej3lOeX9AgHcvBt27tJbIFiHnfWz3AW84wTFdye7RnF70 0LrjKwqI66rGQCDz6GPvWL+uHJv9Yofr7YKL8dA4lVbdU0E1Ko3mFWcGSJc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:24 2026 by rpki-client