$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer File: 04610df8-1b67-4eaf-b73b-95f345a33b02.cer (raw, json) Hash identifier: jqp6iEMBMt2zBtnKdcK3MGfcnV5DIDnV76TW2yqh8Ng= Subject key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584D0BD55FC248A129D0FD5F3BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Mar 2026 13:45:23 +0000 Certificate not after: Mon 05 Jun 2028 12:45:23 +0000 Subordinate resources: AS: 18519 IP: 72.251.192.0/20 IP: 167.254.244.0/22 IP: 172.81.16.0/22 IP: 2605:fac0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:d5:5f:c2:48:a1:29:d0:fd:5f:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 3 13:45:23 2026 GMT Not After : Jun 5 12:45:23 2028 GMT Subject: CN=04610df8-1b67-4eaf-b73b-95f345a33b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:e9:a4:77:a1:55:dc:1a:51:f0:5b:e7:d3: fc:33:a0:57:c8:c2:25:14:f9:c0:fc:e5:72:d8:cd: 42:c2:dc:f2:f6:c7:84:21:23:f0:e8:7b:cb:85:fc: d3:f5:0c:56:b8:34:0b:91:25:ce:f5:7e:84:4d:40: 4b:ce:44:47:f1:e4:e6:fb:2f:a0:14:5d:a9:21:33: b7:e7:df:a0:51:2e:ca:68:2f:2b:5f:8d:51:b7:fe: ef:e8:ca:a7:7b:63:fd:25:7b:76:88:bc:6f:69:3a: 00:5d:14:2f:24:a3:25:72:0b:7b:85:e9:c1:51:a5: 17:5f:c7:59:ac:d9:38:f8:05:55:55:73:87:35:b2: 7d:e0:64:58:a8:d2:f7:3e:f2:23:2a:b3:a6:44:68: ab:61:7d:90:99:4b:bc:5a:32:38:6c:93:95:3f:5d: 8e:61:dc:f2:24:b1:99:54:60:85:1a:8c:2c:34:fb: c8:d5:b8:2d:88:ab:7a:65:5a:b0:6a:35:97:8b:73: e3:8f:bc:a5:35:30:f7:be:ed:c0:8f:30:af:c9:90: 5d:a6:73:ac:40:eb:0e:52:8c:69:d1:d2:9e:a6:c5: ab:ba:b0:c4:30:ce:8d:70:6c:15:6f:31:bf:20:25: 61:31:20:63:43:c1:2e:24:f7:c9:b9:92:bc:6d:de: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 72.251.192.0/20 167.254.244.0/22 172.81.16.0/22 IPv6: 2605:fac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:46:e4:e6:35:8d:25:fe:58:85:56:a8:20:2b:d3:d3:9c:02: 82:4e:07:47:62:c7:02:8d:84:3f:04:8b:13:bc:eb:b4:84:7d: 4e:57:d0:4e:5f:e1:a4:3f:75:da:22:96:da:bb:b2:61:ce:2b: 4e:22:51:cd:70:6b:97:a4:52:3c:8c:8f:e1:73:18:d8:ac:40: d4:b4:04:4b:bf:fc:2e:7f:0f:87:e3:0e:60:c4:39:5d:de:0d: 12:44:07:f8:ba:b9:ff:89:8c:47:e9:98:0a:55:6c:be:1a:7b: 16:e1:b4:7e:e9:93:78:75:86:0e:31:2b:27:24:d2:aa:e6:bb: fa:6b:44:e1:8d:97:c3:40:f6:77:86:57:84:1c:e0:e7:9f:4d: a5:9f:e7:ae:5e:7a:b9:07:50:5c:77:e8:1e:a9:c1:3b:db:f7: b6:1f:96:2c:eb:0f:b1:91:f4:85:fe:36:fb:fd:36:8a:cb:1c: dc:f7:77:bd:37:c6:99:fa:b7:df:e9:47:3b:70:af:e4:43:cb: b6:ab:4d:a4:5a:f6:62:f0:27:ef:41:55:05:33:52:38:3f:f8: 3a:98:cf:e9:7a:f3:42:62:94:1b:bd:5a:a2:cc:d3:90:b7:45: 16:d7:c7:08:64:96:41:a5:5d:3b:d9:e2:34:8a:d7:4d:1f:a0: 39:28:23:52 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE0L1V/CSKEp0P1fO6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDMwMzEzNDUyM1oXDTI4MDYwNTEyNDUyM1owLzEtMCsGA1UEAxMk MDQ2MTBkZjgtMWI2Ny00ZWFmLWI3M2ItOTVmMzQ1YTMzYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXfppHehVdwaUfBb59P8M6BXyMIlFPnA/OVy 2M1Cwtzy9seEISPw6HvLhfzT9QxWuDQLkSXO9X6ETUBLzkRH8eTm+y+gFF2pITO3 59+gUS7KaC8rX41Rt/7v6Mqne2P9JXt2iLxvaToAXRQvJKMlcgt7henBUaUXX8dZ rNk4+AVVVXOHNbJ94GRYqNL3PvIjKrOmRGirYX2QmUu8WjI4bJOVP12OYdzyJLGZ VGCFGowsNPvI1bgtiKt6ZVqwajWXi3Pjj7ylNTD3vu3AjzCvyZBdpnOsQOsOUoxp 0dKepsWrurDEMM6NcGwVbzG/ICVhMSBjQ8EuJPfJuZK8bd66AwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFObuns6y692tKcG9rMfN3xfGmVv3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w NDYxMGRmOC0xYjY3LTRlYWYtYjczYi05NWYzNDVhMzNiMDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzA0NjEwZGY4LTFiNjctNGVhZi1i NzNiLTk1ZjM0NWEzM2IwMi8wNDYxMGRmOC0xYjY3LTRlYWYtYjczYi05NWYzNDVh MzNiMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARI+8ADBAKn/vQDBAKsURAwDQQCAAIwBwMFACYF +sAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICSFcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI0bk5jWNJf5Y hVaoICvT05wCgk4HR2LHAo2EPwSLE7zrtIR9TlfQTl/hpD912iKW2ruyYc4rTiJR zXBrl6RSPIyP4XMY2KxA1LQES7/8Ln8Ph+MOYMQ5Xd4NEkQH+Lq5/4mMR+mYClVs vhp7FuG0fumTeHWGDjErJyTSqua7+mtE4Y2Xw0D2d4ZXhBzg559NpZ/nrl56uQdQ XHfoHqnBO9v3th+WLOsPsZH0hf42+/02issc3Pd3vTfGmfq33+lHO3Cv5EPLtqtN pFr2YvAn70FVBTNSOD/4OpjP6XrzQmKUG71aoszTkLdFFtfHCGSWQaVdO9niNIrX TR+gOSgjUg== -----END CERTIFICATE-----Generated at Sat Mar 14 11:41:53 2026 by rpki-client