$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer File: 0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer (raw, json) Hash identifier: pCD/ll7Vdw3or/+sT4XHYGRO7y7+u7QiK34jwVaCUdM= Subject key identifier: EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584ECD57D6BFAFD38B00FE323190 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Aug 2026 14:06:13 +0000 Certificate not after: Mon 13 Nov 2028 15:06:13 +0000 Subordinate resources: IP: 132.177.0.0/16 IP: 158.65.0.0/16 IP: 158.136.0.0/16 IP: 192.138.208.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:57:d6:bf:af:d3:8b:00:fe:32:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 11 14:06:13 2026 GMT Not After : Nov 13 15:06:13 2028 GMT Subject: CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:df:6d:ab:cc:f2:c5:3e:01:34:e7:97:0c: 37:b7:a2:da:c4:26:3b:29:df:f0:99:f1:51:50:4f: bf:f6:78:f7:2b:13:3a:1b:a4:89:3d:89:91:a8:cd: 9a:1e:3e:a4:f6:83:ae:d8:a5:ab:49:e4:2c:ab:aa: 8a:fe:89:c9:fb:f4:04:49:0d:d6:2e:ae:0d:9f:93: 90:7d:d6:bd:b2:90:31:cb:15:c6:cd:d3:dc:64:53: 8a:57:0b:58:53:7a:27:ec:3e:bc:6d:cb:9a:df:22: 49:4a:d4:b5:f1:93:23:65:ac:f3:5e:df:a9:2b:4c: 95:56:10:fd:c6:14:cf:7b:86:64:a8:fa:1f:8b:dd: d3:52:aa:c8:3c:64:e8:12:d0:c5:fc:58:d3:e2:33: 23:09:a1:d1:b5:d0:84:cf:8c:82:03:91:db:95:32: b5:5d:0d:37:bf:16:94:6b:16:d8:59:5c:f6:9b:46: 2d:bf:62:5c:fa:84:fd:08:fa:d7:07:9c:40:18:4b: 1c:8b:73:88:bf:43:42:5a:72:a1:b4:8b:13:3c:b0: bb:1a:21:6a:51:b2:ed:72:d6:4b:94:72:11:c1:5c: 3c:af:9b:82:27:eb:00:91:c9:8a:28:cf:dc:b2:72: a6:4d:67:0d:2e:7f:12:a1:32:e6:80:34:6c:73:60: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 132.177.0.0/16 158.65.0.0/16 158.136.0.0/16 192.138.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a9:9d:35:bd:f0:0f:6d:73:1e:15:1f:8d:9a:7a:12:e8:6d: b7:d0:6d:64:37:26:4d:6c:52:24:67:48:c5:59:44:41:f5:cd: 7d:61:64:f4:01:fd:85:34:6b:13:54:47:4e:ad:a5:86:ed:4c: ec:ca:9e:3c:c4:27:1d:0d:db:cd:09:3f:1e:b3:24:71:3b:2d: fb:ae:2b:95:85:5d:e9:1d:26:c2:07:91:1b:8f:5c:1f:b3:27: b9:ce:bd:14:58:f0:b4:7f:be:e6:e7:71:0f:1a:e7:9b:a7:e6: b8:bf:b5:df:7e:47:3f:f1:2a:24:f8:45:98:06:c3:f1:d2:00: 5b:fe:d0:dd:29:80:be:54:25:dd:1a:09:e3:77:74:33:e4:b5: e3:37:81:f5:35:a4:75:54:5d:8a:c4:90:2e:60:49:51:9f:06: bd:dd:93:10:15:3c:2c:b6:b3:bf:9d:2d:00:d9:73:b9:4f:35: 26:98:be:07:4c:27:5d:b9:71:a1:14:5c:56:51:3e:ac:39:cb: 05:8b:82:a6:33:65:7d:26:82:e1:95:0f:4a:3e:94:d8:76:ab: d4:db:c4:8e:59:63:b3:ea:d8:e1:fd:6c:40:ae:81:c5:06:d2: fb:c4:b3:ba:9d:22:f1:c2:ff:07:de:06:95:00:ce:bd:e1:3d: cb:a8:92:dd -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE7NV9a/r9OLAP4yMZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDgxMTE0MDYxM1oXDTI4MTExMzE1MDYxM1owLzEtMCsGA1UEAxMk MGE0NGRkZmUtNmZkZS00MDgzLWExZGQtY2JiMzcwN2UxYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxrfbavM8sU+ATTnlww3t6LaxCY7Kd/wmfFR UE+/9nj3KxM6G6SJPYmRqM2aHj6k9oOu2KWrSeQsq6qK/onJ+/QESQ3WLq4Nn5OQ fda9spAxyxXGzdPcZFOKVwtYU3on7D68bcua3yJJStS18ZMjZazzXt+pK0yVVhD9 xhTPe4ZkqPofi93TUqrIPGToEtDF/FjT4jMjCaHRtdCEz4yCA5HblTK1XQ03vxaU axbYWVz2m0Ytv2Jc+oT9CPrXB5xAGEsci3OIv0NCWnKhtIsTPLC7GiFqUbLtctZL lHIRwVw8r5uCJ+sAkcmKKM/csnKmTWcNLn8SoTLmgDRsc2DDQwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFOtW+pn/ltliIm1rb+MAEAi6yqllMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w YTQ0ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIzNzA3ZTFiNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBhNDRkZGZlLTZmZGUtNDA4My1h MWRkLWNiYjM3MDdlMWI3MC8wYTQ0ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIzNzA3 ZTFiNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMBsEAgABMBUDAwCEsQMDAJ5BAwMAnogDBADAitAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA LqmdNb3wD21zHhUfjZp6Euhtt9BtZDcmTWxSJGdIxVlEQfXNfWFk9AH9hTRrE1RH Tq2lhu1M7MqePMQnHQ3bzQk/HrMkcTst+64rlYVd6R0mwgeRG49cH7Mnuc69FFjw tH++5udxDxrnm6fmuL+1335HP/EqJPhFmAbD8dIAW/7Q3SmAvlQl3RoJ43d0M+S1 4zeB9TWkdVRdisSQLmBJUZ8Gvd2TEBU8LLazv50tANlzuU81Jpi+B0wnXblxoRRc VlE+rDnLBYuCpjNlfSaC4ZUPSj6U2Har1NvEjlljs+rY4f1sQK6BxQbS+8Szup0i 8cL/B94GlQDOveE9y6iS3Q== -----END CERTIFICATE-----Generated at Sun Aug 23 16:41:38 2026 by rpki-client