$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer File: 0a846bda-a477-4fe0-8f13-997253568b7e.cer (raw, json) Hash identifier: 82X4xoYah2gGPyUfbbBDNF+xxigvheCds6cKX5TGFh4= Subject key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584F023AA17FEB4F887EA16E69C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 30 Aug 2026 12:45:12 +0000 Certificate not after: Sat 02 Dec 2028 13:45:12 +0000 Subordinate resources: AS: 14570 IP: 23.139.120.0/24 IP: 74.122.36.0/22 IP: 2602:fb37::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:3a:a1:7f:eb:4f:88:7e:a1:6e:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 30 12:45:12 2026 GMT Not After : Dec 2 13:45:12 2028 GMT Subject: CN=0a846bda-a477-4fe0-8f13-997253568b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:26:46:98:f4:13:66:86:7f:5d:6b:b9:9e: 69:cd:5e:06:3a:73:57:58:a2:9d:85:55:bc:8c:0d: 8b:dc:86:c8:1b:9d:b1:8a:a0:b2:af:0f:71:20:85: 4f:b0:cb:2b:5f:b4:2c:05:37:c8:75:b8:99:3f:f9: 91:d0:2a:07:f1:fd:51:74:28:6f:6b:e8:60:f0:99: 75:99:62:61:46:57:7b:b6:8a:34:7a:ff:12:f1:de: 7f:d7:f8:10:47:68:88:dd:b1:d1:58:55:9e:9e:29: a2:13:43:b4:17:18:25:d5:c9:98:58:ae:bd:42:f1: 5a:bf:76:83:5e:68:f0:82:64:4a:84:e7:bc:b7:93: de:10:b4:76:93:ff:a4:8b:7e:3a:0a:26:56:51:e4: 8c:47:f8:2d:72:72:f1:35:df:dd:16:56:f7:05:44: 06:02:97:e5:bc:42:1c:0c:eb:60:ca:93:8f:f8:2a: c5:ab:fa:47:55:90:57:2a:b3:f2:c8:e9:13:47:e0: 4d:f6:c3:27:07:77:b0:bf:fb:d8:15:66:93:4c:b8: 18:d2:04:ac:c8:7a:a4:3a:4f:6c:52:d6:21:f7:03: 8a:7d:0d:93:b9:4b:8b:e7:55:69:93:f7:97:50:ad: 80:f6:5f:d3:ea:b5:35:56:6a:55:c9:0c:92:69:a5: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.139.120.0/24 74.122.36.0/22 IPv6: 2602:fb37::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14570 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:33:b6:70:88:ef:8a:bc:54:3c:f4:36:b8:8a:2f:e3:bc:66: 66:8c:6b:78:32:ce:31:2f:b0:56:f1:90:bb:c0:ee:3d:9d:76: 01:eb:ec:24:fa:aa:a6:19:1a:dc:42:55:57:ed:fb:21:8a:96: e6:8e:b1:ad:14:e6:10:7d:15:c6:b0:4b:dc:a0:92:5a:6a:dd: 44:37:d2:51:bd:79:5d:26:b5:58:82:94:e9:73:bc:14:04:06: df:0e:4e:5b:7e:a6:42:72:1b:89:75:01:4f:e7:fb:90:86:28: 5d:0e:42:87:82:65:a8:c8:2d:b9:09:52:74:49:31:30:90:7b: 6b:0b:7b:a7:da:7b:73:14:37:bb:d6:44:43:a6:9c:21:b8:7b: b7:98:d4:a1:56:b6:e5:24:83:58:87:65:8d:1d:f9:81:09:66: f8:17:b7:2d:4a:12:df:c5:d0:ae:61:ba:32:ef:6d:f9:6c:a5: 21:18:0b:18:4c:d5:a9:71:74:2c:ce:44:50:4e:f5:75:c0:f7: 1c:d4:09:45:ec:db:d7:a5:cb:a9:6a:18:97:82:d5:79:5d:69: 4c:ee:1c:31:67:04:d6:0b:ab:8a:3e:2c:a7:ff:b0:78:8d:0d: 1f:ab:8c:78:b1:cd:19:26:5b:cf:0d:5e:5d:81:16:b1:93:21: 70:ce:f2:cc -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE8COqF/60+IfqFuacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDgzMDEyNDUxMloXDTI4MTIwMjEzNDUxMlowLzEtMCsGA1UEAxMk MGE4NDZiZGEtYTQ3Ny00ZmUwLThmMTMtOTk3MjUzNTY4YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYcmRpj0E2aGf11ruZ5pzV4GOnNXWKKdhVW8 jA2L3IbIG52xiqCyrw9xIIVPsMsrX7QsBTfIdbiZP/mR0CoH8f1RdChva+hg8Jl1 mWJhRld7too0ev8S8d5/1/gQR2iI3bHRWFWenimiE0O0Fxgl1cmYWK69QvFav3aD XmjwgmRKhOe8t5PeELR2k/+ki346CiZWUeSMR/gtcnLxNd/dFlb3BUQGApflvEIc DOtgypOP+CrFq/pHVZBXKrPyyOkTR+BN9sMnB3ewv/vYFWaTTLgY0gSsyHqkOk9s UtYh9wOKfQ2TuUuL51Vpk/eXUK2A9l/T6rU1VmpVyQySaaUitwIDAQABo4IELzCC BCswHQYDVR0OBBYEFNy655S2gaWSd2Da3JNSA42F8LhpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w YTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1NjhiN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBhODQ2YmRhLWE0NzctNGZlMC04 ZjEzLTk5NzI1MzU2OGI3ZS8wYTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1 NjhiN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXi3gDBAJKeiQwDQQCAAIwBwMFACYC+zcwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICOOowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFDO2cIjvirxUPPQ2uIov 47xmZoxreDLOMS+wVvGQu8DuPZ12AevsJPqqphka3EJVV+37IYqW5o6xrRTmEH0V xrBL3KCSWmrdRDfSUb15XSa1WIKU6XO8FAQG3w5OW36mQnIbiXUBT+f7kIYoXQ5C h4JlqMgtuQlSdEkxMJB7awt7p9p7cxQ3u9ZEQ6acIbh7t5jUoVa25SSDWIdljR35 gQlm+Be3LUoS38XQrmG6Mu9t+WylIRgLGEzVqXF0LM5EUE71dcD3HNQJRezb16XL qWoYl4LVeV1pTO4cMWcE1gurij4sp/+weI0NH6uMeLHNGSZbzw1eXYEWsZMhcM7y zA== -----END CERTIFICATE-----Generated at Sun Sep 27 12:56:55 2026 by rpki-client