$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer File: 40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer (raw, json) Hash identifier: fjVB/X62yY8xblps1pYqWRD3OaH6a4QJhcnaBp7vqdI= Subject key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584EE38519562C51A951A8B41B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Aug 2026 12:45:11 +0000 Certificate not after: Tue 21 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 30574 AS: 31776 IP: 204.8.172.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:85:19:56:2c:51:a9:51:a8:b4:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 19 12:45:11 2026 GMT Not After : Nov 21 13:45:11 2028 GMT Subject: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:ec:06:0b:2a:a1:58:9f:2a:a7:dd:8e:0a: d0:b7:0e:c0:a6:01:5c:46:91:58:13:ed:6e:3d:44: f4:f7:3b:73:28:ff:8e:c8:01:ad:95:c4:14:4b:43: 6f:05:9e:50:fd:a8:23:e3:3d:d3:ff:78:5c:c7:20: 79:55:d5:2e:96:f4:6d:09:a9:37:3b:29:84:c8:86: 43:19:5d:50:ec:8a:a1:cf:c1:a8:ff:0e:aa:2b:87: a4:de:db:e8:68:07:2e:68:d3:56:e3:c3:81:0a:40: 1b:67:44:cf:aa:22:78:b0:24:49:f6:39:07:12:89: 1f:44:7a:ef:27:42:57:d3:c7:c2:5b:7a:0a:e3:a9: ba:85:ea:96:09:3b:1b:f3:66:e2:50:c8:91:de:a1: e6:b4:11:78:51:7f:29:d0:a0:03:c6:d1:6c:e9:8c: 4f:b5:db:6e:10:ec:48:91:70:73:f0:25:1f:1c:3a: 26:84:e4:81:84:37:5d:b9:04:56:af:2d:98:f1:8a: fe:55:99:28:8b:99:5e:25:e9:72:31:a3:cf:fe:57: 82:41:54:d7:fb:f7:6e:c5:5d:a8:5d:f0:ab:06:be: 48:5a:f1:a7:0c:a7:29:58:9d:b0:94:e3:db:3f:52: 78:3f:6e:83:36:f5:d9:ba:51:78:e5:78:d5:08:31: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 204.8.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30574 31776 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e0:72:79:be:2d:30:55:79:72:b3:1f:4e:ba:6f:b4:71:d4: 4d:da:b9:2f:c0:f3:87:fe:8c:f5:c6:37:52:e1:b9:46:ac:a7: 18:60:98:57:5e:d8:a5:a8:e4:18:e9:69:77:fd:3e:8f:dd:28: 4c:2d:dc:2d:9a:2a:88:34:7e:9c:3c:ec:ac:f1:75:11:a1:98: 79:43:93:2a:b7:fe:cd:c0:63:0e:da:9c:3f:17:a8:19:94:f0: df:53:b3:56:2d:60:e3:bf:77:9f:3f:3b:9a:9c:05:7d:55:27: b7:9c:07:58:5a:dc:b1:f2:e4:b5:7b:6e:70:82:fb:f8:ab:57: f2:e6:0c:15:da:2c:58:82:56:5c:f5:44:76:ce:bb:90:71:ea: 12:dd:75:6d:00:94:63:f3:71:34:48:f8:45:68:75:d2:38:e2: ff:a9:52:79:49:52:36:c0:93:ce:af:7d:b4:f1:7a:d8:6a:0c: 18:94:08:48:aa:2a:6b:4b:46:37:d8:f2:c5:b7:9f:0a:8f:ce: e9:cf:d7:88:ed:26:bb:78:f2:5d:05:5e:3f:a6:4d:07:e3:c8: ad:41:81:f8:5b:e5:13:8f:20:14:7c:62:b4:31:ed:6c:81:94: f6:ad:d7:63:b9:16:ed:f1:33:c5:f3:86:71:2c:c6:00:12:e1: 26:6a:f1:d6 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE7jhRlWLFGpUai0G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDgxOTEyNDUxMVoXDTI4MTEyMTEzNDUxMVowLzEtMCsGA1UEAxMk NDBiMzliMmEtY2RlZi00NDQ1LWFjZTgtYmIzOWQ0M2NkYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DDsBgsqoVifKqfdjgrQtw7ApgFcRpFYE+1u PUT09ztzKP+OyAGtlcQUS0NvBZ5Q/agj4z3T/3hcxyB5VdUulvRtCak3OymEyIZD GV1Q7Iqhz8Go/w6qK4ek3tvoaAcuaNNW48OBCkAbZ0TPqiJ4sCRJ9jkHEokfRHrv J0JX08fCW3oK46m6heqWCTsb82biUMiR3qHmtBF4UX8p0KADxtFs6YxPtdtuEOxI kXBz8CUfHDomhOSBhDdduQRWry2Y8Yr+VZkoi5leJelyMaPP/leCQVTX+/duxV2o XfCrBr5IWvGnDKcpWJ2wlOPbP1J4P26DNvXZulF45XjVCDGlhwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFNqCdXtreLh210bK2IF6v5oLFltiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQzY2RhNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQwYjM5YjJhLWNkZWYtNDQ0NS1h Y2U4LWJiMzlkNDNjZGE1ZC80MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQz Y2RhNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALMCKwwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC d24CAnwgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBADbgcnm+LTBVeXKzH066b7Rx1E3auS/A84f+jPXGN1Lh uUaspxhgmFde2KWo5BjpaXf9Po/dKEwt3C2aKog0fpw87KzxdRGhmHlDkyq3/s3A Yw7anD8XqBmU8N9Ts1YtYOO/d58/O5qcBX1VJ7ecB1ha3LHy5LV7bnCC+/irV/Lm DBXaLFiCVlz1RHbOu5Bx6hLddW0AlGPzcTRI+EVoddI44v+pUnlJUjbAk86vfbTx ethqDBiUCEiqKmtLRjfY8sW3nwqPzunP14jtJrt48l0FXj+mTQfjyK1Bgfhb5ROP IBR8YrQx7WyBlPat12O5Fu3xM8XzhnEsxgAS4SZq8dY= -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:59 2026 by rpki-client