$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer File: 5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer (raw, json) Hash identifier: MmDVN8IQ1KOl+fVZ3/4lo0IqpJcINe6M94BPcWbczH0= Subject key identifier: C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584DE6DE3EFB79F3EFB5A6239CA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 May 2026 00:45:17 +0000 Certificate not after: Wed 23 Aug 2028 00:45:17 +0000 Subordinate resources: IP: 162.253.176.0/22 IP: 2602:f788::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:de:3e:fb:79:f3:ef:b5:a6:23:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 21 00:45:17 2026 GMT Not After : Aug 23 00:45:17 2028 GMT Subject: CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:05:5f:9c:88:db:2e:7c:f0:4f:8a:0c:4c: 4a:0b:3a:25:af:34:c2:62:dd:a3:55:73:07:42:76: 5f:f1:2f:24:0c:1b:11:7d:72:fe:78:0a:83:33:b9: 90:b7:f5:39:63:e6:fb:74:3b:c7:f5:f1:eb:9b:93: c9:9a:78:b1:34:23:0e:5e:85:eb:8c:cc:32:d7:a1: b8:96:35:be:7c:ff:89:8e:aa:f0:57:d8:1d:c2:26: 6a:25:fb:8b:1b:47:73:ef:f2:77:c7:85:ce:38:a4: 70:1a:be:79:9f:3a:5a:1f:85:ec:d6:d2:26:60:7e: 75:3e:ae:81:cb:9d:f1:2b:1f:4c:ad:d2:21:3c:98: 10:e2:d4:f9:87:b1:21:0b:3a:a9:1e:b0:dd:29:ec: 71:f5:0d:a5:e0:da:45:d6:c5:4f:d3:b4:a2:a6:e3: 05:81:86:15:96:9a:a2:4d:f0:3e:8f:07:28:4d:5a: 26:33:c2:fe:89:31:bb:30:a3:3b:e7:eb:06:d8:69: 82:b3:10:2c:bd:50:4e:77:89:8a:10:78:0a:a0:8a: 50:ea:4b:6a:19:78:47:2a:bd:00:d7:3b:2c:5d:ba: a3:32:0e:a4:e1:b1:93:ad:c7:27:2b:88:57:11:11: 88:a4:17:db:94:60:f0:89:8f:d4:7e:2b:8f:4e:fb: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 162.253.176.0/22 IPv6: 2602:f788::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:aa:45:eb:4e:62:3f:f4:eb:25:d5:bf:db:5c:87:bb:28:ca: 27:1e:62:65:99:4a:b9:77:84:d6:5d:ce:5e:bb:fb:49:d8:18: 0a:a5:77:31:08:86:14:f9:7c:d9:20:4d:77:3f:40:75:ce:cf: 8b:97:f8:45:12:ed:5e:50:c6:4f:06:d3:64:06:c3:c6:63:1b: 46:e1:23:c9:a2:1b:69:d7:87:aa:88:0e:1d:15:9a:c2:06:f8: 4e:ae:7d:87:1e:c0:91:26:f7:65:10:5c:2e:37:01:e9:98:bc: 3e:55:62:3f:c7:4a:26:f6:77:b0:9a:c0:40:77:69:26:d2:06: 20:e6:c7:18:e9:a6:6e:f5:60:51:d4:04:21:de:2c:84:28:38: ac:de:f8:3e:75:a5:ac:fb:bf:cb:1f:13:74:f6:cc:cf:78:e0: 61:04:41:8f:9b:bd:de:30:5b:ee:e6:49:ab:a6:e2:2b:33:32: 82:f1:84:fb:57:f5:7b:4a:d9:0c:f5:2d:9e:52:8e:ff:f9:06: 14:3d:57:6a:06:9d:c2:2a:42:56:88:6c:38:92:3f:fe:3b:88: 18:ce:fc:01:b3:dc:f1:5e:0d:1f:a5:42:93:79:6c:c1:84:89: ee:d6:df:33:e8:d6:27:e2:25:c9:82:68:44:fe:42:70:23:07: b4:f6:51:2a -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3m3j77efPvtaYjnKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDUyMTAwNDUxN1oXDTI4MDgyMzAwNDUxN1owLzEtMCsGA1UEAxMk NWRiYzBlNDEtYzg1Mi00M2JhLTljMTgtMjYyYzYzYWVjMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIMFX5yI2y588E+KDExKCzolrzTCYt2jVXMH QnZf8S8kDBsRfXL+eAqDM7mQt/U5Y+b7dDvH9fHrm5PJmnixNCMOXoXrjMwy16G4 ljW+fP+JjqrwV9gdwiZqJfuLG0dz7/J3x4XOOKRwGr55nzpaH4Xs1tImYH51Pq6B y53xKx9MrdIhPJgQ4tT5h7EhCzqpHrDdKexx9Q2l4NpF1sVP07SipuMFgYYVlpqi TfA+jwcoTVomM8L+iTG7MKM75+sG2GmCsxAsvVBOd4mKEHgKoIpQ6ktqGXhHKr0A 1zssXbqjMg6k4bGTrccnK4hXERGIpBfblGDwiY/UfiuPTvsbAwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMFfMB4pcbRdDIDavxMr/M5xvtufMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 ZGJjMGU0MS1jODUyLTQzYmEtOWMxOC0yNjJjNjNhZWMxYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzVkYmMwZTQxLWM4NTItNDNiYS05 YzE4LTI2MmM2M2FlYzFhOS81ZGJjMGU0MS1jODUyLTQzYmEtOWMxOC0yNjJjNjNh ZWMxYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKi/bAwDgQCAAIwCAMGBCYC94gAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADyqRetOYj/06yXVv9tch7soyiceYmWZSrl3hNZdzl67+0nYGAqldzEIhhT5fNkg TXc/QHXOz4uX+EUS7V5Qxk8G02QGw8ZjG0bhI8miG2nXh6qIDh0VmsIG+E6ufYce wJEm92UQXC43AemYvD5VYj/HSib2d7CawEB3aSbSBiDmxxjppm71YFHUBCHeLIQo OKze+D51paz7v8sfE3T2zM944GEEQY+bvd4wW+7mSaum4iszMoLxhPtX9XtK2Qz1 LZ5Sjv/5BhQ9V2oGncIqQlaIbDiSP/47iBjO/AGz3PFeDR+lQpN5bMGEie7W3zPo 1ifiJcmCaET+QnAjB7T2USo= -----END CERTIFICATE-----Generated at Thu Jun 4 12:15:57 2026 by rpki-client