$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217.cer File: 70b6e0fc-473f-4353-8e08-838958632217.cer (raw, json) Hash identifier: g6IdUogkwkgTNPenyx5LF8kV65UpZXEVtkKUGlVSGLo= Subject key identifier: B3:D0:54:6F:C3:4C:1B:0D:70:C1:36:64:68:4C:94:FD:B0:3F:0C:0C Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584E0CD6407FD2DF91463CBB6A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/70b6e0fc-473f-4353-8e08-838958632217.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jun 2026 15:09:54 +0000 Certificate not after: Tue 05 Sep 2028 15:09:54 +0000 Subordinate resources: IP: 192.245.50.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:d6:40:7f:d2:df:91:46:3c:bb:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 3 15:09:54 2026 GMT Not After : Sep 5 15:09:54 2028 GMT Subject: CN=70b6e0fc-473f-4353-8e08-838958632217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:a8:51:35:42:65:e4:4e:01:ce:d0:ca:93: 53:fd:d9:99:4c:a6:53:02:76:40:15:21:1f:d4:d0: 1c:e0:fb:55:d3:96:72:93:5d:24:b1:b0:40:81:e0: f8:87:40:2c:d9:5d:ad:16:56:9c:9a:f7:5a:5a:9f: d3:53:c3:62:42:08:e0:6f:1e:2a:02:7c:49:94:b5: fe:7f:87:87:0e:7c:78:9d:e6:c2:d5:da:ef:1d:33: 31:aa:29:85:39:f0:2c:8e:21:1e:e5:f2:78:90:dc: f5:de:d8:a0:b5:d6:f7:30:16:f9:61:f7:f6:96:4c: 79:8c:cc:89:56:e1:ad:d3:5e:85:69:2b:c9:7f:54: 16:53:f5:19:6f:a1:81:1b:75:60:72:10:5f:1e:23: 09:bb:3a:1e:c0:e8:8e:3e:70:f6:cd:df:a4:56:4a: 6d:84:98:96:98:a3:ff:5e:74:80:75:dd:b6:bf:11: 03:72:83:c9:fc:a2:92:cc:23:1a:1d:ac:23:1a:d0: 03:91:be:ae:ad:ef:bd:b9:36:04:44:90:92:18:b0: 3a:b7:44:07:7d:31:98:82:32:14:f5:2c:a2:32:3a: 5b:73:75:b6:2f:b3:8f:08:ee:e5:c5:a8:57:82:95: 52:16:6e:c8:42:fd:98:86:d6:9a:c8:61:2d:03:d1: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D0:54:6F:C3:4C:1B:0D:70:C1:36:64:68:4C:94:FD:B0:3F:0C:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70b6e0fc-473f-4353-8e08-838958632217/70b6e0fc-473f-4353-8e08-838958632217.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.245.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9a:6b:14:e6:cf:d5:ff:7d:de:ba:fc:df:1a:13:96:36:64: 84:a0:40:1c:a1:21:07:8e:d2:ec:8e:f8:f2:50:00:e8:41:54: 87:c0:01:4b:fe:da:4d:63:a2:55:13:5f:28:ae:4a:a2:69:c2: 84:e7:7a:82:25:eb:13:8e:5a:00:b6:16:9e:03:76:e0:4e:33: 00:23:d7:00:fc:2a:3b:e4:76:2f:b4:cc:da:37:fc:18:65:09: 80:3d:5d:c3:bd:4b:62:77:af:73:24:8f:8f:c2:70:46:44:42: b6:ad:20:16:96:d6:ba:8b:d3:01:12:a1:d7:4f:a1:41:a6:c6: 5a:6e:1a:cc:05:de:fc:07:23:09:7e:1b:03:9e:2d:b5:9f:c3: 29:b8:5c:38:32:39:58:97:70:82:cc:33:5c:30:70:4d:0c:3c: c0:15:75:ee:a4:67:0c:88:59:f3:40:15:c5:7f:2b:65:df:30: b1:f1:ad:c9:0f:98:ab:48:3f:7c:d4:ed:42:ba:af:a0:1e:a0: e4:59:21:ca:12:0f:fb:98:3e:1a:72:82:a6:ff:5e:93:1a:e0: 7b:44:1c:ec:42:ae:34:83:7b:c2:b2:e1:5f:ba:18:c1:70:a8: 79:72:ea:6a:91:a6:f1:14:8e:20:e3:71:18:43:9b:32:aa:0a: 68:2b:95:ba -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4M1kB/0t+RRjy7agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDYwMzE1MDk1NFoXDTI4MDkwNTE1MDk1NFowLzEtMCsGA1UEAxMk NzBiNmUwZmMtNDczZi00MzUzLThlMDgtODM4OTU4NjMyMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHqoUTVCZeROAc7QypNT/dmZTKZTAnZAFSEf 1NAc4PtV05Zyk10ksbBAgeD4h0As2V2tFlacmvdaWp/TU8NiQgjgbx4qAnxJlLX+ f4eHDnx4nebC1drvHTMxqimFOfAsjiEe5fJ4kNz13tigtdb3MBb5Yff2lkx5jMyJ VuGt016FaSvJf1QWU/UZb6GBG3VgchBfHiMJuzoewOiOPnD2zd+kVkpthJiWmKP/ XnSAdd22vxEDcoPJ/KKSzCMaHawjGtADkb6ure+9uTYERJCSGLA6t0QHfTGYgjIU 9SyiMjpbc3W2L7OPCO7lxahXgpVSFm7IQv2YhtaayGEtA9GXHQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLPQVG/DTBsNcME2ZGhMlP2wPwwMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83 MGI2ZTBmYy00NzNmLTQzNTMtOGUwOC04Mzg5NTg2MzIyMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzcwYjZlMGZjLTQ3M2YtNDM1My04 ZTA4LTgzODk1ODYzMjIxNy83MGI2ZTBmYy00NzNmLTQzNTMtOGUwOC04Mzg5NTg2 MzIyMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA9TIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAipprFObP1f993rr83xoT ljZkhKBAHKEhB47S7I748lAA6EFUh8ABS/7aTWOiVRNfKK5KomnChOd6giXrE45a ALYWngN24E4zACPXAPwqO+R2L7TM2jf8GGUJgD1dw71LYnevcySPj8JwRkRCtq0g FpbWuovTARKh10+hQabGWm4azAXe/AcjCX4bA54ttZ/DKbhcODI5WJdwgswzXDBw TQw8wBV17qRnDIhZ80AVxX8rZd8wsfGtyQ+Yq0g/fNTtQrqvoB6g5FkhyhIP+5g+ GnKCpv9ekxrge0Qc7EKuNIN7wrLhX7oYwXCoeXLqapGm8RSOIONxGEObMqoKaCuV ug== -----END CERTIFICATE-----Generated at Sat Jun 6 14:39:43 2026 by rpki-client