$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer File: b8fa95ca-aa42-4b86-891b-7be12d533da7.cer (raw, json) Hash identifier: Pj1cFj31pYzMf0P6KDfF6sXwN+k+rQ9PQ5yArBbnCDs= Subject key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584ED85A5DB45A0F92DD0EABDF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Aug 2026 12:45:11 +0000 Certificate not after: Fri 17 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 13933 IP: 198.160.143.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:5a:5d:b4:5a:0f:92:dd:0e:ab:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 15 12:45:11 2026 GMT Not After : Nov 17 13:45:11 2028 GMT Subject: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:39:7c:5b:99:11:70:ab:dc:d1:ae:08:6c: 43:e0:8f:4a:4c:93:c4:b7:a3:da:e8:1d:7c:60:61: 0c:1d:ff:56:0b:61:f9:f6:97:3e:71:34:a4:d2:4a: 6b:f0:46:cd:11:d3:7e:a0:22:f6:bf:f2:ad:8d:28: 88:96:04:a7:de:bd:b5:7d:ba:ba:6c:5e:92:55:eb: 9d:4c:df:6f:8c:5e:e9:75:47:37:21:3e:4f:7c:cc: b8:ec:a3:8a:66:ef:7f:32:ec:35:1a:c1:b0:bd:f5: 51:7e:36:70:47:d3:76:19:39:80:20:39:c1:9e:88: 42:e8:88:c4:72:25:be:ee:51:ee:7a:ab:bf:17:04: ab:78:e6:a6:fc:7e:b9:8f:6a:78:48:cc:59:b7:c7: 8c:cb:ae:4b:8f:d3:f5:09:ee:ac:79:eb:bd:ab:2a: 9b:d9:d5:4f:29:7d:ec:b9:e7:59:e0:1b:06:9e:b1: 17:ff:63:4b:cd:8a:53:8c:b4:db:ac:dc:09:16:55: 4a:b6:9b:2f:62:47:58:c7:37:38:47:bd:09:05:34: ae:87:eb:0e:5e:48:b9:bb:72:5b:04:41:c2:b1:e4: 8f:1f:db:40:72:07:07:16:75:8f:04:1d:3d:7a:e4: fd:f1:c6:3c:08:ce:7c:6d:52:05:7e:80:63:98:64: 82:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 198.160.143.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:3f:6c:b9:c0:8e:7c:9a:75:b7:e7:09:ad:94:f5:14:8d:df: d3:c6:4b:d2:af:1d:24:83:57:fe:04:27:fe:20:93:02:46:e0: 79:78:0b:00:af:0a:fa:19:99:2d:71:f4:8a:fd:64:59:f9:28: a2:b4:ca:c3:a7:18:46:e1:d3:28:6e:f0:d8:75:ac:1e:d2:e3: 24:a8:01:e0:fb:89:c1:13:c4:99:d8:5b:bd:ac:e6:f7:bd:1b: 27:3f:39:4c:7a:3c:28:49:dc:9c:0d:78:b1:12:7a:d9:e7:78: 81:11:ce:5a:20:cc:8b:ad:ad:a6:f3:b0:32:4c:6a:b1:04:fc: fb:16:a3:52:bc:0b:dc:22:74:5a:4b:22:6d:ae:04:c8:d7:0e: f0:c1:f3:11:b7:72:f4:f2:47:49:ee:78:23:2a:a9:da:aa:00: 16:e5:ac:53:af:7c:97:34:e0:6c:22:67:a6:cf:26:0d:c4:ce: ea:3f:62:40:38:e6:1a:ea:92:d8:d8:8b:e6:41:55:ee:cb:9e: bf:9e:96:82:f4:57:d5:87:8f:8a:db:34:5b:df:e5:7f:6f:1f: 50:63:f5:e6:f1:ec:2f:01:f2:c7:88:61:ef:16:b5:2a:86:58: e6:5f:79:6d:1f:ce:5a:83:44:11:06:0e:4b:7d:47:bd:98:1f: 33:b5:24:15 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE7YWl20Wg+S3Q6r34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDgxNTEyNDUxMVoXDTI4MTExNzEzNDUxMVowLzEtMCsGA1UEAxMk YjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMzZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9c5fFuZEXCr3NGuCGxD4I9KTJPEt6Pa6B18 YGEMHf9WC2H59pc+cTSk0kpr8EbNEdN+oCL2v/KtjSiIlgSn3r21fbq6bF6SVeud TN9vjF7pdUc3IT5PfMy47KOKZu9/Muw1GsGwvfVRfjZwR9N2GTmAIDnBnohC6IjE ciW+7lHuequ/FwSreOam/H65j2p4SMxZt8eMy65Lj9P1Ce6seeu9qyqb2dVPKX3s uedZ4BsGnrEX/2NLzYpTjLTbrNwJFlVKtpsvYkdYxzc4R70JBTSuh+sOXki5u3Jb BEHCseSPH9tAcgcHFnWPBB09euT98cY8CM58bVIFfoBjmGSCFwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFO7DoyctxL2zYL2aeTOZgP3Nkdf9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i OGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2I4ZmE5NWNhLWFhNDItNGI4Ni04 OTFiLTdiZTEyZDUzM2RhNy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1 MzNkYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGoI8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Nm0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWT9sucCOfJp1t+cJrZT1FI3f08ZL0q8dJINX/gQn/iCTAkbg eXgLAK8K+hmZLXH0iv1kWfkoorTKw6cYRuHTKG7w2HWsHtLjJKgB4PuJwRPEmdhb vazm970bJz85THo8KEncnA14sRJ62ed4gRHOWiDMi62tpvOwMkxqsQT8+xajUrwL 3CJ0Wksiba4EyNcO8MHzEbdy9PJHSe54Iyqp2qoAFuWsU698lzTgbCJnps8mDcTO 6j9iQDjmGuqS2NiL5kFV7suev56WgvRX1YePits0W9/lf28fUGP15vHsLwHyx4hh 7xa1KoZY5l95bR/OWoNEEQYOS31HvZgfM7UkFQ== -----END CERTIFICATE-----Generated at Sun Aug 23 18:35:02 2026 by rpki-client