$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer File: 985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer (raw, json) Hash identifier: mJusZChV+o2Fqf2WMFc1kswXoPs1cBxDSpvBSK94mDo= Subject key identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584D544D53D3D20721834AAE2F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Mar 2026 12:45:17 +0000 Certificate not after: Sat 01 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 62668 IP: 23.160.224.0/24 IP: 104.167.248.0/22 IP: 2605:c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:4d:53:d3:d2:07:21:83:4a:ae:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 29 12:45:17 2026 GMT Not After : Jul 1 12:45:17 2028 GMT Subject: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:6c:7d:9a:8d:e9:24:a0:4a:b9:43:2d:cb: b5:78:f9:e1:14:bb:bf:5b:d9:ab:fc:54:70:db:21: ea:57:98:b0:11:8f:33:90:9c:44:03:44:ac:17:3b: 33:ae:6c:7d:9c:2f:82:36:aa:09:57:ca:12:99:f1: a9:13:45:2e:6a:53:20:43:0a:08:ac:2b:8b:30:39: 3f:5c:fb:69:d6:b4:67:2c:58:c6:61:60:e4:ca:12: f0:b8:a1:28:50:0a:2c:f9:ef:1b:3e:94:82:4c:d6: d4:05:5d:20:a8:46:d6:06:9e:0c:3d:f1:40:c5:e8: c6:99:3f:67:5b:1c:33:f7:b8:75:66:96:61:c4:12: 91:ea:8c:de:4a:78:c2:7a:8c:13:1b:4a:88:ba:ad: dd:25:4c:8a:3f:6e:b3:be:3b:2f:78:eb:14:98:00: 09:b8:fd:f1:bc:6e:b2:72:90:9d:50:f2:61:fc:ec: a3:dc:9b:78:4a:7a:d9:39:91:86:66:7f:98:e9:85: f4:77:49:41:21:ef:c8:91:46:f0:79:6c:72:2c:f9: 19:45:e4:3c:bf:0c:91:c9:f1:3f:61:13:e4:8f:55: 87:9a:35:d5:9d:61:01:57:5d:70:72:48:2b:0a:98: 90:c4:91:a2:56:ff:8b:e2:9e:42:d0:f9:db:9b:b5: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.160.224.0/24 104.167.248.0/22 IPv6: 2605:c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62668 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:27:d5:87:5a:37:7c:54:f8:f4:1c:ba:46:75:7a:40:3d:bb: 8f:ac:fa:be:ba:91:c0:45:82:61:7e:a8:aa:a6:33:0a:b2:62: f3:cb:64:9d:fa:09:ac:f0:c6:3b:48:73:0a:98:fc:67:e8:73: 4c:03:b0:3a:12:16:2e:ca:9f:31:a7:20:31:5e:7d:62:bd:da: 38:7f:2b:ac:05:2c:35:ff:ad:a1:01:33:b0:48:35:71:84:08: f8:07:3b:d8:01:93:ef:96:0d:97:6b:6b:c6:ac:85:52:79:9e: ba:33:4c:84:26:0d:6f:be:26:e1:58:d6:f1:ef:b0:a8:95:17: c7:d1:f9:35:8e:9a:72:04:47:59:b3:21:91:28:6e:91:ff:ac: 7a:86:c4:82:8f:e6:43:e6:76:2c:be:dd:cd:55:5d:7b:9f:15: 79:3e:5b:30:67:9f:b6:65:24:62:e3:7e:9c:4d:e9:45:91:21: b9:63:32:c7:cf:38:a3:d4:2a:25:ec:81:17:1e:22:ce:81:18: d9:84:1c:10:41:17:cd:b9:e9:96:49:54:2a:d3:1c:68:6d:2c: 28:4b:f3:d7:87:42:c1:04:78:2a:9b:5f:d3:de:2f:24:a6:c5: 4b:c5:ba:a9:72:60:c1:32:38:59:c1:5d:85:13:cd:12:f9:ed: e2:58:63:ca -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE1UTVPT0gchg0quL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDMyOTEyNDUxN1oXDTI4MDcwMTEyNDUxN1owLzEtMCsGA1UEAxMk OTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThiZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkBsfZqN6SSgSrlDLcu1ePnhFLu/W9mr/FRw 2yHqV5iwEY8zkJxEA0SsFzszrmx9nC+CNqoJV8oSmfGpE0UualMgQwoIrCuLMDk/ XPtp1rRnLFjGYWDkyhLwuKEoUAos+e8bPpSCTNbUBV0gqEbWBp4MPfFAxejGmT9n Wxwz97h1ZpZhxBKR6ozeSnjCeowTG0qIuq3dJUyKP26zvjsveOsUmAAJuP3xvG6y cpCdUPJh/Oyj3Jt4SnrZOZGGZn+Y6YX0d0lBIe/IkUbweWxyLPkZReQ8vwyRyfE/ YRPkj1WHmjXVnWEBV11wckgrCpiQxJGiVv+L4p5C0Pnbm7XjawIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMtANsHK3/6KiUv0Sz2EC02Gf9sWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk4NTU5MmI5LThlN2ItNGNjYi04 N2RjLWUxZGUyZTk4YmQ4MS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5 OGJkODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXoOADBAJop/gwDQQCAAIwBwMFACYFDEAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPTMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH8n1YdaN3xU+PQcukZ1 ekA9u4+s+r66kcBFgmF+qKqmMwqyYvPLZJ36CazwxjtIcwqY/Gfoc0wDsDoSFi7K nzGnIDFefWK92jh/K6wFLDX/raEBM7BINXGECPgHO9gBk++WDZdra8ashVJ5nroz TIQmDW++JuFY1vHvsKiVF8fR+TWOmnIER1mzIZEobpH/rHqGxIKP5kPmdiy+3c1V XXufFXk+WzBnn7ZlJGLjfpxN6UWRIbljMsfPOKPUKiXsgRceIs6BGNmEHBBBF825 6ZZJVCrTHGhtLChL89eHQsEEeCqbX9PeLySmxUvFuqlyYMEyOFnBXYUTzRL57eJY Y8o= -----END CERTIFICATE-----Generated at Mon Mar 30 03:01:20 2026 by rpki-client