$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer File: 1cca3c9b-1147-4e91-8480-37ed1becb13e.cer (raw, json) Hash identifier: +nFYj1k/qSqaJUMJO8jo0rmAhoupLh7jOQARnshHmR8= Subject key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584D1FA63E562B9A491DADCABD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 16:06:36 +0000 Certificate not after: Mon 12 Jun 2028 16:06:36 +0000 Subordinate resources: AS: 20014 IP: 140.235.32.0/22 IP: 192.173.0.0/24 IP: 208.71.216.0/21 IP: 2604:1080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:a6:3e:56:2b:9a:49:1d:ad:ca:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 10 16:06:36 2026 GMT Not After : Jun 12 16:06:36 2028 GMT Subject: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:06:b4:4f:54:2f:11:26:37:f4:24:4a:d1: a5:dd:b9:d5:5d:04:fd:dd:01:73:2a:a5:b3:1a:15: e8:ec:08:3a:10:b9:7b:94:4c:98:63:4f:49:1d:da: 69:46:62:2a:d3:e4:a0:f9:dc:d9:84:19:67:93:27: da:70:b4:72:c5:73:28:90:91:c9:f5:46:17:df:b3: 1f:6e:bc:23:78:23:2d:ed:6b:35:4f:f0:4b:fe:fc: c4:c5:9c:f0:30:35:f9:fe:4f:7e:d3:bb:f6:c9:35: 8a:14:ed:ec:25:36:6b:59:7b:48:94:89:e3:b3:74: 84:a2:a0:2d:53:5a:97:5e:34:47:53:0c:55:8d:1e: 9d:22:8b:ce:e7:ef:78:04:e0:88:b4:8c:e0:0b:0a: c2:c3:cb:46:98:08:8f:e6:15:a5:5a:b0:ac:72:0b: 18:86:a1:f6:73:cc:2e:a4:f3:02:9d:85:91:8a:bd: fa:58:86:cb:c0:d5:48:74:d6:5c:80:3f:16:ed:9c: 0a:b5:50:ba:4e:e3:94:43:b1:66:52:34:e3:5b:60: 63:8f:6a:be:3a:57:bf:7a:9d:1b:5a:53:f2:f2:35: d5:bc:6d:17:01:71:95:d0:fe:e4:ea:0c:a2:30:82: cb:0e:df:67:db:92:f5:e3:cc:b3:74:81:ef:08:e3: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 140.235.32.0/22 192.173.0.0/24 208.71.216.0/21 IPv6: 2604:1080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20014 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0f:db:10:6e:17:c2:3a:d9:32:50:64:19:59:40:69:75:be: 94:d3:d0:30:83:6c:a3:ae:a2:83:d5:78:e8:bb:a4:e7:91:21: fa:1b:a6:12:e1:12:6a:3a:d4:45:a1:b8:c7:63:23:6b:d2:22: d5:3c:0b:7d:e9:8a:f7:37:e1:36:a0:9a:9e:be:f8:ad:67:c8: 43:aa:ce:2f:d4:99:7b:49:52:6a:7d:5c:65:f5:a8:33:71:4b: a4:60:bc:6d:45:75:09:b6:7e:84:1f:ec:f1:17:5a:fe:8f:c2: b2:e6:2a:9c:64:7c:5d:a7:8a:54:f5:a3:f7:32:a3:11:7e:a7: 34:5f:9f:bd:f7:6c:61:0f:96:df:cc:9c:ca:a7:20:1c:bc:b0: 4d:12:bb:e8:77:0e:e2:7a:ee:94:fb:4a:1c:46:b9:db:9e:46: 97:ed:60:e2:32:d3:16:ff:a8:1f:51:d5:e8:de:07:d6:1b:04: 1f:0c:7d:41:72:5a:d0:e9:58:a9:08:6e:11:5e:d6:e6:24:9d: 53:f9:2c:b3:4d:6b:31:bd:63:2f:55:cc:f9:b3:8b:35:89:32: 45:8d:44:11:ec:c4:5d:c7:fd:76:58:83:1d:0e:b7:de:10:bf: 3e:ba:c7:35:fa:0d:b8:c0:2a:32:70:44:a2:17:00:6c:1e:31: c1:67:0b:01 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE0fpj5WK5pJHa3KvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDMxMDE2MDYzNloXDTI4MDYxMjE2MDYzNlowLzEtMCsGA1UEAxMk MWNjYTNjOWItMTE0Ny00ZTkxLTg0ODAtMzdlZDFiZWNiMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDcGtE9ULxEmN/QkStGl3bnVXQT93QFzKqWz GhXo7Ag6ELl7lEyYY09JHdppRmIq0+Sg+dzZhBlnkyfacLRyxXMokJHJ9UYX37Mf brwjeCMt7Ws1T/BL/vzExZzwMDX5/k9+07v2yTWKFO3sJTZrWXtIlInjs3SEoqAt U1qXXjRHUwxVjR6dIovO5+94BOCItIzgCwrCw8tGmAiP5hWlWrCscgsYhqH2c8wu pPMCnYWRir36WIbLwNVIdNZcgD8W7ZwKtVC6TuOUQ7FmUjTjW2Bjj2q+Ole/ep0b WlPy8jXVvG0XAXGV0P7k6gyiMILLDt9n25L148yzdIHvCOOfHQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFOWUgtnEXcvhBALyv79aYaeMoi6iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8x Y2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJlY2IxM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzFjY2EzYzliLTExNDctNGU5MS04 NDgwLTM3ZWQxYmVjYjEzZS8xY2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJl Y2IxM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKM6yADBADArQADBAPQR9gwDQQCAAIwBwMFACYE EIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTi4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANw/bEG4XwjrZ MlBkGVlAaXW+lNPQMINso66ig9V46Luk55Eh+humEuESajrURaG4x2Mja9Ii1TwL femK9zfhNqCanr74rWfIQ6rOL9SZe0lSan1cZfWoM3FLpGC8bUV1CbZ+hB/s8Rda /o/CsuYqnGR8XaeKVPWj9zKjEX6nNF+fvfdsYQ+W38ycyqcgHLywTRK76HcO4nru lPtKHEa5255Gl+1g4jLTFv+oH1HV6N4H1hsEHwx9QXJa0OlYqQhuEV7W5iSdU/ks s01rMb1jL1XM+bOLNYkyRY1EEezEXcf9dliDHQ633hC/PrrHNfoNuMAqMnBEohcA bB4xwWcLAQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:51:56 2026 by rpki-client