$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer File: 1fe8849b-66cd-4afe-9b0b-970eafad1175.cer (raw, json) Hash identifier: sZzSU3yyR6aT62L9SOOZzHe0kXxYve45Zm7fTPZBIjs= Subject key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584D4922A34A9600BC3E3A186A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:45:22 +0000 Certificate not after: Tue 27 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 1008 IP: 170.205.0.0/22 IP: 2606:e040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:22:a3:4a:96:00:bc:3e:3a:18:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 25 12:45:22 2026 GMT Not After : Jun 27 12:45:22 2028 GMT Subject: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:f5:4b:25:38:25:52:84:d5:8e:35:6c:f0: d0:5e:9a:1c:fa:d5:19:e2:55:76:3f:cd:e7:10:53: 71:3c:64:45:9f:12:d5:56:5f:e0:82:d5:1b:42:dd: b6:74:a5:be:be:f2:b4:3d:ab:17:d2:70:29:b4:8f: 4d:01:4c:30:ed:ee:e2:e4:85:0f:01:7c:77:d2:29: ac:14:9e:12:85:0d:60:3c:c4:31:ab:f9:8f:40:09: b9:94:ea:af:92:83:56:b1:96:cf:fa:48:04:33:a8: db:ef:d1:60:58:68:cc:39:c6:9b:0e:ae:91:a0:61: 6f:9e:23:31:9d:e5:87:bc:ef:ca:da:cd:f2:94:e1: 40:b3:1e:d4:e5:91:b5:78:68:c2:fa:a3:98:c2:34: 4d:61:81:ea:69:66:7b:40:a0:22:d1:c2:79:8c:5c: 9c:71:e7:14:8f:fb:6a:2d:1e:3f:94:4c:d4:a8:66: 4a:96:21:e2:7f:7a:0c:87:8a:d5:5e:91:78:2a:74: 9d:8e:83:cd:4a:e0:89:0b:e7:b4:c3:29:1f:81:a5: ce:dd:d4:4a:15:be:94:43:b8:b8:34:0f:5e:be:5b: 78:96:c8:bc:77:29:91:3e:84:d0:62:93:bd:49:6a: 1f:c7:0f:f4:92:ba:76:53:f5:86:15:ed:38:33:3e: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 170.205.0.0/22 IPv6: 2606:e040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1008 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:44:08:3b:69:e7:ad:3f:f8:0f:9a:ff:67:55:e0:bd:92:78: 31:ac:bb:df:2b:2b:a7:0f:88:fb:ae:9b:4d:38:21:36:2e:f4: d2:88:d0:31:27:d0:15:df:82:75:2b:ed:7a:18:c1:18:bd:08: bb:9c:de:4d:d1:5d:ef:03:fb:f7:e4:23:3c:ce:27:47:7c:ff: c5:f4:e1:23:4d:a1:b5:48:3a:34:61:4e:d6:41:46:3a:c8:39: 4e:e2:f0:5d:bc:f6:e3:53:7f:d2:69:c1:c2:a6:56:04:f7:22: e9:0c:4b:ea:06:9d:73:a3:39:48:c6:7c:17:63:8a:b5:58:eb: c4:58:df:02:15:86:3d:d9:e8:b2:7e:09:ef:9d:6c:81:7f:c9: a8:8c:ff:14:5a:f3:bc:a8:b8:d3:00:b1:8a:6f:03:cf:9c:9c: 53:48:fa:de:f7:16:f1:10:e2:cf:e9:07:a5:c9:8b:18:83:33: 0c:64:e5:24:72:56:c6:b2:08:5a:e7:07:f4:cf:41:8b:78:1e: 7f:d1:1e:02:ba:bc:ac:68:b0:7f:a8:8a:c8:ba:0a:3a:00:e7: 81:32:d7:fc:a6:68:52:4d:00:70:7f:ce:64:20:ab:fd:18:9d: 6d:a1:03:42:45:39:6a:24:79:73:1b:7d:96:0b:c4:30:86:9e: 7c:38:ba:80 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE1JIqNKlgC8PjoYagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDMyNTEyNDUyMloXDTI4MDYyNzEyNDUyMlowLzEtMCsGA1UEAxMk MWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQxMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1r1SyU4JVKE1Y41bPDQXpoc+tUZ4lV2P83n EFNxPGRFnxLVVl/ggtUbQt22dKW+vvK0PasX0nAptI9NAUww7e7i5IUPAXx30ims FJ4ShQ1gPMQxq/mPQAm5lOqvkoNWsZbP+kgEM6jb79FgWGjMOcabDq6RoGFvniMx neWHvO/K2s3ylOFAsx7U5ZG1eGjC+qOYwjRNYYHqaWZ7QKAi0cJ5jFyccecUj/tq LR4/lEzUqGZKliHif3oMh4rVXpF4KnSdjoPNSuCJC+e0wykfgaXO3dRKFb6UQ7i4 NA9evlt4lsi8dymRPoTQYpO9SWofxw/0krp2U/WGFe04Mz5OqwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFL6oIJwTXvz57mmYzoROuOjcg/SVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8x ZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzFmZTg4NDliLTY2Y2QtNGFmZS05 YjBiLTk3MGVhZmFkMTE3NS8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZh ZDExNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKqzQAwDQQCAAIwBwMFACYG4EAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICA/AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMkQIO2nnrT/4D5r/Z1XgvZJ4May7 3ysrpw+I+66bTTghNi700ojQMSfQFd+CdSvtehjBGL0Iu5zeTdFd7wP79+QjPM4n R3z/xfThI02htUg6NGFO1kFGOsg5TuLwXbz241N/0mnBwqZWBPci6QxL6gadc6M5 SMZ8F2OKtVjrxFjfAhWGPdnosn4J751sgX/JqIz/FFrzvKi40wCxim8Dz5ycU0j6 3vcW8RDiz+kHpcmLGIMzDGTlJHJWxrIIWucH9M9Bi3gef9EeArq8rGiwf6iKyLoK OgDngTLX/KZoUk0AcH/OZCCr/RidbaEDQkU5aiR5cxt9lgvEMIaefDi6gA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:01 2026 by rpki-client