$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer File: 4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer (raw, json) Hash identifier: u46DaPeNHOcCMl9UEUalU6vZ9PYC9Gra3eRbrgGheag= Subject key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584D3DF7E665ABC301A956026920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Mar 2026 12:45:22 +0000 Certificate not after: Fri 23 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 69.24.141.0/24 IP: 209.127.233.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:f7:e6:65:ab:c3:01:a9:56:02:69:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 21 12:45:22 2026 GMT Not After : Jun 23 12:45:22 2028 GMT Subject: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:bc:6d:ca:c0:64:46:ce:0c:19:41:62:41: 88:15:5b:a3:59:ef:a8:07:6d:47:5c:1e:6a:8e:da: d6:4a:be:ed:57:99:e4:d8:ae:2a:00:de:1f:7d:57: 75:90:c2:ae:a2:41:94:ab:f5:f9:a3:b0:ce:34:ad: a4:59:98:60:23:1d:01:0e:73:45:c0:60:29:33:ee: ee:51:42:e9:6e:6f:3a:25:70:50:e8:23:23:1d:50: ef:8c:d2:d4:b4:70:61:1a:8b:23:f9:0d:b8:50:dc: f3:88:7c:0d:c6:19:56:d0:0d:df:1a:ed:1f:b7:d6: 7b:e0:6c:e9:29:8a:06:e3:b7:ad:fc:50:1f:0b:df: 37:c3:4d:7e:fb:a7:c5:59:90:33:bc:8c:2c:6c:43: 74:25:27:d1:36:b7:cb:06:94:71:5b:fa:45:45:87: 77:14:d8:a3:89:fa:a9:42:10:b6:ab:bc:20:89:12: a8:45:a5:fe:29:df:31:4f:d2:b1:7e:6d:9e:5a:e3: 3e:55:9f:06:24:32:f4:61:60:17:7f:cf:39:8c:40: 54:ad:81:c3:29:c2:12:30:59:82:40:72:bf:15:2e: 0f:63:23:94:b2:76:a5:fe:76:a5:d4:bf:e2:df:2d: f7:d8:05:76:69:51:f4:3a:eb:81:07:4e:f9:61:d7: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 69.24.141.0/24 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c4:64:78:ec:4e:60:9d:21:c3:0e:76:19:25:ea:87:52:61: 13:65:f9:dc:ae:7c:ae:90:aa:1a:c7:38:f6:aa:77:79:cc:17: ae:63:44:84:f3:45:33:32:9f:09:c7:2a:5d:10:85:a8:b0:ca: a9:13:d8:83:b4:d6:e7:a8:78:ca:03:6a:d3:07:4b:2f:1a:18: ee:bf:81:8f:c7:a4:41:fe:31:3c:15:1a:a2:ff:fb:ee:55:e4: 4b:aa:15:f9:06:21:68:ea:3c:a5:7c:89:85:c3:d5:cc:0d:d7: bc:52:e8:cd:d7:cb:89:e6:7c:d4:c2:30:3c:78:ed:3c:c6:8c: 95:60:1e:24:c5:8f:81:59:6d:37:a2:e0:a3:99:c9:22:bd:e8: 15:e4:6e:9e:bf:6f:fd:4b:9d:ea:4b:ce:a9:e3:cb:7c:9a:87: 81:cb:26:7c:f6:73:99:c0:ad:94:1a:22:06:24:d0:5f:ff:7f: a9:30:2c:2a:05:77:bf:d8:6a:a2:bc:b3:ec:82:e0:f6:bc:6d: 56:e9:ee:08:4f:e1:f4:47:f3:a0:87:06:fd:78:31:f6:c0:15: 19:e0:53:dc:d3:18:d5:d6:9c:3e:c9:3b:a2:84:a5:02:85:49: f0:5e:e6:f6:63:8a:c7:b3:68:3f:6e:88:90:34:b2:47:ff:46: ca:01:31:7a -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE099+Zlq8MBqVYCaSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDMyMTEyNDUyMloXDTI4MDYyMzEyNDUyMlowLzEtMCsGA1UEAxMk NGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2OGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIe8bcrAZEbODBlBYkGIFVujWe+oB21HXB5q jtrWSr7tV5nk2K4qAN4ffVd1kMKuokGUq/X5o7DONK2kWZhgIx0BDnNFwGApM+7u UULpbm86JXBQ6CMjHVDvjNLUtHBhGosj+Q24UNzziHwNxhlW0A3fGu0ft9Z74Gzp KYoG47et/FAfC983w01++6fFWZAzvIwsbEN0JSfRNrfLBpRxW/pFRYd3FNijifqp QhC2q7wgiRKoRaX+Kd8xT9Kxfm2eWuM+VZ8GJDL0YWAXf885jEBUrYHDKcISMFmC QHK/FS4PYyOUsnal/nal1L/i3y332AV2aVH0OuuBB075YdctQwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFDHF4J2nQhfvJ0d+jqUpjT8z8uVNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRmOGVjMjVkLTkzMmEtNGRkNC04 ZjgzLWYxZGEwNDkwNjhlYy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5 MDY4ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABFGI0DBADRf+kwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANMRkeOxOYJ0h ww52GSXqh1JhE2X53K58rpCqGsc49qp3ecwXrmNEhPNFMzKfCccqXRCFqLDKqRPY g7TW56h4ygNq0wdLLxoY7r+Bj8ekQf4xPBUaov/77lXkS6oV+QYhaOo8pXyJhcPV zA3XvFLozdfLieZ81MIwPHjtPMaMlWAeJMWPgVltN6Lgo5nJIr3oFeRunr9v/Uud 6kvOqePLfJqHgcsmfPZzmcCtlBoiBiTQX/9/qTAsKgV3v9hqoryz7ILg9rxtVunu CE/h9EfzoIcG/Xgx9sAVGeBT3NMY1dacPsk7ooSlAoVJ8F7m9mOKx7NoP26IkDSy R/9GygExeg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:20 2026 by rpki-client