$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer File: 9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer (raw, json) Hash identifier: Q9Kd8qLm/Odx75SKKAgAx4laj2IZsncgXcpHYrv8F+8= Subject key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584F4805BA71F345CEF658F68280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 12:45:11 +0000 Certificate not after: Wed 27 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 13937 AS: 14918 AS: 19662 AS: 25749 AS: 40611 IP: 65.38.32.0/20 IP: 192.48.234.0/24 IP: 198.162.16.0/22 IP: 199.60.19.0/24 IP: 199.60.230.0/23 IP: 204.174.80.0 -- 204.174.99.255 IP: 204.239.40.0 -- 204.239.42.255 IP: 207.200.128.0/19 IP: 208.87.52.0/22 IP: 208.99.128.0/19 IP: 216.86.96.0/19 IP: 216.99.32.0/20 IP: 216.113.192.0/19 IP: 216.210.96.0/20 IP: 2605:1000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:05:ba:71:f3:45:ce:f6:58:f6:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 24 12:45:11 2026 GMT Not After : Dec 27 13:45:11 2028 GMT Subject: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:12:90:ea:e2:23:5a:69:95:c7:71:62:4f: 86:97:05:02:34:4c:88:08:f5:98:95:0a:d3:cf:1a: 05:1f:00:50:e9:a2:0b:d0:71:85:a8:38:35:14:4e: 93:7d:e0:af:bc:78:32:eb:f7:3b:65:a6:83:6f:a5: df:a9:fa:11:af:c1:e9:51:6e:25:cf:15:91:63:6e: 98:5f:6d:f7:a1:99:4d:2e:8d:d0:a1:af:94:37:a4: 4b:46:4a:bc:31:24:88:d7:dd:e4:55:02:af:68:6e: ba:1f:bc:7d:69:7c:19:22:3a:7f:51:a2:d2:dc:39: 7a:46:5e:1f:53:cc:03:00:f3:39:84:40:6c:6a:19: 18:95:8b:d3:6a:92:ed:bb:a2:c0:40:63:b2:bd:db: 47:b5:93:43:ec:2b:84:03:a1:f2:4b:e0:f0:10:b4: 57:7e:74:1d:57:97:47:54:91:6a:d4:15:2f:1f:a0: c7:35:20:aa:66:a1:1d:1f:8c:db:bd:20:34:76:da: 25:b4:a0:c9:9d:31:ec:56:e5:6d:a1:7b:5b:4e:53: 2f:b7:df:f4:5f:f9:f2:89:e7:d8:b2:d3:aa:b4:2a: a1:d2:45:9f:09:84:07:f1:e5:65:fb:2e:6d:11:2b: 5c:7f:b9:1e:df:90:64:f9:69:51:76:dd:78:6d:02: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 65.38.32.0/20 192.48.234.0/24 198.162.16.0/22 199.60.19.0/24 199.60.230.0/23 204.174.80.0-204.174.99.255 204.239.40.0-204.239.42.255 207.200.128.0/19 208.87.52.0/22 208.99.128.0/19 216.86.96.0/19 216.99.32.0/20 216.113.192.0/19 216.210.96.0/20 IPv6: 2605:1000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13937 14918 19662 25749 40611 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:df:1f:c6:ca:6f:ac:b7:05:7f:63:a1:b3:70:62:39:7f:27: f6:96:72:e3:4f:a1:34:a5:85:99:24:69:b6:a1:71:ec:8c:51: b7:89:0e:d8:72:91:ff:c2:28:83:3a:ed:eb:75:42:d4:b0:be: ba:ba:19:e7:5f:58:1d:06:d6:2e:ac:32:20:e3:09:40:fe:a9: 44:07:7c:b9:ae:dc:45:58:93:b2:05:05:fd:4d:ee:da:79:3e: 20:94:31:ec:05:43:55:a8:8b:62:b9:70:17:ed:1c:12:94:06: c6:7e:08:dd:45:e3:ef:96:a6:58:58:5a:99:3d:25:90:a9:7e: c3:77:fe:f9:8e:4a:33:e1:2f:60:ff:97:d6:07:be:b6:fd:03: b4:eb:99:43:e1:1e:60:e9:37:f4:1e:73:e8:ba:db:99:e7:98: e7:e6:6f:0c:0c:b7:2e:df:ca:77:35:1f:1a:e4:08:32:26:e5: d5:4e:f1:49:d3:61:d5:d5:66:89:5f:10:50:f2:d7:b1:81:10: 34:8d:06:07:b9:19:8b:41:75:e3:2f:f4:12:35:08:ad:fc:d2: d4:94:53:9f:46:87:eb:e6:c7:b2:39:1e:b4:b0:18:88:0a:b1: a6:12:41:72:71:66:2a:58:0b:82:75:65:43:dd:f3:19:f4:9e: 9f:7e:5f:bf -----BEGIN CERTIFICATE----- MIIHhzCCBm+gAwIBAgIUAQ0Mn0MoWE9IBbpx80XO9lj2goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDkyNDEyNDUxMVoXDTI4MTIyNzEzNDUxMVowLzEtMCsGA1UEAxMk OTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoYSkOriI1pplcdxYk+GlwUCNEyICPWYlQrT zxoFHwBQ6aIL0HGFqDg1FE6TfeCvvHgy6/c7ZaaDb6XfqfoRr8HpUW4lzxWRY26Y X233oZlNLo3Qoa+UN6RLRkq8MSSI193kVQKvaG66H7x9aXwZIjp/UaLS3Dl6Rl4f U8wDAPM5hEBsahkYlYvTapLtu6LAQGOyvdtHtZND7CuEA6HyS+DwELRXfnQdV5dH VJFq1BUvH6DHNSCqZqEdH4zbvSA0dtoltKDJnTHsVuVtoXtbTlMvt9/0X/nyiefY stOqtCqh0kWfCYQH8eVl+y5tEStcf7ke35Bk+WlRdt14bQLdhwIDAQABo4IEmTCC BJUwHQYDVR0OBBYEFBehLC/T4+o755/9OGXv+TWl2GGpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85 MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzkzMDk0OThlLThiZWUtNGRiMy1i NGVmLTVmZDZmMzU3NmViMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1 NzZlYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgYwGCCsGAQUF BwEHAQH/BH0wezBqBAIAATBkAwQEQSYgAwQAwDDqAwQCxqIQAwQAxzwTAwQBxzzm MAwDBATMrlADBALMrmAwDAMEA8zvKAMEAMzvKgMEBc/IgAMEAtBXNAMEBdBjgAME BdhWYAMEBNhjIAMEBdhxwAMEBNjSYDANBAIAAjAHAwUAJgUQADAqBggrBgEFBQcB CAEB/wQbMBmgFzAVAgI2cQICOkYCAkzOAgJklQIDAJ6jMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACXfH8bK b6y3BX9jobNwYjl/J/aWcuNPoTSlhZkkabahceyMUbeJDthykf/CKIM67et1QtSw vrq6GedfWB0G1i6sMiDjCUD+qUQHfLmu3EVYk7IFBf1N7tp5PiCUMewFQ1Woi2K5 cBftHBKUBsZ+CN1F4++WplhYWpk9JZCpfsN3/vmOSjPhL2D/l9YHvrb9A7TrmUPh HmDpN/Qec+i625nnmOfmbwwMty7fync1HxrkCDIm5dVO8UnTYdXVZolfEFDy17GB EDSNBge5GYtBdeMv9BI1CK380tSUU59Gh+vmx7I5HrSwGIgKsaYSQXJxZipYC4J1 ZUPd8xn0np9+X78= -----END CERTIFICATE-----Generated at Sun Oct 4 06:47:21 2026 by rpki-client