$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer File: bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer (raw, json) Hash identifier: YQJwpid1g2pe4ljrL1Yk7PFZMuhURvIeAqVbAd9WOUc= Subject key identifier: 64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584DA5432C62C8A2345045AD7280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 12:45:18 +0000 Certificate not after: Sun 30 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 35891 IP: 192.83.205.0/24 IP: 199.59.120.0/22 IP: 199.254.124.0/22 IP: 208.93.248.0/21 IP: 216.211.240.0/20 IP: 2606:bf00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:43:2c:62:c8:a2:34:50:45:ad:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 27 12:45:18 2026 GMT Not After : Jul 30 12:45:18 2028 GMT Subject: CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:aa:25:91:8a:b1:95:0e:8b:6f:d3:ac:d6: 52:e4:41:8c:fc:f6:58:0f:90:ac:8e:a7:e8:1e:9a: fb:12:1f:c2:2e:be:87:0a:c7:d6:7a:4e:4a:9b:21: a6:12:68:f7:f1:33:ca:d2:60:15:5c:65:c9:1b:fc: e4:09:16:fb:45:90:2e:1f:48:3c:78:ff:b3:c4:d9: ee:c8:af:3e:8e:b9:04:99:4e:1a:50:48:bd:b5:23: 01:af:48:cc:44:b6:92:28:02:e4:74:96:18:f9:46: bd:43:a9:34:8e:73:a2:6e:20:32:47:75:65:d4:14: 89:9b:eb:1d:d4:a7:ad:08:ce:01:bf:56:8b:7a:52: af:5b:48:7b:55:51:8b:42:ca:5c:15:92:52:04:b8: e8:91:dc:1d:ad:92:88:8d:fc:a8:ce:51:ac:92:13: 1f:c2:51:d9:53:64:cf:00:14:74:05:e8:5d:50:5e: 78:5a:da:92:60:46:b6:d4:e2:75:fa:9a:a9:27:d6: f0:e9:b5:3a:66:23:04:79:f1:8d:4b:16:c6:22:bc: c7:72:2a:4b:91:0f:14:8b:a4:7e:49:14:c4:e1:11: db:c7:0b:ec:b7:f3:fb:dd:fd:bd:12:93:a0:95:72: 24:99:fe:10:7f:74:a0:8e:90:59:87:00:7f:64:03: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.83.205.0/24 199.59.120.0/22 199.254.124.0/22 208.93.248.0/21 216.211.240.0/20 IPv6: 2606:bf00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:90:e7:ee:bc:2f:d3:38:05:b3:08:61:49:b8:6b:64:d0:d8: 26:0b:ac:94:26:6e:5c:09:6b:d9:dc:3d:e8:b9:02:9c:fb:f6: 33:a8:fb:49:26:17:37:ad:a1:93:73:f6:6c:18:87:73:20:60: a1:dc:0e:94:e0:f0:bf:43:f7:d5:02:a5:b3:4c:8d:2f:d5:99: 10:13:5a:ea:b7:4d:26:63:d3:bb:48:e4:39:ba:70:92:67:18: 25:e5:f6:ed:c3:7f:02:e4:7b:24:c1:46:51:19:f7:df:01:a4: 9a:fe:21:47:72:71:e2:ab:46:ec:0d:82:f1:1a:88:0a:7b:43: 1b:a4:ed:00:9c:1c:18:65:1b:2d:26:ce:19:31:f0:6f:e1:de: 3c:d1:06:66:c1:63:68:a9:61:01:0e:42:4e:8e:f6:06:82:b5: 1d:77:29:4e:fa:22:52:7b:a2:76:70:3e:f0:fc:ee:e2:1a:b7: c0:b6:2f:a2:eb:2a:85:84:74:53:d6:b1:ca:a2:ee:19:ec:eb: 70:e7:5d:d2:95:8d:48:da:ab:f7:ce:74:34:4e:5f:3c:89:80: 20:26:31:c1:13:a9:26:8e:69:e2:dd:a2:91:a0:40:a9:6b:78: 63:04:58:2e:7b:3c:64:72:ba:c4:b8:f7:ce:46:52:fd:ea:8b: 6e:39:92:77 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWE2lQyxiyKI0UEWtcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDQyNzEyNDUxOFoXDTI4MDczMDEyNDUxOFowLzEtMCsGA1UEAxMk YmM0ZDU2MTQtZDFkNC00MmViLWExNzEtYjNkMjM0YWVmN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vSqJZGKsZUOi2/TrNZS5EGM/PZYD5Csjqfo Hpr7Eh/CLr6HCsfWek5KmyGmEmj38TPK0mAVXGXJG/zkCRb7RZAuH0g8eP+zxNnu yK8+jrkEmU4aUEi9tSMBr0jMRLaSKALkdJYY+Ua9Q6k0jnOibiAyR3Vl1BSJm+sd 1KetCM4Bv1aLelKvW0h7VVGLQspcFZJSBLjokdwdrZKIjfyozlGskhMfwlHZU2TP ABR0BehdUF54WtqSYEa21OJ1+pqpJ9bw6bU6ZiMEefGNSxbGIrzHcipLkQ8Ui6R+ SRTE4RHbxwvst/P73f29EpOglXIkmf4Qf3SgjpBZhwB/ZAONbwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFGQIl7BHsnCL9FbY3CGIt1v0LGwKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i YzRkNTYxNC1kMWQ0LTQyZWItYTE3MS1iM2QyMzRhZWY3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2JjNGQ1NjE0LWQxZDQtNDJlYi1h MTcxLWIzZDIzNGFlZjdhMy9iYzRkNTYxNC1kMWQ0LTQyZWItYTE3MS1iM2QyMzRh ZWY3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBADAU80DBALHO3gDBALH/nwDBAPQXfgDBATY0/Aw DQQCAAIwBwMFACYGvwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIwzMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAEGQ5+68L9M4BbMIYUm4a2TQ2CYLrJQmblwJa9ncPei5Apz79jOo+0kmFzet oZNz9mwYh3MgYKHcDpTg8L9D99UCpbNMjS/VmRATWuq3TSZj07tI5Dm6cJJnGCXl 9u3DfwLkeyTBRlEZ998BpJr+IUdyceKrRuwNgvEaiAp7Qxuk7QCcHBhlGy0mzhkx 8G/h3jzRBmbBY2ipYQEOQk6O9gaCtR13KU76IlJ7onZwPvD87uIat8C2L6LrKoWE dFPWscqi7hns63DnXdKVjUjaq/fOdDROXzyJgCAmMcETqSaOaeLdopGgQKlreGME WC57PGRyusS4985GUv3qi245knc= -----END CERTIFICATE-----Generated at Wed May 13 11:06:19 2026 by rpki-client