$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer File: 00fd3378-4bc3-4216-94f7-90c7efb47d80.cer (raw, json) Hash identifier: VPKm04ilPeUMzpEH7zudJ8dPnX6vf8UtReBMP6PeB90= Subject key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D40C2959B65B64FECE66AF480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 12:45:22 +0000 Certificate not after: Sat 24 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 31852 AS: 46133 IP: 2.57.164.0/22 IP: 208.103.174.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:c2:95:9b:65:b6:4f:ec:e6:6a:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 22 12:45:22 2026 GMT Not After : Jun 24 12:45:22 2028 GMT Subject: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:cd:5e:82:8d:50:c8:b3:23:15:cd:d8:60: 5d:e3:73:25:f3:c6:75:f5:d0:69:28:8f:66:a4:bc: b6:95:f4:e9:33:cd:ae:3f:78:3c:2f:09:1b:d1:ff: 5d:ca:39:7c:53:81:ea:ed:0c:cb:98:b4:bb:8a:c4: d1:14:d2:69:3c:85:70:c5:88:03:99:c1:74:4b:92: fe:97:82:7f:ce:20:34:3a:e0:47:3b:97:69:d0:c6: 4b:a1:f5:92:73:09:ec:89:2c:3c:0d:fe:84:53:1a: 09:90:a2:df:0e:da:76:a8:95:2d:81:0d:e9:63:72: 0d:d9:02:5b:98:54:7a:2d:84:b8:10:9a:e4:64:43: 1d:e7:4c:54:da:b5:29:47:d0:f7:8c:82:9a:e6:4e: 66:c3:13:51:2e:40:68:a4:a7:1f:75:d9:24:6a:a2: 19:9c:f3:af:df:26:d3:e5:16:9b:c0:b2:2d:a4:e4: ee:73:d9:25:22:62:f4:76:cf:f5:05:be:4e:13:95: 38:19:17:b2:11:81:f1:d3:d8:dc:c6:f0:6a:26:88: 3e:5d:0e:d6:24:35:4b:1d:1d:bf:f8:67:cf:b5:05: af:01:2e:00:dc:36:52:03:fb:91:54:a0:c7:c8:40: c8:2c:49:42:86:5c:27:65:e4:c3:31:8d:c8:48:df: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 2.57.164.0/22 208.103.174.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31852 46133 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d8:8e:96:ac:a7:d5:a3:3f:5f:78:bb:5f:26:21:5a:2e:f2: 33:6e:ff:da:61:3e:a3:02:e7:d6:28:c5:7c:83:e1:f9:e2:b5: bc:13:5b:39:b2:94:14:a6:05:b0:75:6a:63:56:2d:68:5b:f6: 44:c8:7d:fc:3c:2a:a8:24:d7:80:d5:4f:2c:62:a5:33:ec:25: df:00:51:cd:d2:41:e2:27:5b:0d:18:8b:78:13:16:3e:d6:d1: 37:1d:36:db:3c:44:85:f3:db:f6:38:72:c1:06:61:bc:3c:66: ad:ec:bd:20:57:03:78:e2:dc:3d:e9:d1:66:0d:04:af:86:11: 64:ed:fd:3b:d2:91:ab:0d:8a:b8:23:84:b9:e4:65:30:9f:37: 44:56:d6:1d:7a:0b:be:f5:f4:be:db:33:71:b0:50:8f:da:e3: c0:f4:c5:df:69:1a:80:4e:2c:23:c9:2c:ee:49:5d:6d:0a:7f: 1e:db:68:23:17:69:47:37:0c:61:fb:66:9b:1f:07:94:f8:af: 4b:3f:54:d0:9d:1a:07:8d:87:7a:d8:8e:a6:6c:96:ab:e1:d9: fc:7b:e2:d9:dd:4f:7b:ea:76:66:a6:14:c3:4c:12:a3:5a:48: cf:d8:df:a5:1c:de:95:23:96:c6:3a:c2:5c:9b:75:ab:73:29: c9:c4:56:ee -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE1AwpWbZbZP7OZq9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyMjEyNDUyMloXDTI4MDYyNDEyNDUyMlowLzEtMCsGA1UEAxMk MDBmZDMzNzgtNGJjMy00MjE2LTk0ZjctOTBjN2VmYjQ3ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPLNXoKNUMizIxXN2GBd43Ml88Z19dBpKI9m pLy2lfTpM82uP3g8Lwkb0f9dyjl8U4Hq7QzLmLS7isTRFNJpPIVwxYgDmcF0S5L+ l4J/ziA0OuBHO5dp0MZLofWScwnsiSw8Df6EUxoJkKLfDtp2qJUtgQ3pY3IN2QJb mFR6LYS4EJrkZEMd50xU2rUpR9D3jIKa5k5mwxNRLkBopKcfddkkaqIZnPOv3ybT 5RabwLItpOTuc9klImL0ds/1Bb5OE5U4GReyEYHx09jcxvBqJog+XQ7WJDVLHR2/ +GfPtQWvAS4A3DZSA/uRVKDHyEDILElChlwnZeTDMY3ISN99nwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFE3pn8mDfoNWEzmvkZaakTW9CCJPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w MGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZiNDdkODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzAwZmQzMzc4LTRiYzMtNDIxNi05 NGY3LTkwYzdlZmI0N2Q4MC8wMGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZi NDdkODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAICOaQDBADQZ64wHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICfGwCAwC0NTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/2I6WrKfVoz9feLtfJiFaLvIzbv/aYT6j AufWKMV8g+H54rW8E1s5spQUpgWwdWpjVi1oW/ZEyH38PCqoJNeA1U8sYqUz7CXf AFHN0kHiJ1sNGIt4ExY+1tE3HTbbPESF89v2OHLBBmG8PGat7L0gVwN44tw96dFm DQSvhhFk7f070pGrDYq4I4S55GUwnzdEVtYdegu+9fS+2zNxsFCP2uPA9MXfaRqA TiwjySzuSV1tCn8e22gjF2lHNwxh+2abHweU+K9LP1TQnRoHjYd62I6mbJar4dn8 e+LZ3U976nZmphTDTBKjWkjP2N+lHN6VI5bGOsJcm3WrcynJxFbu -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:30 2026 by rpki-client