$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer File: 273599ef-5b0b-4798-9f47-811d4c120cb0.cer (raw, json) Hash identifier: WazmhXMKCamSH7mPtk7ZvXLWCwqqbcKEVYsr2o+KA7s= Subject key identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3F5D3CC8526B6C8AD5697180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 00:45:21 +0000 Certificate not after: Sat 24 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 30463 IP: 23.130.228.0/24 IP: 2602:f76c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:5d:3c:c8:52:6b:6c:8a:d5:69:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 22 00:45:21 2026 GMT Not After : Jun 24 00:45:21 2028 GMT Subject: CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:99:a7:91:14:d8:46:b4:bc:60:95:39:68: ab:cb:47:52:ab:b8:cf:b8:b0:33:fb:04:58:0a:72: b5:f8:14:3f:0b:16:1b:66:8b:bd:09:aa:8c:a8:c2: 85:6c:4d:99:9c:60:0e:a0:2c:51:72:f1:ce:fd:20: f6:4a:f7:23:04:5f:36:e8:cd:08:20:9e:3a:1a:fe: bb:10:55:6b:0b:a3:a5:16:43:ed:1f:67:fe:d3:23: a7:d5:ec:7f:51:43:f1:54:2b:66:2d:cb:b6:b1:bc: 15:f3:b1:20:b8:ba:1b:84:f3:57:16:40:26:af:ed: 0f:3a:bd:90:91:63:93:aa:f1:73:0a:43:99:bc:a8: ff:81:f9:2b:64:98:3c:ce:57:5a:1f:15:c3:8f:db: eb:f1:48:26:6d:ab:65:36:26:83:97:47:f1:cd:fa: 7c:4c:78:31:74:d3:a8:36:71:63:c2:98:13:00:cb: c9:62:aa:d7:36:b5:a2:5b:5e:c7:d4:ea:06:d8:52: ce:89:34:3e:a7:5c:94:55:d5:a1:5f:d5:07:ce:22: e0:e4:37:9b:4a:0b:e4:6b:da:30:53:4e:bf:39:7f: 4b:db:5e:fc:93:35:1b:48:0e:d7:fe:d2:a3:0c:61: 36:2b:df:84:8b:2c:a6:82:3f:34:27:41:55:59:9f: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.228.0/24 IPv6: 2602:f76c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30463 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:95:ba:ce:3d:6c:91:6d:6d:54:83:49:c1:7c:c9:18:55:f1: ba:e7:15:1e:af:50:7f:80:6d:b8:bc:f3:58:5d:79:57:56:1f: 8f:c6:62:14:91:e3:7f:19:28:14:a7:25:ca:08:a1:fb:37:16: 1c:15:0b:7b:cc:19:c2:30:d9:26:2b:bc:91:e8:a3:90:f8:31: 0b:80:87:55:39:a3:98:86:ec:8e:4a:ee:9e:ae:ae:c1:dc:81: a3:b6:a9:f9:31:81:d8:70:8f:18:33:c0:b0:ed:59:01:c1:bb: ce:51:39:5e:bd:dd:69:b0:16:17:b9:fc:cb:67:18:9c:dc:73: 0e:d6:55:20:7b:7e:8a:3b:7c:49:ec:a6:87:63:e1:35:1f:6f: 6c:ce:bd:19:5f:df:fd:8e:3f:a2:70:eb:aa:82:e4:9b:b4:38: 22:a8:65:e6:3e:02:a3:53:c4:87:c3:0f:d9:91:66:a8:b6:f8: e2:11:ca:b0:e6:63:aa:85:0d:d9:3b:10:ad:ac:e9:b6:fd:f0: 72:d2:5d:85:5f:ea:8d:56:9d:52:5f:2a:bc:aa:78:7c:9b:58: 71:7d:8d:56:4f:be:e8:fc:08:ac:39:ed:d5:d5:b8:70:e8:c1: 20:28:98:70:19:e8:b2:4c:55:1a:0f:1d:4f:10:d0:39:a4:d5: 37:a2:7d:7f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0/XTzIUmtsitVpcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMjAwNDUyMVoXDTI4MDYyNDAwNDUyMVowLzEtMCsGA1UEAxMk MjczNTk5ZWYtNWIwYi00Nzk4LTlmNDctODExZDRjMTIwY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eiZp5EU2Ea0vGCVOWiry0dSq7jPuLAz+wRY CnK1+BQ/CxYbZou9CaqMqMKFbE2ZnGAOoCxRcvHO/SD2SvcjBF826M0IIJ46Gv67 EFVrC6OlFkPtH2f+0yOn1ex/UUPxVCtmLcu2sbwV87EguLobhPNXFkAmr+0POr2Q kWOTqvFzCkOZvKj/gfkrZJg8zldaHxXDj9vr8UgmbatlNiaDl0fxzfp8THgxdNOo NnFjwpgTAMvJYqrXNrWiW17H1OoG2FLOiTQ+p1yUVdWhX9UHziLg5DebSgvka9ow U06/OX9L2178kzUbSA7X/tKjDGE2K9+Eiyymgj80J0FVWZ+2OQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKzX1ajS8GJ10DWokqxBkt8TNGGDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y NzM1OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFkNGMxMjBjYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI3MzU5OWVmLTViMGItNDc5OC05 ZjQ3LTgxMWQ0YzEyMGNiMC8yNzM1OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFkNGMx MjBjYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXguQwDgQCAAIwCAMGBCYC92wAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnb/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGyVus49bJFtbVSDScF8yRhV8brn FR6vUH+Abbi881hdeVdWH4/GYhSR438ZKBSnJcoIofs3FhwVC3vMGcIw2SYrvJHo o5D4MQuAh1U5o5iG7I5K7p6ursHcgaO2qfkxgdhwjxgzwLDtWQHBu85ROV693Wmw Fhe5/MtnGJzccw7WVSB7foo7fEnspodj4TUfb2zOvRlf3/2OP6Jw66qC5Ju0OCKo ZeY+AqNTxIfDD9mRZqi2+OIRyrDmY6qFDdk7EK2s6bb98HLSXYVf6o1WnVJfKryq eHybWHF9jVZPvuj8CKw57dXVuHDowSAomHAZ6LJMVRoPHU8Q0Dmk1TeifX8= -----END CERTIFICATE-----Generated at Sat Mar 28 10:38:15 2026 by rpki-client