$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer File: 09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer (raw, json) Hash identifier: qO73ZUHzCAqJmcZYBI7gg4yo3kZ3I+awkeBCSGnyBis= Subject key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584CB27F7BB27A748EE8F8BD3FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:45:23 +0000 Certificate not after: Thu 04 May 2028 12:45:23 +0000 Subordinate resources: IP: 209.127.216.0/24 IP: 209.188.109.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:7f:7b:b2:7a:74:8e:e8:f8:bd:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 30 13:45:23 2026 GMT Not After : May 4 12:45:23 2028 GMT Subject: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:5f:a3:be:40:09:d3:ca:4f:93:8d:19:ba: 9a:38:a6:08:78:47:38:17:a8:10:c2:05:16:c3:15: fb:6c:57:bd:fc:48:21:5b:8f:9b:d3:99:22:8a:a6: 88:f6:af:1c:90:47:f8:de:f0:40:d6:c4:00:05:bb: 54:63:74:d8:61:55:d6:c4:1b:d8:59:94:c8:67:db: 1f:21:36:08:ff:b8:52:a6:f6:ce:87:ae:70:86:c3: 8e:0c:61:bc:b2:d0:16:af:66:6c:ee:27:f7:9f:37: 56:83:b8:23:17:5e:8b:d9:96:1d:20:89:cf:a9:5e: 30:b0:3a:86:4c:a3:89:69:94:88:87:3e:b8:46:e6: 81:6b:25:6d:a3:a7:3f:f2:0a:1a:f7:5d:8f:2d:4d: be:f9:8e:99:c1:a5:7f:dc:9e:4b:60:77:4b:89:29: ff:eb:48:68:f8:1a:30:18:a1:9f:1f:16:c8:37:6f: ba:be:38:c3:df:51:39:e2:ed:39:56:fe:f5:46:53: 71:de:f5:31:7c:f4:cd:23:d7:f7:25:10:47:01:4e: 87:4e:fa:5d:9c:60:07:5b:35:06:37:2d:97:0c:44: 5d:4a:43:6c:b7:90:3b:0d:c5:34:e7:8f:6b:85:be: 01:49:74:b2:58:b4:4f:50:3e:55:1b:dc:be:5e:b4: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 209.188.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:09:17:2f:a0:3c:e4:47:2a:a6:bd:67:42:c4:17:6f:f5:05: 8d:e0:e7:0f:78:15:fe:f3:8e:8d:69:ae:51:b3:e5:77:a8:7b: 99:e0:7d:97:d3:26:d4:ea:d1:61:e5:0d:61:3c:ec:47:a4:1c: 35:a8:94:3d:71:d4:09:d4:59:dd:6c:9d:eb:92:ac:7c:f7:36: 42:b1:36:f2:ae:5a:35:68:4f:55:4a:36:ff:05:8d:92:3b:a8: 92:6e:5a:f4:b7:3f:5c:23:f3:c4:7d:f1:68:f0:6b:ae:99:ac: 9f:50:72:1e:04:5e:50:5e:e7:26:3e:f9:e5:91:25:5d:e7:ab: 4b:a4:ef:04:d0:6c:8e:41:13:24:43:e0:e2:22:0d:6c:99:8b: 6a:32:d3:49:61:36:30:e3:25:5a:34:44:12:95:e7:41:58:6c: a9:c8:00:84:ff:24:63:5f:ae:ec:97:b5:a3:e1:35:30:ae:52: b7:ae:91:14:fc:d7:94:88:1f:ec:d6:23:00:6f:8c:dd:8a:62: 6c:06:10:9a:f3:d1:6a:49:e3:f4:43:10:bb:c5:f9:82:d1:4e: e4:35:c6:3c:09:51:c3:f9:4d:3d:ba:77:0b:ac:b9:54:c8:d0: be:cd:7f:24:1e:7b:b7:1f:51:d0:9b:01:3a:83:ed:b7:bf:f7: b2:d2:79:02 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEyyf3uyenSO6Pi9P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDEzMDEzNDUyM1oXDTI4MDUwNDEyNDUyM1owLzEtMCsGA1UEAxMk MDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhjM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPFfo75ACdPKT5ONGbqaOKYIeEc4F6gQwgUW wxX7bFe9/EghW4+b05kiiqaI9q8ckEf43vBA1sQABbtUY3TYYVXWxBvYWZTIZ9sf ITYI/7hSpvbOh65whsOODGG8stAWr2Zs7if3nzdWg7gjF16L2ZYdIInPqV4wsDqG TKOJaZSIhz64RuaBayVto6c/8goa912PLU2++Y6ZwaV/3J5LYHdLiSn/60ho+Bow GKGfHxbIN2+6vjjD31E54u05Vv71RlNx3vUxfPTNI9f3JRBHAU6HTvpdnGAHWzUG Ny2XDERdSkNst5A7DcU0549rhb4BSXSyWLRPUD5VG9y+XrSY7QIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCpSG3Xdqe4+kezLb6fC6z3qvDhLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w OWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzA5ZmU0NmIwLTcwMzQtNGQ3Yi1h NzQ2LTdhNzBmNzg4YzNmNS8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4 OGMzZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADRf9gDBADRvG0wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQAkXL6A85Ecq pr1nQsQXb/UFjeDnD3gV/vOOjWmuUbPld6h7meB9l9Mm1OrRYeUNYTzsR6QcNaiU PXHUCdRZ3Wyd65KsfPc2QrE28q5aNWhPVUo2/wWNkjuokm5a9Lc/XCPzxH3xaPBr rpmsn1ByHgReUF7nJj755ZElXeerS6TvBNBsjkETJEPg4iINbJmLajLTSWE2MOMl WjREEpXnQVhsqcgAhP8kY1+u7Je1o+E1MK5St66RFPzXlIgf7NYjAG+M3YpibAYQ mvPRaknj9EMQu8X5gtFO5DXGPAlRw/lNPbp3C6y5VMjQvs1/JB57tx9R0JsBOoPt t7/3stJ5Ag== -----END CERTIFICATE-----Generated at Sun Mar 1 16:39:25 2026 by rpki-client