$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer File: 0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer (raw, json) Hash identifier: of2lzLYk6ZfwhBfBE1pOd8D+5TZ3dWfRpO2epfy94Lk= Subject key identifier: 97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584F304AEA457E1295B3748175F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Sep 2026 00:45:12 +0000 Certificate not after: Tue 19 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 401773 IP: 199.5.222.0/24 IP: 204.147.144.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:4a:ea:45:7e:12:95:b3:74:81:75:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 16 00:45:12 2026 GMT Not After : Dec 19 01:45:12 2028 GMT Subject: CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:26:3f:84:4f:13:bc:cc:19:9b:ce:10:12: fc:f6:63:c2:f3:e2:0c:1a:c3:d9:ac:af:47:47:f2: a2:c2:04:97:60:51:b8:e6:37:b6:70:8f:98:92:02: 6d:51:b1:df:00:84:07:fe:84:f1:2a:c6:2e:88:cf: 73:36:a5:84:8e:e5:c1:6d:7a:9b:ae:b3:4a:f1:62: fa:61:3a:b3:f1:89:94:e4:30:0d:75:f4:13:2b:64: be:a7:ff:fb:63:e1:64:ce:75:a3:4f:0e:e6:28:61: 51:24:91:aa:f1:f9:ca:7b:81:0f:f6:a9:2f:74:6d: 6a:a4:29:6d:48:33:24:68:c1:49:ca:18:31:f2:71: 73:43:76:91:f1:cb:1f:0a:a6:85:4d:09:4e:9b:d1: 5a:d8:2a:cf:85:37:5b:45:ce:d9:40:67:71:d8:cc: 49:69:17:5a:a1:22:c4:7b:0c:b6:2e:24:b8:ca:d8: 77:e5:ac:38:72:79:bf:c1:80:77:e6:de:24:8a:dd: cb:87:c7:5c:13:c3:b8:c1:bd:9e:06:8b:a3:74:87: 73:1c:74:4b:a9:06:59:a3:7f:08:e5:c8:87:37:e8: 7c:1e:12:db:b0:e7:81:45:3f:96:96:3e:34:22:a5: 76:00:75:8c:7b:09:47:0a:16:21:3b:66:7a:ad:28: fd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 199.5.222.0/24 204.147.144.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401773 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e1:b4:b3:82:bd:b2:6b:56:b5:d5:b2:98:5f:f4:b0:4a:27: f0:0d:33:ef:c6:fa:65:c5:53:5a:79:fe:7c:fd:cd:7b:b7:51: ef:7f:87:d7:3e:23:29:6e:86:28:e2:45:b5:ab:28:e0:3f:c8: 77:36:ee:48:54:36:f9:7e:a5:3e:72:00:98:56:e8:b7:30:d4: 72:bc:58:9b:b2:68:70:ae:58:d6:36:14:3a:79:8d:b1:b4:3d: 62:8b:0b:60:46:db:a1:ed:1f:56:7a:c4:e2:c8:80:02:e5:72: 5f:2b:47:c6:7f:c4:27:cf:0c:99:9d:29:2b:c5:64:60:2e:fb: ed:1d:69:e1:c6:6b:91:98:ec:33:a8:2b:60:0c:d5:2a:2d:d3: 3c:0e:a8:28:15:f7:52:61:36:b5:0d:e7:2e:19:69:96:00:f3: a9:6a:c7:5b:6a:43:26:1a:ce:12:9e:b8:bf:58:b9:2b:a4:f3: 17:85:6c:5b:aa:21:fa:74:4c:a5:7b:bc:c7:99:11:a4:e4:63: 04:28:d9:30:9b:b4:ad:96:f6:cc:9a:39:1d:0c:06:48:a9:72: 6a:03:d6:5d:85:08:89:46:37:9f:54:ff:49:fc:01:97:fb:35: 7c:66:dd:bc:18:67:79:74:1f:c3:1f:a8:e4:ec:bd:64:d8:14: a8:ef:ea:23 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE8wSupFfhKVs3SBdfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDkxNjAwNDUxMloXDTI4MTIxOTAxNDUxMlowLzEtMCsGA1UEAxMk MGY3M2FkOGQtY2I1YS00NmE4LWE1ZjMtOGY5MDE0ZmRlNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MYmP4RPE7zMGZvOEBL89mPC8+IMGsPZrK9H R/KiwgSXYFG45je2cI+YkgJtUbHfAIQH/oTxKsYuiM9zNqWEjuXBbXqbrrNK8WL6 YTqz8YmU5DANdfQTK2S+p//7Y+FkznWjTw7mKGFRJJGq8fnKe4EP9qkvdG1qpClt SDMkaMFJyhgx8nFzQ3aR8csfCqaFTQlOm9Fa2CrPhTdbRc7ZQGdx2MxJaRdaoSLE ewy2LiS4yth35aw4cnm/wYB35t4kit3Lh8dcE8O4wb2eBoujdIdzHHRLqQZZo38I 5ciHN+h8HhLbsOeBRT+Wlj40IqV2AHWMewlHChYhO2Z6rSj9IwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFJfI/K24hcTx4JWa1d2OGzlWy8BiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w ZjczYWQ4ZC1jYjVhLTQ2YTgtYTVmMy04ZjkwMTRmZGU1OGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBmNzNhZDhkLWNiNWEtNDZhOC1h NWYzLThmOTAxNGZkZTU4Yy8wZjczYWQ4ZC1jYjVhLTQ2YTgtYTVmMy04ZjkwMTRm ZGU1OGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHBd4DBATMk5AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiFtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADPhtLOCvbJrVrXVsphf9LBKJ/ANM+/G+mXFU1p5 /nz9zXu3Ue9/h9c+IyluhijiRbWrKOA/yHc27khUNvl+pT5yAJhW6Lcw1HK8WJuy aHCuWNY2FDp5jbG0PWKLC2BG26HtH1Z6xOLIgALlcl8rR8Z/xCfPDJmdKSvFZGAu ++0daeHGa5GY7DOoK2AM1Sot0zwOqCgV91JhNrUN5y4ZaZYA86lqx1tqQyYazhKe uL9YuSuk8xeFbFuqIfp0TKV7vMeZEaTkYwQo2TCbtK2W9syaOR0MBkipcmoD1l2F CIlGN59U/0n8AZf7NXxm3bwYZ3l0H8MfqOTsvWTYFKjv6iM= -----END CERTIFICATE-----Generated at Thu Sep 24 09:27:59 2026 by rpki-client