$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer File: 2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer (raw, json) Hash identifier: sUyqPxFrRSaHak3KPS3lO/LgMz2O7UNgRqBiOgchKXI= Subject key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584D571803A9FF919716CF908F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Mar 2026 12:45:17 +0000 Certificate not after: Sun 02 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 396000 IP: 138.128.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:18:03:a9:ff:91:97:16:cf:90:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 30 12:45:17 2026 GMT Not After : Jul 2 12:45:17 2028 GMT Subject: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:e6:9c:94:38:cc:9e:99:85:b2:8d:42:a6: 81:0e:a2:ba:7c:33:c4:e1:8e:48:10:37:b3:fa:e7: 95:a9:00:54:6f:82:a0:c2:55:49:4a:be:fa:fc:d2: 80:28:06:61:88:c2:e4:77:01:cf:06:aa:37:71:23: ea:3a:77:dc:b7:c9:f2:44:46:97:1a:83:1f:6c:aa: 2a:b6:6e:6b:c4:7f:e1:3b:ac:4a:20:c8:cf:ee:74: 36:9f:8e:57:17:2a:fe:c3:5b:13:91:6c:b2:5b:67: 36:f6:e9:6f:d3:5b:0f:1c:4d:22:72:2a:24:33:38: fb:a6:27:58:2c:27:1e:64:a7:32:be:9b:5c:6b:b2: 0f:6a:67:ec:c7:ab:dc:6f:5a:b4:3d:10:1b:59:82: 57:ec:96:54:59:d3:44:e8:ee:18:87:1b:30:a0:de: 0a:65:15:46:07:a3:38:d1:cd:b6:8d:ed:87:e4:8a: ec:07:2c:86:37:ed:f9:df:e7:7b:96:c6:41:b8:5b: 67:f7:00:ad:c4:b9:9f:4d:78:0c:a8:fa:80:93:b8: 44:7c:9e:05:8e:61:95:d8:0c:44:2c:aa:6b:69:b1: 14:fd:1f:72:27:bc:e5:f6:39:1e:03:72:b9:f0:3d: 2e:18:ae:10:f0:24:b1:b6:16:35:9e:05:44:ca:a3: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 138.128.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396000 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:10:7b:7f:3e:10:c8:28:5a:09:a1:6b:0e:17:c2:a7:2c:81: ff:5a:a3:07:5a:95:72:f2:97:1e:e9:a4:42:ea:86:61:fd:b4: 67:f6:13:ca:24:ca:e7:cd:97:51:0b:80:c3:2e:63:4f:e8:87: f8:63:87:54:b8:2a:b1:9a:97:b6:58:d8:14:8c:3b:78:30:ae: 51:34:52:3c:c6:87:1b:ad:44:99:a6:9b:ae:ed:78:4c:d8:b3: 4c:cf:e4:53:c8:00:d9:b1:df:0e:35:11:3f:94:a4:67:34:8b: 0c:6f:2b:f1:69:b5:fe:fa:8b:ff:df:96:17:99:74:ce:46:f5: 06:f4:eb:95:46:45:97:a6:4f:8f:49:37:01:ab:ce:d1:ef:45: 30:1e:6e:a4:07:a1:32:e3:36:7d:2a:ed:af:ad:c2:10:5b:7e: b1:2b:49:99:fd:54:70:05:3a:9b:41:84:89:51:03:99:75:16: 93:c3:2b:a2:07:62:7b:2d:58:52:ac:2c:a1:de:a5:18:77:7e: ec:43:9c:56:6b:32:d5:6e:9d:46:0f:98:e9:bc:31:d4:88:e6: 95:f2:53:77:91:e8:51:7d:70:c7:99:fb:95:c3:05:39:0f:52: 89:d9:e7:ad:2f:cc:17:9f:3d:ae:23:1c:6e:e9:3d:da:35:cc: 7d:41:3f:46 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1XGAOp/5GXFs+Qj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDMzMDEyNDUxN1oXDTI4MDcwMjEyNDUxN1owLzEtMCsGA1UEAxMk MmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjllOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIDmnJQ4zJ6ZhbKNQqaBDqK6fDPE4Y5IEDez +ueVqQBUb4KgwlVJSr76/NKAKAZhiMLkdwHPBqo3cSPqOnfct8nyREaXGoMfbKoq tm5rxH/hO6xKIMjP7nQ2n45XFyr+w1sTkWyyW2c29ulv01sPHE0iciokMzj7pidY LCceZKcyvptca7IPamfsx6vcb1q0PRAbWYJX7JZUWdNE6O4YhxswoN4KZRVGB6M4 0c22je2H5IrsByyGN+353+d7lsZBuFtn9wCtxLmfTXgMqPqAk7hEfJ4FjmGV2AxE LKprabEU/R9yJ7zl9jkeA3K58D0uGK4Q8CSxthY1ngVEyqO5AwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLXm6ARiTPFnHgaJBGbR5iUtu4KtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y YjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJiM2JjYjQ3LTVmMTgtNDZkMy05 YjUwLTYzZDVjYmI5ZTlkZC8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2Ji OWU5ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKgPgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABYQe38+EMgoWgmhaw4Xwqcsgf9aowdalXLylx7ppELqhmH9 tGf2E8okyufNl1ELgMMuY0/oh/hjh1S4KrGal7ZY2BSMO3gwrlE0UjzGhxutRJmm m67teEzYs0zP5FPIANmx3w41ET+UpGc0iwxvK/Fptf76i//flheZdM5G9Qb065VG RZemT49JNwGrztHvRTAebqQHoTLjNn0q7a+twhBbfrErSZn9VHAFOptBhIlRA5l1 FpPDK6IHYnstWFKsLKHepRh3fuxDnFZrMtVunUYPmOm8MdSI5pXyU3eR6FF9cMeZ +5XDBTkPUonZ560vzBefPa4jHG7pPdo1zH1BP0Y= -----END CERTIFICATE-----Generated at Fri Apr 17 07:34:12 2026 by rpki-client