$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer File: 2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer (raw, json) Hash identifier: ktXA+ha6jX5y21RTZW73gZhAy/KQsMwqeOQRua3waiA= Subject key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584CE78A7AC66B90B82D1E05B540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Feb 2026 13:45:23 +0000 Certificate not after: Tue 23 May 2028 12:45:23 +0000 Subordinate resources: IP: 23.158.88.0/24 IP: 2602:810:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e7:8a:7a:c6:6b:90:b8:2d:1e:05:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 18 13:45:23 2026 GMT Not After : May 23 12:45:23 2028 GMT Subject: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1d:9a:e9:82:53:3b:1a:b0:f9:34:cf:5f:f5: fe:58:48:ad:0a:e0:8d:d5:f1:fc:3d:a7:f9:07:73: 4d:23:a2:83:ed:60:a0:a6:42:96:a1:2b:a6:40:70: e8:c8:3a:23:cc:ae:14:c7:1f:37:39:51:d3:0c:ff: 2a:60:6a:7e:14:93:96:6c:87:cb:5f:97:65:61:46: ca:b4:c7:f6:33:54:4b:58:95:c2:4a:6b:be:26:46: 4c:4d:96:44:f6:a1:be:6f:3d:c5:a0:2c:01:76:d0: da:6b:8f:14:a1:ef:b7:e7:14:d5:3c:ac:06:72:d8: 2b:ed:50:5c:58:43:19:40:4f:48:11:13:73:96:31: 1a:35:d9:51:ac:53:61:2e:96:34:5f:63:c4:24:ce: 7d:77:c1:88:41:5b:48:78:c4:6f:94:0a:f7:d1:e4: 0e:f8:b4:41:72:b2:1d:94:45:2f:d0:8d:d8:9e:bd: c8:05:56:a8:26:b5:03:20:56:cc:55:1f:4a:00:6f: b0:eb:a7:7a:49:29:65:67:8b:ab:01:88:56:32:c6: ab:c6:6c:1b:41:5a:a5:bd:23:58:d1:7e:23:40:f2: 94:09:90:b9:27:c3:00:2c:6d:2d:be:77:c7:13:b9: 9d:ab:6b:ce:d1:5c:94:f0:35:b0:46:2d:9f:9c:dc: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.158.88.0/24 IPv6: 2602:810:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:83:70:a4:90:f4:bd:af:5a:bc:8b:f9:3a:46:75:1b:c9:7a: 19:f0:83:8f:15:d5:15:b9:7e:fd:25:ef:5d:01:80:8d:40:67: 75:df:5c:8c:10:7c:4e:59:2a:49:53:e5:b4:57:9e:78:c3:d9: 05:99:b8:36:37:64:64:f3:65:70:8c:03:32:2d:a1:c1:8d:b3: 3e:b4:d1:73:d9:02:79:f5:69:8a:1a:5d:61:48:df:4e:dd:c5: 06:13:98:53:f3:24:ff:a7:da:6c:f7:37:aa:b0:f3:94:65:dd: af:76:6e:9a:75:ca:30:0a:2d:4f:0e:69:52:a5:e1:76:36:cf: 00:72:7f:b3:1c:7d:12:e8:5f:81:a9:b5:31:f7:97:e2:86:40: d3:69:72:8c:f8:92:9c:db:0c:c3:56:ce:80:5b:eb:cc:f3:0a: f1:9e:14:c6:39:11:ee:62:12:bd:c9:05:55:0c:ad:b9:da:4c: ca:3c:24:46:c5:9b:30:16:9b:6d:59:9b:04:7b:6e:cb:ae:c3: de:9b:c2:98:cd:72:b8:d9:14:50:0d:14:90:53:9b:e6:b9:04: ab:b4:bd:a0:58:14:56:b7:ab:c8:84:2c:c6:0d:16:a9:e7:be: a7:a0:de:09:ca:b9:d1:0b:53:43:6c:4a:58:b2:30:4e:38:0b: 83:66:25:ba -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEzninrGa5C4LR4FtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDIxODEzNDUyM1oXDTI4MDUyMzEyNDUyM1owLzEtMCsGA1UEAxMk MmZlYTRmNmEtYmI0ZS00NmJlLWIzMjctMzMwYmY4ZjdlMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh2a6YJTOxqw+TTPX/X+WEitCuCN1fH8Paf5 B3NNI6KD7WCgpkKWoSumQHDoyDojzK4Uxx83OVHTDP8qYGp+FJOWbIfLX5dlYUbK tMf2M1RLWJXCSmu+JkZMTZZE9qG+bz3FoCwBdtDaa48Uoe+35xTVPKwGctgr7VBc WEMZQE9IERNzljEaNdlRrFNhLpY0X2PEJM59d8GIQVtIeMRvlAr30eQO+LRBcrId lEUv0I3Ynr3IBVaoJrUDIFbMVR9KAG+w66d6SSllZ4urAYhWMsarxmwbQVqlvSNY 0X4jQPKUCZC5J8MALG0tvnfHE7mdq2vO0VyU8DWwRi2fnNzxMQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFEa4vXZejQ7Jmh1iDQsOLei+TtcRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y ZmVhNGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBiZjhmN2UyMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJmZWE0ZjZhLWJiNGUtNDZiZS1i MzI3LTMzMGJmOGY3ZTIwOS8yZmVhNGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBiZjhm N2UyMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXnlgwDwQCAAIwCQMHBCYCCBBgADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA9g3CkkPS9r1q8i/k6RnUbyXoZ8IOPFdUVuX79Je9dAYCNQGd131yMEHxOWSpJ U+W0V554w9kFmbg2N2Rk82VwjAMyLaHBjbM+tNFz2QJ59WmKGl1hSN9O3cUGE5hT 8yT/p9ps9zeqsPOUZd2vdm6adcowCi1PDmlSpeF2Ns8Acn+zHH0S6F+BqbUx95fi hkDTaXKM+JKc2wzDVs6AW+vM8wrxnhTGORHuYhK9yQVVDK252kzKPCRGxZswFptt WZsEe27LrsPem8KYzXK42RRQDRSQU5vmuQSrtL2gWBRWt6vIhCzGDRap576noN4J yrnRC1NDbEpYsjBOOAuDZiW6 -----END CERTIFICATE-----Generated at Sun Mar 1 16:37:41 2026 by rpki-client