$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer File: 4bfec383-87a2-4429-93ae-a407c690a4e0.cer (raw, json) Hash identifier: IwiYnhtNsgIr0i2sPmsgkNifEAwx9sGk0cVU6u+Kk34= Subject key identifier: 9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584C96AF6A784387D689920850C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Jan 2026 14:39:20 +0000 Certificate not after: Thu 02 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 46138 IP: 205.209.9.0/24 IP: 2602:fbcc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:af:6a:78:43:87:d6:89:92:08:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 20 14:39:20 2026 GMT Not After : Dec 2 01:45:25 2027 GMT Subject: CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:0f:77:ac:26:88:5c:10:73:ab:0a:e7:01: 09:df:43:94:e6:d3:5d:62:e0:74:dd:9d:9f:e4:f2: e2:78:82:db:5e:31:cb:0e:11:db:74:c7:5c:23:2c: 09:5f:81:89:88:4f:a5:3c:c1:5f:07:31:a7:fb:96: 02:cd:68:57:8c:67:c9:c8:74:74:48:80:8d:e9:d4: 5c:2c:58:a1:b1:2a:41:27:17:d9:3d:ae:e9:3a:df: 4a:39:51:15:80:c3:01:d0:6c:fb:0e:a2:51:ba:59: d2:a0:ff:a7:4f:ae:68:20:4e:42:0f:9b:73:2f:e1: db:d8:96:23:78:f2:75:45:15:70:51:e5:9b:a2:24: 18:ce:38:51:35:1c:04:ba:6e:2f:15:bc:dd:ef:c5: a8:8d:52:e3:a4:93:41:28:1b:7a:f1:4f:1a:2e:50: 2a:e6:39:4f:d0:f5:2c:57:d2:7b:50:a1:d3:41:d0: 64:75:ef:c2:dd:74:44:aa:b0:ef:5c:9d:b7:ca:51: ec:cf:78:35:6a:30:96:ce:92:11:88:e3:6a:98:76: 2a:9a:cc:95:f5:7c:5a:5b:12:f6:f1:54:7e:64:b2: 4c:d1:9e:09:6e:4c:b6:1c:c5:c4:11:b3:1d:a7:e0: 60:1f:60:04:0e:ec:32:2b:aa:b9:1b:43:6f:31:8b: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 205.209.9.0/24 IPv6: 2602:fbcc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46138 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:35:62:12:17:b0:01:ad:d7:08:c5:be:51:a3:54:0f:97:c3: c4:a0:32:16:80:06:53:5d:17:ab:b7:96:76:f1:a5:2e:6d:61: 5a:e0:92:be:3b:a3:38:6c:44:86:2e:9b:b1:d4:af:ae:fc:15: e5:da:f1:f7:5e:a1:b0:13:20:13:28:af:88:2a:d2:39:32:24: f7:ec:f0:85:12:41:a3:35:47:93:77:bb:89:96:fd:53:76:53: 14:d7:43:4d:b6:8c:1a:d5:6b:b8:a9:a1:84:c1:86:fd:40:1f: 55:a9:7d:f3:e4:73:9d:d3:47:a5:7c:ee:62:ea:04:3b:ad:cb: f6:49:b4:39:14:ae:2a:24:0a:c0:af:46:34:50:99:a8:33:0b: fc:92:db:c0:19:f3:87:24:5c:99:0e:9b:e9:16:db:85:5f:99: 43:2d:42:b0:e4:c7:a8:d4:7c:3e:74:98:48:e4:02:f7:e5:58: 86:e7:fb:54:e8:9d:75:ef:68:d2:ee:65:94:cb:9d:2a:4f:2c: 8c:dc:96:b8:46:a6:ae:83:99:ac:a9:32:13:b9:1f:d6:81:ff: ef:49:59:37:91:8d:88:59:3e:95:68:cd:93:ba:58:59:6f:81: e3:18:1e:7b:c4:88:ce:e2:68:be:fd:f5:c3:d7:57:ad:09:d5: c3:04:b6:ed -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEyWr2p4Q4fWiZIIUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDEyMDE0MzkyMFoXDTI3MTIwMjAxNDUyNVowLzEtMCsGA1UEAxMk NGJmZWMzODMtODdhMi00NDI5LTkzYWUtYTQwN2M2OTBhNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY4Pd6wmiFwQc6sK5wEJ30OU5tNdYuB03Z2f 5PLieILbXjHLDhHbdMdcIywJX4GJiE+lPMFfBzGn+5YCzWhXjGfJyHR0SICN6dRc LFihsSpBJxfZPa7pOt9KOVEVgMMB0Gz7DqJRulnSoP+nT65oIE5CD5tzL+Hb2JYj ePJ1RRVwUeWboiQYzjhRNRwEum4vFbzd78WojVLjpJNBKBt68U8aLlAq5jlP0PUs V9J7UKHTQdBkde/C3XREqrDvXJ23ylHsz3g1ajCWzpIRiONqmHYqmsyV9XxaWxL2 8VR+ZLJM0Z4Jbky2HMXEEbMdp+BgH2AEDuwyK6q5G0NvMYty+QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJ84u+gSx9nUZ4iMoTOdd3zdHyAgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 YmZlYzM4My04N2EyLTQ0MjktOTNhZS1hNDA3YzY5MGE0ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRiZmVjMzgzLTg3YTItNDQyOS05 M2FlLWE0MDdjNjkwYTRlMC80YmZlYzM4My04N2EyLTQ0MjktOTNhZS1hNDA3YzY5 MGE0ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADN0QkwDgQCAAIwCAMGACYC+8wAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC0OjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArNWISF7ABrdcIxb5Ro1QPl8PE oDIWgAZTXRert5Z28aUubWFa4JK+O6M4bESGLpux1K+u/BXl2vH3XqGwEyATKK+I KtI5MiT37PCFEkGjNUeTd7uJlv1TdlMU10NNtowa1Wu4qaGEwYb9QB9VqX3z5HOd 00elfO5i6gQ7rcv2SbQ5FK4qJArAr0Y0UJmoMwv8ktvAGfOHJFyZDpvpFtuFX5lD LUKw5Meo1Hw+dJhI5AL35ViG5/tU6J1172jS7mWUy50qTyyM3Ja4Rqaug5msqTIT uR/Wgf/vSVk3kY2IWT6VaM2TulhZb4HjGB57xIjO4mi+/fXD11etCdXDBLbt -----END CERTIFICATE-----Generated at Sun Mar 1 16:38:20 2026 by rpki-client