$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer File: 560b4c54-bd35-46e1-8698-aff50195e1b4.cer (raw, json) Hash identifier: Y4SjbWJBTba+ihqOoB6m4Of+aLnAHc8nPHQlinjpt6c= Subject key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584CC8D4F2996DFB30B1B56339C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Feb 2026 13:45:22 +0000 Certificate not after: Fri 12 May 2028 12:45:22 +0000 Subordinate resources: IP: 64.58.96.0/20 IP: 149.248.72.0/22 IP: 204.16.120.0/22 IP: 205.142.242.0/23 IP: 2607:6440::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c8:d4:f2:99:6d:fb:30:b1:b5:63:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 7 13:45:22 2026 GMT Not After : May 12 12:45:22 2028 GMT Subject: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:45:33:a9:a2:d0:fa:1d:9b:e7:fe:c7:bc: 36:d6:61:25:b4:f8:7a:11:c5:e4:f8:a4:22:2e:c6: 24:b9:f2:27:ac:95:a8:18:bf:a5:16:98:14:6d:0c: 4f:b5:8c:55:d5:8b:68:5f:7e:3a:81:73:e6:3d:7a: ad:a5:96:7f:00:e0:00:b2:31:de:31:19:88:85:ba: ef:dd:d8:ca:98:91:60:38:69:97:4e:ba:61:47:f5: 30:98:a1:5b:e1:45:ed:ab:9c:00:6b:54:e9:56:ad: 78:7f:a9:52:67:e5:56:b1:44:0a:aa:2e:30:cc:3b: 7f:73:8e:68:fd:35:67:8c:de:bf:0a:dc:ef:fc:67: 2a:35:23:58:3c:03:34:12:23:39:d8:72:ac:90:a5: 70:7f:3b:d8:f3:1a:44:94:c6:bd:7f:1c:82:2d:f6: 86:51:6c:6d:b0:a0:cc:2d:d9:fa:ff:71:20:1a:cc: 5d:f7:39:47:5a:7b:17:4e:b1:00:5f:23:20:45:41: dd:18:b7:b8:4f:a2:d6:c3:56:54:c4:91:65:c1:c0: 7a:f4:83:26:f5:1d:ca:40:c3:a1:bf:4b:b8:2e:76: f8:9f:f4:55:c6:09:f5:7d:34:ff:a5:d5:27:01:6c: 42:75:e0:44:eb:f7:f9:6d:b5:8c:40:52:c9:7a:99: a4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 64.58.96.0/20 149.248.72.0/22 204.16.120.0/22 205.142.242.0/23 IPv6: 2607:6440::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:93:bf:86:5a:76:25:4b:53:36:72:40:96:3b:79:25:64:e4: 5a:72:3e:73:07:89:5c:a5:50:b1:e6:9c:a6:7a:70:cc:6d:91: ae:43:2e:46:12:12:aa:45:81:1b:d6:c1:6d:dc:04:aa:c7:24: d8:73:01:1a:1c:e5:12:e6:0d:c6:ee:de:f6:42:8f:23:72:99: 4d:00:54:9b:3a:e9:9c:e8:96:d0:47:43:05:c6:80:6e:05:ce: 07:9a:db:b5:23:9a:cf:de:35:15:95:e5:12:4d:fa:45:77:ec: fb:e2:04:4c:c9:af:7a:c0:0a:60:d8:93:75:27:13:8b:16:72: 0e:26:78:4c:1d:33:fe:0c:9d:5f:d5:71:44:4c:90:f3:30:a3: 74:5e:c0:66:9f:56:bc:4b:28:82:80:d3:af:18:63:09:f3:74: 39:73:da:5e:19:27:95:88:17:eb:6e:a3:15:d4:da:b4:72:aa: aa:67:1e:92:e4:5b:22:e6:c0:f7:a5:48:c3:35:1a:b8:a4:0f: da:aa:86:af:bd:16:df:ed:f0:f7:da:a7:41:bf:b5:f4:6b:9e: f7:43:2b:2a:04:c9:25:25:84:f8:58:c0:83:81:c1:ae:6a:8f: 39:0d:ba:8f:15:0e:dd:fa:51:8d:3d:24:a4:ef:c7:c6:cb:2e: 36:36:a6:23 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEzI1PKZbfswsbVjOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDIwNzEzNDUyMloXDTI4MDUxMjEyNDUyMlowLzEtMCsGA1UEAxMk NTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVlMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6JFM6mi0Podm+f+x7w21mEltPh6EcXk+KQi LsYkufInrJWoGL+lFpgUbQxPtYxV1YtoX346gXPmPXqtpZZ/AOAAsjHeMRmIhbrv 3djKmJFgOGmXTrphR/UwmKFb4UXtq5wAa1TpVq14f6lSZ+VWsUQKqi4wzDt/c45o /TVnjN6/Ctzv/GcqNSNYPAM0EiM52HKskKVwfzvY8xpElMa9fxyCLfaGUWxtsKDM Ldn6/3EgGsxd9zlHWnsXTrEAXyMgRUHdGLe4T6LWw1ZUxJFlwcB69IMm9R3KQMOh v0u4Lnb4n/RVxgn1fTT/pdUnAWxCdeBE6/f5bbWMQFLJepmkWwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOHzLN4cX+1MlZp4Dd76aXPelS/IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzU2MGI0YzU0LWJkMzUtNDZlMS04 Njk4LWFmZjUwMTk1ZTFiNC81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5 NWUxYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARAOmADBAKV+EgDBALMEHgDBAHNjvIwDQQCAAIw BwMFBCYHZEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAEZO/hlp2JUtTNnJAljt5JWTkWnI+cweJXKVQseac pnpwzG2RrkMuRhISqkWBG9bBbdwEqsck2HMBGhzlEuYNxu7e9kKPI3KZTQBUmzrp nOiW0EdDBcaAbgXOB5rbtSOaz941FZXlEk36RXfs++IETMmvesAKYNiTdScTixZy DiZ4TB0z/gydX9VxREyQ8zCjdF7AZp9WvEsogoDTrxhjCfN0OXPaXhknlYgX626j FdTatHKqqmcekuRbIubA96VIwzUauKQP2qqGr70W3+3w99qnQb+19Gue90MrKgTJ JSWE+FjAg4HBrmqPOQ26jxUO3fpRjT0kpO/HxssuNjamIw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:39:35 2026 by rpki-client