$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer File: a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer (raw, json) Hash identifier: IVokCE4ITBmQ82ozDp99MFEm5byNvfBKiLzT80QP5us= Subject key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584CB54A288F06082D8DB5E28A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 Jan 2026 13:45:22 +0000 Certificate not after: Fri 05 May 2028 12:45:22 +0000 Subordinate resources: AS: 11590 IP: 66.59.96.0/19 IP: 206.251.0.0/19 IP: 2607:f620::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:4a:28:8f:06:08:2d:8d:b5:e2:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 31 13:45:22 2026 GMT Not After : May 5 12:45:22 2028 GMT Subject: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:55:4e:ce:7d:9b:58:93:e9:e5:60:76:a5: 9a:a4:48:cf:1e:25:bc:3e:c7:4f:f3:e4:3d:ff:92: 7d:40:05:71:9b:9f:81:dd:ae:72:aa:8d:d1:e1:a5: 0c:2d:07:b6:4f:f1:31:16:e4:5f:e6:21:ea:d2:59: 56:b4:be:1c:85:6f:1a:8e:0c:b6:a7:89:ca:ad:60: 56:7e:7a:44:45:3f:30:25:c3:a0:57:a1:e6:d4:8c: a1:6f:20:00:23:96:9f:9d:f6:49:d0:a1:fd:b1:11: ca:9b:8b:c3:6c:79:f3:22:b1:54:bc:d4:eb:46:ee: 34:ad:83:b4:aa:93:3c:cb:48:76:62:99:5e:6e:c5: 48:84:40:61:9a:5b:c3:35:c2:e8:24:45:da:6e:cc: d7:ce:e3:cb:3a:30:af:8a:99:66:42:db:e9:7c:f3: f8:4c:3d:37:1e:5f:b4:bc:9b:9f:3b:3b:28:a1:92: f3:e4:4d:18:c5:34:85:07:1e:7d:ec:59:45:d4:3b: 58:b9:31:d3:da:47:b5:8f:ba:86:ff:cd:88:f7:d8: d3:87:c8:0b:77:34:16:7c:53:20:87:95:02:38:76: e3:a5:0e:ab:02:2f:1d:f1:e5:08:13:09:30:af:4f: 02:9b:1f:a2:54:73:9e:f7:f7:8a:a4:b5:27:d8:1a: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 66.59.96.0/19 206.251.0.0/19 IPv6: 2607:f620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11590 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:03:b2:e7:f4:81:7e:85:90:c9:9f:be:97:48:c1:7a:75:48: 91:1e:d1:6a:3f:02:f3:30:15:ae:d2:e1:6a:7e:4b:87:db:d9: 1b:88:e3:87:29:35:e7:1e:41:67:b3:2e:20:ce:a6:81:e6:b4: 6c:ad:e3:9e:ae:6c:f9:b6:73:24:94:b5:35:ad:1e:4b:92:2e: 2d:71:47:4b:0c:af:2e:80:bd:90:e1:d9:00:c2:3a:98:88:fa: f8:53:62:39:bf:f1:9d:de:37:c8:9c:7d:0e:f6:1e:4b:e0:76: 4c:af:56:71:2d:5a:0a:37:f8:bf:fc:a2:f1:09:6e:67:92:63: b2:cb:f7:9b:6d:05:79:2d:78:63:6f:d4:23:d7:fd:bc:84:01: b9:3a:f0:dd:7b:f5:25:be:6f:5d:58:83:42:71:0f:e4:aa:8f: 15:20:f7:32:a1:4f:bf:5d:b5:eb:d1:86:e3:25:ac:31:57:b3: c2:26:22:cb:b8:f4:2d:7f:64:39:79:46:7e:58:e0:60:8c:1e: d3:56:81:eb:e9:fe:e9:b5:0e:1e:b4:31:5b:a9:a2:90:80:59: 1c:89:0d:4b:12:85:e2:4c:02:26:d1:fd:bc:3e:08:93:2d:f4: ae:73:c2:4f:31:7f:2a:28:f0:72:b1:10:31:5b:5e:54:8c:00: f0:da:3a:42 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEy1SiiPBggtjbXiigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDEzMTEzNDUyMloXDTI4MDUwNTEyNDUyMlowLzEtMCsGA1UEAxMk YTM4YTFkZGUtYjdmYi00YmZjLTlmM2MtY2Q4NDAwM2IwMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKdVTs59m1iT6eVgdqWapEjPHiW8PsdP8+Q9 /5J9QAVxm5+B3a5yqo3R4aUMLQe2T/ExFuRf5iHq0llWtL4chW8ajgy2p4nKrWBW fnpERT8wJcOgV6Hm1IyhbyAAI5afnfZJ0KH9sRHKm4vDbHnzIrFUvNTrRu40rYO0 qpM8y0h2YplebsVIhEBhmlvDNcLoJEXabszXzuPLOjCviplmQtvpfPP4TD03Hl+0 vJufOzsooZLz5E0YxTSFBx597FlF1DtYuTHT2ke1j7qG/82I99jTh8gLdzQWfFMg h5UCOHbjpQ6rAi8d8eUIEwkwr08Cmx+iVHOe9/eKpLUn2Bri6QIDAQABo4IELzCC BCswHQYDVR0OBBYEFA3xN+pmgpTD176mgFu9HYbdFOGDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h MzhhMWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0MDAzYjAyNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2EzOGExZGRlLWI3ZmItNGJmYy05 ZjNjLWNkODQwMDNiMDI3OS9hMzhhMWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0MDAz YjAyNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVCO2ADBAXO+wAwDQQCAAIwBwMFACYH9iAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICLUYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWgOy5/SBfoWQyZ++l0jB enVIkR7Raj8C8zAVrtLhan5Lh9vZG4jjhyk15x5BZ7MuIM6mgea0bK3jnq5s+bZz JJS1Na0eS5IuLXFHSwyvLoC9kOHZAMI6mIj6+FNiOb/xnd43yJx9DvYeS+B2TK9W cS1aCjf4v/yi8QluZ5Jjssv3m20FeS14Y2/UI9f9vIQBuTrw3Xv1Jb5vXViDQnEP 5KqPFSD3MqFPv12169GG4yWsMVezwiYiy7j0LX9kOXlGfljgYIwe01aB6+n+6bUO HrQxW6mikIBZHIkNSxKF4kwCJtH9vD4Iky30rnPCTzF/KijwcrEQMVteVIwA8No6 Qg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:39:35 2026 by rpki-client