$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer File: a4c09862-33b2-4c17-b018-07f7502c45f6.cer (raw, json) Hash identifier: 9QfdhyZ3dCfvaEjpQJScS+7B2BNvDMh3PpcC5sWt3Jw= Subject key identifier: B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584D7E2D991B63E49B58149A3300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Apr 2026 12:45:18 +0000 Certificate not after: Sun 16 Jul 2028 12:45:18 +0000 Subordinate resources: AS: 22686 IP: 2620:13a:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:2d:99:1b:63:e4:9b:58:14:9a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 13 12:45:18 2026 GMT Not After : Jul 16 12:45:18 2028 GMT Subject: CN=a4c09862-33b2-4c17-b018-07f7502c45f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:1a:97:d6:db:09:18:88:ee:24:8b:5e:7d: ef:7f:16:3d:78:eb:23:8f:52:14:e2:70:6d:63:7f: c8:e0:5d:1f:8b:b0:1c:b0:4f:7c:b0:7d:52:0b:11: 9b:c8:4c:eb:d1:4f:bb:32:06:2f:0e:e1:ad:a3:b1: dd:b0:5d:8f:c0:72:7d:f2:4b:c7:ac:e1:73:19:67: 2a:9a:53:96:cf:08:d2:07:38:f9:35:75:68:a4:43: 6c:80:8a:45:65:0f:07:f1:76:e6:67:ff:d7:bf:51: 3c:b0:ac:61:b2:31:35:47:2c:2f:bb:80:cf:0f:69: 31:2b:3c:ec:58:84:95:89:e3:cb:1e:70:6f:42:2c: a1:3d:7b:69:eb:8d:28:84:9c:6f:f6:1a:2d:73:e3: 12:84:60:45:96:2b:f6:0e:bd:c3:44:15:0b:f1:0a: 8f:2f:b0:92:af:8b:f7:0c:c6:08:b2:c1:02:7d:9c: c0:e8:4f:7c:34:bc:1f:f1:54:1b:e9:5e:ee:b3:b4: 0c:56:12:b3:1a:8a:cc:38:77:47:7f:ec:df:d9:6b: 51:e1:81:37:f5:80:16:56:1e:e4:49:a4:0e:51:c2: 79:51:0b:51:49:d4:2c:75:c0:c0:a1:71:74:9b:47: 31:f1:77:5c:bd:01:0e:51:ce:7d:2d:8d:ba:f3:42: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2620:13a:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:44:1c:e7:65:b0:ec:a7:32:2d:35:8c:af:2a:f0:61:56:a2: fb:a8:49:4f:a7:d9:4e:32:3b:ef:b6:98:69:f6:4b:ec:a3:94: 9e:7c:d8:83:d0:77:84:c1:d3:00:b2:18:fc:dd:43:3d:f6:0e: 42:8c:eb:fd:f9:ee:82:71:fd:0d:a1:c1:a4:78:96:4e:83:3f: ff:c4:0c:04:f9:dd:b4:20:22:e9:4a:f7:ef:8b:33:75:11:b2: dd:c0:8a:d6:63:8d:07:0b:3e:6b:7f:1d:ce:6b:f9:19:86:da: cf:16:b4:58:2f:db:25:21:c6:6f:7b:81:b7:5f:27:ae:0f:83: 95:5b:87:d8:c0:f1:ad:d9:b9:56:23:cd:45:00:ec:cb:7f:33: 96:5d:2b:4f:1d:ce:ea:16:c8:14:5f:52:51:de:3e:a9:64:6d: 16:8d:3e:6c:b9:26:8c:08:75:04:de:f9:3f:26:df:94:81:af: 8a:88:31:b1:56:61:fd:bb:55:a4:d6:c0:5b:e4:29:fe:57:60: f8:66:ba:32:14:e0:2d:92:0e:b3:71:d2:84:de:02:19:71:5c: 04:02:43:cb:99:0d:a1:a5:c5:c0:91:f7:57:d2:1b:58:33:70: b1:29:d9:64:ee:5a:ee:af:61:e4:bb:a9:40:5e:da:07:1a:2f: b3:35:c0:77 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE1+LZkbY+SbWBSaMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDQxMzEyNDUxOFoXDTI4MDcxNjEyNDUxOFowLzEtMCsGA1UEAxMk YTRjMDk4NjItMzNiMi00YzE3LWIwMTgtMDdmNzUwMmM0NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+gal9bbCRiI7iSLXn3vfxY9eOsjj1IU4nBt Y3/I4F0fi7AcsE98sH1SCxGbyEzr0U+7MgYvDuGto7HdsF2PwHJ98kvHrOFzGWcq mlOWzwjSBzj5NXVopENsgIpFZQ8H8XbmZ//Xv1E8sKxhsjE1Rywvu4DPD2kxKzzs WISViePLHnBvQiyhPXtp640ohJxv9hotc+MShGBFliv2Dr3DRBUL8QqPL7CSr4v3 DMYIssECfZzA6E98NLwf8VQb6V7us7QMVhKzGorMOHdHf+zf2WtR4YE39YAWVh7k SaQOUcJ5UQtRSdQsdcDAoXF0m0cx8XdcvQEOUc59LY2680KAjwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFLHsaz7FjjdI5jITRf9OY5HEnAohMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h NGMwOTg2Mi0zM2IyLTRjMTctYjAxOC0wN2Y3NTAyYzQ1ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2E0YzA5ODYyLTMzYjItNGMxNy1i MDE4LTA3Zjc1MDJjNDVmNi9hNGMwOTg2Mi0zM2IyLTRjMTctYjAxOC0wN2Y3NTAy YzQ1ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAE6QDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJYnjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQALRBznZbDspzItNYyvKvBhVqL7qElPp9lOMjvvtphp9kvs o5SefNiD0HeEwdMAshj83UM99g5CjOv9+e6Ccf0NocGkeJZOgz//xAwE+d20ICLp SvfvizN1EbLdwIrWY40HCz5rfx3Oa/kZhtrPFrRYL9slIcZve4G3XyeuD4OVW4fY wPGt2blWI81FAOzLfzOWXStPHc7qFsgUX1JR3j6pZG0WjT5suSaMCHUE3vk/Jt+U ga+KiDGxVmH9u1Wk1sBb5Cn+V2D4ZroyFOAtkg6zcdKE3gIZcVwEAkPLmQ2hpcXA kfdX0htYM3CxKdlk7lrur2Hku6lAXtoHGi+zNcB3 -----END CERTIFICATE-----Generated at Fri Apr 17 12:20:17 2026 by rpki-client