$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer File: d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer (raw, json) Hash identifier: 9gabp1Zsblc8yakJwMUjGv3b+T5HNVHj5cK6cIXPMes= Subject key identifier: CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584CFDDFF1CF84F2F6BC7F2C1180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 13:45:22 +0000 Certificate not after: Wed 31 May 2028 12:45:22 +0000 Subordinate resources: AS: 693 IP: 129.74.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:df:f1:cf:84:f2:f6:bc:7f:2c:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Feb 26 13:45:22 2026 GMT Not After : May 31 12:45:22 2028 GMT Subject: CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:d9:84:65:29:cd:df:c7:5e:c1:2e:2b:88: 7e:13:50:7d:0f:7c:71:82:a8:4b:09:ba:db:2a:1d: 6b:ad:5e:dd:8f:23:b5:00:a3:da:ad:0a:e1:89:3c: 19:ce:99:da:d7:6a:6c:8a:5e:a0:b6:47:1e:b9:8d: 46:36:44:7f:3d:c1:1e:d3:36:1c:61:05:fc:dd:01: ee:0c:53:10:ea:bf:59:6b:f5:c1:7a:2a:df:a9:6a: 79:e9:e7:75:e8:e3:15:71:3d:06:2a:0a:c7:e8:a8: 28:00:62:db:e7:c0:4b:5f:15:1a:dc:8c:16:8e:02: fa:10:01:d3:0a:9d:9c:4d:8d:79:73:0a:ff:cf:fb: c1:88:f9:da:0f:85:8b:cd:7d:c6:ac:11:63:54:da: 72:2b:16:1b:43:d9:3b:ea:32:7b:5b:8e:d1:a6:94: 4e:98:3a:e7:0b:c6:90:c5:f4:2c:cd:bf:10:80:f7: 52:38:36:e0:ce:57:67:ab:3d:f7:0d:c1:c5:4d:f9: 48:ca:81:33:b0:3f:b2:72:61:99:6c:b3:73:0f:7e: 25:74:47:0e:a7:6c:9c:b1:22:93:f7:bf:f2:30:c4: aa:2e:fe:5b:3f:2d:5d:5e:56:78:45:0c:e2:da:79: e5:9a:d9:7f:ff:26:65:45:dc:4f:9e:5d:42:57:04: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 129.74.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 693 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:94:e5:e7:31:b3:1e:79:92:d5:13:63:12:2c:89:80:bc:11: 52:88:30:88:ae:8b:c8:57:75:6c:a5:af:46:02:e7:07:4b:c7: d4:35:ac:8f:79:4a:c5:e1:76:da:42:f3:8b:c9:8d:25:48:10: de:6e:c0:44:d2:bf:01:2c:07:87:4b:d1:36:91:59:fa:72:a3: 3e:7c:45:14:61:ed:aa:57:77:89:52:62:d9:52:7f:f8:f2:36: ed:8c:de:32:31:0e:d6:a1:a0:e1:de:58:e2:3b:70:4f:84:65: bc:94:be:1b:b4:19:af:0f:2b:33:c4:2f:58:5d:d8:91:62:dc: 57:45:54:24:cb:b3:f8:a3:a4:3b:f0:e3:3e:0c:48:bc:f2:93: f9:fb:62:c3:22:69:18:a2:b8:12:e4:39:08:94:8b:60:32:16: 45:30:d5:1b:6c:61:4b:77:c9:f3:b4:5a:e6:59:59:cc:e8:18: 9b:0e:cd:51:6b:ee:04:d4:86:76:74:c1:f3:8d:d8:83:d6:42: 9f:f5:d8:17:72:28:d4:b9:1c:3b:cb:7e:51:46:ad:d2:4c:d2: 1b:a8:25:d4:bf:4f:6d:1c:f2:52:a2:64:1c:64:dc:88:04:0f: 08:8c:e6:8e:83:55:3b:68:ec:e2:80:72:0b:ca:7f:83:ed:c3: 03:c2:93:0d -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEz93/HPhPL2vH8sEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDIyNjEzNDUyMloXDTI4MDUzMTEyNDUyMlowLzEtMCsGA1UEAxMk ZDA5MzBlMWYtMWEyNS00ZDg1LThjYTEtMTJmZWQ1YWEyN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVTZhGUpzd/HXsEuK4h+E1B9D3xxgqhLCbrb Kh1rrV7djyO1AKParQrhiTwZzpna12psil6gtkceuY1GNkR/PcEe0zYcYQX83QHu DFMQ6r9Za/XBeirfqWp56ed16OMVcT0GKgrH6KgoAGLb58BLXxUa3IwWjgL6EAHT Cp2cTY15cwr/z/vBiPnaD4WLzX3GrBFjVNpyKxYbQ9k76jJ7W47RppROmDrnC8aQ xfQszb8QgPdSODbgzldnqz33DcHFTflIyoEzsD+ycmGZbLNzD34ldEcOp2ycsSKT 97/yMMSqLv5bPy1dXlZ4RQzi2nnlmtl//yZlRdxPnl1CVwRtPQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFM2sSFGeeAuIIJ6Wb/aYTqaPRIQwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k MDkzMGUxZi0xYTI1LTRkODUtOGNhMS0xMmZlZDVhYTI3ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QwOTMwZTFmLTFhMjUtNGQ4NS04 Y2ExLTEyZmVkNWFhMjdmZC9kMDkzMGUxZi0xYTI1LTRkODUtOGNhMS0xMmZlZDVh YTI3ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCBSjAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIC tTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBUlOXnMbMeeZLVE2MSLImAvBFSiDCIrovIV3Vspa9GAucHS8fU NayPeUrF4XbaQvOLyY0lSBDebsBE0r8BLAeHS9E2kVn6cqM+fEUUYe2qV3eJUmLZ Un/48jbtjN4yMQ7WoaDh3ljiO3BPhGW8lL4btBmvDyszxC9YXdiRYtxXRVQky7P4 o6Q78OM+DEi88pP5+2LDImkYorgS5DkIlItgMhZFMNUbbGFLd8nztFrmWVnM6Bib Ds1Ra+4E1IZ2dMHzjdiD1kKf9dgXcijUuRw7y35RRq3STNIbqCXUv09tHPJSomQc ZNyIBA8IjOaOg1U7aOzigHILyn+D7cMDwpMN -----END CERTIFICATE-----Generated at Sun Mar 1 16:38:15 2026 by rpki-client