$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer File: d84b0325-0327-4cbf-bc76-4e79de05793d.cer (raw, json) Hash identifier: 10sEwcpS2dVZLETLLLf4ulOi4yuNxmo+mfa/k2u/JTs= Subject key identifier: AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584D868DA4BD504E60A7DB699880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Apr 2026 12:45:17 +0000 Certificate not after: Wed 19 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 395044 IP: 23.145.88.0/24 IP: 2602:fac4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:8d:a4:bd:50:4e:60:a7:db:69:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 16 12:45:17 2026 GMT Not After : Jul 19 12:45:17 2028 GMT Subject: CN=d84b0325-0327-4cbf-bc76-4e79de05793d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:97:e9:1e:42:1c:78:b2:18:81:92:18:b0: d1:f1:e5:fc:41:b6:74:dc:31:87:ce:8c:fc:66:f1: 90:14:93:a8:8a:75:37:b1:d3:c2:2b:75:be:d2:57: 29:92:5e:fe:38:88:ec:2f:d4:25:86:d0:0b:5a:ef: dc:46:f7:02:a1:e5:bf:a1:29:24:ae:f7:d2:80:a9: 1f:d6:98:2d:7a:40:35:61:a8:cb:62:02:d0:a1:ca: 70:55:68:79:b5:19:0e:1a:30:8e:bd:0f:6f:26:9b: 94:6b:ef:e6:d9:4b:d6:29:8a:8c:ca:aa:d3:9d:40: 60:2f:7c:6f:a3:aa:16:a4:c4:10:c5:f1:2f:d3:60: e7:b0:9a:b7:55:30:b9:87:dc:71:37:5b:0f:01:c4: d5:28:90:56:4d:98:a4:2b:b9:9a:b2:94:b2:58:16: 8a:bf:c1:77:ab:a5:7a:0b:c9:db:f7:18:93:63:37: 15:ee:0a:89:11:01:56:b9:36:8c:6a:dc:59:6f:64: 57:0f:e0:ba:da:c2:c6:24:f7:28:57:98:8e:fe:1b: 1c:b7:25:7e:f6:c3:03:ea:38:38:bb:d3:f3:54:2d: c4:81:3b:9c:06:b9:59:e2:3f:51:2d:d6:53:45:e0: cf:4a:dd:a7:62:78:04:ec:ae:1a:ac:c7:03:7d:ef: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.145.88.0/24 IPv6: 2602:fac4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395044 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f4:14:9d:12:24:46:fe:12:02:c2:8c:30:fd:e7:cf:0b:f4: a3:f4:d1:b2:83:a2:b1:25:42:10:00:8f:91:ec:5f:3c:01:b3: cb:28:ea:23:45:1f:20:e1:55:25:0f:86:05:47:15:79:78:ab: f4:78:d2:bb:79:9b:36:ca:c0:21:39:ce:66:da:99:6b:e0:33: a2:7a:09:5e:65:aa:21:03:dc:b5:14:be:8a:02:b8:68:f1:e5: 4d:86:44:28:0d:aa:b8:e4:fa:30:64:45:3d:06:41:e1:9a:b4: 89:17:3a:16:c2:06:ba:73:a0:9e:94:79:41:df:18:f1:36:29: 66:bc:22:b9:33:b1:cc:5a:b1:fa:73:74:f1:b8:a1:14:3f:e8: c0:cc:a2:8e:6e:98:05:57:c9:bb:fd:23:01:9e:fe:80:df:d6: 9e:3b:0d:6a:a7:a8:28:d0:03:97:89:56:0b:7a:73:d5:ed:7d: ba:b8:14:17:2f:c8:8a:eb:20:ed:08:5e:af:9f:fd:f6:bb:4e: ad:a2:56:d6:83:75:a3:a0:8b:6a:cd:17:bf:22:eb:cf:e0:83: fe:40:1e:29:e8:f5:d6:04:38:90:3d:c8:bb:e7:1a:88:c0:1f: bf:b2:f6:4a:aa:c5:95:7f:6c:2b:78:68:55:88:4e:59:35:9c: 60:21:0e:47 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2GjaS9UE5gp9tpmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDQxNjEyNDUxN1oXDTI4MDcxOTEyNDUxN1owLzEtMCsGA1UEAxMk ZDg0YjAzMjUtMDMyNy00Y2JmLWJjNzYtNGU3OWRlMDU3OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTSX6R5CHHiyGIGSGLDR8eX8QbZ03DGHzoz8 ZvGQFJOoinU3sdPCK3W+0lcpkl7+OIjsL9QlhtALWu/cRvcCoeW/oSkkrvfSgKkf 1pgtekA1YajLYgLQocpwVWh5tRkOGjCOvQ9vJpuUa+/m2UvWKYqMyqrTnUBgL3xv o6oWpMQQxfEv02DnsJq3VTC5h9xxN1sPAcTVKJBWTZikK7maspSyWBaKv8F3q6V6 C8nb9xiTYzcV7gqJEQFWuTaMatxZb2RXD+C62sLGJPcoV5iO/hsctyV+9sMD6jg4 u9PzVC3EgTucBrlZ4j9RLdZTReDPSt2nYngE7K4arMcDfe8fzwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK69gj/dJ6mRZONpxTQdJctgkKNQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k ODRiMDMyNS0wMzI3LTRjYmYtYmM3Ni00ZTc5ZGUwNTc5M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Q4NGIwMzI1LTAzMjctNGNiZi1i Yzc2LTRlNzlkZTA1NzkzZC9kODRiMDMyNS0wMzI3LTRjYmYtYmM3Ni00ZTc5ZGUw NTc5M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkVgwDgQCAAIwCAMGACYC+sQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYHJDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk9BSdEiRG/hICwoww/efPC/Sj 9NGyg6KxJUIQAI+R7F88AbPLKOojRR8g4VUlD4YFRxV5eKv0eNK7eZs2ysAhOc5m 2plr4DOiegleZaohA9y1FL6KArho8eVNhkQoDaq45PowZEU9BkHhmrSJFzoWwga6 c6CelHlB3xjxNilmvCK5M7HMWrH6c3TxuKEUP+jAzKKObpgFV8m7/SMBnv6A39ae Ow1qp6go0AOXiVYLenPV7X26uBQXL8iK6yDtCF6vn/32u06tolbWg3WjoItqzRe/ IuvP4IP+QB4p6PXWBDiQPci75xqIwB+/svZKqsWVf2wreGhViE5ZNZxgIQ5H -----END CERTIFICATE-----Generated at Fri Apr 17 10:32:52 2026 by rpki-client