$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33.cer File: 22f9befa-18c5-4079-9648-a9c8d05adb33.cer (raw, json) Hash identifier: wU8OPAElzAdRec+gpaFiGjEsUbEPYLvlha0OCUbQo5I= Subject key identifier: F9:EE:A2:92:98:5E:20:0E:D2:7E:B5:31:6F:7F:FB:A5:49:8C:4D:18 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584D00AAA279A4446165D7D8F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/22f9befa-18c5-4079-9648-a9c8d05adb33.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Feb 2026 13:45:22 +0000 Certificate not after: Thu 01 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 20272 IP: 24.235.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:aa:a2:79:a4:44:61:65:d7:d8:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Feb 27 13:45:22 2026 GMT Not After : Jun 1 12:45:22 2028 GMT Subject: CN=22f9befa-18c5-4079-9648-a9c8d05adb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:b4:30:b0:73:a3:dd:89:95:6b:90:a7:0c: 94:85:50:9c:3e:36:e2:01:62:af:cc:56:1e:08:d1: bd:14:42:41:dd:df:e5:0f:d9:c7:c3:4d:4f:03:6a: 76:d7:05:20:4d:38:85:75:e4:ab:bf:14:d1:61:77: fa:5f:86:f5:37:78:18:95:a2:dd:e8:b2:46:e5:e8: 72:5c:11:f4:27:5f:13:93:ec:cf:96:7d:59:a1:37: ac:bb:7e:39:26:00:e7:51:1d:84:ac:f7:b8:84:5f: 2d:86:8e:3b:56:5a:e0:a7:64:26:47:78:e9:d0:56: a1:0e:64:17:86:04:14:ba:3b:24:d6:af:62:3a:a6: 19:f9:aa:d0:b9:08:17:72:f3:4c:e7:b1:31:d2:c2: 4f:73:55:dc:be:c8:12:48:75:e7:0a:97:71:f0:d1: 4b:26:f7:1c:e4:35:6e:7e:f9:ba:df:97:e6:07:f4: 3e:a5:8a:df:ab:a5:3e:75:75:d6:a8:42:8a:37:df: 59:ed:32:3d:ae:7e:de:2f:67:35:cb:10:5c:dd:5a: fd:82:8f:2f:4b:42:7d:da:94:dc:0f:a0:fc:ee:d0: 3f:1b:27:12:6e:cf:01:0c:1c:9d:f9:9f:86:f3:f4: 66:87:05:47:1d:f4:cd:d7:65:10:6c:22:05:84:22: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EE:A2:92:98:5E:20:0E:D2:7E:B5:31:6F:7F:FB:A5:49:8C:4D:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22f9befa-18c5-4079-9648-a9c8d05adb33/22f9befa-18c5-4079-9648-a9c8d05adb33.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 24.235.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20272 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9b:21:7a:bd:6c:f8:eb:98:e7:98:7b:ce:ed:b6:d7:a8:36: e0:f2:43:05:62:c4:8a:83:b0:9f:94:7d:22:5c:fd:e1:fb:ba: 25:26:f2:4c:f2:6e:4f:90:03:a3:3e:24:0b:7b:f5:6c:2a:30: 3a:dc:da:ee:d8:ee:eb:5f:8a:60:33:a4:15:41:43:aa:7a:d8: 1d:f4:3b:c9:af:5c:c0:49:2f:b1:d6:b7:9d:ab:b2:16:ad:30: 6e:78:c4:27:c0:f1:03:dc:b0:f3:90:d2:58:06:97:9e:00:db: f3:d3:c4:5a:69:19:a7:2e:8c:7c:0f:e8:8b:18:34:82:52:52: 60:6d:a0:92:bf:c5:04:7a:2b:a0:35:40:3e:63:2c:ac:50:95: eb:df:1e:85:32:fe:f3:86:7b:fb:3e:5b:cb:ad:7d:f3:28:73: fa:ff:3e:66:9f:a0:1c:cf:56:4a:29:d3:5a:75:ee:0b:91:ac: aa:59:77:cf:8c:01:1d:0b:fc:99:4f:d1:25:1e:5f:6d:01:04: a9:6c:14:eb:fd:b0:40:27:84:48:cf:84:7b:06:7e:60:13:02: 37:76:f5:b9:66:74:80:59:f4:d8:45:66:80:fe:da:1b:d3:36: b0:37:3e:89:a6:12:8e:b5:43:09:b4:a3:2e:64:b8:db:7e:49: 65:48:6b:e7 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0AqqJ5pERhZdfY9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDIyNzEzNDUyMloXDTI4MDYwMTEyNDUyMlowLzEtMCsGA1UEAxMk MjJmOWJlZmEtMThjNS00MDc5LTk2NDgtYTljOGQwNWFkYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm320MLBzo92JlWuQpwyUhVCcPjbiAWKvzFYe CNG9FEJB3d/lD9nHw01PA2p21wUgTTiFdeSrvxTRYXf6X4b1N3gYlaLd6LJG5ehy XBH0J18Tk+zPln1ZoTesu345JgDnUR2ErPe4hF8tho47Vlrgp2QmR3jp0FahDmQX hgQUujsk1q9iOqYZ+arQuQgXcvNM57Ex0sJPc1XcvsgSSHXnCpdx8NFLJvcc5DVu fvm635fmB/Q+pYrfq6U+dXXWqEKKN99Z7TI9rn7eL2c1yxBc3Vr9go8vS0J92pTc D6D87tA/GycSbs8BDByd+Z+G8/RmhwVHHfTN12UQbCIFhCLnHwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPnuopKYXiAO0n61MW9/+6VJjE0YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y MmY5YmVmYS0xOGM1LTQwNzktOTY0OC1hOWM4ZDA1YWRiMzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIyZjliZWZhLTE4YzUtNDA3OS05 NjQ4LWE5YzhkMDVhZGIzMy8yMmY5YmVmYS0xOGM1LTQwNzktOTY0OC1hOWM4ZDA1 YWRiMzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAUY6yAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TzAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAaZsher1s+OuY55h7zu2216g24PJDBWLEioOwn5R9Ilz94fu6 JSbyTPJuT5ADoz4kC3v1bCowOtza7tju61+KYDOkFUFDqnrYHfQ7ya9cwEkvsda3 nauyFq0wbnjEJ8DxA9yw85DSWAaXngDb89PEWmkZpy6MfA/oixg0glJSYG2gkr/F BHoroDVAPmMsrFCV698ehTL+84Z7+z5by6198yhz+v8+Zp+gHM9WSinTWnXuC5Gs qll3z4wBHQv8mU/RJR5fbQEEqWwU6/2wQCeESM+EewZ+YBMCN3b1uWZ0gFn02EVm gP7aG9M2sDc+iaYSjrVDCbSjLmS4235JZUhr5w== -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:24 2026 by rpki-client