$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer File: 72de343e-ded3-43ae-b207-e492c0f88566.cer (raw, json) Hash identifier: Pwc6Zck6Y3nxoYFidirzC9QjjsANUvZQhmQDooBNs3U= Subject key identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584CFDDFF1AF04C2483CA7F8DA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 13:45:22 +0000 Certificate not after: Wed 31 May 2028 12:45:22 +0000 Subordinate resources: AS: 22803 IP: 199.59.234.0/23 IP: 208.92.228.0/22 IP: 2620:33::/48 IP: 2620:1dc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:df:f1:af:04:c2:48:3c:a7:f8:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 26 13:45:22 2026 GMT Not After : May 31 12:45:22 2028 GMT Subject: CN=72de343e-ded3-43ae-b207-e492c0f88566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:b2:24:fe:a5:c6:aa:16:db:b9:29:46:f3: 8d:88:99:01:38:a1:b4:7f:16:35:85:33:d5:83:08: 91:49:9c:b3:13:bc:e6:01:6b:fd:01:d6:73:05:72: e7:e4:0e:ac:14:12:4d:38:dc:35:20:bd:e9:79:0a: 86:a6:1b:88:0d:10:69:fe:43:17:d3:52:41:7d:3b: 70:5e:ea:7a:55:fb:3d:6b:8a:c7:21:d2:81:43:31: 79:35:b1:90:40:4b:c5:07:5c:67:26:e1:0c:9c:a2: 20:3c:73:53:07:5c:b6:b0:bb:82:39:38:b6:ec:06: 42:25:15:55:7f:f3:07:f9:8e:41:10:69:bb:d7:79: 5f:e2:ca:02:ad:ed:ab:fd:bb:c3:ab:bc:70:10:a7: 7b:bf:23:52:0a:37:2b:90:c2:92:de:de:8f:5f:d2: 06:8b:98:39:9f:f5:16:c6:d3:4d:a6:b7:a8:fc:3e: d2:66:a9:59:3c:93:15:d0:aa:83:7d:38:c8:23:8d: 21:48:25:21:65:5d:30:c9:2b:68:2d:25:bf:3e:f3: a1:14:ad:87:e8:88:0d:bf:af:d8:41:dc:6e:1b:81: 0d:48:41:c5:29:60:12:49:71:e7:6d:28:72:68:99: 3e:4a:24:91:cd:e5:f2:51:6f:d8:65:14:01:56:25: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 199.59.234.0/23 208.92.228.0/22 IPv6: 2620:33::/48 2620:1dc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f4:41:50:0b:6d:b5:49:8b:5a:e5:1f:e2:c2:db:20:56:e0: 35:89:58:1b:80:8a:d0:d2:10:95:e5:40:8d:53:00:52:0d:a9: db:b0:9e:5b:81:55:2c:bd:5c:24:50:e9:6c:a3:ed:c5:86:b8: dc:4a:83:68:19:3b:b1:e4:aa:6e:96:3b:05:90:b4:91:e7:7b: 14:e8:7d:a5:9f:e9:5d:37:89:9b:8b:29:d5:a7:0c:25:fe:65: bb:34:fe:f5:e4:8f:cd:43:5c:92:6f:53:5f:eb:4c:d7:2b:2b: c7:31:48:a4:75:93:05:82:aa:32:d1:44:d3:9e:14:2f:da:42: fa:39:d4:0b:bd:4b:70:0f:0e:25:d5:ab:64:91:3d:93:76:7f: 53:a9:f8:a1:05:f6:90:43:a4:a7:47:27:9b:94:60:be:a7:85: 8b:c1:6b:cb:59:10:54:ea:f5:d4:25:9e:02:47:fa:21:dd:cc: ab:ab:0e:12:20:25:ab:8f:da:f1:16:01:da:ee:3b:53:dc:93: a8:29:cc:87:e0:f8:b4:a9:f3:fd:f7:4c:15:dd:70:fc:07:24: 89:82:8f:f0:85:65:8c:a4:37:6c:f9:ee:a9:77:d7:ec:65:35: 4c:6d:92:96:2d:d4:cf:54:ed:2c:10:32:cc:1b:86:53:49:6a: 8f:04:a9:d8 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEz93/GvBMJIPKf42oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDIyNjEzNDUyMloXDTI4MDUzMTEyNDUyMlowLzEtMCsGA1UEAxMk NzJkZTM0M2UtZGVkMy00M2FlLWIyMDctZTQ5MmMwZjg4NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmKyJP6lxqoW27kpRvONiJkBOKG0fxY1hTPV gwiRSZyzE7zmAWv9AdZzBXLn5A6sFBJNONw1IL3peQqGphuIDRBp/kMX01JBfTtw Xup6Vfs9a4rHIdKBQzF5NbGQQEvFB1xnJuEMnKIgPHNTB1y2sLuCOTi27AZCJRVV f/MH+Y5BEGm713lf4soCre2r/bvDq7xwEKd7vyNSCjcrkMKS3t6PX9IGi5g5n/UW xtNNpreo/D7SZqlZPJMV0KqDfTjII40hSCUhZV0wyStoLSW/PvOhFK2H6IgNv6/Y QdxuG4ENSEHFKWASSXHnbShyaJk+SiSRzeXyUW/YZRQBViUDPwIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFNfN8CiNvTNRTIWyX7g+SgmljzzxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 MmRlMzQzZS1kZWQzLTQzYWUtYjIwNy1lNDkyYzBmODg1NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzcyZGUzNDNlLWRlZDMtNDNhZS1i MjA3LWU0OTJjMGY4ODU2Ni83MmRlMzQzZS1kZWQzLTQzYWUtYjIwNy1lNDkyYzBm ODg1NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPgYIKwYBBQUH AQcBAf8ELzAtMBIEAgABMAwDBAHHO+oDBALQXOQwFwQCAAIwEQMHACYgADMAAAMG BCYgAdwAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlkTMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJD0QVAL bbVJi1rlH+LC2yBW4DWJWBuAitDSEJXlQI1TAFINqduwnluBVSy9XCRQ6Wyj7cWG uNxKg2gZO7Hkqm6WOwWQtJHnexTofaWf6V03iZuLKdWnDCX+Zbs0/vXkj81DXJJv U1/rTNcrK8cxSKR1kwWCqjLRRNOeFC/aQvo51Au9S3APDiXVq2SRPZN2f1Op+KEF 9pBDpKdHJ5uUYL6nhYvBa8tZEFTq9dQlngJH+iHdzKurDhIgJauP2vEWAdruO1Pc k6gpzIfg+LSp8/33TBXdcPwHJImCj/CFZYykN2z57ql31+xlNUxtkpYt1M9U7SwQ MswbhlNJao8Eqdg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:25:57 2026 by rpki-client