$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer File: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer (raw, json) Hash identifier: 5Sxj687TPITy9saUj38EU3vztOOK+hc8oxR+2PfR4sg= Subject key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E8C82C8560D03182EEC60CDA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jul 2026 08:45:11 +0000 Certificate not after: Sat 21 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 396935 IP: 23.135.48.0/24 IP: 2602:fdd9::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:82:c8:56:0d:03:18:2e:ec:60:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 19 08:45:11 2026 GMT Not After : Oct 21 08:45:11 2028 GMT Subject: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:34:ca:5a:46:ba:ca:9d:ff:14:f4:d6:4b: 73:89:bf:6c:01:8a:85:60:db:4c:79:99:61:f8:ba: f8:02:9c:b6:c8:46:c0:9b:42:f5:f4:6b:22:05:ac: e2:a6:bd:73:d3:d1:f2:ae:49:46:33:a4:9c:fa:f8: 95:b3:62:06:86:53:c8:82:e3:2d:98:a0:34:dc:40: ef:40:ea:49:4c:e2:a1:3f:a1:0a:49:1b:02:b8:04: 48:16:29:a9:e1:f9:c8:ea:13:15:46:d4:ed:5e:58: b7:38:e2:64:e1:aa:c3:92:26:ea:1a:13:09:41:48: b1:40:ef:d9:8f:fa:48:9d:0b:b9:c1:e4:a6:62:d1: e9:8e:21:e7:f8:d4:50:be:bc:e6:97:33:b6:4f:a6: 57:fb:5c:f8:4d:41:92:6d:10:89:1b:08:4b:18:16: e4:9b:06:f8:d8:b4:90:e4:94:ee:39:b3:94:ff:c2: e2:af:06:7a:8f:5f:ed:b9:62:5f:2a:ee:5c:cf:24: 3e:b4:dd:4a:26:19:21:17:3d:b4:98:80:fd:f4:4e: 1c:0b:ab:eb:55:26:58:04:df:c8:d9:4a:f8:9c:77: 56:ad:3a:a5:a7:76:00:65:d8:3c:1f:32:d0:7e:0b: 98:18:a6:a3:4c:1f:d7:6a:50:2b:95:53:5b:7e:b7: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.135.48.0/24 IPv6: 2602:fdd9::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396935 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8e:64:59:16:67:f5:76:c2:d0:1b:f5:0b:57:44:14:f7:f9: a7:a5:7c:eb:b1:61:d0:c9:ff:66:b7:3d:82:8a:ce:b7:3b:ff: b6:c9:a3:57:d4:b5:d5:1e:6f:57:84:64:f4:94:ca:01:15:71: 89:b3:23:65:b2:e6:15:26:c4:b6:e4:e6:d7:b1:fb:90:ae:7e: 4f:45:80:51:10:df:a8:ff:03:f3:5f:a6:53:54:ea:72:60:42: 76:70:78:d2:ee:82:e2:9b:5d:32:ea:86:bc:08:46:a4:9d:ce: 77:03:93:13:ab:83:59:f0:43:3a:21:59:72:1c:b6:07:c3:f3: 07:af:66:84:58:91:a0:15:04:05:4b:af:2d:13:2c:be:a4:8f: b4:d2:0e:5a:af:89:60:a2:9f:70:bd:64:b6:c3:4d:16:56:06: ab:f0:45:d2:d4:13:fd:c2:90:97:df:15:eb:60:29:5c:07:55: 37:72:96:b6:df:2d:3f:15:f5:e4:be:46:63:17:a4:dc:fe:0f: 44:fa:bb:7c:b4:c4:38:52:3e:fc:48:b5:92:34:98:a5:cd:b1: 04:a8:31:5a:73:f3:44:43:89:8a:9e:6f:bd:c5:24:ce:1b:e8: bc:0c:7f:2f:b6:91:fa:95:11:29:f8:7d:77:d8:f7:12:32:eb: 87:4f:2f:ec -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6MgshWDQMYLuxgzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcxOTA4NDUxMVoXDTI4MTAyMTA4NDUxMVowLzEtMCsGA1UEAxMk OGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUxYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyM0ylpGusqd/xT01ktzib9sAYqFYNtMeZlh +Lr4Apy2yEbAm0L19GsiBazipr1z09HyrklGM6Sc+viVs2IGhlPIguMtmKA03EDv QOpJTOKhP6EKSRsCuARIFimp4fnI6hMVRtTtXli3OOJk4arDkibqGhMJQUixQO/Z j/pInQu5weSmYtHpjiHn+NRQvrzmlzO2T6ZX+1z4TUGSbRCJGwhLGBbkmwb42LSQ 5JTuObOU/8LirwZ6j1/tuWJfKu5czyQ+tN1KJhkhFz20mID99E4cC6vrVSZYBN/I 2Ur4nHdWrTqlp3YAZdg8HzLQfguYGKajTB/XalArlVNbfrenDQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPNSXcjUrUs9zm+ahfrEUVNhJ/8kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzhkOTU4YzQ3LWMxOGYtNDZlMi1h M2MzLWVkNGJhMjllMWM5OS84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5 ZTFjOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhzAwDgQCAAIwCAMGBCYC/dkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYOhzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALjmRZFmf1dsLQG/ULV0QU9/mn pXzrsWHQyf9mtz2Cis63O/+2yaNX1LXVHm9XhGT0lMoBFXGJsyNlsuYVJsS25ObX sfuQrn5PRYBREN+o/wPzX6ZTVOpyYEJ2cHjS7oLim10y6oa8CEaknc53A5MTq4NZ 8EM6IVlyHLYHw/MHr2aEWJGgFQQFS68tEyy+pI+00g5ar4lgop9wvWS2w00WVgar 8EXS1BP9wpCX3xXrYClcB1U3cpa23y0/FfXkvkZjF6Tc/g9E+rt8tMQ4Uj78SLWS NJilzbEEqDFac/NEQ4mKnm+9xSTOG+i8DH8vtpH6lREp+H132PcSMuuHTy/s -----END CERTIFICATE-----Generated at Thu Jul 23 21:33:54 2026 by rpki-client