$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer File: cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer (raw, json) Hash identifier: TFFj+ROe1suqvSTb18gHTJCKPdM0BvfJYMcnJmxwqok= Subject key identifier: 82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E5AFC9C26169B294693B29D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 15:00:15 +0000 Certificate not after: Mon 13 Dec 2027 20:01:50 +0000 Subordinate resources: AS: 54074 IP: 23.246.176.0/22 IP: 2602:f56f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:fc:9c:26:16:9b:29:46:93:b2:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 1 15:00:15 2026 GMT Not After : Dec 13 20:01:50 2027 GMT Subject: CN=cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:41:f4:15:96:2e:77:a6:15:2c:40:e9:d0: df:ea:9a:89:af:61:7f:ac:a1:5c:f6:a0:b9:f1:2c: ef:e6:f8:b8:33:db:ff:07:2b:44:14:40:f7:75:06: 18:96:3f:28:c0:93:e8:8b:6a:bc:f0:8b:72:a0:ab: f6:4d:c4:f9:88:16:ca:9b:cb:4f:a6:cd:a4:b4:79: f8:24:81:f8:f8:07:34:ab:a7:4b:db:06:dc:17:d4: c1:97:ec:06:b8:fa:32:f7:4b:60:21:77:ff:c2:8d: f2:c3:60:e6:a2:eb:1f:09:8e:73:f8:07:17:85:ee: 23:b3:75:f4:23:41:ef:7c:42:2b:6e:49:f1:5e:41: 11:9a:7e:a1:9c:78:2a:93:90:ff:b9:46:64:70:89: c5:ec:a8:3b:1e:b3:b9:65:83:06:df:bd:07:a4:bb: 96:0f:c7:46:8c:5c:6f:1b:dc:1c:7e:52:6e:91:aa: a5:31:c1:ac:3a:57:d5:28:89:70:0d:37:aa:31:9b: 12:85:c9:ec:08:f3:88:d0:4d:9e:46:f2:38:cd:28: a4:90:8b:ff:b8:44:c3:4a:4c:a8:d8:0d:04:4c:b1: 0f:6f:8c:82:2a:65:64:c9:4b:c7:91:a4:16:2b:39: 67:62:ec:02:a9:c9:f4:f5:12:b0:5e:b7:54:be:b2: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.246.176.0/22 IPv6: 2602:f56f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54074 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:dc:43:14:fa:1a:e2:7b:55:be:12:58:3e:59:87:1d:ff:49: 37:e3:ac:72:35:d7:6d:86:57:26:bf:a8:5e:de:fb:c7:87:49: cc:1c:00:62:67:6e:fd:91:e3:4a:ce:ec:37:e0:a9:61:07:bf: 1a:93:19:6b:47:30:b3:b5:ae:12:6f:2f:19:bc:65:ad:4f:c6: 81:30:0e:42:8d:1a:7e:50:9b:ec:f9:a5:d6:cd:95:3a:fd:7f: 0a:2f:e5:2b:d1:f1:97:cd:d4:87:36:95:22:4f:e6:08:b4:95: c6:36:fa:06:55:f4:18:ac:87:aa:7b:c2:e1:3c:b8:5a:b6:d1: a5:c8:4f:2c:57:28:6b:b7:8e:4d:7e:77:6a:e6:d0:7b:38:c6: 27:49:7c:59:49:95:52:8c:d2:c0:47:4b:52:a2:38:8f:2c:e0: f9:83:21:4f:0c:19:1b:18:f8:00:f1:09:85:f0:70:b9:bf:2a: 3f:13:1e:51:c3:6f:ba:4d:03:fc:da:84:f7:49:aa:4f:5d:e0: e0:c9:71:39:a5:b8:10:83:23:02:b2:f4:af:7d:d6:85:90:c2: fd:fd:d7:2b:87:67:8e:af:42:97:cd:90:6f:0e:cd:fc:22:9f: f8:32:fd:26:12:7b:35:a2:1d:1c:1c:3e:3f:a5:a8:c2:db:22: c1:90:f8:c0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5a/JwmFpspRpOynQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcwMTE1MDAxNVoXDTI3MTIxMzIwMDE1MFowLzEtMCsGA1UEAxMk Y2FmYjUxODAtZWI2NS00YWEzLThjZTAtOWQyYmQ1N2U5YTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZpB9BWWLnemFSxA6dDf6pqJr2F/rKFc9qC5 8Szv5vi4M9v/BytEFED3dQYYlj8owJPoi2q88ItyoKv2TcT5iBbKm8tPps2ktHn4 JIH4+Ac0q6dL2wbcF9TBl+wGuPoy90tgIXf/wo3yw2DmousfCY5z+AcXhe4js3X0 I0HvfEIrbknxXkERmn6hnHgqk5D/uUZkcInF7Kg7HrO5ZYMG370HpLuWD8dGjFxv G9wcflJukaqlMcGsOlfVKIlwDTeqMZsShcnsCPOI0E2eRvI4zSikkIv/uETDSkyo 2A0ETLEPb4yCKmVkyUvHkaQWKzlnYuwCqcn09RKwXrdUvrISOwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIK2bmCvTEbLBFjT3xJaj7k4b49gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j YWZiNTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJiZDU3ZTlhMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NhZmI1MTgwLWViNjUtNGFhMy04 Y2UwLTlkMmJkNTdlOWEzNS9jYWZiNTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJiZDU3 ZTlhMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAIX9rAwDgQCAAIwCAMGACYC9W8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDTOjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCP3EMU+hrie1W+Elg+WYcd/0k3 46xyNddthlcmv6he3vvHh0nMHABiZ279keNKzuw34KlhB78akxlrRzCzta4Sby8Z vGWtT8aBMA5CjRp+UJvs+aXWzZU6/X8KL+Ur0fGXzdSHNpUiT+YItJXGNvoGVfQY rIeqe8LhPLhattGlyE8sVyhrt45Nfndq5tB7OMYnSXxZSZVSjNLAR0tSojiPLOD5 gyFPDBkbGPgA8QmF8HC5vyo/Ex5Rw2+6TQP82oT3SapPXeDgyXE5pbgQgyMCsvSv fdaFkML9/dcrh2eOr0KXzZBvDs38Ip/4Mv0mEns1oh0cHD4/pajC2yLBkPjA -----END CERTIFICATE-----Generated at Thu Jul 23 22:52:01 2026 by rpki-client