$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc.cer File: aa2f92fe-a911-49e5-8901-3a0d957cbbfc.cer (raw, json) Hash identifier: FZxMpXKGHBSZv5xRl6FERgF0EzZdL3dhOAjLvOm1UJc= Subject key identifier: 58:B8:09:6C:B9:35:A1:5A:98:64:7E:63:4A:F0:FE:F7:AC:E2:E4:E8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D4A87FA4726230164C1EEB6E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/aa2f92fe-a911-49e5-8901-3a0d957cbbfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 00:45:22 +0000 Certificate not after: Wed 28 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 30002 IP: 23.131.148.0/24 IP: 2602:f754::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:87:fa:47:26:23:01:64:c1:ee:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 26 00:45:22 2026 GMT Not After : Jun 28 00:45:22 2028 GMT Subject: CN=aa2f92fe-a911-49e5-8901-3a0d957cbbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:3f:a9:84:f4:8c:f6:6c:e2:d3:88:19:1f: 31:bf:a2:ac:a2:14:6d:53:5c:a5:3f:aa:4d:a8:22: 7c:99:9f:75:92:d9:b9:48:bd:c3:02:4d:11:59:38: 17:91:34:2d:27:e1:5d:6b:c4:7c:d9:35:34:21:d5: cd:19:fd:e9:11:1e:97:ec:92:3c:a2:e3:80:93:76: c6:a2:d7:00:56:33:f8:64:59:3f:82:98:c0:c3:e0: b4:ea:c0:1b:fc:95:9e:18:4b:74:d1:ad:c2:e2:e3: a1:74:4a:0c:6a:b6:f1:92:be:29:ab:55:a7:8d:94: d4:36:af:83:89:e0:db:b7:0e:8f:8d:a2:15:d8:fa: 08:5e:57:8e:1a:e1:66:a0:b9:32:26:7e:b8:d9:d6: 7a:33:32:3c:97:14:0f:02:3d:03:86:ef:5d:ca:0e: 95:da:5b:0a:35:e4:c1:1e:9e:1f:81:7b:6e:78:44: 13:5b:83:9b:f0:4f:ba:a3:3b:08:e7:93:f9:ce:9b: ea:f6:b2:25:54:f5:f2:ea:d2:35:fd:91:ad:cf:eb: 54:3c:22:2f:d8:25:91:82:c2:51:48:f0:0e:30:56: a0:49:d5:df:bf:cc:35:0e:72:86:bc:76:2f:e0:76: cd:57:21:9d:e5:e6:55:4a:4f:73:fa:6d:28:84:fb: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:09:6C:B9:35:A1:5A:98:64:7E:63:4A:F0:FE:F7:AC:E2:E4:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/aa2f92fe-a911-49e5-8901-3a0d957cbbfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.131.148.0/24 IPv6: 2602:f754::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30002 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:78:82:dd:04:c8:33:e2:86:e4:17:42:cb:e9:c3:f9:ca:ca: 62:91:95:85:10:c0:33:2a:4c:6c:7d:56:58:c3:f0:51:7d:92: 7a:ac:45:50:f6:a2:a8:8f:82:54:56:d8:57:67:91:ca:1b:42: 9f:db:88:48:6c:8e:c6:ec:4b:b6:33:81:1b:d2:d3:8e:b2:ca: a1:db:74:8e:a1:7b:cb:49:fb:ab:8b:4e:4e:6d:69:ee:07:4e: aa:94:5a:6b:87:1f:cc:93:e7:53:e0:a3:66:94:d6:55:a7:76: 80:cf:95:50:99:df:04:91:c2:de:34:78:80:cf:fc:21:eb:61: 22:ff:2d:15:ce:f0:d2:bb:f6:98:d5:fb:8b:91:b9:22:f7:82: 44:5d:a7:98:d2:a1:fe:e7:69:62:7d:fb:6b:72:93:b1:43:ef: 29:07:6a:3f:67:7d:54:d8:62:63:6b:73:8b:34:b3:1d:54:07: 85:09:72:41:0b:b2:3f:cd:f7:bf:98:9b:1b:e6:09:70:f7:9c: 9d:9c:8e:d8:b2:06:f4:b1:95:ad:01:df:5d:8b:b9:c4:95:7d: 0b:38:7b:7a:ec:cd:d9:0f:5d:78:c5:fd:e1:80:95:33:41:c2: 0f:50:8e:07:5d:7f:f4:be:78:fc:aa:2a:d0:af:d5:ec:7d:69: 9e:2f:e4:4c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE1Kh/pHJiMBZMHutuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyNjAwNDUyMloXDTI4MDYyODAwNDUyMlowLzEtMCsGA1UEAxMk YWEyZjkyZmUtYTkxMS00OWU1LTg5MDEtM2EwZDk1N2NiYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4M/qYT0jPZs4tOIGR8xv6KsohRtU1ylP6pN qCJ8mZ91ktm5SL3DAk0RWTgXkTQtJ+Fda8R82TU0IdXNGf3pER6X7JI8ouOAk3bG otcAVjP4ZFk/gpjAw+C06sAb/JWeGEt00a3C4uOhdEoMarbxkr4pq1WnjZTUNq+D ieDbtw6PjaIV2PoIXleOGuFmoLkyJn642dZ6MzI8lxQPAj0Dhu9dyg6V2lsKNeTB Hp4fgXtueEQTW4Ob8E+6ozsI55P5zpvq9rIlVPXy6tI1/ZGtz+tUPCIv2CWRgsJR SPAOMFagSdXfv8w1DnKGvHYv4HbNVyGd5eZVSk9z+m0ohPuDawIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFi4CWy5NaFamGR+Y0rw/ves4uToMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h YTJmOTJmZS1hOTExLTQ5ZTUtODkwMS0zYTBkOTU3Y2JiZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FhMmY5MmZlLWE5MTEtNDllNS04 OTAxLTNhMGQ5NTdjYmJmYy9hYTJmOTJmZS1hOTExLTQ5ZTUtODkwMS0zYTBkOTU3 Y2JiZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg5QwDgQCAAIwCAMGBCYC91QAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnUyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI14gt0EyDPihuQXQsvpw/nKymKR lYUQwDMqTGx9VljD8FF9knqsRVD2oqiPglRW2FdnkcobQp/biEhsjsbsS7YzgRvS 046yyqHbdI6he8tJ+6uLTk5tae4HTqqUWmuHH8yT51Pgo2aU1lWndoDPlVCZ3wSR wt40eIDP/CHrYSL/LRXO8NK79pjV+4uRuSL3gkRdp5jSof7naWJ9+2tyk7FD7ykH aj9nfVTYYmNrc4s0sx1UB4UJckELsj/N97+YmxvmCXD3nJ2cjtiyBvSxla0B312L ucSVfQs4e3rszdkPXXjF/eGAlTNBwg9Qjgddf/S+ePyqKtCv1ex9aZ4v5Ew= -----END CERTIFICATE-----Generated at Thu Mar 26 04:58:05 2026 by rpki-client