$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer File: be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer (raw, json) Hash identifier: F8FT3+bYZf6INigFi/4dE4x883ItU6z6zKyM0rAvKMw= Subject key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584E8B1D714577B3E7B6E5034E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Jul 2026 20:45:12 +0000 Certificate not after: Fri 20 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 399935 IP: 23.168.216.0/24 IP: 2602:f99d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:1d:71:45:77:b3:e7:b6:e5:03:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jul 18 20:45:12 2026 GMT Not After : Oct 20 20:45:12 2028 GMT Subject: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:67:a3:9f:43:38:ce:41:54:8a:94:54:14: 46:a8:85:6a:ec:be:e3:92:aa:a7:b5:3e:55:a4:bb: 5c:62:54:77:a8:23:4b:eb:f9:66:5a:1e:51:8c:4e: 30:1a:a1:ae:e7:f8:91:bd:9c:77:89:26:b1:78:49: 9f:92:f3:f7:cc:bc:b1:24:14:e6:2c:cb:b6:05:54: 21:c0:f5:f3:27:38:4a:e7:24:fa:8d:c1:73:06:b2: 35:97:cd:20:de:88:74:d2:6a:3d:4d:ca:19:19:2d: f9:e4:7a:6a:d1:b2:66:4d:ad:43:a4:f4:a5:ce:f4: 10:4e:e5:95:6b:c5:25:d7:61:34:b0:3b:a5:0e:2a: 86:2c:6f:d1:2d:24:93:20:bf:69:57:b1:05:cb:c8: 04:f3:6c:3e:64:3b:fa:91:83:f6:9b:05:7a:09:9e: c1:1c:4b:54:0d:2a:1f:f1:74:3c:7e:6c:87:27:fb: 80:6b:e0:bc:95:34:44:de:de:5f:66:7d:ad:af:85: 73:f0:4d:10:a4:43:ac:6a:6c:d1:fa:cd:5b:9f:e3: 26:6f:3d:21:db:d9:a3:7e:0b:7e:c1:aa:4a:96:fe: ad:59:7d:0f:8b:9b:d4:d8:3d:a3:42:11:28:85:4b: ca:cb:4b:96:a5:dd:d8:84:b6:33:cc:1a:19:b5:aa: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.168.216.0/24 IPv6: 2602:f99d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399935 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c2:f2:53:56:dd:5f:ec:bb:4d:a0:eb:a7:e1:50:21:9a:68: 0b:77:c6:82:42:a4:b3:a1:e6:87:8f:47:9a:6d:84:95:9d:62: 24:01:ae:d0:b3:c9:d6:2a:ca:8e:db:a7:bf:09:e0:99:f5:a6: fc:52:71:4c:3e:22:37:07:bf:f4:9a:38:15:5e:48:dd:cd:b4: 6a:3d:4d:94:9f:33:9d:f9:94:8e:8a:5f:a8:2b:a9:55:2c:f4: b0:ab:c9:aa:80:2d:4b:b6:2c:af:49:85:a4:f1:fa:95:48:50: d6:ad:15:40:b2:65:8d:7b:4c:95:45:f3:d9:b1:cd:bb:23:15: 11:0a:85:f9:24:23:d9:03:cd:48:41:ee:97:6c:cf:41:7b:44: 9f:9f:81:56:3d:b1:29:2a:00:13:7a:ee:3b:f3:0e:f0:ea:c8: 64:0f:5b:e0:a4:a3:db:82:f6:2c:9e:6f:91:fe:9b:63:f2:68: c8:72:d9:55:a8:c0:20:b9:e5:b9:61:30:b4:19:d2:1a:3b:ab: 7c:b9:19:86:da:81:40:59:e0:f8:5e:a6:e4:5e:f5:97:4a:3b: b8:e0:7c:e9:da:57:39:11:9d:ac:81:72:c5:82:00:f6:59:ad: 88:ce:07:08:f3:73:8c:eb:3b:b1:0b:ab:66:2b:cd:fc:6f:db: 0e:25:3c:30 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6LHXFFd7PntuUDToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDcxODIwNDUxMloXDTI4MTAyMDIwNDUxMlowLzEtMCsGA1UEAxMk YmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUwMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtRno59DOM5BVIqUVBRGqIVq7L7jkqqntT5V pLtcYlR3qCNL6/lmWh5RjE4wGqGu5/iRvZx3iSaxeEmfkvP3zLyxJBTmLMu2BVQh wPXzJzhK5yT6jcFzBrI1l80g3oh00mo9TcoZGS355Hpq0bJmTa1DpPSlzvQQTuWV a8Ul12E0sDulDiqGLG/RLSSTIL9pV7EFy8gE82w+ZDv6kYP2mwV6CZ7BHEtUDSof 8XQ8fmyHJ/uAa+C8lTRE3t5fZn2tr4Vz8E0QpEOsamzR+s1bn+Mmbz0h29mjfgt+ wapKlv6tWX0Pi5vU2D2jQhEohUvKy0uWpd3YhLYzzBoZtapLjQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBBEon9dy3sBGptt621HPp+2UaWEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i ZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2JlNjllN2FlLTQ2OWQtNDAwZS04 ZjJlLTRlYmZjMWJlMDA5OC9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFi ZTAwOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqNgwDgQCAAIwCAMGACYC+Z0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYaPzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzwvJTVt1f7LtNoOun4VAhmmgL d8aCQqSzoeaHj0eabYSVnWIkAa7Qs8nWKsqO26e/CeCZ9ab8UnFMPiI3B7/0mjgV XkjdzbRqPU2UnzOd+ZSOil+oK6lVLPSwq8mqgC1LtiyvSYWk8fqVSFDWrRVAsmWN e0yVRfPZsc27IxURCoX5JCPZA81IQe6XbM9Be0Sfn4FWPbEpKgATeu478w7w6shk D1vgpKPbgvYsnm+R/ptj8mjIctlVqMAgueW5YTC0GdIaO6t8uRmG2oFAWeD4Xqbk XvWXSju44Hzp2lc5EZ2sgXLFggD2Wa2IzgcI83OM6zuxC6tmK838b9sOJTww -----END CERTIFICATE-----Generated at Fri Jul 24 01:45:32 2026 by rpki-client