$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer File: a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer (raw, json) Hash identifier: icvPkxnhEZh7SHI4r7X2USez/wWBjz7mL47nqqsmi9Q= Subject key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584DC98E0FD59F5C282B95C2EC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 May 2026 12:45:17 +0000 Certificate not after: Sat 12 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 30114 IP: 23.146.88.0/24 IP: 140.235.104.0/22 IP: 2602:fab0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:8e:0f:d5:9f:5c:28:2b:95:c2:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 10 12:45:17 2026 GMT Not After : Aug 12 12:45:17 2028 GMT Subject: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:97:08:d4:f9:bf:fe:d2:ed:c3:64:6a:ad: 34:be:c9:ca:bf:35:22:82:58:28:fc:16:5f:7a:aa: 89:f7:30:6a:28:0b:4d:9e:cf:8b:2b:8c:12:3e:05: 72:c3:e6:df:14:5f:03:b2:c0:7f:b0:5c:c9:13:35: bd:85:91:85:71:18:59:3a:ee:c5:66:ae:d3:58:e8: e8:3a:97:87:a4:8e:ac:61:24:8e:25:36:9d:1b:2a: 89:21:bb:21:8e:99:05:7a:50:40:26:45:6d:0b:17: 3d:cf:8c:ab:f3:1c:f0:12:0d:05:9b:f6:1e:2f:c0: ed:2f:b4:47:b1:f4:f5:6b:2f:e6:4c:d5:b5:3f:a5: 41:f4:8a:54:1d:04:4d:d4:8b:14:dc:b9:9e:95:00: 6e:6c:00:16:c4:4d:6a:2d:9c:97:08:31:43:0c:bb: 03:c7:95:e5:15:e0:82:4f:20:99:c7:f1:6f:62:44: 19:5b:3c:76:8f:c4:93:44:85:98:6f:61:cb:1e:64: 8d:3c:b0:da:10:4d:be:6d:4a:8e:37:6c:7e:bf:83: 80:c4:9f:d8:e3:a8:8a:0c:b7:bd:bc:2f:19:1c:8f: 88:95:53:e6:05:7b:b8:f3:d2:99:db:85:48:a1:1b: 51:f8:ab:1b:70:f6:be:93:9c:a3:65:c8:71:08:ba: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.88.0/24 140.235.104.0/22 IPv6: 2602:fab0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30114 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c1:c2:bc:97:73:ef:5e:ec:bc:1d:83:78:f8:b5:49:7b:3d: f7:31:51:5b:2b:ef:45:ae:02:04:a5:03:70:34:85:57:ed:ef: ee:62:e7:c5:9d:eb:a1:00:2f:78:00:ca:8e:53:c0:56:1b:28: f1:45:3e:17:60:62:9c:34:22:d5:20:91:d3:2a:76:22:7e:b2: b1:df:b2:c4:2d:ad:6b:02:69:4f:66:15:a8:43:4a:98:e1:31: 94:a1:9d:59:e8:fe:31:65:03:9d:0f:ac:bf:51:cd:0f:59:6b: b9:8b:b4:2d:d6:23:56:99:72:80:53:13:2b:6a:47:23:b5:27: 71:01:65:ab:48:06:0c:cf:ed:8c:d8:1e:b6:92:de:ce:81:54: f7:96:15:ff:ca:39:f7:ba:02:89:b5:95:47:dc:18:a9:99:ee: 30:eb:e7:44:4d:52:3b:a5:3c:db:68:6a:ce:07:b7:60:b6:81: 22:9a:e3:8a:ca:8f:d4:68:e4:6d:fb:50:15:ce:fd:b4:73:68: 80:b2:8d:5f:bd:60:06:b8:c2:c6:cf:1c:ef:6d:03:90:97:40: eb:51:33:4a:ee:02:52:73:9c:e4:13:0a:a6:03:8e:13:cd:4f: f4:cf:22:db:d9:0c:0a:bd:89:a2:ae:d4:b7:bb:b6:8f:b4:7a: c4:3c:d7:51 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE3Jjg/Vn1woK5XC7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDUxMDEyNDUxN1oXDTI4MDgxMjEyNDUxN1owLzEtMCsGA1UEAxMk YTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZhMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl6XCNT5v/7S7cNkaq00vsnKvzUiglgo/BZf eqqJ9zBqKAtNns+LK4wSPgVyw+bfFF8DssB/sFzJEzW9hZGFcRhZOu7FZq7TWOjo OpeHpI6sYSSOJTadGyqJIbshjpkFelBAJkVtCxc9z4yr8xzwEg0Fm/YeL8DtL7RH sfT1ay/mTNW1P6VB9IpUHQRN1IsU3LmelQBubAAWxE1qLZyXCDFDDLsDx5XlFeCC TyCZx/FvYkQZWzx2j8STRIWYb2HLHmSNPLDaEE2+bUqON2x+v4OAxJ/Y46iKDLe9 vC8ZHI+IlVPmBXu489KZ24VIoRtR+KsbcPa+k5yjZchxCLp0mQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFI8sGl2HN3xHIR4XenrFYsEHXt5YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h NzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2E3NGJiMmYxLTU5NjYtNGM0YS1h NWU0LWFjZTU5ZTFmYTI3ZS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUx ZmEyN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXklgDBAKM62gwDgQCAAIwCAMGACYC+rAAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnWiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADbBwryXc+9e7Lwdg3j4 tUl7PfcxUVsr70WuAgSlA3A0hVft7+5i58Wd66EAL3gAyo5TwFYbKPFFPhdgYpw0 ItUgkdMqdiJ+srHfssQtrWsCaU9mFahDSpjhMZShnVno/jFlA50PrL9RzQ9Za7mL tC3WI1aZcoBTEytqRyO1J3EBZatIBgzP7YzYHraS3s6BVPeWFf/KOfe6Aom1lUfc GKmZ7jDr50RNUjulPNtoas4Ht2C2gSKa44rKj9Ro5G37UBXO/bRzaICyjV+9YAa4 wsbPHO9tA5CXQOtRM0ruAlJznOQTCqYDjhPNT/TPItvZDAq9iaKu1Le7to+0esQ8 11E= -----END CERTIFICATE-----Generated at Wed May 13 01:39:39 2026 by rpki-client