$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer File: 2da4b7dc-6e43-4290-86d6-84e81139f164.cer (raw, json) Hash identifier: r7DEeckuK8IKa4O3voMzNq4mvJjPEJD8HGokAMm3K3c= Subject key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D3F5D3D0DA9A96EC1B362A7E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 00:45:21 +0000 Certificate not after: Sat 24 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 35972 IP: 23.130.236.0/24 IP: 2602:f76d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:5d:3d:0d:a9:a9:6e:c1:b3:62:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 22 00:45:21 2026 GMT Not After : Jun 24 00:45:21 2028 GMT Subject: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:d8:08:f3:c4:03:ee:a1:a9:a1:a5:c1:19: 47:9a:3c:7e:02:fc:5a:b0:9a:37:21:51:1c:92:2d: 8b:6c:dd:e4:e9:d9:34:97:94:6a:53:b0:e1:bc:cf: bf:5b:f0:85:f7:53:9e:a9:f2:ec:df:df:d2:b3:73: 93:f3:3b:d8:60:9d:c7:d9:4b:43:05:4d:f8:f1:e7: 9c:30:a8:d0:70:58:f5:75:6c:9d:01:26:09:9c:2e: 2c:45:6d:93:d1:30:f3:9d:78:c7:1b:ba:c1:02:be: 87:66:f5:e9:23:3d:d4:61:26:37:ee:96:b1:42:a1: b2:47:55:66:a1:53:c2:82:05:95:a7:26:6f:2d:cc: d7:e4:e9:90:d7:3c:e1:13:f6:7e:5f:4d:fc:76:1d: 7d:7c:da:af:9e:25:e6:1a:09:a1:02:61:42:a4:f1: f4:a6:39:16:e4:75:95:ac:a9:af:45:6c:b0:fd:db: c8:4a:40:31:fd:7a:56:3b:ce:e9:5b:a1:a3:b7:04: 8a:0f:67:37:76:85:5b:09:82:ea:73:0a:75:98:b8: 07:a2:d1:fe:8a:b8:6d:2b:03:25:1a:3b:40:58:eb: d8:fe:15:16:e8:d1:42:8a:63:76:76:11:bb:79:ca: 50:e1:fc:ee:44:48:d3:41:66:b8:52:4e:01:52:c1: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35972 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:af:36:25:32:e6:9e:ae:7e:56:f8:97:2c:17:57:8f:15:ac: 85:3d:d6:0c:d1:f5:eb:37:d9:5a:6a:7e:db:12:5f:33:fe:35: 1f:e4:77:4e:3e:52:3a:a9:6f:3b:08:8e:84:88:22:6e:fb:a0: 3b:2f:7d:e1:bb:c1:26:cf:b9:aa:14:b2:8f:c8:b9:23:1b:95: 7c:26:21:1e:fd:6b:f5:a8:2e:82:45:44:61:4f:c2:85:af:97: c8:db:9f:13:53:0d:49:d4:e3:19:de:d4:b4:9f:75:1e:2e:41: fa:b8:fa:d7:77:6e:0c:d9:3e:39:6a:0a:5d:71:1b:ca:6f:c9: 85:ab:28:8b:c8:31:9f:70:8a:7e:b5:d6:54:cf:c0:78:8c:89: fe:23:39:78:0c:b1:77:ca:87:eb:69:2c:a3:46:18:55:ee:ee: f8:9d:a6:74:3b:15:3b:0d:b4:97:c1:61:25:b0:d2:fa:04:c9: 47:e3:5a:1d:17:fe:f2:c5:32:fe:eb:ea:9c:24:0d:48:3a:0c: ba:b3:6b:87:71:f6:9d:b7:10:01:51:2a:b8:19:ac:a8:84:e5: 39:a7:86:5a:43:dd:25:1c:68:50:54:d9:ed:eb:a5:91:03:19: ba:a9:ef:a6:bd:29:4d:cb:89:6c:26:2d:3a:4a:01:08:84:01: b0:e6:c6:db -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0/XT0NqaluwbNip+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMjAwNDUyMVoXDTI4MDYyNDAwNDUyMVowLzEtMCsGA1UEAxMk MmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlmMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUjYCPPEA+6hqaGlwRlHmjx+AvxasJo3IVEc ki2LbN3k6dk0l5RqU7DhvM+/W/CF91OeqfLs39/Ss3OT8zvYYJ3H2UtDBU348eec MKjQcFj1dWydASYJnC4sRW2T0TDznXjHG7rBAr6HZvXpIz3UYSY37paxQqGyR1Vm oVPCggWVpyZvLczX5OmQ1zzhE/Z+X038dh19fNqvniXmGgmhAmFCpPH0pjkW5HWV rKmvRWyw/dvISkAx/XpWO87pW6GjtwSKD2c3doVbCYLqcwp1mLgHotH+irhtKwMl GjtAWOvY/hUW6NFCimN2dhG7ecpQ4fzuREjTQWa4Uk4BUsFp6wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFot4l9JyamXzomyV76kHyCODi7PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y ZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJkYTRiN2RjLTZlNDMtNDI5MC04 NmQ2LTg0ZTgxMTM5ZjE2NC8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEz OWYxNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXguwwDgQCAAIwCAMGBCYC920AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCMhDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTrzYlMuaern5W+JcsF1ePFayF PdYM0fXrN9laan7bEl8z/jUf5HdOPlI6qW87CI6EiCJu+6A7L33hu8Emz7mqFLKP yLkjG5V8JiEe/Wv1qC6CRURhT8KFr5fI258TUw1J1OMZ3tS0n3UeLkH6uPrXd24M 2T45agpdcRvKb8mFqyiLyDGfcIp+tdZUz8B4jIn+Izl4DLF3yofraSyjRhhV7u74 naZ0OxU7DbSXwWElsNL6BMlH41odF/7yxTL+6+qcJA1IOgy6s2uHcfadtxABUSq4 GayohOU5p4ZaQ90lHGhQVNnt66WRAxm6qe+mvSlNy4lsJi06SgEIhAGw5sbb -----END CERTIFICATE-----Generated at Wed Mar 25 23:13:19 2026 by rpki-client