$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer File: 5a791677-2f6b-4828-a754-1d16b76a8a68.cer (raw, json) Hash identifier: W1X2BD64Oy3nvyqa1NK7Zev2ZuAJzggclEJwN40fwE0= Subject key identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D4BED52B3456ADF377794F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 12:45:22 +0000 Certificate not after: Wed 28 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 46951 IP: 23.131.28.0/24 IP: 2602:f768::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:ed:52:b3:45:6a:df:37:77:94:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 26 12:45:22 2026 GMT Not After : Jun 28 12:45:22 2028 GMT Subject: CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:35:9d:cb:7f:28:28:a1:48:c4:07:fc:2f:2e: a0:5f:b5:2f:b3:ef:67:99:a8:b9:a3:73:91:f5:8d: ae:e9:5c:e4:72:10:ea:a8:8d:20:4a:42:20:b2:be: 5c:7e:45:b6:98:b2:a7:0b:ff:82:a5:a2:6e:3c:0c: 1d:6b:9b:3e:4e:aa:da:7c:a1:59:9b:6c:35:36:a4: dc:19:9f:2f:8d:6e:b1:a4:54:d0:6e:d4:b7:67:90: 29:11:65:0f:e3:ff:d0:c6:7e:09:cd:7f:db:9a:a6: 7f:be:ae:c8:01:70:cc:88:6f:1e:70:c9:82:f5:24: 5f:77:6c:e8:c5:66:61:03:64:46:2d:8d:a9:e8:91: b1:69:48:bd:5f:68:b2:be:76:ed:a2:a0:30:88:c9: 99:ef:f1:b9:da:c8:64:0b:21:11:97:b0:af:05:97: 98:6a:fa:af:10:9f:ad:0c:2e:1b:d6:65:d8:af:86: dd:9a:ce:9c:ea:d5:1a:c7:db:9f:ac:90:4e:ad:2c: 95:fb:1e:2a:63:0a:35:06:42:aa:9b:b0:3c:22:08: ef:bd:31:f2:90:ba:05:f4:72:d8:cb:f1:fa:18:ea: 25:51:56:3a:10:0e:f6:59:be:19:b8:d4:27:55:b9: 31:c0:bf:8c:02:9f:12:e5:40:0a:b9:cc:fc:ef:5e: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.28.0/24 IPv6: 2602:f768::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46951 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4d:3b:85:0e:22:c5:86:1e:14:39:12:a4:84:56:b1:cb:d1: 39:f1:90:8a:2c:73:8e:0a:5e:18:82:96:a5:05:0a:01:af:5f: 3b:38:a0:01:66:08:df:1f:dc:2e:cf:37:fa:0d:bb:37:9e:1e: b0:ae:05:6f:59:a2:06:f9:7f:4e:87:0f:d5:93:82:13:9e:de: df:7a:0d:5f:b8:d1:0b:0f:eb:e2:9f:6e:27:33:94:a8:9c:81: b3:d5:09:5d:e3:61:1e:b2:16:03:b2:fb:5f:56:a4:61:15:f0: e6:b4:54:52:1d:2e:d7:cb:7e:cf:76:b8:42:91:01:4b:27:03: 69:0f:0b:a7:4f:c7:c4:3b:38:c8:2b:44:e2:f9:36:e0:41:9e: 4b:dd:1c:6f:c7:d0:6f:0c:f7:db:98:dc:ce:8f:84:f5:e5:40: ba:40:85:1c:74:57:df:20:2b:4f:77:f2:bb:a4:48:a6:e7:57: ca:d2:cb:99:08:09:8a:b0:37:50:9f:c8:d9:5c:c3:08:0b:17: 26:75:e2:d7:73:cf:3b:69:2d:a2:e1:64:81:b4:64:6c:c0:b5: 54:2e:6f:24:14:9a:e7:9b:7f:10:48:5c:33:2a:39:1f:f4:99: aa:38:f7:3a:05:7c:06:12:b9:e4:10:32:94:ba:82:69:ce:3f: 69:72:a5:fd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1L7VKzRWrfN3eU9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyNjEyNDUyMloXDTI4MDYyODEyNDUyMlowLzEtMCsGA1UEAxMk NWE3OTE2NzctMmY2Yi00ODI4LWE3NTQtMWQxNmI3NmE4YTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDWdy38oKKFIxAf8Ly6gX7Uvs+9nmai5o3OR 9Y2u6VzkchDqqI0gSkIgsr5cfkW2mLKnC/+CpaJuPAwda5s+TqrafKFZm2w1NqTc GZ8vjW6xpFTQbtS3Z5ApEWUP4//Qxn4JzX/bmqZ/vq7IAXDMiG8ecMmC9SRfd2zo xWZhA2RGLY2p6JGxaUi9X2iyvnbtoqAwiMmZ7/G52shkCyERl7CvBZeYavqvEJ+t DC4b1mXYr4bdms6c6tUax9ufrJBOrSyV+x4qYwo1BkKqm7A8IgjvvTHykLoF9HLY y/H6GOolUVY6EA72Wb4ZuNQnVbkxwL+MAp8S5UAKucz8714UBQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFALY5ciTpPgCtjTZtR+PQVW7aplGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YTc5MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2Yjc2YThhNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVhNzkxNjc3LTJmNmItNDgyOC1h NzU0LTFkMTZiNzZhOGE2OC81YTc5MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2Yjc2 YThhNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgxwwDgQCAAIwCAMGBCYC92gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC3ZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSTTuFDiLFhh4UORKkhFaxy9E5 8ZCKLHOOCl4YgpalBQoBr187OKABZgjfH9wuzzf6Dbs3nh6wrgVvWaIG+X9Ohw/V k4ITnt7feg1fuNELD+vin24nM5SonIGz1Qld42EeshYDsvtfVqRhFfDmtFRSHS7X y37PdrhCkQFLJwNpDwunT8fEOzjIK0Ti+TbgQZ5L3Rxvx9BvDPfbmNzOj4T15UC6 QIUcdFffICtPd/K7pEim51fK0suZCAmKsDdQn8jZXMMICxcmdeLXc887aS2i4WSB tGRswLVULm8kFJrnm38QSFwzKjkf9JmqOPc6BXwGErnkEDKUuoJpzj9pcqX9 -----END CERTIFICATE-----Generated at Sat Mar 28 10:22:27 2026 by rpki-client