$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.cer File: 8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.cer (raw, json) Hash identifier: CSnTNAkpCXa/EPHzAnbwen4V6HEVNTxVrN1i9eY1quk= Subject key identifier: AF:15:BD:2C:0D:A3:CA:B6:C2:CE:1B:97:AF:FD:2A:D4:C3:8D:3A:76 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D4227EEBFD7733BB39EA7D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 00:45:23 +0000 Certificate not after: Sun 25 Jun 2028 00:45:23 +0000 Subordinate resources: AS: 395297 IP: 23.130.12.0/24 IP: 2602:f78d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:27:ee:bf:d7:73:3b:b3:9e:a7:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 23 00:45:23 2026 GMT Not After : Jun 25 00:45:23 2028 GMT Subject: CN=8661935e-ae6c-488e-9f2d-5b3b4daaf1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8c:1b:4f:0e:ba:e6:b4:85:a9:73:b1:c9:fd: 3d:6c:8a:97:4b:34:7c:2e:a3:88:36:fb:1b:e6:3a: 9d:f1:ee:e6:80:71:18:31:ff:e4:6e:ee:28:a1:60: f9:80:35:e9:07:6c:74:5d:8a:34:34:0e:0b:5e:f7: b1:73:8f:87:e9:6f:db:1b:a9:64:7f:4c:c0:0b:b5: e6:8d:52:64:ba:88:77:0b:7c:a0:a1:3c:f7:1c:db: bd:b6:81:8e:48:d0:f5:8c:87:eb:b2:00:13:40:a7: b0:b8:7a:d7:1f:7c:81:9d:fb:7d:40:8a:34:e1:53: c0:cf:ae:ba:5a:cf:b4:ae:f1:7e:16:8b:2e:3f:4c: ed:c2:49:99:60:bb:b7:ac:b3:8a:90:30:1e:a5:0a: 75:42:d0:a8:13:1a:3c:1c:d0:6d:24:c5:52:7f:8f: 88:32:30:f3:f2:ea:29:6a:31:96:df:f4:eb:be:ce: 0b:3a:8d:bb:90:d7:a1:40:b4:7a:61:dd:0a:7b:2a: 39:65:e0:1f:87:f6:08:aa:e8:c5:00:3f:95:d1:2a: 1d:de:79:95:72:d6:e4:4e:ab:1b:6e:95:12:42:fd: ec:31:aa:e4:29:69:42:8d:1c:d2:b6:16:17:c7:04: 34:e4:a1:d8:3a:75:18:c0:99:8d:d2:c3:b8:43:c8: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:BD:2C:0D:A3:CA:B6:C2:CE:1B:97:AF:FD:2A:D4:C3:8D:3A:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.12.0/24 IPv6: 2602:f78d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395297 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:13:33:0c:67:4a:e6:87:77:7a:42:1f:a7:c1:2a:ec:7f:56: 0e:79:fa:f6:7f:32:7f:22:e4:29:76:20:3b:55:75:68:a5:54: e2:fa:70:b1:a9:05:77:e3:64:d3:02:76:ee:8a:e6:c2:04:56: 7c:5b:c9:53:05:5a:51:43:4a:01:b7:c1:f3:05:c2:55:26:e4: 9b:90:5f:be:08:fc:88:ed:4b:86:f5:76:ae:c4:6d:7d:fb:94: d4:50:aa:21:b0:5d:e8:4e:f2:51:46:ee:b8:9c:46:9d:4f:a6: 51:d6:16:e5:ab:66:9b:c0:f7:93:f6:7f:fb:2e:14:df:cc:4d: 89:ad:73:f2:a0:19:38:b7:69:79:09:83:73:b4:69:b5:10:15: ab:d1:6b:c0:42:1e:2d:d6:88:de:e9:84:a2:9b:7d:92:7c:df: fb:4a:a1:f4:07:6a:11:11:bf:0c:dd:d0:ce:5a:2b:3b:07:d7: 34:d7:a5:e8:d3:a5:23:4c:c5:f5:28:3b:98:e6:f4:68:20:4a: e2:66:c0:59:9b:fc:21:6a:ee:37:40:a6:9a:7b:88:6c:cd:0c: 70:45:38:a4:28:a6:dc:31:2c:77:56:95:55:91:3a:b9:1b:9d: ad:fa:be:62:46:df:7f:c9:be:ae:44:88:8f:17:f4:69:83:b5: 21:b7:81:37 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1CJ+6/13M7s56n2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyMzAwNDUyM1oXDTI4MDYyNTAwNDUyM1owLzEtMCsGA1UEAxMk ODY2MTkzNWUtYWU2Yy00ODhlLTlmMmQtNWIzYjRkYWFmMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgowbTw665rSFqXOxyf09bIqXSzR8LqOINvsb 5jqd8e7mgHEYMf/kbu4ooWD5gDXpB2x0XYo0NA4LXvexc4+H6W/bG6lkf0zAC7Xm jVJkuoh3C3ygoTz3HNu9toGOSND1jIfrsgATQKewuHrXH3yBnft9QIo04VPAz666 Ws+0rvF+FosuP0ztwkmZYLu3rLOKkDAepQp1QtCoExo8HNBtJMVSf4+IMjDz8uop ajGW3/Trvs4LOo27kNehQLR6Yd0Keyo5ZeAfh/YIqujFAD+V0Sod3nmVctbkTqsb bpUSQv3sMarkKWlCjRzSthYXxwQ05KHYOnUYwJmN0sO4Q8imGwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK8VvSwNo8q2ws4bl6/9KtTDjTp2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 NjYxOTM1ZS1hZTZjLTQ4OGUtOWYyZC01YjNiNGRhYWYxZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg2NjE5MzVlLWFlNmMtNDg4ZS05 ZjJkLTViM2I0ZGFhZjFmNi84NjYxOTM1ZS1hZTZjLTQ4OGUtOWYyZC01YjNiNGRh YWYxZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXggwwDgQCAAIwCAMGBCYC940AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYIITBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALEzMMZ0rmh3d6Qh+nwSrsf1YO efr2fzJ/IuQpdiA7VXVopVTi+nCxqQV342TTAnbuiubCBFZ8W8lTBVpRQ0oBt8Hz BcJVJuSbkF++CPyI7UuG9XauxG19+5TUUKohsF3oTvJRRu64nEadT6ZR1hblq2ab wPeT9n/7LhTfzE2JrXPyoBk4t2l5CYNztGm1EBWr0WvAQh4t1oje6YSim32SfN/7 SqH0B2oREb8M3dDOWis7B9c016Xo06UjTMX1KDuY5vRoIEriZsBZm/whau43QKaa e4hszQxwRTikKKbcMSx3VpVVkTq5G52t+r5iRt9/yb6uRIiPF/Rpg7Uht4E3 -----END CERTIFICATE-----Generated at Wed Mar 25 23:06:49 2026 by rpki-client