$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer File: c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer (raw, json) Hash identifier: W016/okJSmMK2k90+Uzo8JbwK+mhQSkXljYaAuSRevo= Subject key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D9FADCDB87EF4C98D333C5880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Apr 2026 12:45:17 +0000 Certificate not after: Fri 28 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 8143 IP: 23.132.140.0/24 IP: 2602:f732::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:ad:cd:b8:7e:f4:c9:8d:33:3c:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 25 12:45:17 2026 GMT Not After : Jul 28 12:45:17 2028 GMT Subject: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:73:a9:ef:3e:24:e2:97:b4:54:9e:2d:79: 8a:8e:a3:e2:f7:20:bd:4a:39:e0:a0:9d:22:3f:48: bd:d0:70:5a:c9:ba:af:5b:7d:43:9d:64:63:27:a2: 8c:fc:23:ab:ee:c1:e3:b1:8a:b9:68:af:55:f9:57: f0:d6:c7:0f:79:e2:97:3e:49:25:9b:87:51:14:b6: c4:bd:de:6f:36:46:65:df:5a:d4:c7:7a:04:0c:cc: c9:d2:3e:3b:51:ac:90:fe:75:8a:0c:2d:c5:73:49: ee:ca:c0:df:2f:4f:0b:44:e3:31:80:83:90:86:ce: e7:72:ef:03:74:c3:ef:94:e9:69:f1:8b:af:83:72: f4:0c:da:f1:f4:b8:63:73:dd:b6:54:38:d7:bf:c6: 55:d0:dc:62:06:64:be:67:b6:84:3a:90:cf:69:28: 59:3c:6f:ff:cc:0d:15:5a:ed:65:e8:48:85:da:eb: cf:6a:d7:e1:a2:fe:08:53:1f:b5:94:66:42:50:76: dc:1d:d6:24:ff:3f:82:18:2a:a0:57:22:5b:1f:45: 65:57:80:b0:2c:06:11:29:ee:06:d7:6f:ee:4c:36: 60:59:50:a4:34:03:05:5b:88:84:a2:01:98:81:fb: 19:1e:51:05:14:86:5d:01:2e:a9:48:80:38:9a:c2: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.140.0/24 IPv6: 2602:f732::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8143 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8e:e5:4d:4a:f0:6f:f6:65:d3:62:fc:8d:c8:3d:36:bd:0d: c6:6f:4b:42:3f:58:46:af:c4:01:c9:ba:40:dd:06:d1:dc:c9: 2d:c1:a4:86:df:0f:e4:44:2d:b7:72:64:e6:e7:df:59:d0:f8: 97:05:b7:74:f2:6b:ea:18:cd:d1:c8:46:63:86:41:eb:7d:c2: fe:61:f3:f1:6c:2e:49:4a:55:6c:f1:ad:f8:cf:da:04:da:ca: f0:a2:1f:f7:8b:bf:32:54:8f:e6:e4:a9:93:de:1b:00:1a:44: 9e:a8:73:86:33:c0:24:6d:b1:eb:3e:f3:d3:1c:bc:1d:f2:9a: 52:50:63:5f:70:09:0a:c8:d6:8e:f3:87:17:49:3a:be:c3:70: 16:9c:56:5d:ef:ef:5c:30:cf:cb:0f:bc:c0:4a:36:77:4e:b2: 94:27:07:e9:ab:dc:25:bc:81:89:52:88:9f:ff:83:12:4e:dd: e9:f7:00:b2:d1:c3:24:00:f2:21:20:dc:28:54:f9:4f:bf:6f: 29:1a:6e:5e:fc:3a:06:ec:64:de:66:13:a1:b6:44:97:3a:6d: a0:af:96:4b:e0:12:cb:f8:db:74:80:68:88:94:48:2f:c2:cf: 4f:73:95:c8:90:d8:6d:4f:cc:07:fd:69:fe:19:1f:2d:37:ea: 0c:3a:fe:a2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2frc24fvTJjTM8WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyNTEyNDUxN1oXDTI4MDcyODEyNDUxN1owLzEtMCsGA1UEAxMk YzJiYjRjNTQtMTRhNi00ZTMyLWIzYTAtZGVmYWQzMDBkOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mdzqe8+JOKXtFSeLXmKjqPi9yC9SjngoJ0i P0i90HBaybqvW31DnWRjJ6KM/COr7sHjsYq5aK9V+Vfw1scPeeKXPkklm4dRFLbE vd5vNkZl31rUx3oEDMzJ0j47UayQ/nWKDC3Fc0nuysDfL08LROMxgIOQhs7ncu8D dMPvlOlp8Yuvg3L0DNrx9Lhjc922VDjXv8ZV0NxiBmS+Z7aEOpDPaShZPG//zA0V Wu1l6EiF2uvPatfhov4IUx+1lGZCUHbcHdYk/z+CGCqgVyJbH0VlV4CwLAYRKe4G 12/uTDZgWVCkNAMFW4iEogGYgfsZHlEFFIZdAS6pSIA4msIYZQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNRZYzSS04l1gq3l3t8buBib53ovMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j MmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMwMGQ5ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2MyYmI0YzU0LTE0YTYtNGUzMi1i M2EwLWRlZmFkMzAwZDlmYy9jMmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMw MGQ5ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhIwwDgQCAAIwCAMGACYC9zIAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAh/PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABiO5U1K8G/2ZdNi/I3IPTa9DcZv S0I/WEavxAHJukDdBtHcyS3BpIbfD+RELbdyZObn31nQ+JcFt3Tya+oYzdHIRmOG Qet9wv5h8/FsLklKVWzxrfjP2gTayvCiH/eLvzJUj+bkqZPeGwAaRJ6oc4YzwCRt ses+89McvB3ymlJQY19wCQrI1o7zhxdJOr7DcBacVl3v71wwz8sPvMBKNndOspQn B+mr3CW8gYlSiJ//gxJO3en3ALLRwyQA8iEg3ChU+U+/bykabl78OgbsZN5mE6G2 RJc6baCvlkvgEsv423SAaIiUSC/Cz09zlciQ2G1PzAf9af4ZHy036gw6/qI= -----END CERTIFICATE-----Generated at Tue May 12 22:07:26 2026 by rpki-client