$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd7f0796-c7f3-4fd2-adf3-d664f947da0a.cer File: fd7f0796-c7f3-4fd2-adf3-d664f947da0a.cer (raw, json) Hash identifier: PTFLJC/PpJQsFdzooqeA3/WWrdFZ86phU68mEkzjtv0= Subject key identifier: 8F:17:51:E1:05:94:79:65:42:59:EE:EB:01:AC:53:E4:4F:76:7A:77 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CED1FD7AAF79254D063FCF170 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd7f0796-c7f3-4fd2-adf3-d664f947da0a/fd7f0796-c7f3-4fd2-adf3-d664f947da0a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd7f0796-c7f3-4fd2-adf3-d664f947da0a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Feb 2026 13:45:22 +0000 Certificate not after: Thu 25 May 2028 12:45:22 +0000 Subordinate resources: AS: 33757 IP: 23.149.44.0/24 IP: 2602:fe22::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:1f:d7:aa:f7:92:54:d0:63:fc:f1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 20 13:45:22 2026 GMT Not After : May 25 12:45:22 2028 GMT Subject: CN=fd7f0796-c7f3-4fd2-adf3-d664f947da0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:84:0f:00:5d:fb:f7:c6:aa:45:55:80:2a: d5:4e:98:41:57:9e:66:9d:26:79:ce:f5:26:30:b5: c0:06:c0:dd:fc:4f:24:2a:59:9d:f3:4b:22:51:fa: be:f6:b1:44:1a:99:32:9e:24:e8:21:36:26:4e:bc: 61:90:71:04:30:bb:0e:8e:bd:55:d5:a0:86:3b:2b: 48:ea:3d:af:74:ad:f6:43:28:0d:a6:01:7f:fe:58: 77:f6:91:77:62:2b:7a:13:11:6a:dd:54:a8:f9:6e: 5c:42:5a:2f:36:75:4f:32:ce:51:65:34:36:b5:ed: ea:be:e9:f3:66:16:79:c8:25:99:4b:06:e8:67:57: 6b:9d:d7:a5:5e:60:21:3b:fc:f4:87:97:4b:44:95: 8a:2e:bb:74:58:e8:62:d6:d1:3f:40:9a:36:65:98: 04:1f:00:a4:9c:a2:ba:98:54:ee:05:e3:15:0c:e0: b9:e0:0b:b6:96:d1:cc:27:38:06:0c:1a:30:96:79: 6d:cb:95:f9:ef:ac:79:6f:c6:44:2c:3a:ed:30:4d: 37:32:f3:ab:d7:fc:ca:ba:e8:2e:68:5c:66:25:f4: ea:8f:7c:4c:44:d8:9f:17:df:f7:37:86:68:d0:de: 34:3a:c6:fe:29:c1:83:25:e8:9d:eb:c2:80:69:95: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:17:51:E1:05:94:79:65:42:59:EE:EB:01:AC:53:E4:4F:76:7A:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd7f0796-c7f3-4fd2-adf3-d664f947da0a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd7f0796-c7f3-4fd2-adf3-d664f947da0a/fd7f0796-c7f3-4fd2-adf3-d664f947da0a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.149.44.0/24 IPv6: 2602:fe22::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33757 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:85:be:61:05:be:6f:3a:84:99:55:e4:94:46:bc:77:0c:75: 36:99:33:11:c8:ff:57:88:3f:70:23:40:8e:7f:7a:74:83:6f: 12:32:f0:1c:59:2e:d8:5a:a7:11:c0:de:0e:a0:cf:68:c5:65: 38:e9:f1:c7:06:eb:8e:64:35:b6:86:ba:fd:cf:52:d1:56:76: 0c:bb:fd:4f:00:45:d4:e8:06:92:cc:72:5e:90:e8:dd:e2:77: e1:17:b2:e2:64:e6:d1:ba:24:14:2a:c1:41:ed:83:a1:5a:c8: bf:29:27:b7:8c:dc:f5:46:71:0c:f8:b1:2b:26:fa:9c:94:8b: d1:a1:0b:96:f3:c3:92:d2:36:8a:f0:ae:0a:f9:93:2f:15:31: c5:cd:de:b8:12:b3:a7:73:63:17:8d:9e:52:ad:25:ff:77:84: 67:03:69:cd:97:b6:dc:4b:86:0c:46:0e:4a:a3:0a:0b:f5:ea: 4e:29:52:ba:e9:04:e5:13:f7:3a:e0:b4:8f:74:84:58:d2:f6: ac:5f:47:af:4b:44:f4:4b:ce:cb:89:1b:f6:e1:04:c8:07:a2: 73:9f:49:d8:00:dd:c1:fb:97:97:b9:3f:73:52:70:50:64:db: eb:e4:f9:eb:17:6f:22:c2:a5:97:06:9b:9a:d2:f8:ca:80:93: c1:a0:7d:4a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEztH9eq95JU0GP88XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDIyMDEzNDUyMloXDTI4MDUyNTEyNDUyMlowLzEtMCsGA1UEAxMk ZmQ3ZjA3OTYtYzdmMy00ZmQyLWFkZjMtZDY2NGY5NDdkYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshSEDwBd+/fGqkVVgCrVTphBV55mnSZ5zvUm MLXABsDd/E8kKlmd80siUfq+9rFEGpkyniToITYmTrxhkHEEMLsOjr1V1aCGOytI 6j2vdK32QygNpgF//lh39pF3Yit6ExFq3VSo+W5cQlovNnVPMs5RZTQ2te3qvunz ZhZ5yCWZSwboZ1drndelXmAhO/z0h5dLRJWKLrt0WOhi1tE/QJo2ZZgEHwCknKK6 mFTuBeMVDOC54Au2ltHMJzgGDBowlnlty5X576x5b8ZELDrtME03MvOr1/zKuugu aFxmJfTqj3xMRNifF9/3N4Zo0N40Osb+KcGDJeid68KAaZXZ8QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFI8XUeEFlHllQlnu6wGsU+RPdnp3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m ZDdmMDc5Ni1jN2YzLTRmZDItYWRmMy1kNjY0Zjk0N2RhMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ZkN2YwNzk2LWM3ZjMtNGZkMi1h ZGYzLWQ2NjRmOTQ3ZGEwYS9mZDdmMDc5Ni1jN2YzLTRmZDItYWRmMy1kNjY0Zjk0 N2RhMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlSwwDgQCAAIwCAMGBCYC/iIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCD3TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQhb5hBb5vOoSZVeSURrx3DHU2 mTMRyP9XiD9wI0COf3p0g28SMvAcWS7YWqcRwN4OoM9oxWU46fHHBuuOZDW2hrr9 z1LRVnYMu/1PAEXU6AaSzHJekOjd4nfhF7LiZObRuiQUKsFB7YOhWsi/KSe3jNz1 RnEM+LErJvqclIvRoQuW88OS0jaK8K4K+ZMvFTHFzd64ErOnc2MXjZ5SrSX/d4Rn A2nNl7bcS4YMRg5KowoL9epOKVK66QTlE/c64LSPdIRY0vasX0evS0T0S87LiRv2 4QTIB6Jzn0nYAN3B+5eXuT9zUnBQZNvr5PnrF28iwqWXBpua0vjKgJPBoH1K -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:35 2026 by rpki-client