$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer File: 2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer (raw, json) Hash identifier: +QKTRMraQS1XSqEEq0SwBkhSscb3eZTA31OgnL+nEho= Subject key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EF9DA93138BCAFBC5824CC300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Aug 2026 12:45:11 +0000 Certificate not after: Wed 29 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 400930 IP: 23.175.56.0/24 IP: 2602:f975::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:da:93:13:8b:ca:fb:c5:82:4c:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 27 12:45:11 2026 GMT Not After : Nov 29 13:45:11 2028 GMT Subject: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:8c:f5:b0:f7:6a:9a:9e:0b:53:58:13:d1: 86:e1:c7:f7:b6:b5:ea:6d:d5:f9:56:44:41:7a:e1: 41:66:9d:c6:29:35:ac:9a:e8:4d:46:87:cd:ea:50: 7f:c4:95:58:13:2c:db:de:05:3a:fd:f9:14:03:e7: dc:a3:52:49:ba:2f:ff:3f:66:91:79:a1:51:c7:a2: ac:13:c8:74:ec:67:7a:9e:8e:bd:32:9f:df:67:26: b9:7c:76:11:a9:95:28:4d:e3:fb:82:c2:4e:e0:2e: a7:c0:42:81:b7:af:f4:ff:e8:fd:0d:db:64:b0:65: c0:0f:d8:21:27:b0:38:8a:86:46:52:1c:ae:e7:16: 54:0f:6f:ab:2d:25:bc:f1:4b:99:5c:07:e3:09:d0: 03:e6:aa:03:f9:00:5b:64:ab:f7:4d:e5:27:30:13: dc:4d:cb:29:ad:e0:bf:f6:62:cb:f7:eb:4f:74:f0: 6a:c9:45:48:d9:96:13:b9:7d:d4:2a:f7:c4:a2:9a: 7e:1a:1f:9e:38:8e:0f:6d:ff:83:ac:53:8e:38:15: a7:b7:b1:02:51:06:d6:01:7e:98:5f:70:8c:5b:37: 43:29:e0:d0:81:72:5e:51:d7:cb:b5:19:4e:69:04: 5b:a4:7b:9e:37:95:f9:79:69:68:ef:84:a8:b9:94: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.175.56.0/24 IPv6: 2602:f975::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400930 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3a:d1:d7:ff:0a:0a:35:31:8c:e0:ba:ef:4a:24:0c:11:38: 50:8e:92:e2:d4:d7:2d:86:52:80:04:b2:ed:6e:4b:92:6c:fc: 25:55:5e:63:a1:e9:61:fb:55:04:7e:86:90:d9:62:16:cb:63: a0:19:2a:67:6e:90:ba:51:99:e2:74:9d:e9:dd:be:bc:3e:82: 50:fc:5b:ff:d8:aa:41:1e:00:9e:99:04:69:e9:c0:a0:ca:e3: d6:e4:7b:8a:dc:90:b0:94:f1:8e:3a:d6:68:4a:fe:7a:33:5d: d0:f5:27:4d:b0:b3:f9:97:99:30:f8:98:a6:58:ac:16:bc:80: f7:61:5a:45:c0:18:10:f4:8e:b9:57:94:33:52:93:13:27:88: 54:76:3f:ab:81:62:90:2e:25:2c:09:ac:8a:fd:76:19:17:fa: 6d:e0:5c:d1:13:93:7e:ff:97:ab:81:54:3d:a1:7a:5d:51:cc: e5:5f:92:e8:7b:0a:e3:81:ee:07:30:76:c1:c7:86:5a:eb:81: e3:35:21:6a:a9:42:c6:8d:06:e6:28:77:60:29:bb:27:4f:90: 3e:af:1c:26:2c:2e:c9:4e:6b:90:4c:dc:85:04:9d:22:5d:f2: ce:f0:f2:47:fa:d8:ad:55:19:69:0a:5b:67:8a:65:11:03:60: 6e:71:76:da -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE752pMTi8r7xYJMwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyNzEyNDUxMVoXDTI4MTEyOTEzNDUxMVowLzEtMCsGA1UEAxMk MjIyNGEwZjMtZWQwZS00ZjUyLWE3ZDQtNWYyYjUwNDhiZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3eM9bD3apqeC1NYE9GG4cf3trXqbdX5VkRB euFBZp3GKTWsmuhNRofN6lB/xJVYEyzb3gU6/fkUA+fco1JJui//P2aReaFRx6Ks E8h07Gd6no69Mp/fZya5fHYRqZUoTeP7gsJO4C6nwEKBt6/0/+j9DdtksGXAD9gh J7A4ioZGUhyu5xZUD2+rLSW88UuZXAfjCdAD5qoD+QBbZKv3TeUnMBPcTcspreC/ 9mLL9+tPdPBqyUVI2ZYTuX3UKvfEopp+Gh+eOI4Pbf+DrFOOOBWnt7ECUQbWAX6Y X3CMWzdDKeDQgXJeUdfLtRlOaQRbpHueN5X5eWlo74SouZTxBQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJdTbdckFTmyVIbyJTf7Yn3KrUKVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y MjI0YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJiNTA0OGJlZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzIyMjRhMGYzLWVkMGUtNGY1Mi1h N2Q0LTVmMmI1MDQ4YmVmOC8yMjI0YTBmMy1lZDBlLTRmNTItYTdkNC01ZjJiNTA0 OGJlZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrzgwDgQCAAIwCAMGACYC+XUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYeIjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJOtHX/woKNTGM4LrvSiQMEThQ jpLi1NcthlKABLLtbkuSbPwlVV5joelh+1UEfoaQ2WIWy2OgGSpnbpC6UZnidJ3p 3b68PoJQ/Fv/2KpBHgCemQRp6cCgyuPW5HuK3JCwlPGOOtZoSv56M13Q9SdNsLP5 l5kw+JimWKwWvID3YVpFwBgQ9I65V5QzUpMTJ4hUdj+rgWKQLiUsCayK/XYZF/pt 4FzRE5N+/5ergVQ9oXpdUczlX5Loewrjge4HMHbBx4Za64HjNSFqqULGjQbmKHdg KbsnT5A+rxwmLC7JTmuQTNyFBJ0iXfLO8PJH+titVRlpCltnimURA2BucXba -----END CERTIFICATE-----Generated at Sun Sep 20 10:59:06 2026 by rpki-client