$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer File: bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer (raw, json) Hash identifier: SY53MWCgWgQlnlJrkSxghRf3ybUI+8MXORr52n7+W5Q= Subject key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F10300C6C9FB062A72F05F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Sep 2026 12:45:11 +0000 Certificate not after: Thu 07 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 22679 IP: 23.172.152.0/24 IP: 2602:f971::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:30:0c:6c:9f:b0:62:a7:2f:05:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 4 12:45:11 2026 GMT Not After : Dec 7 13:45:11 2028 GMT Subject: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:13:bb:3d:a7:9f:04:5b:29:6e:7d:3d:8f: 51:77:04:a5:70:0f:c5:db:c6:1f:99:0b:9a:1e:d0: 37:69:fe:d5:f3:7b:e1:8b:5e:aa:80:5b:6a:ad:53: 1d:ca:42:7e:e2:09:d3:9b:15:9c:3e:b0:d9:bf:aa: 28:ba:15:cf:20:82:0e:92:b8:c7:72:96:c2:90:49: 58:d7:18:dd:24:d5:71:e2:8f:e0:94:e4:8f:72:bf: 4e:35:b2:8b:12:f6:e5:14:23:52:83:88:dd:6d:77: e1:da:0f:9d:e9:01:8d:b0:a1:26:8b:cd:bc:2c:d9: 3b:16:8c:f5:ae:f2:f9:9a:0b:f2:d7:06:14:c9:14: 47:5b:e5:1d:2d:42:52:fe:15:7d:30:64:0f:60:02: 77:a9:87:db:e8:47:b0:bd:f0:b3:c0:5a:3a:1d:bc: 5e:0a:65:30:b7:af:3f:c7:f4:e7:53:cb:f1:3c:93: 6c:ca:f5:ec:2c:68:9c:d5:3c:d8:63:4b:cd:35:e1: ed:5a:1e:41:3a:95:6d:d5:29:dd:a8:1b:df:39:2d: a3:f5:ca:df:cb:6c:60:f2:f9:61:7d:aa:6b:ce:3b: 34:65:6a:dc:08:8b:91:d2:02:0c:76:b6:f1:fe:2b: 5d:f2:c7:b9:f8:77:5b:2b:7d:cc:b5:6a:77:92:8d: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.172.152.0/24 IPv6: 2602:f971::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22679 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4c:24:0a:c4:f9:1f:64:ab:c7:e4:29:b6:07:cb:ca:23:bf: 7b:58:76:b2:14:98:dc:41:43:11:55:45:1f:be:7a:fa:9e:f8: e4:05:28:50:82:5c:db:46:79:30:86:73:b0:e9:f5:e2:b5:d0: 14:f4:e6:c3:12:e3:e4:e4:dd:ca:88:52:df:af:0e:63:11:a7: 35:37:aa:44:f2:71:81:fa:d3:31:ae:80:da:98:93:2a:2e:d1: 50:e2:ce:a1:96:1d:7f:85:a1:05:82:91:eb:2b:62:4c:0f:86: bf:1d:0d:28:12:6f:cf:e9:b0:35:48:b1:8d:d1:40:ba:8a:cd: 79:3e:f3:b7:1e:00:27:42:d7:87:7b:09:96:f5:14:a9:45:0d: 18:38:ea:62:f0:1f:87:df:9d:63:92:8a:e1:a0:06:1b:35:c4: 68:95:23:91:2d:5c:de:3f:a0:1f:44:a3:17:d3:df:4d:42:cf: bb:f4:2e:9b:b3:12:04:07:0f:82:a6:82:49:4a:e6:8e:b1:b3: a4:1f:58:4d:1b:64:23:94:c4:21:34:16:6a:5f:0d:96:d2:fa: bf:ed:51:6e:c4:9c:11:0b:20:9c:09:26:e2:6f:ba:c8:79:5f: c9:cf:f1:6d:ca:df:9e:c6:9b:b3:cf:a4:70:1e:33:6e:38:48: e4:0d:9a:b5 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE8QMAxsn7Bipy8F9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkwNDEyNDUxMVoXDTI4MTIwNzEzNDUxMVowLzEtMCsGA1UEAxMk YmMxYjIyYTUtZjVlMi00MGQxLTg4MjctYTBjZjhiODU3MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfoTuz2nnwRbKW59PY9RdwSlcA/F28YfmQua HtA3af7V83vhi16qgFtqrVMdykJ+4gnTmxWcPrDZv6oouhXPIIIOkrjHcpbCkElY 1xjdJNVx4o/glOSPcr9ONbKLEvblFCNSg4jdbXfh2g+d6QGNsKEmi828LNk7Foz1 rvL5mgvy1wYUyRRHW+UdLUJS/hV9MGQPYAJ3qYfb6EewvfCzwFo6HbxeCmUwt68/ x/TnU8vxPJNsyvXsLGic1TzYY0vNNeHtWh5BOpVt1SndqBvfOS2j9crfy2xg8vlh faprzjs0ZWrcCIuR0gIMdrbx/itd8se5+HdbK33MtWp3ko1sHwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN3rw4F1vo+yK0DXsJhv5k8FRjhWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i YzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4NTcyYTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2JjMWIyMmE1LWY1ZTItNDBkMS04 ODI3LWEwY2Y4Yjg1NzJhNS9iYzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4 NTcyYTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrJgwDgQCAAIwCAMGBCYC+XEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAliXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIxMJArE+R9kq8fkKbYHy8ojv3tY drIUmNxBQxFVRR++evqe+OQFKFCCXNtGeTCGc7Dp9eK10BT05sMS4+Tk3cqIUt+v DmMRpzU3qkTycYH60zGugNqYkyou0VDizqGWHX+FoQWCkesrYkwPhr8dDSgSb8/p sDVIsY3RQLqKzXk+87ceACdC14d7CZb1FKlFDRg46mLwH4ffnWOSiuGgBhs1xGiV I5EtXN4/oB9EoxfT301Cz7v0LpuzEgQHD4KmgklK5o6xs6QfWE0bZCOUxCE0Fmpf DZbS+r/tUW7EnBELIJwJJuJvush5X8nP8W3K357Gm7PPpHAeM244SOQNmrU= -----END CERTIFICATE-----Generated at Sun Sep 20 11:52:39 2026 by rpki-client