$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer File: bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer (raw, json) Hash identifier: FSMyW+FCFCs62nnKn0Q2EwFSQ3ZFaqMAybEqV2DFom8= Subject key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F6F274016B9EC295585AB2DD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 13:09:16 +0000 Certificate not after: Thu 07 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 22679 IP: 23.172.152.0/24 IP: 2602:f971::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:27:40:16:b9:ec:29:55:85:ab:2d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 8 13:09:16 2026 GMT Not After : Dec 7 13:45:11 2028 GMT Subject: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fa:13:bb:3d:a7:9f:04:5b:29:6e:7d:3d:8f: 51:77:04:a5:70:0f:c5:db:c6:1f:99:0b:9a:1e:d0: 37:69:fe:d5:f3:7b:e1:8b:5e:aa:80:5b:6a:ad:53: 1d:ca:42:7e:e2:09:d3:9b:15:9c:3e:b0:d9:bf:aa: 28:ba:15:cf:20:82:0e:92:b8:c7:72:96:c2:90:49: 58:d7:18:dd:24:d5:71:e2:8f:e0:94:e4:8f:72:bf: 4e:35:b2:8b:12:f6:e5:14:23:52:83:88:dd:6d:77: e1:da:0f:9d:e9:01:8d:b0:a1:26:8b:cd:bc:2c:d9: 3b:16:8c:f5:ae:f2:f9:9a:0b:f2:d7:06:14:c9:14: 47:5b:e5:1d:2d:42:52:fe:15:7d:30:64:0f:60:02: 77:a9:87:db:e8:47:b0:bd:f0:b3:c0:5a:3a:1d:bc: 5e:0a:65:30:b7:af:3f:c7:f4:e7:53:cb:f1:3c:93: 6c:ca:f5:ec:2c:68:9c:d5:3c:d8:63:4b:cd:35:e1: ed:5a:1e:41:3a:95:6d:d5:29:dd:a8:1b:df:39:2d: a3:f5:ca:df:cb:6c:60:f2:f9:61:7d:aa:6b:ce:3b: 34:65:6a:dc:08:8b:91:d2:02:0c:76:b6:f1:fe:2b: 5d:f2:c7:b9:f8:77:5b:2b:7d:cc:b5:6a:77:92:8d: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.172.152.0/24 IPv6: 2602:f971::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22679 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:14:3a:7d:76:ba:c4:b0:ef:f7:4c:8e:93:0c:88:41:67:84: fc:1b:c9:27:51:85:f8:8f:19:e5:80:3c:d6:5b:81:e2:02:b5: 9b:b3:99:93:94:dd:b6:f8:d1:5c:af:66:d5:de:88:13:4f:f3: 4e:52:46:fd:7f:42:78:7b:1d:b6:cd:42:36:b1:f0:38:67:67: 18:3f:c8:79:f9:b0:de:1c:38:fa:d5:af:30:03:9c:8e:4f:4e: 85:c8:6a:39:97:0e:a2:6e:4d:29:7d:87:77:47:fa:e5:12:2c: d9:36:e3:53:ea:04:19:7d:85:34:39:3b:f8:7e:92:a9:8d:59: e1:37:82:bd:ce:b3:86:95:36:b0:18:18:8f:96:51:9a:7d:c3: db:4d:dc:ee:1d:3d:3b:7d:9e:f8:f8:1d:60:0b:4c:9b:1e:db: 90:42:02:47:48:ea:44:61:85:5a:d4:dd:3f:47:00:a4:e8:5c: 0e:10:af:fc:d6:1f:50:8f:bb:7c:56:d2:9c:cf:62:17:dd:1b: 4c:ae:a1:82:f8:e7:c9:c4:39:d0:91:1f:95:29:0f:7d:f4:55: f1:39:8d:ec:fb:13:0c:c1:f5:eb:6c:7e:47:e4:3a:f3:2d:8e: b4:a1:73:a7:78:c3:77:ff:7a:75:d3:75:7b:16:75:75:17:3b: 76:84:47:04 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE9vJ0AWuewpVYWrLdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwODEzMDkxNloXDTI4MTIwNzEzNDUxMVowLzEtMCsGA1UEAxMk YmMxYjIyYTUtZjVlMi00MGQxLTg4MjctYTBjZjhiODU3MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfoTuz2nnwRbKW59PY9RdwSlcA/F28YfmQua HtA3af7V83vhi16qgFtqrVMdykJ+4gnTmxWcPrDZv6oouhXPIIIOkrjHcpbCkElY 1xjdJNVx4o/glOSPcr9ONbKLEvblFCNSg4jdbXfh2g+d6QGNsKEmi828LNk7Foz1 rvL5mgvy1wYUyRRHW+UdLUJS/hV9MGQPYAJ3qYfb6EewvfCzwFo6HbxeCmUwt68/ x/TnU8vxPJNsyvXsLGic1TzYY0vNNeHtWh5BOpVt1SndqBvfOS2j9crfy2xg8vlh faprzjs0ZWrcCIuR0gIMdrbx/itd8se5+HdbK33MtWp3ko1sHwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN3rw4F1vo+yK0DXsJhv5k8FRjhWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i YzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4NTcyYTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2JjMWIyMmE1LWY1ZTItNDBkMS04 ODI3LWEwY2Y4Yjg1NzJhNS9iYzFiMjJhNS1mNWUyLTQwZDEtODgyNy1hMGNmOGI4 NTcyYTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrJgwDgQCAAIwCAMGACYC+XEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAliXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADYUOn12usSw7/dMjpMMiEFnhPwb ySdRhfiPGeWAPNZbgeICtZuzmZOU3bb40VyvZtXeiBNP805SRv1/Qnh7HbbNQjax 8DhnZxg/yHn5sN4cOPrVrzADnI5PToXIajmXDqJuTSl9h3dH+uUSLNk241PqBBl9 hTQ5O/h+kqmNWeE3gr3Os4aVNrAYGI+WUZp9w9tN3O4dPTt9nvj4HWALTJse25BC AkdI6kRhhVrU3T9HAKToXA4Qr/zWH1CPu3xW0pzPYhfdG0yuoYL458nEOdCRH5Up D330VfE5jez7EwzB9etsfkfkOvMtjrShc6d4w3f/enXTdXsWdXUXO3aERwQ= -----END CERTIFICATE-----Generated at Thu Nov 5 18:59:40 2026 by rpki-client