$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer File: cbf89b78-1e86-4629-abdd-682f04ffb165.cer (raw, json) Hash identifier: s/Bkl85Amln3qaxSmDwQa69Ha9cw0IzoNqtjW401hnI= Subject key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F12FABB69EE3107ED68055AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Sep 2026 12:45:11 +0000 Certificate not after: Fri 08 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 975 IP: 23.172.168.0/24 IP: 2602:f989::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:12:fa:bb:69:ee:31:07:ed:68:05:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 5 12:45:11 2026 GMT Not After : Dec 8 13:45:11 2028 GMT Subject: CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:bd:2f:66:70:ba:1c:d8:1a:fe:c9:b8:cb: da:73:1d:11:2f:88:f2:e7:c3:83:7f:6d:a0:96:c6: f4:03:e0:a3:ea:19:e3:f5:3d:8c:17:d6:98:1a:85: 84:c5:58:27:cd:69:fd:1c:60:7e:ac:f3:4c:e3:7b: de:b7:87:19:aa:51:47:10:8b:c4:42:6b:1f:3a:71: 7d:76:2c:aa:6a:0c:24:56:7c:94:53:83:b4:a1:b3: 55:e7:e1:7f:43:28:1e:91:e4:a8:b0:a6:a4:2f:00: 0d:ab:09:51:89:0f:98:06:79:f9:08:08:a9:41:b3: c8:1b:9b:73:e8:4d:d9:9b:54:4b:96:e0:e5:be:94: 60:1c:a3:2c:ef:82:eb:d6:73:9e:bf:91:28:d0:a6: 1b:88:d8:67:3f:4e:d7:f6:64:e4:88:32:2b:19:48: d4:ce:dc:7e:0b:fb:ed:3f:9b:8f:71:93:f5:76:66: 3c:e7:36:b5:e1:97:9f:83:de:92:dc:bb:fe:79:8a: 40:09:21:e2:b4:a7:cd:ad:6d:30:9e:a4:4a:4f:2b: 2a:01:82:7c:5a:fd:26:49:5e:04:aa:b1:f0:13:8e: 1a:b3:ed:61:d1:d8:68:fb:7d:e1:bd:a3:16:b2:bd: 89:7b:63:ec:33:18:72:da:da:00:9d:3d:93:fc:cf: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.172.168.0/24 IPv6: 2602:f989::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 975 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3c:ee:84:25:84:1f:92:32:82:08:68:e4:6b:51:d0:4c:fe: 72:b6:32:0b:64:4c:c2:b8:3d:35:04:26:a2:b2:8a:66:28:52: 6f:11:ca:68:cc:8e:42:4c:fb:5a:f9:cf:5b:e6:9b:ec:7c:c0: 2a:f6:13:ff:a2:b8:27:e2:21:50:cd:22:56:0f:43:ec:8b:88: 4b:9f:e9:7a:68:6c:37:73:eb:55:a2:86:72:b0:ff:09:4d:f1: fb:69:11:15:e8:61:c4:36:47:04:8a:93:54:29:ca:42:2c:de: 92:40:85:89:0f:9f:c3:8b:c4:9e:1d:6a:29:c3:81:62:07:ff: 96:ef:b9:09:82:9b:56:87:70:f3:bd:e3:a1:df:8d:55:56:89: c0:52:c2:17:7e:ff:fd:c5:3a:d4:92:3c:3c:fc:b0:59:94:2a: af:0e:1a:b6:e5:1b:c9:b3:58:d1:c5:27:d6:f6:b5:fa:35:3b: a3:66:56:90:5a:1e:81:24:eb:11:fd:51:b5:79:e3:3c:f1:b7: 6b:4a:06:44:05:f1:0b:54:2e:76:da:05:1a:17:1a:b3:ea:a8: e9:ac:e9:3e:1a:03:5c:15:36:ae:3a:50:de:d4:15:58:6a:41: 45:16:fc:ec:2d:81:a4:a7:d7:9e:b6:92:ce:c8:43:94:8a:64: cf:87:bb:01 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE8S+rtp7jEH7WgFWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkwNTEyNDUxMVoXDTI4MTIwODEzNDUxMVowLzEtMCsGA1UEAxMk Y2JmODliNzgtMWU4Ni00NjI5LWFiZGQtNjgyZjA0ZmZiMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nq9L2ZwuhzYGv7JuMvacx0RL4jy58ODf22g lsb0A+Cj6hnj9T2MF9aYGoWExVgnzWn9HGB+rPNM43vet4cZqlFHEIvEQmsfOnF9 diyqagwkVnyUU4O0obNV5+F/QygekeSosKakLwANqwlRiQ+YBnn5CAipQbPIG5tz 6E3Zm1RLluDlvpRgHKMs74Lr1nOev5Eo0KYbiNhnP07X9mTkiDIrGUjUztx+C/vt P5uPcZP1dmY85za14Zefg96S3Lv+eYpACSHitKfNrW0wnqRKTysqAYJ8Wv0mSV4E qrHwE44as+1h0dho+33hvaMWsr2Je2PsMxhy2toAnT2T/M8qkwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIR/ouETt9zoSRlHCIMNyivaoW3fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j YmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRmZmIxNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NiZjg5Yjc4LTFlODYtNDYyOS1h YmRkLTY4MmYwNGZmYjE2NS9jYmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRm ZmIxNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrKgwDgQCAAIwCAMGACYC+YkAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAgPPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJM87oQlhB+SMoIIaORrUdBM/nK2 MgtkTMK4PTUEJqKyimYoUm8RymjMjkJM+1r5z1vmm+x8wCr2E/+iuCfiIVDNIlYP Q+yLiEuf6XpobDdz61WihnKw/wlN8ftpERXoYcQ2RwSKk1QpykIs3pJAhYkPn8OL xJ4dainDgWIH/5bvuQmCm1aHcPO946HfjVVWicBSwhd+//3FOtSSPDz8sFmUKq8O GrblG8mzWNHFJ9b2tfo1O6NmVpBaHoEk6xH9UbV54zzxt2tKBkQF8QtULnbaBRoX GrPqqOms6T4aA1wVNq46UN7UFVhqQUUW/OwtgaSn1562ks7IQ5SKZM+HuwE= -----END CERTIFICATE-----Generated at Sun Sep 20 12:47:27 2026 by rpki-client