$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer File: d2e35455-e012-4897-80f6-c6386a9f779c.cer (raw, json) Hash identifier: z+FPmMYLOy8nGhc78Hp9m5exhu32xLJhwK3QSO/oonA= Subject key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE0BA6AF3E5EC2E5B87CDEFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 12:45:11 +0000 Certificate not after: Mon 20 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 26520 IP: 23.171.88.0/24 IP: 2602:f987::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:ba:6a:f3:e5:ec:2e:5b:87:cd:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 18 12:45:11 2026 GMT Not After : Nov 20 13:45:11 2028 GMT Subject: CN=d2e35455-e012-4897-80f6-c6386a9f779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:4a:83:70:39:d7:7d:1f:46:b8:3c:b8:8d: 32:dd:49:24:90:68:04:05:7a:fd:7f:00:70:e8:4f: 45:8d:7d:ca:43:a9:ff:39:b4:21:fd:20:48:ff:cf: 9e:7b:82:ad:08:3c:45:17:0f:11:79:99:0b:ad:d3: ed:aa:b2:30:a1:03:f1:02:87:08:01:be:0e:96:b3: b2:f1:e3:2f:c0:35:b4:8d:da:99:af:df:2d:73:dc: 70:31:a7:8e:85:0a:d7:2a:b1:10:f3:fb:98:99:91: a4:2c:9e:ca:0c:dd:6b:c0:ef:c4:90:38:86:35:3f: 5d:fb:42:c8:22:7d:08:5f:20:9a:23:ee:71:f4:b9: 06:1e:1e:df:8a:b8:07:80:48:2a:88:44:2e:c8:97: 3e:87:e8:d1:48:43:99:f1:a2:cd:b0:2a:f3:2e:3e: d7:1c:ae:1f:2e:6e:0f:8a:a7:bf:8b:bb:4f:17:6a: 53:e6:3b:40:2d:37:ac:b1:63:88:d8:28:97:78:cc: 6a:45:7c:b5:64:90:a3:34:86:b4:68:b6:d7:1a:70: c8:58:62:e6:f4:29:5f:82:86:77:60:1b:d7:f6:1c: 57:ee:2b:52:f7:41:86:6c:0e:88:31:59:07:e5:5b: ea:13:12:0e:b3:61:dd:b2:1b:78:be:c5:67:fb:47: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.171.88.0/24 IPv6: 2602:f987::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26520 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7d:41:3f:29:d4:56:3c:64:de:58:5e:33:ea:bc:b5:d2:d9: e3:c9:a0:81:41:54:ec:f6:d4:57:32:c3:57:59:07:94:ab:f6: b5:1f:48:aa:3b:9d:84:99:10:27:f8:2a:a2:1d:6a:2d:74:4c: da:2e:8c:39:13:d5:8a:eb:61:5e:9e:e1:7c:72:09:0c:f8:e7: bf:a1:6e:d6:68:b9:ac:ed:1b:9c:85:fc:c0:cc:a9:6b:e1:b3: 4a:d6:f3:f5:5e:39:36:1f:51:95:9e:b9:97:76:1e:50:95:80: 6b:e7:44:77:94:75:1f:87:66:f6:1c:16:86:16:f8:9b:16:d9: d4:bf:ef:72:c1:9c:31:53:03:9f:ca:29:8a:f5:18:7f:22:b6: 75:ff:65:24:8f:31:4a:e1:8d:3d:3a:0b:79:29:17:79:f1:ce: 6f:eb:f3:cb:ca:d6:ae:c1:3a:40:63:3a:d6:90:81:05:32:ac: 0a:e6:ef:82:c4:b2:fa:db:53:65:ea:cf:0d:ae:32:aa:ea:91: 0b:02:9f:a5:c9:7a:b7:b6:3c:bc:36:c3:44:17:5a:63:b9:e5: 81:21:66:7b:75:33:4b:6f:e4:32:ed:7a:d5:06:42:1a:1e:3c: 99:4e:80:1a:36:46:6f:6d:da:9b:8b:12:68:68:32:30:31:d4: 13:dd:b7:ab -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE7gumrz5ewuW4fN78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxODEyNDUxMVoXDTI4MTEyMDEzNDUxMVowLzEtMCsGA1UEAxMk ZDJlMzU0NTUtZTAxMi00ODk3LTgwZjYtYzYzODZhOWY3NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApANKg3A5130fRrg8uI0y3UkkkGgEBXr9fwBw 6E9FjX3KQ6n/ObQh/SBI/8+ee4KtCDxFFw8ReZkLrdPtqrIwoQPxAocIAb4OlrOy 8eMvwDW0jdqZr98tc9xwMaeOhQrXKrEQ8/uYmZGkLJ7KDN1rwO/EkDiGNT9d+0LI In0IXyCaI+5x9LkGHh7firgHgEgqiEQuyJc+h+jRSEOZ8aLNsCrzLj7XHK4fLm4P iqe/i7tPF2pT5jtALTessWOI2CiXeMxqRXy1ZJCjNIa0aLbXGnDIWGLm9ClfgoZ3 YBvX9hxX7itS90GGbA6IMVkH5VvqExIOs2Hdsht4vsVn+0fI9wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLxFhMNomNTNm+Z2g1wzU8NjqBd7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k MmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5Zjc3OWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2QyZTM1NDU1LWUwMTItNDg5Ny04 MGY2LWM2Mzg2YTlmNzc5Yy9kMmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5 Zjc3OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXq1gwDgQCAAIwCAMGBCYC+YcAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmeYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHJ9QT8p1FY8ZN5YXjPqvLXS2ePJ oIFBVOz21Fcyw1dZB5Sr9rUfSKo7nYSZECf4KqIdai10TNoujDkT1YrrYV6e4Xxy CQz457+hbtZouaztG5yF/MDMqWvhs0rW8/VeOTYfUZWeuZd2HlCVgGvnRHeUdR+H ZvYcFoYW+JsW2dS/73LBnDFTA5/KKYr1GH8itnX/ZSSPMUrhjT06C3kpF3nxzm/r 88vK1q7BOkBjOtaQgQUyrArm74LEsvrbU2Xqzw2uMqrqkQsCn6XJere2PLw2w0QX WmO55YEhZnt1M0tv5DLtetUGQhoePJlOgBo2Rm9t2puLEmhoMjAx1BPdt6s= -----END CERTIFICATE-----Generated at Sun Sep 20 10:59:13 2026 by rpki-client