$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer File: 83ab5212-bed9-4bb3-8d8e-83a8705c4e88.cer (raw, json) Hash identifier: Z+rYtnsv6aDFhcU1fT4Zj3I+6+eR2Kk5Bc7cCpi27M8= Subject key identifier: 94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584E0251EB88E15A680CD57DF940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 30 May 2026 20:45:11 +0000 Certificate not after: Fri 01 Sep 2028 20:45:11 +0000 Subordinate resources: IP: 23.166.24.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:02:51:eb:88:e1:5a:68:0c:d5:7d:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 30 20:45:11 2026 GMT Not After : Sep 1 20:45:11 2028 GMT Subject: CN=83ab5212-bed9-4bb3-8d8e-83a8705c4e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:8b:51:4c:5c:94:27:d4:02:92:b8:3f:ff: 3f:ba:35:3e:d3:05:82:2c:49:e1:17:a6:d5:7c:37: ea:ab:86:a5:07:0b:0b:21:ae:e4:f4:ed:25:02:f1: 92:eb:b1:49:1a:fc:9a:8f:ba:d4:6b:40:3b:0b:6f: c9:e6:0a:32:4b:f2:4f:19:42:40:96:7f:fc:1f:4f: 6c:12:09:64:fc:b4:bc:c2:7b:50:d3:92:4b:ac:cd: a1:e8:59:ea:9b:ae:23:04:6c:52:39:7e:ac:33:3f: 7e:6d:c0:4b:de:63:cb:81:47:2d:be:59:74:61:56: e2:d1:a3:3d:f7:d6:8e:3e:ca:80:d8:23:1a:71:0c: 0a:a7:c6:d3:3b:85:c5:a2:e2:f1:ae:48:51:c0:24: 6a:3a:ad:bc:62:fe:a2:a1:87:80:77:43:c9:67:85: 9d:c3:96:8e:88:06:54:54:72:45:f7:77:34:91:ff: 89:b3:09:0d:71:4f:b0:28:b7:93:d6:5c:36:0e:bc: 57:df:1f:4b:d2:8a:a7:82:7a:d3:66:88:dc:a6:67: c7:d0:b5:4e:e5:57:e2:91:0b:ed:bb:b6:ba:d3:3c: 5c:83:13:ce:72:a7:90:c3:77:f8:f9:f8:a7:36:2e: 04:4e:82:0c:93:66:53:36:81:7b:7a:0b:ec:f6:9a: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:12:A6:E3:E3:4F:DB:A2:B8:38:93:96:88:21:81:FB:38:B5:36:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83ab5212-bed9-4bb3-8d8e-83a8705c4e88/83ab5212-bed9-4bb3-8d8e-83a8705c4e88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.166.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bd:aa:e1:c2:66:8d:eb:3c:ea:c3:20:c0:4f:49:15:8e:e0: d6:19:13:87:36:f6:48:0c:d8:6f:1a:5d:9d:b2:74:63:5e:2a: a8:bd:f9:b8:40:15:da:92:c2:09:fc:01:b8:de:72:31:d9:98: 95:62:2d:09:4d:77:23:04:7d:00:b2:67:77:39:a6:84:79:c9: 1d:e5:be:1c:6a:13:e0:e5:4a:21:dd:05:fa:bc:2f:80:66:44: b9:8e:45:9b:f0:a8:cf:95:23:bb:5c:91:df:69:fa:88:11:cd: 96:44:ed:74:1f:1d:1b:85:09:21:d8:1e:fa:1c:df:e1:5a:29: a9:ef:8c:3e:51:50:11:3c:ea:ba:04:00:4c:f2:95:9a:43:a5: 98:43:86:8c:10:db:b6:cf:49:67:df:01:c8:e1:f3:22:b1:9c: 6e:df:66:9a:90:ec:10:12:67:3e:e7:df:5d:a6:3d:f9:ec:7b: 29:1a:7d:f3:b5:e9:5b:d3:1f:07:b7:74:5b:b3:86:a2:9b:15: 45:b4:2e:c7:8c:8f:f1:38:82:68:d5:97:41:fd:04:ac:8f:fc: bc:c2:5a:21:a6:28:23:ba:a5:bf:dc:8b:6d:c8:f8:ad:2e:a2: 09:34:f7:d1:7c:3a:aa:88:d3:b0:a7:b9:1b:31:ac:04:68:c9: 7d:62:31:d5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4CUeuI4VpoDNV9+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDUzMDIwNDUxMVoXDTI4MDkwMTIwNDUxMVowLzEtMCsGA1UEAxMk ODNhYjUyMTItYmVkOS00YmIzLThkOGUtODNhODcwNWM0ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgiLUUxclCfUApK4P/8/ujU+0wWCLEnhF6bV fDfqq4alBwsLIa7k9O0lAvGS67FJGvyaj7rUa0A7C2/J5goyS/JPGUJAln/8H09s Eglk/LS8wntQ05JLrM2h6Fnqm64jBGxSOX6sMz9+bcBL3mPLgUctvll0YVbi0aM9 99aOPsqA2CMacQwKp8bTO4XFouLxrkhRwCRqOq28Yv6ioYeAd0PJZ4Wdw5aOiAZU VHJF93c0kf+JswkNcU+wKLeT1lw2DrxX3x9L0oqngnrTZojcpmfH0LVO5VfikQvt u7a60zxcgxPOcqeQw3f4+finNi4EToIMk2ZTNoF7egvs9poBqwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJQSpuPjT9uiuDiTloghgfs4tTb8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 M2FiNTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4NzA1YzRlODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgzYWI1MjEyLWJlZDktNGJiMy04 ZDhlLTgzYTg3MDVjNGU4OC84M2FiNTIxMi1iZWQ5LTRiYjMtOGQ4ZS04M2E4NzA1 YzRlODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXphgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR72q4cJmjes86sMgwE9J FY7g1hkThzb2SAzYbxpdnbJ0Y14qqL35uEAV2pLCCfwBuN5yMdmYlWItCU13IwR9 ALJndzmmhHnJHeW+HGoT4OVKId0F+rwvgGZEuY5Fm/Coz5Uju1yR32n6iBHNlkTt dB8dG4UJIdge+hzf4Vopqe+MPlFQETzqugQATPKVmkOlmEOGjBDbts9JZ98ByOHz IrGcbt9mmpDsEBJnPuffXaY9+ex7KRp987XpW9MfB7d0W7OGopsVRbQux4yP8TiC aNWXQf0ErI/8vMJaIaYoI7qlv9yLbcj4rS6iCTT30Xw6qojTsKe5GzGsBGjJfWIx 1Q== -----END CERTIFICATE-----Generated at Sat Jun 13 08:06:53 2026 by rpki-client