$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer File: 8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer (raw, json) Hash identifier: B5elkt7Z8iMQ8NkUKbVjX6RsxVmhzZuGRbnXbo7pAYk= Subject key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CBDAA37E848FF01DA740CFA90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Feb 2026 13:45:22 +0000 Certificate not after: Mon 08 May 2028 12:45:22 +0000 Subordinate resources: AS: 22597 IP: 23.159.120.0/24 IP: 2607:5fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:aa:37:e8:48:ff:01:da:74:0c:fa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 3 13:45:22 2026 GMT Not After : May 8 12:45:22 2028 GMT Subject: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:70:bb:58:21:76:0d:97:ce:12:2e:a0:3d: ec:c1:b3:e0:a6:32:54:09:be:71:a3:76:c3:ba:4a: 60:ec:d8:c1:0a:32:6e:1a:9d:e6:19:27:6c:05:c8: 4d:bb:8e:08:eb:2a:97:12:98:0a:ee:bd:20:df:e3: 64:e9:83:96:e1:7e:e5:c9:54:bb:60:18:73:35:79: 3e:3b:60:91:1b:29:32:82:f9:03:cd:c7:b3:e4:89: 45:2f:2c:4d:99:c5:17:82:56:5e:2f:57:5f:b1:e7: 54:c6:4c:75:15:14:f6:47:41:d7:db:83:3d:43:08: 20:32:e8:ea:8f:41:94:10:1d:b0:d4:9c:a2:77:fc: bd:67:71:93:f6:9a:58:45:db:09:82:ef:9b:7a:05: 10:14:e2:67:90:ad:ca:fb:e5:de:a6:05:38:6b:3e: 30:26:d6:4a:3a:c4:75:47:f7:53:f2:c4:67:c8:cf: 9f:27:62:b8:08:ab:2c:c6:2f:ab:03:02:4f:98:49: 54:28:f2:cd:59:28:3f:0d:d7:6c:17:4e:84:1c:af: b8:ca:9e:25:c7:cb:5f:1c:ed:8d:a1:0e:df:ea:06: cb:ec:a5:6b:0e:5f:2f:dd:74:13:7a:ff:74:96:5c: ee:72:d2:86:78:40:16:b7:40:ca:d6:41:b6:4a:ac: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.159.120.0/24 IPv6: 2607:5fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22597 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:68:97:21:5f:d6:c2:44:f6:db:70:d2:e9:35:6e:b9:96:cf: da:1b:cb:2b:fa:40:3e:6a:0a:8b:ed:cf:37:1e:5a:07:9c:5a: f5:f3:bc:7f:07:72:36:67:7c:17:0c:da:17:ab:2d:6e:11:30: bd:c4:7e:a2:91:10:1f:f8:5c:ef:29:c7:2f:81:3a:4d:f7:b3: e9:05:e5:83:51:fa:5a:d1:85:e5:75:40:f2:21:33:6c:c3:1d: cb:4e:32:21:da:65:56:bd:1a:c6:59:05:d2:d1:79:c4:ff:e4: 5b:5a:4a:d3:b5:fa:a5:e0:30:95:c1:18:8b:3d:b4:b1:0e:21: 0f:8d:b3:fd:88:3d:f2:05:b7:16:b6:94:22:dc:b4:90:10:4f: 88:55:88:44:24:07:ba:0d:cf:9a:52:18:ed:aa:b7:6f:ef:36: 9b:9e:bc:97:dd:e8:da:e9:d9:47:2e:26:0d:d2:ec:2f:17:ad: c9:da:61:ff:0e:1a:58:ad:3f:be:08:0d:36:3e:1e:42:9c:8a: 74:f4:3d:85:20:88:ce:d0:c1:31:6c:07:8a:68:4c:29:84:36: 65:d0:53:39:a5:9d:1b:5e:c0:34:6b:bb:f7:c9:48:0d:0f:44: 76:ba:61:5b:88:30:39:0d:2d:9b:59:35:bf:3d:46:36:a9:95: b0:54:91:4c -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEy9qjfoSP8B2nQM+pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMzEzNDUyMloXDTI4MDUwODEyNDUyMlowLzEtMCsGA1UEAxMk OGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQyOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/xwu1ghdg2XzhIuoD3swbPgpjJUCb5xo3bD ukpg7NjBCjJuGp3mGSdsBchNu44I6yqXEpgK7r0g3+Nk6YOW4X7lyVS7YBhzNXk+ O2CRGykygvkDzcez5IlFLyxNmcUXglZeL1dfsedUxkx1FRT2R0HX24M9QwggMujq j0GUEB2w1Jyid/y9Z3GT9ppYRdsJgu+begUQFOJnkK3K++XepgU4az4wJtZKOsR1 R/dT8sRnyM+fJ2K4CKssxi+rAwJPmElUKPLNWSg/DddsF06EHK+4yp4lx8tfHO2N oQ7f6gbL7KVrDl8v3XQTev90llzuctKGeEAWt0DK1kG2SqwsjQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBiVriYA6+agYOoZEHtZlnru4lgXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzhhZmQ4ODk1LTExZTktNDNkNC1i YjlmLTY0MDQyYjFkMjhmNi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIx ZDI4ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXn3gwDQQCAAIwBwMFACYHX8AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWEUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAd2iXIV/WwkT223DS6TVuuZbP2hvL K/pAPmoKi+3PNx5aB5xa9fO8fwdyNmd8FwzaF6stbhEwvcR+opEQH/hc7ynHL4E6 Tfez6QXlg1H6WtGF5XVA8iEzbMMdy04yIdplVr0axlkF0tF5xP/kW1pK07X6peAw lcEYiz20sQ4hD42z/Yg98gW3FraUIty0kBBPiFWIRCQHug3PmlIY7aq3b+82m568 l93o2unZRy4mDdLsLxetydph/w4aWK0/vggNNj4eQpyKdPQ9hSCIztDBMWwHimhM KYQ2ZdBTOaWdG17ANGu798lIDQ9EdrphW4gwOQ0tm1k1vz1GNqmVsFSRTA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:22:06 2026 by rpki-client