$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer (raw, json) Hash identifier: 7Y+LQotWGODIKY0nNK/1w++9cjgPeQ01IYzE8Yl+LaA= Subject key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CFC7A9B16B94E9F6F00762400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 01:45:23 +0000 Certificate not after: Wed 31 May 2028 00:45:23 +0000 Subordinate resources: AS: 32526 IP: 23.160.168.0/24 IP: 2602:fa48::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:7a:9b:16:b9:4e:9f:6f:00:76:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 26 01:45:23 2026 GMT Not After : May 31 00:45:23 2028 GMT Subject: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:f6:96:8d:7b:5b:88:88:48:90:49:91:29: 8f:7f:cc:b6:08:5e:ae:fe:8d:3a:f1:18:1b:c8:02: 49:e2:f4:dc:9b:40:cd:75:99:72:0b:9e:1d:14:ac: 43:05:4c:65:51:9e:40:75:1d:52:1a:26:de:39:39: c8:c1:13:67:28:04:72:6a:91:40:5a:69:c5:5f:da: af:94:bf:27:95:84:8b:b8:95:1a:89:75:95:98:a1: 55:69:90:08:fd:a8:c4:fb:d7:5f:ad:30:77:c6:82: 1b:f2:ee:d4:b7:1c:f7:53:3c:37:66:cd:ad:fe:c5: b2:5d:69:80:f8:a6:6e:b8:57:4b:f8:13:46:8d:3f: 77:44:58:2a:50:17:db:c7:3a:80:84:03:34:d2:3e: 9d:38:bf:51:71:3e:d8:98:d4:52:e1:95:8e:db:78: cc:85:7c:26:2d:5f:23:db:57:cb:7a:33:cb:70:0f: 3c:4e:e8:cd:1f:f1:26:59:5e:87:e8:32:2f:76:c7: 54:25:77:b2:47:a0:c7:de:07:e4:6d:d5:9c:c5:d2: 51:20:11:1f:df:79:eb:48:a2:6a:63:e0:ab:ed:cd: a1:1d:1f:fd:78:d6:a1:c7:02:28:e8:27:22:24:18: 99:fb:d1:ba:d8:b3:42:79:81:4b:61:4d:e4:62:d6: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.168.0/24 IPv6: 2602:fa48::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32526 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c4:51:b8:bd:36:ab:ab:7e:a8:04:da:bc:54:08:8b:22:98: 4e:26:2a:c7:e5:16:fd:d7:b7:eb:85:f9:37:52:be:36:15:96: a2:8b:31:ed:1d:9f:32:e0:1b:8e:bb:05:94:1e:27:d2:f0:29: 9d:9d:fe:f3:59:17:2c:24:09:c6:c7:d9:c7:6c:92:86:b5:30: c0:f7:7c:b7:39:48:96:7c:cb:62:56:7d:96:2c:cc:fa:b8:34: 66:9a:8d:0e:0f:37:60:4c:d9:fa:ea:cc:bd:f9:6c:0c:0c:c6: 6c:7f:c8:29:50:c6:16:8c:70:91:b6:32:0a:7c:70:98:d0:9b: 60:ce:e9:89:1f:50:d0:c8:08:14:5c:07:5b:44:87:a8:6c:f4: 1b:56:41:c3:a1:c3:97:bc:bd:97:af:69:39:be:25:e8:1f:2a: 6c:b9:56:9e:90:a8:b6:9f:4b:62:7a:0d:00:40:61:e7:7e:9f: 73:68:75:fc:1a:e1:4d:d0:40:5a:0f:be:3d:71:9d:61:34:4a: 80:23:38:57:e6:a9:1d:fb:11:63:d5:dd:6b:93:ae:14:5a:f5: 0b:58:42:b7:cf:f8:13:db:3b:7c:d8:ce:7e:cf:7b:ae:e5:72: a4:ed:a4:b0:14:28:a9:65:6b:9f:0b:aa:12:9e:0e:61:bf:33: 35:0a:3c:08 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEz8epsWuU6fbwB2JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyNjAxNDUyM1oXDTI4MDUzMTAwNDUyM1owLzEtMCsGA1UEAxMk YWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUyZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcz2lo17W4iISJBJkSmPf8y2CF6u/o068Rgb yAJJ4vTcm0DNdZlyC54dFKxDBUxlUZ5AdR1SGibeOTnIwRNnKARyapFAWmnFX9qv lL8nlYSLuJUaiXWVmKFVaZAI/ajE+9dfrTB3xoIb8u7Utxz3Uzw3Zs2t/sWyXWmA +KZuuFdL+BNGjT93RFgqUBfbxzqAhAM00j6dOL9RcT7YmNRS4ZWO23jMhXwmLV8j 21fLejPLcA88TujNH/EmWV6H6DIvdsdUJXeyR6DH3gfkbdWcxdJRIBEf33nrSKJq Y+Cr7c2hHR/9eNahxwIo6CciJBiZ+9G62LNCeYFLYU3kYtb1GwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN1TwtRMbwHCNgqVEYBCk1ADWNOEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FmZDQ0YjljLTIzMTItNGFjYi1i MjNlLTQwYWFhYWZlMmRmZS9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFm ZTJkZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoKgwDgQCAAIwCAMGACYC+kgAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn8OMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ/EUbi9NqurfqgE2rxUCIsimE4m KsflFv3Xt+uF+TdSvjYVlqKLMe0dnzLgG467BZQeJ9LwKZ2d/vNZFywkCcbH2cds koa1MMD3fLc5SJZ8y2JWfZYszPq4NGaajQ4PN2BM2frqzL35bAwMxmx/yClQxhaM cJG2Mgp8cJjQm2DO6YkfUNDICBRcB1tEh6hs9BtWQcOhw5e8vZevaTm+JegfKmy5 Vp6QqLafS2J6DQBAYed+n3Nodfwa4U3QQFoPvj1xnWE0SoAjOFfmqR37EWPV3WuT rhRa9QtYQrfP+BPbO3zYzn7Pe67lcqTtpLAUKKlla58LqhKeDmG/MzUKPAg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:14:58 2026 by rpki-client