$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4.cer File: b29fd627-dc75-4d1c-8e9b-6a7640beedd4.cer (raw, json) Hash identifier: LBAi1/+d9pHX1Gk/Wu40Ybrd7rVIm+CFiBU4Atb0Xyg= Subject key identifier: 5D:E0:40:22:1C:DC:2E:33:EF:83:EE:4C:1E:2C:CB:61:A9:55:59:3E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CED1FD6DE9C498B00050BC180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/b29fd627-dc75-4d1c-8e9b-6a7640beedd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Feb 2026 13:45:22 +0000 Certificate not after: Thu 25 May 2028 12:45:22 +0000 Subordinate resources: AS: 397163 IP: 23.157.176.0/24 IP: 2605:31c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:1f:d6:de:9c:49:8b:00:05:0b:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 20 13:45:22 2026 GMT Not After : May 25 12:45:22 2028 GMT Subject: CN=b29fd627-dc75-4d1c-8e9b-6a7640beedd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:14:0d:58:1d:14:89:67:e2:1d:7a:04:69: 6e:32:f2:e4:4f:38:99:fc:c0:93:02:10:6a:bd:5f: 0f:f5:58:e9:c0:6b:b8:c8:28:6a:73:a6:9a:ac:70: 1d:bd:42:6f:c2:c0:12:ff:38:b2:7a:73:af:f4:d0: 96:56:3f:a2:dd:49:22:23:58:bc:46:da:6a:40:a0: a1:3a:b0:46:e0:19:9c:57:d4:e2:fd:d1:2f:b6:b6: c6:2d:41:3f:57:50:10:7e:64:18:71:1f:b7:96:16: 93:fd:4d:85:cd:ba:fb:1b:88:9e:cb:02:41:f7:a3: a5:f8:49:d1:cb:2e:f0:5f:07:05:4c:23:f3:b2:62: d6:ae:5b:d3:3e:9d:2b:a1:e4:a5:30:ac:a5:90:dc: c8:d7:05:b2:0f:0c:66:9d:ed:37:58:e0:c2:ce:33: b5:d1:fd:da:e0:82:cf:1a:43:14:d0:7f:f6:0d:f2: 0b:11:77:27:71:e6:1c:e1:8b:58:fb:fe:20:77:4a: 71:0c:7c:15:32:29:0f:24:a4:c7:a7:2b:51:36:86: 1c:13:0f:5f:63:7b:36:df:65:f5:db:93:68:7b:9f: 08:f5:f9:ff:09:1a:42:c5:97:38:8c:3f:5e:06:fe: 2d:77:f6:5d:97:6a:c5:18:bf:d8:07:e9:91:8a:46: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E0:40:22:1C:DC:2E:33:EF:83:EE:4C:1E:2C:CB:61:A9:55:59:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/b29fd627-dc75-4d1c-8e9b-6a7640beedd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.157.176.0/24 IPv6: 2605:31c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397163 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:12:b2:50:e0:36:1a:33:fc:1b:45:1d:87:36:93:d3:40:61: 2f:e1:55:6f:28:e7:11:9e:e0:fc:e9:62:82:95:39:77:d1:6e: 66:76:62:8f:2b:d5:8f:d4:2e:cd:9a:3a:42:13:86:89:79:46: d2:c8:a6:dd:cb:91:90:ac:b6:49:cc:5b:ca:91:eb:9c:cb:b8: 74:e2:35:d9:7d:86:85:56:fb:c0:16:86:23:a9:4f:a1:b6:f7: b4:2a:df:7f:58:0f:fc:ce:71:ff:e1:c1:1a:fd:a8:76:2f:39: 78:02:bb:17:ca:11:bf:f1:ce:a4:dc:2e:17:ed:cc:ab:e4:5e: 4d:75:d4:21:b7:1c:eb:92:23:fa:bc:08:a3:e3:c1:4b:e2:63: 35:60:7f:4b:02:75:ff:18:53:4c:3d:b1:ab:4a:f5:f2:e2:95: 6b:4f:ed:a1:f2:3a:8c:f9:67:5d:ae:ce:73:31:3d:9c:c5:17: bc:4d:f6:a4:ad:04:3f:23:45:f6:47:da:21:62:49:d3:5f:e6: 28:a2:0a:ef:5e:b3:68:39:b8:a8:bb:8e:e9:dd:80:14:39:f4: e7:e9:d9:c9:b4:01:89:27:6a:a8:44:25:ee:59:f8:c7:fc:33: c6:be:13:58:15:61:de:82:fe:a0:0e:31:9f:db:0e:bc:bf:f0: 8e:8e:94:89 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEztH9benEmLAAULwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyMDEzNDUyMloXDTI4MDUyNTEyNDUyMlowLzEtMCsGA1UEAxMk YjI5ZmQ2MjctZGM3NS00ZDFjLThlOWItNmE3NjQwYmVlZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQQUDVgdFIln4h16BGluMvLkTziZ/MCTAhBq vV8P9VjpwGu4yChqc6aarHAdvUJvwsAS/ziyenOv9NCWVj+i3UkiI1i8RtpqQKCh OrBG4BmcV9Ti/dEvtrbGLUE/V1AQfmQYcR+3lhaT/U2Fzbr7G4ieywJB96Ol+EnR yy7wXwcFTCPzsmLWrlvTPp0roeSlMKylkNzI1wWyDwxmne03WODCzjO10f3a4ILP GkMU0H/2DfILEXcnceYc4YtY+/4gd0pxDHwVMikPJKTHpytRNoYcEw9fY3s232X1 25Noe58I9fn/CRpCxZc4jD9eBv4td/Zdl2rFGL/YB+mRikbAEwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFF3gQCIc3C4z74PuTB4sy2GpVVk+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i MjlmZDYyNy1kYzc1LTRkMWMtOGU5Yi02YTc2NDBiZWVkZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2IyOWZkNjI3LWRjNzUtNGQxYy04 ZTliLTZhNzY0MGJlZWRkNC9iMjlmZDYyNy1kYzc1LTRkMWMtOGU5Yi02YTc2NDBi ZWVkZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXnbAwDQQCAAIwBwMFACYFMcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg9rMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFkSslDgNhoz/BtFHYc2k9NAYS/h VW8o5xGe4PzpYoKVOXfRbmZ2Yo8r1Y/ULs2aOkIThol5RtLIpt3LkZCstknMW8qR 65zLuHTiNdl9hoVW+8AWhiOpT6G297Qq339YD/zOcf/hwRr9qHYvOXgCuxfKEb/x zqTcLhftzKvkXk111CG3HOuSI/q8CKPjwUviYzVgf0sCdf8YU0w9satK9fLilWtP 7aHyOoz5Z12uznMxPZzFF7xN9qStBD8jRfZH2iFiSdNf5iiiCu9es2g5uKi7jund gBQ59Ofp2cm0AYknaqhEJe5Z+Mf8M8a+E1gVYd6C/qAOMZ/bDry/8I6OlIk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:15:43 2026 by rpki-client