$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer File: bf246bfa-4298-4264-af85-3fb2845207f8.cer (raw, json) Hash identifier: DO9p/KHkIfYBmemOrW7XZU/h2FgBt394oZwTW+THw+E= Subject key identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CF6E53E4B159BEF30D7E23CCA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 01:45:23 +0000 Certificate not after: Mon 29 May 2028 00:45:23 +0000 Subordinate resources: AS: 8796 IP: 23.135.56.0/24 IP: 2602:fb8e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:e5:3e:4b:15:9b:ef:30:d7:e2:3c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 24 01:45:23 2026 GMT Not After : May 29 00:45:23 2028 GMT Subject: CN=bf246bfa-4298-4264-af85-3fb2845207f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:bb:42:38:3e:ae:a4:5e:07:ff:9b:af:ed: 1f:e4:49:3b:f9:de:55:04:2d:6d:f9:9a:5c:51:84: 13:06:9a:53:86:af:85:d4:9d:b0:6d:28:6f:a3:07: e8:d1:8b:e7:97:cf:48:ac:93:aa:67:ca:4f:f3:71: e2:b1:65:8a:7b:6b:40:80:9e:f7:45:51:7b:8c:18: 0f:8c:56:a1:d0:f6:ec:9d:4a:19:04:9d:33:60:68: 6f:2a:c4:0a:14:6e:c9:f5:5a:42:54:8f:af:35:d6: 6c:e0:4a:51:8f:b0:ef:0c:a1:ae:e6:b8:e5:d1:83: 50:ee:43:a7:4d:51:d0:81:96:03:90:a4:8c:3a:d4: 37:13:29:3c:93:84:ca:39:c7:ee:25:c4:08:a1:80: 7e:94:b3:a2:65:fc:a5:64:aa:4e:f3:71:02:c3:55: 83:0a:76:3b:8f:3e:7e:a8:69:f3:66:b8:8b:6f:33: 7a:2c:ad:21:5f:17:8d:0c:75:d6:fc:33:7e:4e:32: 5a:96:46:71:29:3f:62:7a:eb:5f:b1:f9:42:5c:94: b4:9b:d2:59:60:c1:16:45:ee:1d:2d:c5:38:59:40: d2:25:9b:f6:6e:ac:f4:8c:67:49:f9:cb:66:7a:e7: 5d:07:5c:50:b0:76:62:42:28:96:40:e4:1e:7c:14: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.135.56.0/24 IPv6: 2602:fb8e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8796 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:97:31:d6:02:b4:ad:6e:51:7d:b6:56:94:6d:42:31:06:43: 69:00:a3:ee:da:d5:ee:67:d8:e2:9c:37:68:7c:8d:e1:58:7c: d7:bc:cd:4c:87:37:38:7e:89:08:d5:6a:17:cb:31:e1:9c:5f: 30:94:61:f3:0b:8f:4f:01:20:ba:04:ae:6d:c9:8a:5d:12:98: 4c:fd:06:04:c7:2f:6d:3b:50:a3:f3:25:e9:58:c9:07:0b:6a: 78:a0:13:b5:79:fa:92:86:77:13:e0:36:5b:ee:76:08:d9:f3: eb:38:f1:aa:86:9d:89:a9:c0:60:f6:00:e3:3d:a6:70:f7:af: e2:98:e9:66:92:6e:85:44:2b:01:97:b3:07:a3:20:c8:68:64: e9:d7:49:83:d1:e1:f3:43:f9:7c:47:57:00:0f:3f:bb:33:2e: 3c:2d:27:e8:fe:80:9b:ed:a9:53:cd:13:4d:2f:82:14:73:51: fa:e7:34:16:90:e7:f8:ca:da:88:35:59:3e:a5:81:73:03:1e: 31:5a:af:96:77:97:0d:a2:10:9a:7a:b6:b6:a7:bb:ba:54:34: 2d:3d:83:64:88:18:ea:bf:e3:f2:18:96:30:e2:a1:ce:1b:48: e9:a4:54:bd:67:eb:ec:2d:dd:e2:65:f8:99:df:e2:34:86:79: c2:2a:cc:61 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEz25T5LFZvvMNfiPMowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyNDAxNDUyM1oXDTI4MDUyOTAwNDUyM1owLzEtMCsGA1UEAxMk YmYyNDZiZmEtNDI5OC00MjY0LWFmODUtM2ZiMjg0NTIwN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMG7Qjg+rqReB/+br+0f5Ek7+d5VBC1t+Zpc UYQTBppThq+F1J2wbShvowfo0Yvnl89IrJOqZ8pP83HisWWKe2tAgJ73RVF7jBgP jFah0PbsnUoZBJ0zYGhvKsQKFG7J9VpCVI+vNdZs4EpRj7DvDKGu5rjl0YNQ7kOn TVHQgZYDkKSMOtQ3Eyk8k4TKOcfuJcQIoYB+lLOiZfylZKpO83ECw1WDCnY7jz5+ qGnzZriLbzN6LK0hXxeNDHXW/DN+TjJalkZxKT9ieutfsflCXJS0m9JZYMEWRe4d LcU4WUDSJZv2bqz0jGdJ+ctmeuddB1xQsHZiQiiWQOQefBTAkwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAyyAmiVy+TGhJho1LQau71lbb+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i ZjI0NmJmYS00Mjk4LTQyNjQtYWY4NS0zZmIyODQ1MjA3ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2JmMjQ2YmZhLTQyOTgtNDI2NC1h Zjg1LTNmYjI4NDUyMDdmOC9iZjI0NmJmYS00Mjk4LTQyNjQtYWY4NS0zZmIyODQ1 MjA3ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhzgwDgQCAAIwCAMGBCYC+44AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAiJcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIGXMdYCtK1uUX22VpRtQjEGQ2kA o+7a1e5n2OKcN2h8jeFYfNe8zUyHNzh+iQjVahfLMeGcXzCUYfMLj08BILoErm3J il0SmEz9BgTHL207UKPzJelYyQcLanigE7V5+pKGdxPgNlvudgjZ8+s48aqGnYmp wGD2AOM9pnD3r+KY6WaSboVEKwGXswejIMhoZOnXSYPR4fND+XxHVwAPP7szLjwt J+j+gJvtqVPNE00vghRzUfrnNBaQ5/jK2og1WT6lgXMDHjFar5Z3lw2iEJp6tran u7pUNC09g2SIGOq/4/IYljDioc4bSOmkVL1n6+wt3eJl+Jnf4jSGecIqzGE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:00 2026 by rpki-client