$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer File: 2654343f-7862-4859-8638-b9c2008b3151.cer (raw, json) Hash identifier: vlxb1t0XANxqYNl6cgo1Ys7zGKnd5Vam0BoMIrkqGAI= Subject key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584E9D42E33B971A0873144F8900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jul 2026 08:45:11 +0000 Certificate not after: Fri 27 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 7201 IP: 23.170.200.0/24 IP: 2602:f99f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:42:e3:3b:97:1a:08:73:14:4f:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 25 08:45:11 2026 GMT Not After : Oct 27 08:45:11 2028 GMT Subject: CN=2654343f-7862-4859-8638-b9c2008b3151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:41:c8:37:d1:0d:7f:5d:56:1a:17:0b:af: 87:cb:bd:54:93:98:9c:b6:fb:6d:20:52:2a:b4:8f: c5:54:c1:f8:a4:91:a0:64:97:ab:67:7e:22:d9:0d: 0a:49:c2:75:f0:58:90:9f:22:f5:09:24:15:a2:c5: e4:fa:2c:96:23:89:c5:10:00:2a:56:cd:72:79:79: d8:ce:73:6b:9f:6e:b9:72:f6:64:6a:a7:c2:6c:43: 23:83:74:29:4e:ce:30:54:04:37:ee:b6:ca:bb:eb: 75:d7:cb:99:fb:4a:26:3e:50:ee:13:b9:b0:96:53: c4:1e:b3:d9:05:75:94:80:98:4b:7c:33:10:cb:b1: 88:44:06:db:39:83:ed:07:24:ca:2b:c4:b2:6e:b0: 21:68:b3:0d:1f:b5:07:39:46:ca:82:d3:fc:0f:76: d0:58:61:8f:cd:67:0d:66:8d:da:e5:4a:66:ee:d9: e6:73:73:ef:6e:da:fd:c2:7e:a7:ec:a8:58:53:1d: 08:7d:7e:79:ae:7d:9c:f3:7e:fa:0d:db:c7:26:6f: 3e:e7:0e:4f:74:23:eb:7f:64:c7:b5:92:4a:3e:ec: d3:f2:03:78:ed:82:bd:4a:99:f8:1c:9c:89:62:95: ed:ee:84:c2:94:e3:e0:80:5a:49:f5:5c:b4:00:05: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.170.200.0/24 IPv6: 2602:f99f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:dd:89:71:4d:fa:2e:c9:a5:30:bd:5c:5e:fc:5c:85:7d:63: 31:78:d8:1a:0e:d4:78:f3:51:9b:40:03:41:49:ce:13:72:39: d5:cb:55:f7:1c:29:ce:f4:cc:00:33:c0:13:78:f5:c2:c9:65: a7:7e:85:b8:dd:95:f7:dd:ab:d3:13:ce:ca:e1:5f:02:74:98: 6e:7f:46:8a:e0:8b:02:00:46:1c:7c:7c:7e:43:89:4b:12:90: 5c:b9:45:c2:36:f1:2c:9b:a5:d7:0f:bd:e1:be:9b:3a:7e:11: e7:94:e1:78:a5:92:29:e2:b7:5d:68:4a:0e:12:95:51:08:6e: 03:80:3b:fb:24:c0:f9:0e:85:d4:00:75:ce:36:cf:94:ed:da: c6:6e:28:5a:d5:ea:7c:43:86:eb:e9:43:d2:d3:cc:1b:0a:1f: ac:25:c7:48:25:08:25:58:94:62:01:c3:d0:37:08:98:f6:b7: a5:09:69:c2:31:a8:b5:d5:57:1e:06:24:42:ae:c3:37:18:ae: ad:a8:c2:4b:67:82:43:9d:e9:c0:bb:88:bc:d0:9f:6c:fb:e0: c3:ef:f8:57:8d:21:a6:2c:29:d5:ee:cb:e8:d7:14:e9:55:05: 20:35:ba:0c:f4:4e:2f:c6:c5:40:79:a1:1c:df:b6:de:c9:f7: a6:aa:32:52 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE6dQuM7lxoIcxRPiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDcyNTA4NDUxMVoXDTI4MTAyNzA4NDUxMVowLzEtMCsGA1UEAxMk MjY1NDM0M2YtNzg2Mi00ODU5LTg2MzgtYjljMjAwOGIzMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqplByDfRDX9dVhoXC6+Hy71Uk5ictvttIFIq tI/FVMH4pJGgZJerZ34i2Q0KScJ18FiQnyL1CSQVosXk+iyWI4nFEAAqVs1yeXnY znNrn265cvZkaqfCbEMjg3QpTs4wVAQ37rbKu+t118uZ+0omPlDuE7mwllPEHrPZ BXWUgJhLfDMQy7GIRAbbOYPtByTKK8SybrAhaLMNH7UHOUbKgtP8D3bQWGGPzWcN Zo3a5Upm7tnmc3Pvbtr9wn6n7KhYUx0IfX55rn2c8376DdvHJm8+5w5PdCPrf2TH tZJKPuzT8gN47YK9Spn4HJyJYpXt7oTClOPggFpJ9Vy0AAX+2wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJ0QVXfyLJNcNx8gGEnERxhlLYIuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y NjU0MzQzZi03ODYyLTQ4NTktODYzOC1iOWMyMDA4YjMxNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI2NTQzNDNmLTc4NjItNDg1OS04 NjM4LWI5YzIwMDhiMzE1MS8yNjU0MzQzZi03ODYyLTQ4NTktODYzOC1iOWMyMDA4 YjMxNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqsgwDgQCAAIwCAMGACYC+Z8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhwhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB7diXFN+i7JpTC9XF78XIV9YzF4 2BoO1HjzUZtAA0FJzhNyOdXLVfccKc70zAAzwBN49cLJZad+hbjdlffdq9MTzsrh XwJ0mG5/RorgiwIARhx8fH5DiUsSkFy5RcI28SybpdcPveG+mzp+EeeU4Xilkini t11oSg4SlVEIbgOAO/skwPkOhdQAdc42z5Tt2sZuKFrV6nxDhuvpQ9LTzBsKH6wl x0glCCVYlGIBw9A3CJj2t6UJacIxqLXVVx4GJEKuwzcYrq2owktngkOd6cC7iLzQ n2z74MPv+FeNIaYsKdXuy+jXFOlVBSA1ugz0Ti/GxUB5oRzftt7J96aqMlI= -----END CERTIFICATE-----Generated at Tue Jul 28 19:51:35 2026 by rpki-client