$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer File: bcb3b598-8d83-4864-818b-f5833b7583e7.cer (raw, json) Hash identifier: ypJuxFnaMM0rT66EU23p52FnXZfzr15SKoAAGujr588= Subject key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DF9F1DE00B62A62FB0AE0A560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 May 2026 20:45:11 +0000 Certificate not after: Tue 29 Aug 2028 20:45:11 +0000 Subordinate resources: AS: 17176 IP: 23.134.180.0/24 IP: 2602:f6e4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:f1:de:00:b6:2a:62:fb:0a:e0:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 27 20:45:11 2026 GMT Not After : Aug 29 20:45:11 2028 GMT Subject: CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:b9:73:02:a5:a3:94:f0:e1:df:ea:f0:73: 84:69:57:75:8d:ce:df:38:47:5d:d1:f5:e3:cc:0a: d2:69:f8:15:a0:30:7e:7d:a0:43:76:39:9c:6c:ff: 00:84:2e:68:3a:30:d4:0a:60:72:a1:7a:68:40:42: 9c:9a:30:e8:5c:25:58:54:14:5e:dd:39:04:68:cf: 68:20:ac:6e:7a:0a:d3:0f:97:1e:b3:03:fb:66:2d: 3b:96:31:f4:37:57:2d:2a:e4:18:9a:66:2b:24:ef: 69:8d:41:0a:e9:31:6d:55:81:e4:38:db:99:23:c3: 15:b5:2d:f2:d2:d8:4a:7d:d7:69:9b:88:7e:31:aa: d9:bc:5a:97:59:40:21:df:c5:1d:db:46:2f:91:6d: d2:28:73:ba:fb:83:f5:64:85:4d:41:13:cc:b5:eb: 51:ca:72:56:4d:b2:6f:d7:cd:58:02:ca:fe:63:57: ae:f8:cb:cb:25:b6:8f:af:a9:d7:d9:11:be:a7:62: 51:27:65:20:1c:ab:63:2b:9b:64:46:fa:e8:58:f0: 3b:2a:73:9f:46:c3:b3:b9:f0:6e:35:e5:9e:c2:2f: 58:00:bd:d7:70:6a:1a:a0:22:aa:da:6d:e0:a0:93: d9:02:f0:1e:63:fe:47:0a:c7:39:a8:10:11:cb:94: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.180.0/24 IPv6: 2602:f6e4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17176 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:86:fb:c6:2a:d6:b9:77:d0:6a:77:08:8f:bf:3c:94:36:3b: 8f:fd:35:c2:e8:59:23:ad:d9:1a:ce:59:13:54:0f:95:40:27: 6d:5b:2a:bd:50:9b:97:74:85:32:0d:72:90:72:2f:92:e0:ee: 12:65:2e:3f:6e:5d:d3:9d:83:1d:78:17:74:ce:c5:4a:f5:5c: 70:65:41:93:31:a3:fd:c7:c4:d8:47:07:d3:47:d4:ab:c8:09: 98:1c:ba:96:81:64:e6:2a:48:0e:11:16:ff:b0:21:09:6a:03: bd:41:22:33:21:ad:2b:53:4b:e2:0f:d2:2f:92:4c:9b:c3:b6: 54:c6:f0:bd:1f:29:ef:aa:fb:b7:ab:ae:50:6d:fb:14:8f:86: f8:8a:85:79:83:6e:53:91:36:a7:e9:fd:4f:a1:87:76:a3:ea: c0:10:7b:89:03:34:c8:47:18:cf:11:9d:89:70:10:e9:d0:7b: 0d:5f:47:ae:e2:06:4c:4d:59:fe:09:95:ee:c3:49:66:b4:ef: 84:1b:f4:62:02:f5:42:85:e0:95:7b:52:39:47:66:0a:6f:53: 40:8c:ab:36:76:8f:47:62:75:5f:74:2d:d3:13:dc:41:87:55: bf:6f:d5:b5:57:ba:18:b0:29:e3:dd:fe:2f:52:c2:d0:b9:a5: 99:e5:a7:e4 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE358d4Atipi+wrgpWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyNzIwNDUxMVoXDTI4MDgyOTIwNDUxMVowLzEtMCsGA1UEAxMk YmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibW5cwKlo5Tw4d/q8HOEaVd1jc7fOEdd0fXj zArSafgVoDB+faBDdjmcbP8AhC5oOjDUCmByoXpoQEKcmjDoXCVYVBRe3TkEaM9o IKxuegrTD5ceswP7Zi07ljH0N1ctKuQYmmYrJO9pjUEK6TFtVYHkONuZI8MVtS3y 0thKfddpm4h+MarZvFqXWUAh38Ud20YvkW3SKHO6+4P1ZIVNQRPMtetRynJWTbJv 181YAsr+Y1eu+MvLJbaPr6nX2RG+p2JRJ2UgHKtjK5tkRvroWPA7KnOfRsOzufBu NeWewi9YAL3XcGoaoCKq2m3goJPZAvAeY/5HCsc5qBARy5TQwwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFE8B9XomnI6RqfQoC1PXKjxJeEOmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Y2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JjYjNiNTk4LThkODMtNDg2NC04 MThiLWY1ODMzYjc1ODNlNy9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3 NTgzZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhrQwDgQCAAIwCAMGACYC9uQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkMYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABOG+8Yq1rl30Gp3CI+/PJQ2O4/9 NcLoWSOt2RrOWRNUD5VAJ21bKr1Qm5d0hTINcpByL5Lg7hJlLj9uXdOdgx14F3TO xUr1XHBlQZMxo/3HxNhHB9NH1KvICZgcupaBZOYqSA4RFv+wIQlqA71BIjMhrStT S+IP0i+STJvDtlTG8L0fKe+q+7errlBt+xSPhviKhXmDblORNqfp/U+hh3aj6sAQ e4kDNMhHGM8RnYlwEOnQew1fR67iBkxNWf4Jle7DSWa074Qb9GIC9UKF4JV7UjlH ZgpvU0CMqzZ2j0didV90LdMT3EGHVb9v1bVXuhiwKePd/i9SwtC5pZnlp+Q= -----END CERTIFICATE-----Generated at Sat Jun 13 11:25:37 2026 by rpki-client