$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a.cer File: 2ac27e5e-1654-448f-b4a0-409a732a286a.cer (raw, json) Hash identifier: MWpihatViyqg7kETgtmZ4kjh35jd5R+MRmG+fGuh2L8= Subject key identifier: 98:F6:CC:57:75:0B:E7:6E:6B:2B:23:D9:82:3F:AF:17:64:A3:9E:CD Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584ED63202C1C8BDC191FFDAB700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/2ac27e5e-1654-448f-b4a0-409a732a286a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Aug 2026 18:12:16 +0000 Certificate not after: Sun 12 Nov 2028 23:28:04 +0000 Subordinate resources: AS: 20119 IP: 23.151.96.0/24 IP: 23.170.96.0/24 IP: 142.202.12.0/22 IP: 144.208.88.0/24 IP: 158.51.0.0/23 IP: 172.83.127.0/24 IP: 2602:fe0f::/36 IP: 2602:fe3a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:32:02:c1:c8:bd:c1:91:ff:da:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 14 18:12:16 2026 GMT Not After : Nov 12 23:28:04 2028 GMT Subject: CN=2ac27e5e-1654-448f-b4a0-409a732a286a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:d3:71:e0:ac:ae:28:c3:e0:b0:03:99:2a: d6:c5:e1:45:ac:e0:4d:fe:f8:01:f8:d9:b9:ad:02: f4:c2:7b:b0:22:cb:b6:cd:f7:1e:bd:fb:fb:0c:96: 87:0e:ca:fa:a8:15:00:44:25:a6:a5:76:59:a5:34: 20:28:69:52:3b:e7:1a:29:59:79:a2:04:47:1e:50: 17:5e:22:9b:6c:83:99:04:a6:7b:e8:ca:ff:42:72: 25:14:bb:d5:42:16:31:1d:98:69:63:46:37:7e:69: 82:1b:a6:30:db:9d:cc:ac:8e:c9:9d:6e:0e:be:a0: 2c:d4:b5:54:46:44:97:01:ee:95:c3:58:d3:96:29: 19:77:e0:d9:42:02:3b:f3:cd:41:71:36:3d:ef:de: 49:f7:7b:f3:8a:d2:5e:61:29:c8:03:15:a2:25:10: 12:63:3c:3a:4e:00:92:b4:84:e3:d0:70:25:ba:e6: ff:1b:46:da:87:cf:43:e3:f1:1b:fe:cd:5f:cb:c6: 15:25:2f:3c:d3:ad:ab:e4:dc:19:37:6c:18:82:be: 77:9f:1c:27:ce:35:6a:ec:3e:43:ed:5e:31:98:9a: 9e:03:af:fa:82:9a:e9:35:a8:e4:7f:0b:34:66:28: 24:7e:8a:50:3c:60:0c:ba:05:2b:7f:fe:2f:58:e4: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:CC:57:75:0B:E7:6E:6B:2B:23:D9:82:3F:AF:17:64:A3:9E:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac27e5e-1654-448f-b4a0-409a732a286a/2ac27e5e-1654-448f-b4a0-409a732a286a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.151.96.0/24 23.170.96.0/24 142.202.12.0/22 144.208.88.0/24 158.51.0.0/23 172.83.127.0/24 IPv6: 2602:fe0f::/36 2602:fe3a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20119 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:29:ab:7e:d0:0a:cb:01:2b:22:f8:fc:14:98:85:1a:5d:e1: 33:c7:b1:c5:42:fd:58:2f:34:24:28:4c:e6:2e:ad:ad:2f:d8: d5:dc:9f:e6:01:73:25:7c:60:ed:60:e1:b5:70:7b:4d:58:90: ea:c9:e6:24:ac:a9:5d:d6:03:33:a1:ad:80:c4:98:5d:60:58: 04:bd:10:7c:a9:a4:95:86:ab:fa:87:db:99:e4:10:3b:18:dd: 5d:d4:96:fd:96:39:e4:79:47:ef:d3:30:75:00:7e:d1:af:59: 15:21:f2:d9:95:93:08:c5:de:dc:5e:7f:d1:b9:ce:96:d0:28: 7a:88:66:51:85:6b:58:72:fd:36:11:cc:9d:fe:f8:27:ac:88: 33:09:e5:b6:e2:97:25:7b:de:f7:43:ab:f1:05:bc:a6:47:11: a5:fb:6f:a4:34:19:85:7d:f4:fd:30:b4:e7:69:cc:d7:9c:05: ae:27:d5:7c:db:1c:1d:cc:97:76:f8:bd:f7:f9:3a:dc:b8:ac: 46:eb:fc:67:fd:cd:9c:a3:ab:55:e1:90:da:8f:56:6b:9d:88: e7:c9:d3:f4:1d:8c:36:dc:70:af:20:c3:9c:08:df:cf:39:c1: 31:b0:54:10:0c:9e:27:b4:8e:5c:d2:74:57:5a:f2:33:76:fd: e9:eb:02:0b -----BEGIN CERTIFICATE----- MIIHPjCCBiagAwIBAgIUAQ0Mn0MoWE7WMgLByL3Bkf/atwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDgxNDE4MTIxNloXDTI4MTExMjIzMjgwNFowLzEtMCsGA1UEAxMk MmFjMjdlNWUtMTY1NC00NDhmLWI0YTAtNDA5YTczMmEyODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y7TceCsrijD4LADmSrWxeFFrOBN/vgB+Nm5 rQL0wnuwIsu2zfcevfv7DJaHDsr6qBUARCWmpXZZpTQgKGlSO+caKVl5ogRHHlAX XiKbbIOZBKZ76Mr/QnIlFLvVQhYxHZhpY0Y3fmmCG6Yw253MrI7JnW4OvqAs1LVU RkSXAe6Vw1jTlikZd+DZQgI7881BcTY9795J93vzitJeYSnIAxWiJRASYzw6TgCS tITj0HAluub/G0bah89D4/Eb/s1fy8YVJS88062r5NwZN2wYgr53nxwnzjVq7D5D 7V4xmJqeA6/6gprpNajkfws0ZigkfopQPGAMugUrf/4vWOQQ1QIDAQABo4IEUDCC BEwwHQYDVR0OBBYEFJj2zFd1C+duaysj2YI/rxdko57NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y YWMyN2U1ZS0xNjU0LTQ0OGYtYjRhMC00MDlhNzMyYTI4NmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJhYzI3ZTVlLTE2NTQtNDQ4Zi1i NGEwLTQwOWE3MzJhMjg2YS8yYWMyN2U1ZS0xNjU0LTQ0OGYtYjRhMC00MDlhNzMy YTI4NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwVQYIKwYBBQUH AQcBAf8ERjBEMCoEAgABMCQDBAAXl2ADBAAXqmADBAKOygwDBACQ0FgDBAGeMwAD BACsU38wFgQCAAIwEAMGBCYC/g8AAwYEJgL+OgAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICTpcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAqimrftAKywErIvj8FJiFGl3hM8exxUL9WC80JChM 5i6trS/Y1dyf5gFzJXxg7WDhtXB7TViQ6snmJKypXdYDM6GtgMSYXWBYBL0QfKmk lYar+ofbmeQQOxjdXdSW/ZY55HlH79MwdQB+0a9ZFSHy2ZWTCMXe3F5/0bnOltAo eohmUYVrWHL9NhHMnf74J6yIMwnltuKXJXve90Or8QW8pkcRpftvpDQZhX30/TC0 52nM15wFrifVfNscHcyXdvi99/k63LisRuv8Z/3NnKOrVeGQ2o9Wa52I58nT9B2M NtxwryDDnAjfzznBMbBUEAyeJ7SOXNJ0V1ryM3b96esCCw== -----END CERTIFICATE-----Generated at Fri Aug 21 19:31:35 2026 by rpki-client