$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/51c1e15a-1f30-4628-a4a5-945b7daf94e2.cer File: 51c1e15a-1f30-4628-a4a5-945b7daf94e2.cer (raw, json) Hash identifier: 2Nr37Bmm4ikFuTSS4pnbxHHr4h6wd/pgVmh/bgxZ32Y= Subject key identifier: C0:52:9A:76:53:DB:73:A4:1B:21:8D:94:8E:92:9C:DA:FA:63:C2:63 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5E3353ED3993E4199AA51BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/51c1e15a-1f30-4628-a4a5-945b7daf94e2/51c1e15a-1f30-4628-a4a5-945b7daf94e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/51c1e15a-1f30-4628-a4a5-945b7daf94e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 18:37:55 +0000 Certificate not after: Wed 04 Oct 2028 18:37:55 +0000 Subordinate resources: AS: 402554 IP: 23.159.52.0/24 IP: 2602:f3a4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:33:53:ed:39:93:e4:19:9a:a5:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 18:37:55 2026 GMT Not After : Oct 4 18:37:55 2028 GMT Subject: CN=51c1e15a-1f30-4628-a4a5-945b7daf94e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:5c:0a:3f:8e:0e:b0:8c:b6:0a:c5:eb:5d: fd:17:97:0b:95:21:7c:7d:56:23:6e:0a:bf:29:84: e0:d7:8e:f3:7e:6b:a2:8b:50:d7:3a:7b:03:17:c3: b4:76:0b:64:2f:73:0d:15:06:1a:f7:55:3f:ef:6a: ff:b3:41:65:b2:31:b0:6b:e0:98:9c:d7:ba:0e:4b: ad:39:57:d6:e5:f8:c7:2b:bc:cc:0a:40:ad:84:7c: a4:03:d5:f9:d9:8d:7c:f4:c4:e7:16:8a:b3:5f:92: f6:f0:05:63:c4:da:2d:28:a2:34:79:ae:67:47:4b: 5e:15:86:ef:b9:22:c5:8a:86:bb:ab:17:05:b7:f6: 51:b0:1c:a6:c6:8d:31:75:6d:c4:2d:5c:17:8f:3c: 93:5a:d0:2a:4e:1d:c0:ed:cd:87:0e:54:2d:74:2a: f9:40:ba:da:e0:8e:99:63:99:1a:80:e4:9a:0b:bc: e1:dd:c1:df:a3:02:54:6f:80:5e:6e:bf:43:31:fe: 41:84:50:37:1d:b2:e4:d5:8a:16:a0:2f:9c:86:5a: b1:b7:94:a2:2c:5d:13:42:50:cc:7c:52:c0:a2:d3: 1b:27:15:7c:b7:c6:12:cc:1f:83:1a:1f:d9:e9:86: 2a:67:e0:78:96:50:76:fd:7a:ad:c8:2b:7b:e7:4e: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:9A:76:53:DB:73:A4:1B:21:8D:94:8E:92:9C:DA:FA:63:C2:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/51c1e15a-1f30-4628-a4a5-945b7daf94e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/51c1e15a-1f30-4628-a4a5-945b7daf94e2/51c1e15a-1f30-4628-a4a5-945b7daf94e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.159.52.0/24 IPv6: 2602:f3a4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402554 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ed:af:fa:d3:5d:6d:ea:be:c6:b8:e8:b0:43:87:02:64:0f: c5:ab:f1:1b:9a:85:b3:41:5e:44:a0:da:80:8a:8c:2a:da:6c: 7c:49:55:0a:1c:a1:18:cf:81:0b:1c:e4:c7:ef:d8:c4:71:c2: ec:5c:2c:c7:dc:74:62:77:c9:cc:fa:f1:e2:21:51:d9:a8:83: 6c:a2:4d:c8:d3:b1:d1:f4:b8:43:66:a8:fe:ad:db:57:f8:38: 09:65:d1:46:1f:bf:9b:03:32:94:de:fd:b5:75:1b:a7:f2:f1: be:9a:23:b0:ee:b4:f6:cd:d9:e9:68:a8:9c:0d:5f:f5:52:90: 7b:a2:ae:77:b6:e2:68:58:4a:8b:99:48:4e:83:71:3d:67:ec: 18:36:f5:c3:89:29:fb:58:f1:c3:4a:b9:09:6d:65:1f:12:70: 49:b6:53:f7:35:d3:3d:4d:ad:f2:d2:09:5e:f0:85:5a:69:b6: 78:56:de:4c:5c:20:fe:fb:71:40:c4:0f:cf:e5:83:ae:d2:da: 5a:dd:04:e0:c9:52:1c:06:27:86:2b:a8:84:60:11:98:c7:db: 0e:cc:7d:d7:a2:ac:1f:9f:46:6c:39:5a:ee:13:1d:f3:09:28: c9:6c:02:8f:b0:a6:d8:98:ef:57:a3:ec:d8:2c:af:70:45:dc: 0d:66:91:36 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5eM1PtOZPkGZqlG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjE4Mzc1NVoXDTI4MTAwNDE4Mzc1NVowLzEtMCsGA1UEAxMk NTFjMWUxNWEtMWYzMC00NjI4LWE0YTUtOTQ1YjdkYWY5NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRNcCj+ODrCMtgrF6139F5cLlSF8fVYjbgq/ KYTg147zfmuii1DXOnsDF8O0dgtkL3MNFQYa91U/72r/s0FlsjGwa+CYnNe6Dkut OVfW5fjHK7zMCkCthHykA9X52Y189MTnFoqzX5L28AVjxNotKKI0ea5nR0teFYbv uSLFioa7qxcFt/ZRsBymxo0xdW3ELVwXjzyTWtAqTh3A7c2HDlQtdCr5QLra4I6Z Y5kagOSaC7zh3cHfowJUb4Bebr9DMf5BhFA3HbLk1YoWoC+chlqxt5SiLF0TQlDM fFLAotMbJxV8t8YSzB+DGh/Z6YYqZ+B4llB2/XqtyCt7505uZwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMBSmnZT23OkGyGNlI6SnNr6Y8JjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 MWMxZTE1YS0xZjMwLTQ2MjgtYTRhNS05NDViN2RhZjk0ZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzUxYzFlMTVhLTFmMzAtNDYyOC1h NGE1LTk0NWI3ZGFmOTRlMi81MWMxZTE1YS0xZjMwLTQ2MjgtYTRhNS05NDViN2Rh Zjk0ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnzQwDgQCAAIwCAMGACYC86QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkejBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw7a/6011t6r7GuOiwQ4cCZA/F q/EbmoWzQV5EoNqAiowq2mx8SVUKHKEYz4ELHOTH79jEccLsXCzH3HRid8nM+vHi IVHZqINsok3I07HR9LhDZqj+rdtX+DgJZdFGH7+bAzKU3v21dRun8vG+miOw7rT2 zdnpaKicDV/1UpB7oq53tuJoWEqLmUhOg3E9Z+wYNvXDiSn7WPHDSrkJbWUfEnBJ tlP3NdM9Ta3y0gle8IVaabZ4Vt5MXCD++3FAxA/P5YOu0tpa3QTgyVIcBieGK6iE YBGYx9sOzH3Xoqwfn0ZsOVruEx3zCSjJbAKPsKbYmO9Xo+zYLK9wRdwNZpE2 -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:10 2026 by rpki-client