$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer File: bce2ace0-971c-48f1-8361-962ad02d9618.cer (raw, json) Hash identifier: rW6sXmM2MSvt0fISElOvSChLQpR61tlg7hNL3hqpxYw= Subject key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F6125E42C776C6DFE866A4280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Oct 2026 12:45:12 +0000 Certificate not after: Fri 05 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 32943 IP: 23.175.168.0/24 IP: 2602:f937::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:25:e4:2c:77:6c:6d:fe:86:6a:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 3 12:45:12 2026 GMT Not After : Jan 5 13:45:12 2029 GMT Subject: CN=bce2ace0-971c-48f1-8361-962ad02d9618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:c3:56:5e:a1:3b:9f:de:91:76:e9:21:de: 96:de:75:47:a8:48:9f:7b:18:64:87:4c:d5:04:56: d2:59:0b:60:e5:91:43:20:7e:10:a3:cd:dd:a6:0f: 8f:86:5b:94:67:de:03:3a:c1:a8:ca:d8:1c:c8:18: ca:f9:12:4f:72:4a:cd:37:2b:83:0d:18:dc:86:2b: 31:f4:c5:5f:82:de:2e:21:63:54:1f:00:61:42:b2: 9b:de:eb:ba:4a:6f:4d:fd:f6:d1:35:0f:6c:84:8c: 9d:a5:ee:95:a5:62:97:ab:d7:e0:d3:25:e3:aa:b2: 5b:e4:2b:4e:f7:0d:fc:57:d9:ae:ee:4d:1f:9f:0a: aa:8f:dc:bf:37:23:0b:07:0d:7b:16:4a:40:e9:f3: 84:40:58:0a:8a:f7:9e:ce:f5:e8:8b:a1:f6:ef:1e: 18:49:81:96:a6:22:a3:d4:fd:40:41:d6:53:c9:81: f3:38:65:c0:18:28:7c:22:99:45:df:8b:7a:38:f7: 53:b1:44:6a:5a:37:6f:be:cb:7c:07:91:b3:1b:80: 5b:78:34:1e:89:18:74:3e:0e:0d:48:58:83:85:fa: cf:f0:79:d5:a9:5f:f6:96:a0:b3:f7:03:bb:48:a1: 54:f2:48:01:8a:00:5b:4b:3e:4c:e4:b9:07:41:72: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.175.168.0/24 IPv6: 2602:f937::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32943 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f7:a4:bd:4b:63:4d:6f:d5:ce:68:47:39:4b:79:5a:93:37: fe:65:74:8d:15:39:d8:df:b7:17:de:a1:56:cf:2a:5e:05:a8: 61:bd:75:d3:eb:8f:f8:51:16:14:d3:e6:6c:68:33:de:c9:f3: 55:81:a5:94:78:da:9c:2b:da:0e:da:8b:e4:72:57:0f:a0:13: d6:93:83:29:aa:1f:df:85:4d:d7:9b:6b:8d:32:42:83:00:4b: 54:d5:4d:33:72:13:14:19:ab:e5:55:f3:2e:6c:e5:fa:b7:fa: 69:ce:dc:ac:3d:2e:9d:35:7a:96:54:75:ab:e4:da:8e:9e:8d: 95:54:2a:62:c7:ae:80:37:86:9d:cd:0e:02:41:be:fd:23:59: 64:70:c9:23:80:b8:da:21:91:c7:c0:43:73:a2:a0:71:6d:c2: 1a:e5:7a:9f:8a:e7:96:ec:2b:68:f5:4a:9a:20:80:ae:42:c5: 81:57:f3:a0:77:0a:84:f3:56:81:92:44:07:53:b3:23:c5:be: 7c:e3:e2:a5:f8:5d:34:0a:86:87:58:e9:49:0c:d8:f1:a1:9d: 1c:a7:1f:93:73:95:1a:1f:d3:bb:58:97:aa:80:8f:fd:4c:db: 32:ae:01:c2:9d:af:a6:dc:38:39:1a:a3:9d:ed:aa:db:d7:be: 08:bd:a1:4f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9hJeQsd2xt/oZqQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAwMzEyNDUxMloXDTI5MDEwNTEzNDUxMlowLzEtMCsGA1UEAxMk YmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA7DVl6hO5/ekXbpId6W3nVHqEifexhkh0zV BFbSWQtg5ZFDIH4Qo83dpg+PhluUZ94DOsGoytgcyBjK+RJPckrNNyuDDRjchisx 9MVfgt4uIWNUHwBhQrKb3uu6Sm9N/fbRNQ9shIydpe6VpWKXq9fg0yXjqrJb5CtO 9w38V9mu7k0fnwqqj9y/NyMLBw17FkpA6fOEQFgKiveezvXoi6H27x4YSYGWpiKj 1P1AQdZTyYHzOGXAGCh8IplF34t6OPdTsURqWjdvvst8B5GzG4BbeDQeiRh0Pg4N SFiDhfrP8HnVqV/2lqCz9wO7SKFU8kgBigBbSz5M5LkHQXKERQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOCXDGhJRQipFmkBg852EZ6DqW9EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i Y2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2JjZTJhY2UwLTk3MWMtNDhmMS04 MzYxLTk2MmFkMDJkOTYxOC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAy ZDk2MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXr6gwDgQCAAIwCAMGBCYC+TcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCArzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBN96S9S2NNb9XOaEc5S3lakzf+ ZXSNFTnY37cX3qFWzypeBahhvXXT64/4URYU0+ZsaDPeyfNVgaWUeNqcK9oO2ovk clcPoBPWk4Mpqh/fhU3Xm2uNMkKDAEtU1U0zchMUGavlVfMubOX6t/ppztysPS6d NXqWVHWr5NqOno2VVCpix66AN4adzQ4CQb79I1lkcMkjgLjaIZHHwENzoqBxbcIa 5XqfiueW7Cto9UqaIICuQsWBV/OgdwqE81aBkkQHU7Mjxb584+Kl+F00CoaHWOlJ DNjxoZ0cpx+Tc5UaH9O7WJeqgI/9TNsyrgHCna+m3Dg5GqOd7arb174IvaFP -----END CERTIFICATE-----Generated at Sat Oct 31 02:18:47 2026 by rpki-client