$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer File: ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer (raw, json) Hash identifier: 5BzZ36Vi4ICkJiMTC761jkZhIv3NaSi+BA8QSIuLw+k= Subject key identifier: 88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584E5B8A10816E40B003C7788000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 19:45:15 +0000 Certificate not after: Mon 13 Mar 2028 19:22:44 +0000 Subordinate resources: AS: 399353 IP: 23.246.180.0/22 IP: 199.21.100.0/22 IP: 2602:f94e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:8a:10:81:6e:40:b0:03:c7:78:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 1 19:45:15 2026 GMT Not After : Mar 13 19:22:44 2028 GMT Subject: CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:6c:9c:d3:8f:1c:2c:7f:4e:e5:28:5c:2b: 51:c0:73:7e:c6:5d:8f:c8:05:15:2c:c6:8f:6b:56: 5f:ef:1d:1f:2c:84:56:a2:ac:74:c1:3a:20:35:07: e3:37:ec:71:11:89:f7:7f:87:a6:f8:da:bb:df:b4: f1:0f:7d:87:39:9f:db:7a:5d:c2:5e:e9:e0:18:92: 50:35:4e:61:c1:82:fe:94:48:29:6c:40:f5:0b:b7: c1:b4:24:c2:e5:4c:d1:0a:39:8a:fd:be:0c:45:ed: 5a:ef:83:47:0c:22:46:ac:b0:93:d4:83:70:33:0f: 7e:64:99:01:44:21:71:62:6b:8b:b8:db:c2:bf:19: bc:33:6c:af:30:2e:53:dc:cc:03:3f:c7:87:20:a5: c5:79:44:62:94:f3:0c:0f:51:48:4e:f1:99:d7:0d: 7d:bc:5c:bb:da:2d:cc:08:62:bc:54:2f:68:36:ee: 26:43:19:13:b4:70:67:1e:9b:df:d4:7b:5c:fe:32: 92:71:df:4b:d7:50:fc:d6:3f:5a:16:a2:ba:f7:71: a8:08:19:40:fc:ca:76:8d:49:9f:71:7c:bd:98:36: 79:e8:52:e8:98:cb:48:01:a6:0d:70:de:a8:88:62: 3b:1d:80:dc:40:88:a2:ce:0a:fc:2b:3f:b2:7f:75: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.246.180.0/22 199.21.100.0/22 IPv6: 2602:f94e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399353 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:14:fc:8f:bf:d0:d1:25:72:71:e2:f1:a6:5f:44:80:1d:cc: df:ae:1e:09:2d:2f:cd:38:69:b5:7c:24:e0:51:6c:82:db:dd: 26:10:8e:96:85:88:af:95:27:b1:e7:aa:2e:49:ed:70:a6:00: c4:bd:16:77:80:c8:72:dd:96:ff:b4:dc:60:f2:6d:3c:08:f3: 2a:d3:d7:a5:de:b6:5e:3b:82:bb:27:a7:78:3e:b1:3f:46:d5: 5b:0b:5d:cc:66:cc:37:7b:14:e2:26:5f:67:28:38:f6:d6:ec: 20:be:d6:66:80:66:9e:a6:ee:f7:4e:d6:20:da:35:5e:f5:ed: 73:85:0a:3e:55:6f:8a:96:aa:47:59:5a:f1:39:d5:c4:ee:3a: 4b:9e:50:37:f8:fd:72:2e:c9:cb:d1:30:7f:9c:41:bc:5f:2f: 7a:23:44:fd:b2:70:5c:2d:eb:e2:41:8f:f1:22:a6:b3:d9:83: a6:bf:e1:b4:65:ec:da:2a:c4:f2:ff:d6:d8:d8:fa:ec:9c:93: a3:69:06:39:77:b9:30:12:e8:a2:7d:54:16:7d:05:a1:b2:5b: 44:73:56:27:95:da:51:c6:46:b4:98:c7:b9:5c:fe:73:cf:9a: 7d:50:35:ac:3d:6e:5e:18:c8:2c:4b:5c:4e:e2:f1:36:d4:a3: 7e:9b:a2:6a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5bihCBbkCwA8d4gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDcwMTE5NDUxNVoXDTI4MDMxMzE5MjI0NFowLzEtMCsGA1UEAxMk YWMwY2ZiZjQtYjZhZC00ZjNhLThlZWMtZTM4MmRmMjkzOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlddsnNOPHCx/TuUoXCtRwHN+xl2PyAUVLMaP a1Zf7x0fLIRWoqx0wTogNQfjN+xxEYn3f4em+Nq737TxD32HOZ/bel3CXungGJJQ NU5hwYL+lEgpbED1C7fBtCTC5UzRCjmK/b4MRe1a74NHDCJGrLCT1INwMw9+ZJkB RCFxYmuLuNvCvxm8M2yvMC5T3MwDP8eHIKXFeURilPMMD1FITvGZ1w19vFy72i3M CGK8VC9oNu4mQxkTtHBnHpvf1Htc/jKScd9L11D81j9aFqK693GoCBlA/Mp2jUmf cXy9mDZ56FLomMtIAaYNcN6oiGI7HYDcQIiizgr8Kz+yf3V9ywIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFIiTt5jc9KvDsKuFETdNZkWQcdrQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h YzBjZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgyZGYyOTM4YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FjMGNmYmY0LWI2YWQtNGYzYS04 ZWVjLWUzODJkZjI5MzhjMi9hYzBjZmJmNC1iNmFkLTRmM2EtOGVlYy1lMzgyZGYy OTM4YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAIX9rQDBALHFWQwDgQCAAIwCAMGACYC+U4AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYX+TBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3FPyPv9DRJXJx4vGm X0SAHczfrh4JLS/NOGm1fCTgUWyC290mEI6WhYivlSex56ouSe1wpgDEvRZ3gMhy 3Zb/tNxg8m08CPMq09el3rZeO4K7J6d4PrE/RtVbC13MZsw3exTiJl9nKDj21uwg vtZmgGaepu73TtYg2jVe9e1zhQo+VW+KlqpHWVrxOdXE7jpLnlA3+P1yLsnL0TB/ nEG8Xy96I0T9snBcLeviQY/xIqaz2YOmv+G0ZezaKsTy/9bY2PrsnJOjaQY5d7kw EuiifVQWfQWhsltEc1YnldpRxka0mMe5XP5zz5p9UDWsPW5eGMgsS1xO4vE21KN+ m6Jq -----END CERTIFICATE-----Generated at Thu Jul 16 18:59:12 2026 by rpki-client