$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer File: 8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer (raw, json) Hash identifier: tE0QAYPFrLH3XLb4BC+ptv8tLXc6cL6D806qBcZEaCw= Subject key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584EDB250D74D94F9EAEB8E62A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Aug 2026 12:45:12 +0000 Certificate not after: Sat 18 Nov 2028 13:45:12 +0000 Subordinate resources: IP: 23.140.40.0/24 IP: 141.195.112.0/22 IP: 2602:fb26::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:25:0d:74:d9:4f:9e:ae:b8:e6:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 16 12:45:12 2026 GMT Not After : Nov 18 13:45:12 2028 GMT Subject: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:cd:f1:29:ef:05:c5:0b:b1:bc:5f:84:97: da:b3:77:07:6f:36:b7:57:de:20:ea:a8:d2:a0:c5: 16:e2:84:c9:1c:fa:ff:cb:39:9c:58:ba:5f:65:4b: a5:1a:3a:9b:48:d1:4c:e9:89:38:d6:fc:bd:d0:d6: 5f:74:ac:a2:20:dd:3e:71:2b:cc:0a:13:60:ac:04: d2:62:10:a6:96:a3:c3:df:b1:0d:18:95:fc:1c:80: f6:f9:82:db:5a:5f:bd:87:2a:42:ab:b8:46:7f:49: 41:08:63:cb:d7:ff:e6:3c:0a:02:36:57:dc:0c:9e: d6:28:e2:78:8d:33:a9:cb:15:11:df:e6:57:7c:47: 35:31:59:35:ab:c8:5f:86:d1:15:6d:87:ad:f6:4f: 4f:8b:2e:c1:4f:ae:ac:82:79:68:fb:e7:e2:10:f0: 44:7e:1a:9b:8b:f3:c1:49:07:10:2d:8b:d8:89:99: 65:63:95:3d:55:20:60:e1:dd:27:fb:f3:1d:a9:f3: 15:26:a0:01:d9:eb:8a:a7:7e:6b:b6:fd:4d:92:66: 6a:8a:c8:22:3a:9a:9c:85:a4:14:af:21:18:af:4e: 97:b5:06:35:49:12:bc:22:34:3a:c0:7b:32:47:23: 73:9b:df:26:9e:6e:9d:f5:6e:26:9c:77:a4:d2:b4: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.40.0/24 141.195.112.0/22 IPv6: 2602:fb26::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5e:74:e7:3f:48:a9:a2:f2:09:c6:fb:8f:3a:7d:d2:92:82: 99:27:fe:d7:e0:de:b7:c4:7c:76:d3:d3:ba:86:c3:54:6a:94: a0:c7:e0:58:7f:69:00:27:1c:8a:06:fa:73:0e:e9:45:90:c8: a7:ee:a8:b5:88:64:73:81:10:f6:6a:7b:d3:b9:a4:e0:8c:ef: 11:d0:21:9a:97:3c:e3:8a:fd:97:46:a0:5f:85:6f:da:c3:fc: 86:3a:76:dc:48:88:1c:80:da:27:e0:bd:6e:7b:2d:12:fb:b2: 90:0e:a2:ee:b9:af:d4:a2:07:dd:11:35:73:82:eb:a2:7a:04: 77:c5:96:ca:55:6f:36:be:8e:d7:1f:93:99:2a:a6:00:92:32: 41:9a:c2:34:4b:fe:e3:4f:46:65:73:27:af:81:ef:d0:4a:cc: 87:44:4f:4e:be:7d:7d:a1:81:2e:e2:8e:91:57:84:fe:86:b6: a0:dd:c5:4a:e5:d9:6e:94:ab:7c:a0:47:6c:8c:f7:a7:84:11: 8b:17:2b:ad:09:08:fa:e9:d8:72:16:fe:33:c1:5b:59:ab:f1: fe:3a:a5:fa:dd:71:6d:96:6d:68:7b:3c:2b:9f:85:c9:d7:0e: 08:a6:c6:67:bd:89:db:88:bb:74:78:10:f3:93:cc:34:69:41: 55:1f:a7:14 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE7bJQ102U+errjmKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDgxNjEyNDUxMloXDTI4MTExODEzNDUxMlowLzEtMCsGA1UEAxMk OGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYyOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTrN8SnvBcULsbxfhJfas3cHbza3V94g6qjS oMUW4oTJHPr/yzmcWLpfZUulGjqbSNFM6Yk41vy90NZfdKyiIN0+cSvMChNgrATS YhCmlqPD37ENGJX8HID2+YLbWl+9hypCq7hGf0lBCGPL1//mPAoCNlfcDJ7WKOJ4 jTOpyxUR3+ZXfEc1MVk1q8hfhtEVbYet9k9Piy7BT66sgnlo++fiEPBEfhqbi/PB SQcQLYvYiZllY5U9VSBg4d0n+/MdqfMVJqAB2euKp35rtv1NkmZqisgiOpqchaQU ryEYr06XtQY1SRK8IjQ6wHsyRyNzm98mnm6d9W4mnHek0rSU4QIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFNk0EcCzxaRAZWQB4wSY3Isy15flMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhhZTkxOTI4LTM1Y2YtNDZlZC1i Zjg3LTkyZDliZmQ2MjllYy84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZk NjI5ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjCgDBAKNw3AwDgQCAAIwCAMGBCYC+yYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJedOc/SKmi8gnG+486fdKSgpkn/tfg3rfEfHbT07qGw1RqlKDH4Fh/ aQAnHIoG+nMO6UWQyKfuqLWIZHOBEPZqe9O5pOCM7xHQIZqXPOOK/ZdGoF+Fb9rD /IY6dtxIiByA2ifgvW57LRL7spAOou65r9SiB90RNXOC66J6BHfFlspVbza+jtcf k5kqpgCSMkGawjRL/uNPRmVzJ6+B79BKzIdET06+fX2hgS7ijpFXhP6GtqDdxUrl 2W6Uq3ygR2yM96eEEYsXK60JCPrp2HIW/jPBW1mr8f46pfrdcW2WbWh7PCufhcnX Dgimxme9iduIu3R4EPOTzDRpQVUfpxQ= -----END CERTIFICATE-----Generated at Wed Aug 19 22:25:45 2026 by rpki-client