$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer File: e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.cer (raw, json) Hash identifier: VSZQOv0FnFQwlHirSqCl/GKI9IWB9/npaMIoh0ikFs8= Subject key identifier: 68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584EE38519397469956E9F140E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Aug 2026 12:45:11 +0000 Certificate not after: Tue 21 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 400735 IP: 23.162.208.0/24 IP: 2605:dfc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:85:19:39:74:69:95:6e:9f:14:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 19 12:45:11 2026 GMT Not After : Nov 21 13:45:11 2028 GMT Subject: CN=e9967e8f-a4c2-4d89-82dd-95d9c3feb83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:b5:8c:ee:a4:8f:89:ae:1e:52:22:01:ff: 2e:3f:78:77:1c:36:4a:a8:df:84:a2:07:d4:05:6c: 5e:b4:cf:b4:47:c3:e1:24:c5:8b:73:e5:08:73:9c: 0f:ef:c7:44:a3:1b:2c:bd:4d:79:af:35:cb:02:14: 0f:54:56:d3:99:5e:7c:b6:29:db:5a:07:3d:0f:a9: 54:64:7a:f5:5d:ee:aa:2c:c8:c4:e4:e4:75:c3:fe: 41:4f:f0:11:2d:da:c4:ad:41:f5:95:46:2a:93:70: e8:b6:43:a4:60:d4:fa:0e:1a:5e:9f:03:1e:86:4e: 2b:eb:b8:3d:7c:3a:94:95:fb:6d:b5:c7:61:3c:59: c4:46:6d:86:2c:3b:13:f6:04:82:83:ab:0f:9b:99: 01:c3:8f:4c:05:b4:95:72:d4:5f:21:85:ca:72:59: b3:1f:22:2b:37:34:18:a5:4c:4d:92:b5:da:71:42: 35:61:15:82:1c:b1:aa:b3:d9:c9:a5:d7:cc:c9:60: 79:0a:dc:60:38:c2:e1:85:86:c4:0d:bf:8d:25:b7: e4:d1:15:a6:d3:ca:1c:80:15:2f:a0:48:c0:df:4f: 8c:db:f6:04:d7:c6:a7:ac:56:80:2e:99:3c:03:8a: cd:f3:94:2a:09:87:95:42:50:b7:df:8c:16:53:90: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E5:E5:13:2F:23:6D:BC:3B:1C:7C:0A:61:E4:CD:D0:B0:0F:E1:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f/e9967e8f-a4c2-4d89-82dd-95d9c3feb83f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.162.208.0/24 IPv6: 2605:dfc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400735 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:92:64:65:4f:ee:43:d7:17:6c:a7:96:96:50:4c:7e:fb:37: ae:3a:a0:67:df:47:33:58:9e:84:34:9c:5d:54:0a:54:a4:bb: 4c:49:3c:27:e1:12:39:7e:5b:20:54:53:e3:cd:1a:d9:dd:56: 7b:dc:c3:de:1c:1c:84:5e:55:07:cd:cd:11:03:41:06:bb:04: 57:fa:d5:c4:ac:3f:87:27:64:e5:69:11:60:54:f6:7c:02:88: 75:82:2f:b4:f4:80:98:59:95:bc:9e:17:09:fa:e6:50:89:26: f2:80:4a:1a:46:cc:9a:fc:a4:b0:05:56:51:9c:7d:8a:6c:00: 4d:67:2f:da:a4:9b:cd:61:2f:41:32:49:e0:4a:7b:18:8f:b8: c2:63:99:99:8d:cf:fc:e1:18:05:10:78:2c:c2:97:98:3e:37: 67:bc:74:ce:f1:3f:ca:84:f5:fb:b8:b4:b3:1b:83:35:3a:1b: 6a:01:11:e0:15:1e:b4:ab:0e:90:1a:d8:77:3e:15:c2:51:5a: c6:f4:0c:e6:a9:62:00:d9:f6:13:0b:73:41:07:ae:9c:21:f1: 6e:50:5f:6c:5e:fd:eb:8c:96:40:0f:56:7c:5d:10:c2:27:fd: 72:d6:31:02:00:6f:5c:11:b0:a1:8c:49:f7:bb:ef:76:77:02: bc:ee:12:e9 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE7jhRk5dGmVbp8UDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDgxOTEyNDUxMVoXDTI4MTEyMTEzNDUxMVowLzEtMCsGA1UEAxMk ZTk5NjdlOGYtYTRjMi00ZDg5LTgyZGQtOTVkOWMzZmViODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOC1jO6kj4muHlIiAf8uP3h3HDZKqN+EogfU BWxetM+0R8PhJMWLc+UIc5wP78dEoxssvU15rzXLAhQPVFbTmV58tinbWgc9D6lU ZHr1Xe6qLMjE5OR1w/5BT/ARLdrErUH1lUYqk3DotkOkYNT6DhpenwMehk4r67g9 fDqUlftttcdhPFnERm2GLDsT9gSCg6sPm5kBw49MBbSVctRfIYXKclmzHyIrNzQY pUxNkrXacUI1YRWCHLGqs9nJpdfMyWB5CtxgOMLhhYbEDb+NJbfk0RWm08ocgBUv oEjA30+M2/YE18anrFaALpk8A4rN85QqCYeVQlC334wWU5BPEwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGjl5RMvI228Oxx8CmHkzdCwD+GyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l OTk2N2U4Zi1hNGMyLTRkODktODJkZC05NWQ5YzNmZWI4M2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U5OTY3ZThmLWE0YzItNGQ4OS04 MmRkLTk1ZDljM2ZlYjgzZi9lOTk2N2U4Zi1hNGMyLTRkODktODJkZC05NWQ5YzNm ZWI4M2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXotAwDQQCAAIwBwMFACYF38AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh1fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAmSZGVP7kPXF2ynlpZQTH77N646 oGffRzNYnoQ0nF1UClSku0xJPCfhEjl+WyBUU+PNGtndVnvcw94cHIReVQfNzRED QQa7BFf61cSsP4cnZOVpEWBU9nwCiHWCL7T0gJhZlbyeFwn65lCJJvKAShpGzJr8 pLAFVlGcfYpsAE1nL9qkm81hL0EySeBKexiPuMJjmZmNz/zhGAUQeCzCl5g+N2e8 dM7xP8qE9fu4tLMbgzU6G2oBEeAVHrSrDpAa2Hc+FcJRWsb0DOapYgDZ9hMLc0EH rpwh8W5QX2xe/euMlkAPVnxdEMIn/XLWMQIAb1wRsKGMSfe773Z3ArzuEuk= -----END CERTIFICATE-----Generated at Wed Aug 19 22:23:53 2026 by rpki-client