$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer File: 2bc7e484-64e7-46cb-a15c-360a60b362d4.cer (raw, json) Hash identifier: fGE71rgQDpjDkwUBja5797GXZvrJDk8KReVMsv7NqWE= Subject key identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EF17A86A9087D23C485646740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Aug 2026 12:45:12 +0000 Certificate not after: Sun 26 Nov 2028 13:45:12 +0000 Subordinate resources: IP: 23.138.252.0/24 IP: 2602:f648::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:7a:86:a9:08:7d:23:c4:85:64:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 24 12:45:12 2026 GMT Not After : Nov 26 13:45:12 2028 GMT Subject: CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:3f:10:6b:85:a4:b3:bc:a1:0b:0b:3e:7e: 03:ed:f7:b0:d8:e5:df:ef:e8:e3:d3:53:34:32:a3: 9b:93:50:1a:8a:c7:50:18:46:a4:5d:b9:b0:65:7a: 20:0c:35:4c:7f:70:f9:9e:b9:9c:cb:04:7e:d3:8f: 4c:e9:05:7c:8a:a5:ca:f6:6c:01:b2:e9:19:31:0b: 2e:9f:ee:9a:73:13:2f:7d:e5:17:2a:cb:d8:0e:c9: 4e:f4:f4:1f:69:74:20:22:f4:3c:18:b4:88:c6:7f: b7:c4:c5:37:23:8d:00:2c:16:fd:a5:a7:67:c5:0f: 7c:b8:bf:91:00:a6:e9:e2:ed:e9:44:30:9b:1d:64: 4c:00:0e:8d:20:80:d9:5d:01:07:56:43:7f:91:e1: 22:66:19:ed:1f:98:c7:0c:72:3e:c2:ec:01:6e:c9: e5:e5:26:e2:66:b6:ea:10:eb:3b:f2:90:49:66:5e: bd:65:d4:f3:64:2b:bd:d1:43:21:b9:01:00:5a:9d: 8c:de:c2:64:98:70:b3:5a:d2:7e:b9:e6:b7:5b:fb: 9b:e9:ba:c7:09:c2:e7:02:62:82:39:6e:69:2e:6c: 79:14:6f:2e:4d:09:3b:6e:10:00:74:68:fb:52:51: 47:f4:de:1f:d3:e8:f9:78:e3:19:80:31:0d:fd:e4: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.252.0/24 IPv6: 2602:f648::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4a:3a:9e:c0:9b:8d:f7:bf:60:d8:a1:2e:8a:e8:3f:69:8f: 83:8c:33:9c:5f:c4:ac:90:27:ab:54:cc:ff:80:6e:73:c4:f8: 6d:11:e1:a1:5e:6b:db:90:cd:a3:bf:76:fe:c3:26:14:05:41: 0e:fd:49:85:a7:88:fb:00:3a:17:af:1f:4f:41:9c:0f:b9:2b: ec:e3:17:e2:ac:5c:6f:00:e1:a9:a4:5d:e4:3d:2d:70:b2:06: 22:63:32:00:f2:4a:58:1d:a2:6c:48:38:ff:2c:d2:8c:e3:fd: 40:24:ed:e0:07:84:46:4a:13:27:93:73:16:dc:1b:8f:69:d2: 27:6c:e1:89:86:de:cd:f4:84:78:ed:10:11:a1:bd:30:38:b2: fd:86:61:5a:2a:f3:74:14:66:30:65:3d:06:62:91:7c:9b:8b: 0b:6c:5e:f7:b5:a0:25:03:f1:89:62:dc:18:1d:d7:60:e4:61: e9:3c:ce:90:a2:75:10:92:52:3b:b5:28:f0:97:29:ac:26:fe: 6d:e1:d2:50:db:57:8d:f0:22:61:aa:01:65:cc:35:be:4f:b0: 35:7c:1c:40:43:d0:cc:2c:0a:0c:c7:94:48:6d:31:2a:e0:36: 3d:8f:85:c0:1e:22:fd:a4:b1:97:bc:62:06:04:0c:67:bb:26: fb:b3:9b:bc -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE7xeoapCH0jxIVkZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyNDEyNDUxMloXDTI4MTEyNjEzNDUxMlowLzEtMCsGA1UEAxMk MmJjN2U0ODQtNjRlNy00NmNiLWExNWMtMzYwYTYwYjM2MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNo/EGuFpLO8oQsLPn4D7few2OXf7+jj01M0 MqObk1AaisdQGEakXbmwZXogDDVMf3D5nrmcywR+049M6QV8iqXK9mwBsukZMQsu n+6acxMvfeUXKsvYDslO9PQfaXQgIvQ8GLSIxn+3xMU3I40ALBb9padnxQ98uL+R AKbp4u3pRDCbHWRMAA6NIIDZXQEHVkN/keEiZhntH5jHDHI+wuwBbsnl5SbiZrbq EOs78pBJZl69ZdTzZCu90UMhuQEAWp2M3sJkmHCzWtJ+uea3W/ub6brHCcLnAmKC OW5pLmx5FG8uTQk7bhAAdGj7UlFH9N4f0+j5eOMZgDEN/eTYewIDAQABo4IEDzCC BAswHQYDVR0OBBYEFIUCfYhVzVIUC4AdC5L3gnTAKlpPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBiMzYyZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJiYzdlNDg0LTY0ZTctNDZjYi1h MTVjLTM2MGE2MGIzNjJkNC8yYmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBi MzYyZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXivwwDgQCAAIwCAMGACYC9kgAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJNKOp7Am433v2DYoS6K6D9pj4OMM5xfxKyQJ6tUzP+AbnPE+G0R4aFea9uQzaO/ dv7DJhQFQQ79SYWniPsAOhevH09BnA+5K+zjF+KsXG8A4amkXeQ9LXCyBiJjMgDy SlgdomxIOP8s0ozj/UAk7eAHhEZKEyeTcxbcG49p0ids4YmG3s30hHjtEBGhvTA4 sv2GYVoq83QUZjBlPQZikXybiwtsXve1oCUD8Yli3Bgd12DkYek8zpCidRCSUju1 KPCXKawm/m3h0lDbV43wImGqAWXMNb5PsDV8HEBD0MwsCgzHlEhtMSrgNj2PhcAe Iv2ksZe8YgYEDGe7Jvuzm7w= -----END CERTIFICATE-----Generated at Fri Sep 11 08:32:04 2026 by rpki-client