$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350.cer File: 2c4ee9dd-c47d-4064-a749-1a1b95669350.cer (raw, json) Hash identifier: FYF/1ALb3swfjLQqMmmo3j4tHWnWnaXVRywlDtnYmEc= Subject key identifier: 10:32:52:7E:F3:C2:8F:11:AC:C4:C2:11:8F:FB:76:F9:33:D1:63:56 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E481D05C9E8BA2B1E21AA9B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/2c4ee9dd-c47d-4064-a749-1a1b95669350.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jun 2026 20:45:11 +0000 Certificate not after: Tue 26 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 22630 IP: 23.131.52.0/24 IP: 2602:f75f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:1d:05:c9:e8:ba:2b:1e:21:aa:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 24 20:45:11 2026 GMT Not After : Sep 26 20:45:11 2028 GMT Subject: CN=2c4ee9dd-c47d-4064-a749-1a1b95669350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:ce:1a:b9:60:ae:64:37:00:71:57:82:4e: 85:e0:1d:79:dd:d1:d2:11:2c:a6:00:2e:78:36:d5: 52:90:cd:23:1f:16:d8:5e:22:31:8d:2f:02:8f:67: 9c:d7:d8:2a:b4:e1:44:c6:0a:dc:e5:ac:f7:bb:18: 4c:61:09:4b:11:5b:02:4a:53:db:38:7b:37:af:e5: 51:31:fa:9f:76:57:8d:d7:9a:1b:bb:26:67:63:8a: a8:d3:77:fb:6c:e9:2f:92:b1:7e:bd:f6:be:d3:5a: 9d:50:90:aa:8c:60:77:2f:97:23:8d:73:46:cb:9b: 2c:32:92:ce:87:11:e4:9c:67:fd:78:42:57:34:a0: f6:b1:23:c1:f4:dd:a6:b4:36:ae:2b:a6:3d:93:ee: 79:11:f3:b2:e3:2c:b1:63:56:6d:fa:c1:ba:4d:47: 13:61:42:f6:39:cc:ff:30:dd:36:a4:dd:be:09:ad: 34:64:43:d6:0e:e7:ec:e7:3d:2e:77:15:38:1e:b2: e0:01:34:29:bb:27:55:fc:54:bb:35:bc:0b:74:3a: bb:ce:ba:c0:f5:3e:0e:14:68:6b:33:df:28:79:0c: a4:11:a9:fb:e5:ed:5a:3e:08:78:34:60:3a:ae:0e: a0:f3:04:db:64:cd:3a:81:9f:08:0e:24:dc:e1:76: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:52:7E:F3:C2:8F:11:AC:C4:C2:11:8F:FB:76:F9:33:D1:63:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/2c4ee9dd-c47d-4064-a749-1a1b95669350.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.52.0/24 IPv6: 2602:f75f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22630 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:50:e8:c0:a2:d5:ba:be:10:5f:08:32:f2:6b:61:f2:31:8a: 7c:8b:ee:c7:39:f5:d5:ef:82:5c:af:e9:b7:12:71:34:89:23: 26:ca:8f:41:84:ef:94:a2:a9:26:e6:9c:77:ce:cc:d0:01:88: 8f:01:5b:84:76:c4:0c:ef:97:b9:c3:de:9f:cc:eb:de:55:4d: f2:8d:d5:64:39:56:81:5e:54:81:2a:cf:b6:c0:39:57:55:11: 9e:f2:29:b8:9a:f0:9e:b4:66:26:4d:cb:13:96:38:93:68:0b: d1:9a:05:bd:2a:85:dc:40:a2:ab:ac:30:8a:aa:89:6b:4b:3a: e7:b2:81:ec:31:47:1e:a2:4f:22:11:89:c1:9c:b3:00:34:0a: f0:d1:70:83:11:1a:60:7c:42:fd:b9:a1:44:91:5b:b2:54:16: 40:86:26:68:28:32:e4:51:2f:f2:ff:8f:3b:90:ce:3d:ba:43: af:14:a3:68:7c:5a:e6:aa:6f:86:82:d7:2e:be:50:b6:46:d2: 02:ca:a5:c5:f8:69:56:55:a4:7b:5c:68:04:cc:77:b8:e2:9f: 74:ac:8f:9a:35:06:00:23:f1:59:67:c7:41:be:57:3f:42:aa: aa:5b:b7:b7:a9:8a:43:66:0d:e3:53:9e:bd:d8:71:7e:91:18: c4:89:6c:b9 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5IHQXJ6LorHiGqmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYyNDIwNDUxMVoXDTI4MDkyNjIwNDUxMVowLzEtMCsGA1UEAxMk MmM0ZWU5ZGQtYzQ3ZC00MDY0LWE3NDktMWExYjk1NjY5MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPbOGrlgrmQ3AHFXgk6F4B153dHSESymAC54 NtVSkM0jHxbYXiIxjS8Cj2ec19gqtOFExgrc5az3uxhMYQlLEVsCSlPbOHs3r+VR MfqfdleN15obuyZnY4qo03f7bOkvkrF+vfa+01qdUJCqjGB3L5cjjXNGy5ssMpLO hxHknGf9eEJXNKD2sSPB9N2mtDauK6Y9k+55EfOy4yyxY1Zt+sG6TUcTYUL2Ocz/ MN02pN2+Ca00ZEPWDufs5z0udxU4HrLgATQpuydV/FS7NbwLdDq7zrrA9T4OFGhr M98oeQykEan75e1aPgh4NGA6rg6g8wTbZM06gZ8IDiTc4XZMiQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBAyUn7zwo8RrMTCEY/7dvkz0WNWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y YzRlZTlkZC1jNDdkLTQwNjQtYTc0OS0xYTFiOTU2NjkzNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJjNGVlOWRkLWM0N2QtNDA2NC1h NzQ5LTFhMWI5NTY2OTM1MC8yYzRlZTlkZC1jNDdkLTQwNjQtYTc0OS0xYTFiOTU2 NjkzNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgzQwDgQCAAIwCAMGACYC918AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlhmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJJQ6MCi1bq+EF8IMvJrYfIxinyL 7sc59dXvglyv6bcScTSJIybKj0GE75SiqSbmnHfOzNABiI8BW4R2xAzvl7nD3p/M 695VTfKN1WQ5VoFeVIEqz7bAOVdVEZ7yKbia8J60ZiZNyxOWOJNoC9GaBb0qhdxA oqusMIqqiWtLOueygewxRx6iTyIRicGcswA0CvDRcIMRGmB8Qv25oUSRW7JUFkCG JmgoMuRRL/L/jzuQzj26Q68Uo2h8Wuaqb4aC1y6+ULZG0gLKpcX4aVZVpHtcaATM d7jin3Ssj5o1BgAj8Vlnx0G+Vz9Cqqpbt7epikNmDeNTnr3YcX6RGMSJbLk= -----END CERTIFICATE-----Generated at Thu Jul 9 19:14:36 2026 by rpki-client