$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2.cer File: 037f8058-2d43-4452-85e3-a5ecb59bd2b2.cer (raw, json) Hash identifier: p4gqfKdKA6m2E63x1JbW+ofU3KBL9YSyrxM548hyoj4= Subject key identifier: 95:DB:AD:59:08:1D:0F:AE:62:33:40:AB:A9:3F:59:64:22:F7:74:B1 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5C50813A44F510FF24F8E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/037f8058-2d43-4452-85e3-a5ecb59bd2b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 15:18:41 +0000 Certificate not after: Tue 22 Aug 2028 15:18:41 +0000 Subordinate resources: AS: 402257 IP: 23.154.76.0/24 IP: 2602:f438::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:c5:08:13:a4:4f:51:0f:f2:4f:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 15:18:41 2026 GMT Not After : Aug 22 15:18:41 2028 GMT Subject: CN=037f8058-2d43-4452-85e3-a5ecb59bd2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:77:25:ad:5c:a4:74:41:fb:a5:ea:0e:60: 6c:7d:e9:c9:42:be:46:28:fc:83:71:ce:a8:74:1b: a9:98:ee:76:ce:78:ff:91:b5:58:3d:a3:cc:fe:db: f7:cd:de:7d:e0:57:c1:08:b2:e1:c0:51:ef:43:27: 33:b5:47:b8:95:11:88:7f:b1:90:11:cd:f6:27:f4: 74:75:57:0e:b9:e2:eb:ae:a9:e7:14:e2:8c:46:a4: 5f:76:d2:e1:4c:2a:fd:fe:af:9e:c2:81:bc:83:26: dc:36:ce:26:59:5a:1d:59:28:c6:04:33:df:dd:70: d4:85:a5:bc:44:95:5b:87:c1:07:c0:79:9e:9a:90: db:1c:90:6c:f9:15:7f:c9:a6:8b:c3:f9:dd:b3:8c: bc:51:e8:44:25:56:14:64:55:ee:9a:10:9f:3c:b4: ac:08:b3:35:f4:82:a6:54:3b:10:b5:83:94:20:83: 7e:54:51:03:b7:8a:44:e6:08:cc:8b:53:2d:91:c5: 8f:35:08:ce:7c:fb:bb:8a:b4:fa:52:0d:76:f5:bc: 17:82:af:06:5c:bb:55:2c:0d:82:07:1c:ec:26:46: 93:6f:31:28:5b:a9:ed:7e:36:41:2a:c5:85:04:54: fd:47:07:6d:c3:77:26:1c:a9:11:6e:1e:e0:92:c7: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DB:AD:59:08:1D:0F:AE:62:33:40:AB:A9:3F:59:64:22:F7:74:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/037f8058-2d43-4452-85e3-a5ecb59bd2b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.76.0/24 IPv6: 2602:f438::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402257 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b0:46:14:b2:a1:71:85:77:ec:80:ae:ba:d4:ff:cc:f1:ee: 7e:f6:66:90:94:08:ca:ed:57:26:bc:78:96:20:d2:59:83:74: 38:d3:ae:1e:22:71:37:af:7f:c8:94:31:3d:c0:64:a1:a7:59: 1b:50:06:73:cb:ac:92:72:25:69:42:68:4a:59:fb:68:d7:ab: 65:bb:e8:67:0a:06:d1:f9:61:e6:bd:c2:4b:15:7c:e8:6c:34: 1a:29:4b:e1:24:b8:df:61:44:c5:c3:bc:d0:a4:bf:5f:b4:d8: bf:16:05:1e:6f:ab:d2:94:92:79:70:d5:b5:e9:21:7f:e1:55: ff:ad:a9:5e:f3:55:a6:23:a6:e9:94:ce:62:06:b5:3e:7f:c3: 7a:29:19:c0:b7:d2:29:6f:04:32:48:c9:fa:e7:f0:46:69:dd: 1e:28:b8:e6:6a:af:be:34:f3:40:c8:d2:02:55:90:d9:10:79: f7:c6:87:87:2b:1f:a5:de:7c:36:c2:ca:d3:28:e0:86:ad:1d: 37:99:c8:17:37:51:93:d1:07:c9:5d:19:ab:dd:09:e3:bb:47: 23:1e:bd:da:19:b7:3c:ae:67:2b:b3:bf:89:71:ba:fa:78:69: 30:0c:56:fd:1a:35:2f:ef:80:1e:c4:53:b4:b7:c6:d3:ad:d6: e0:61:b0:12 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3lxQgTpE9RD/JPjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE1MTg0MVoXDTI4MDgyMjE1MTg0MVowLzEtMCsGA1UEAxMk MDM3ZjgwNTgtMmQ0My00NDUyLTg1ZTMtYTVlY2I1OWJkMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux53Ja1cpHRB+6XqDmBsfenJQr5GKPyDcc6o dBupmO52znj/kbVYPaPM/tv3zd594FfBCLLhwFHvQycztUe4lRGIf7GQEc32J/R0 dVcOueLrrqnnFOKMRqRfdtLhTCr9/q+ewoG8gybcNs4mWVodWSjGBDPf3XDUhaW8 RJVbh8EHwHmempDbHJBs+RV/yaaLw/nds4y8UehEJVYUZFXumhCfPLSsCLM19IKm VDsQtYOUIIN+VFEDt4pE5gjMi1MtkcWPNQjOfPu7irT6Ug129bwXgq8GXLtVLA2C BxzsJkaTbzEoW6ntfjZBKsWFBFT9Rwdtw3cmHKkRbh7gksdAlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJXbrVkIHQ+uYjNAq6k/WWQi93SxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w MzdmODA1OC0yZDQzLTQ0NTItODVlMy1hNWVjYjU5YmQyYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzAzN2Y4MDU4LTJkNDMtNDQ1Mi04 NWUzLWE1ZWNiNTliZDJiMi8wMzdmODA1OC0yZDQzLTQ0NTItODVlMy1hNWVjYjU5 YmQyYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmkwwDgQCAAIwCAMGACYC9DgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjUTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPsEYUsqFxhXfsgK661P/M8e5+ 9maQlAjK7VcmvHiWINJZg3Q4064eInE3r3/IlDE9wGShp1kbUAZzy6ySciVpQmhK Wfto16tlu+hnCgbR+WHmvcJLFXzobDQaKUvhJLjfYUTFw7zQpL9ftNi/FgUeb6vS lJJ5cNW16SF/4VX/rale81WmI6bplM5iBrU+f8N6KRnAt9IpbwQySMn65/BGad0e KLjmaq++NPNAyNICVZDZEHn3xoeHKx+l3nw2wsrTKOCGrR03mcgXN1GT0QfJXRmr 3Qnju0cjHr3aGbc8rmcrs7+Jcbr6eGkwDFb9GjUv74AexFO0t8bTrdbgYbAS -----END CERTIFICATE-----Generated at Sun May 24 13:49:16 2026 by rpki-client