$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5.cer File: 08dcc485-736f-4f70-9540-27570f90bdf5.cer (raw, json) Hash identifier: 6zBxkT1U16zj0dVXRfCk73dTTpB4hnzSZdV8vROU0Sc= Subject key identifier: A2:0F:30:D1:F2:05:6B:CB:C8:A2:90:A3:91:B3:3C:21:D6:60:53:1C Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9112DA4C86F8E7CC1A4CBC20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/08dcc485-736f-4f70-9540-27570f90bdf5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 07:11:46 +0000 Certificate not after: Sun 23 Jul 2028 07:11:46 +0000 Subordinate resources: AS: 402215 IP: 23.151.84.0/24 IP: 2602:f449::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:12:da:4c:86:f8:e7:cc:1a:4c:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 20 07:11:46 2026 GMT Not After : Jul 23 07:11:46 2028 GMT Subject: CN=08dcc485-736f-4f70-9540-27570f90bdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0d:51:d1:5f:38:7b:cd:0f:22:55:bb:79:4c: f4:8c:c0:e4:87:49:b4:17:d4:46:1b:97:12:42:97: 5a:63:5d:aa:14:6b:14:fc:5a:ee:c7:e1:7a:bb:c0: 86:66:bf:dd:d8:c4:a2:1b:ce:75:d9:77:05:26:16: 63:00:c3:68:fe:e5:71:31:88:09:a5:34:83:23:71: 35:97:d3:4b:7b:5f:d3:2c:ec:d8:46:31:01:c8:32: d8:55:d9:6f:0d:6c:c0:bf:aa:dc:eb:a2:80:cd:a3: dc:f5:4c:41:66:5d:ed:e8:46:96:05:f4:f5:5a:31: 2c:62:8a:4d:21:e9:50:b3:40:5c:57:0d:35:14:49: 38:9e:6a:ca:90:ae:8b:40:9d:1c:75:ba:06:e8:19: 1d:d6:2d:94:53:e3:fa:b9:63:3b:70:d9:de:75:c2: 0d:cb:49:d8:8e:87:c7:fa:6d:46:75:f5:c0:20:e1: c2:0d:76:e0:f4:1a:b9:89:3c:59:64:d1:c8:ea:d0: 59:be:97:49:22:f6:c5:e0:36:99:d0:86:73:23:24: 16:d0:55:18:7d:3a:90:5e:0c:f4:1c:d7:bb:76:0d: ce:c9:1a:3d:95:56:31:10:ef:d5:da:de:98:91:6f: 0c:8d:69:40:65:99:74:a9:26:02:25:02:b5:31:c9: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0F:30:D1:F2:05:6B:CB:C8:A2:90:A3:91:B3:3C:21:D6:60:53:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/08dcc485-736f-4f70-9540-27570f90bdf5/08dcc485-736f-4f70-9540-27570f90bdf5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.151.84.0/24 IPv6: 2602:f449::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402215 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1b:2a:e4:df:74:73:66:aa:d8:80:a8:e2:82:55:18:74:7b: f1:61:bd:ef:c9:58:98:d7:54:9d:ec:62:b1:bd:d5:16:b1:28: 02:26:92:d3:a6:d6:ec:7e:05:21:ca:b4:4c:86:6f:14:03:5d: ae:c3:2a:fa:0f:a3:61:6d:4d:7c:5a:51:5c:cf:25:f6:2f:40: 00:03:61:4d:78:85:62:e5:d8:0d:54:7c:77:ed:aa:b7:86:d9: b8:05:b9:b7:90:e8:dc:52:94:6c:1b:51:55:2d:28:82:b0:31: ba:1d:35:b4:c6:42:52:98:75:5c:44:3d:ca:ff:2f:db:d0:df: 56:09:51:3d:6b:b0:fd:04:01:13:0d:6b:46:de:4a:2f:a3:ed: df:78:24:c2:87:5d:35:5e:b7:50:51:ac:b5:f3:14:ea:ae:5f: d2:4d:e9:b4:ec:36:d0:2e:19:cc:e8:d5:ae:a6:8d:50:aa:19: f9:2d:9f:c9:32:86:31:31:3c:a8:e0:c4:a5:e0:9d:4b:89:7b: f1:c9:54:d1:dc:04:1c:21:49:b3:2d:d0:2d:7a:7c:c7:f9:78: 05:ed:d5:fb:29:a5:66:ce:46:a8:6f:86:c7:f9:8d:58:0b:3d: c5:55:89:1a:dd:63:dd:cb:88:9a:fe:ba:17:da:21:0b:8e:a3: aa:61:7f:7b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2REtpMhvjnzBpMvCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMDA3MTE0NloXDTI4MDcyMzA3MTE0NlowLzEtMCsGA1UEAxMk MDhkY2M0ODUtNzM2Zi00ZjcwLTk1NDAtMjc1NzBmOTBiZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow1R0V84e80PIlW7eUz0jMDkh0m0F9RGG5cS QpdaY12qFGsU/Frux+F6u8CGZr/d2MSiG8512XcFJhZjAMNo/uVxMYgJpTSDI3E1 l9NLe1/TLOzYRjEByDLYVdlvDWzAv6rc66KAzaPc9UxBZl3t6EaWBfT1WjEsYopN IelQs0BcVw01FEk4nmrKkK6LQJ0cdboG6Bkd1i2UU+P6uWM7cNnedcINy0nYjofH +m1GdfXAIOHCDXbg9Bq5iTxZZNHI6tBZvpdJIvbF4DaZ0IZzIyQW0FUYfTqQXgz0 HNe7dg3OyRo9lVYxEO/V2t6YkW8MjWlAZZl0qSYCJQK1McnwlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKIPMNHyBWvLyKKQo5GzPCHWYFMcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w OGRjYzQ4NS03MzZmLTRmNzAtOTU0MC0yNzU3MGY5MGJkZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzA4ZGNjNDg1LTczNmYtNGY3MC05 NTQwLTI3NTcwZjkwYmRmNS8wOGRjYzQ4NS03MzZmLTRmNzAtOTU0MC0yNzU3MGY5 MGJkZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXl1QwDgQCAAIwCAMGACYC9EkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjJzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhGyrk33RzZqrYgKjiglUYdHvx Yb3vyViY11Sd7GKxvdUWsSgCJpLTptbsfgUhyrRMhm8UA12uwyr6D6NhbU18WlFc zyX2L0AAA2FNeIVi5dgNVHx37aq3htm4Bbm3kOjcUpRsG1FVLSiCsDG6HTW0xkJS mHVcRD3K/y/b0N9WCVE9a7D9BAETDWtG3kovo+3feCTCh101XrdQUay18xTqrl/S Tem07DbQLhnM6NWupo1Qqhn5LZ/JMoYxMTyo4MSl4J1LiXvxyVTR3AQcIUmzLdAt enzH+XgF7dX7KaVmzkaob4bH+Y1YCz3FVYka3WPdy4ia/roX2iELjqOqYX97 -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:55 2026 by rpki-client