$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d.cer File: 0ca7346d-fe29-4c44-aeef-2693f005a12d.cer (raw, json) Hash identifier: 1HkKzs0iPezqzrTKb7Hs3L6zwLJ53m/tkE65SdFuykc= Subject key identifier: 41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5B14796B2519AE1F3F469C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 15:48:20 +0000 Certificate not after: Tue 03 Oct 2028 15:48:20 +0000 Subordinate resources: AS: 402552 IP: 23.158.220.0/24 IP: 2602:f3b8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:14:79:6b:25:19:ae:1f:3f:46:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 1 15:48:20 2026 GMT Not After : Oct 3 15:48:20 2028 GMT Subject: CN=0ca7346d-fe29-4c44-aeef-2693f005a12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:b2:d1:b8:8a:4d:9d:53:23:1e:4f:8d:7d: 5c:7d:9a:00:18:1a:79:43:81:0c:f1:c1:b5:69:39: 86:97:fa:11:f2:ea:5a:58:9a:61:48:8a:32:39:fa: 24:94:be:90:65:e2:8b:52:02:03:f3:ef:81:cb:76: e7:4d:cc:09:e2:b9:88:bf:b7:72:05:e6:61:33:02: 80:7c:d5:34:0b:f8:ee:0f:30:01:e8:6e:13:02:0d: 9d:5e:b6:c5:6c:32:0b:9f:c9:0a:02:3b:af:97:64: 5e:64:fa:08:09:ea:a6:b9:c6:33:b9:4f:7c:2e:95: 9b:c6:d7:f1:93:d4:dc:5d:ef:6f:26:1c:e4:7d:62: 6c:28:6f:7f:0f:45:7d:a5:dd:cd:35:c0:46:de:5e: 47:dd:14:d8:b2:ba:c4:1c:19:09:c3:60:ec:15:93: 0b:87:1c:a7:8f:f1:87:fd:88:5f:ef:d3:65:1e:5e: bd:ab:da:4d:e4:17:e0:54:0f:76:d0:66:1d:1a:1f: 8c:d2:d7:01:8a:7d:df:cd:71:b8:eb:b8:9e:ae:62: 12:e4:4f:54:40:59:17:b6:ad:45:fa:fd:94:c2:0d: 91:0e:2e:24:35:de:4e:bf:0c:eb:b2:53:48:95:c5: 07:73:b7:a7:b5:b3:95:ed:7d:c3:20:eb:ce:65:7a: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:00:FB:EF:F6:A6:ED:EC:6F:04:F6:40:65:7A:B4:9A:B1:BE:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ca7346d-fe29-4c44-aeef-2693f005a12d/0ca7346d-fe29-4c44-aeef-2693f005a12d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.158.220.0/24 IPv6: 2602:f3b8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402552 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:95:fb:2a:6e:d1:99:0b:6d:69:dd:d4:44:73:74:45:9c:1d: 8c:3e:20:23:b3:e8:08:c4:12:58:58:f0:a0:67:d2:c2:5b:b2: 02:3c:96:a9:fd:09:92:87:06:86:df:3a:84:d2:0b:a4:93:20: 95:13:f3:12:1c:f1:f6:ec:d3:81:65:f1:c8:d6:7f:22:57:fa: aa:4a:b1:0e:1e:65:45:48:57:2a:46:43:6c:30:35:2a:11:37: 15:ec:79:7c:3b:9b:2f:ae:92:ac:3b:17:e7:63:e9:19:64:e5: 74:41:0f:fa:c9:62:b1:b8:b6:66:08:fb:cf:9c:40:81:54:03: 71:bf:f7:99:08:40:1f:10:2c:23:a3:e2:6e:e6:51:50:53:92: 22:32:e5:71:c3:d3:fc:db:0a:38:14:a1:e5:b6:f6:e5:61:bb: 90:1f:51:5c:aa:45:5c:53:63:4c:c5:93:f0:0c:0c:31:10:dc: f2:97:32:44:20:79:68:e1:51:7f:7e:e8:0f:4f:b0:af:b3:e9: 3f:53:96:26:9b:69:d2:1a:aa:70:fc:13:cd:3d:61:2e:f3:de: 8f:56:f1:6e:ca:be:13:8c:d5:88:b1:d3:b9:3e:88:eb:38:59: 1c:27:9f:de:5f:27:1f:b7:64:46:59:54:d5:cd:13:bf:a2:47: ab:6f:43:17 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5bFHlrJRmuHz9GnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMTE1NDgyMFoXDTI4MTAwMzE1NDgyMFowLzEtMCsGA1UEAxMk MGNhNzM0NmQtZmUyOS00YzQ0LWFlZWYtMjY5M2YwMDVhMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGuy0biKTZ1TIx5PjX1cfZoAGBp5Q4EM8cG1 aTmGl/oR8upaWJphSIoyOfoklL6QZeKLUgID8++By3bnTcwJ4rmIv7dyBeZhMwKA fNU0C/juDzAB6G4TAg2dXrbFbDILn8kKAjuvl2ReZPoICeqmucYzuU98LpWbxtfx k9TcXe9vJhzkfWJsKG9/D0V9pd3NNcBG3l5H3RTYsrrEHBkJw2DsFZMLhxynj/GH /Yhf79NlHl69q9pN5BfgVA920GYdGh+M0tcBin3fzXG467iermIS5E9UQFkXtq1F +v2Uwg2RDi4kNd5OvwzrslNIlcUHc7entbOV7X3DIOvOZXoZ7QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEGBAPvv9qbt7G8E9kBlerSasb7DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w Y2E3MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkzZjAwNWExMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBjYTczNDZkLWZlMjktNGM0NC1h ZWVmLTI2OTNmMDA1YTEyZC8wY2E3MzQ2ZC1mZTI5LTRjNDQtYWVlZi0yNjkzZjAw NWExMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXntwwDgQCAAIwCAMGACYC87gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkeDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAlfsqbtGZC21p3dREc3RFnB2M PiAjs+gIxBJYWPCgZ9LCW7ICPJap/QmShwaG3zqE0gukkyCVE/MSHPH27NOBZfHI 1n8iV/qqSrEOHmVFSFcqRkNsMDUqETcV7Hl8O5svrpKsOxfnY+kZZOV0QQ/6yWKx uLZmCPvPnECBVANxv/eZCEAfECwjo+Ju5lFQU5IiMuVxw9P82wo4FKHltvblYbuQ H1FcqkVcU2NMxZPwDAwxENzylzJEIHlo4VF/fugPT7Cvs+k/U5Ymm2nSGqpw/BPN PWEu896PVvFuyr4TjNWIsdO5PojrOFkcJ5/eXycft2RGWVTVzRO/okerb0MX -----END CERTIFICATE-----Generated at Wed Jul 15 06:23:06 2026 by rpki-client