$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/145fc24e-597a-4c0c-be83-0ad85b5f7260.cer File: 145fc24e-597a-4c0c-be83-0ad85b5f7260.cer (raw, json) Hash identifier: KvMy/L3d+AT3vIugmXm9qbTGAH3v0rgr5Z5WUCxuf/o= Subject key identifier: 95:B1:2A:6F:F2:31:F3:C8:C1:82:A3:37:C3:2B:D0:7A:F1:17:9E:0A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE04C16224A66CC3C647E4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/145fc24e-597a-4c0c-be83-0ad85b5f7260/145fc24e-597a-4c0c-be83-0ad85b5f7260.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/145fc24e-597a-4c0c-be83-0ad85b5f7260/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 May 2026 16:15:57 +0000 Certificate not after: Sun 20 Aug 2028 16:15:57 +0000 Subordinate resources: AS: 26439 IP: 2620:19a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e0:4c:16:22:4a:66:cc:3c:64:7e:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 18 16:15:57 2026 GMT Not After : Aug 20 16:15:57 2028 GMT Subject: CN=145fc24e-597a-4c0c-be83-0ad85b5f7260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:b6:9d:7d:97:b2:96:c4:3a:b4:61:6f:11: 04:08:5c:cd:1b:1c:43:9f:c3:5e:86:91:ae:f3:ce: 18:95:45:a9:ce:42:5c:02:86:82:a5:a8:d1:71:16: f6:19:ba:16:97:c8:39:3d:d2:e3:bc:64:44:66:6a: 8c:f4:ea:99:70:51:a8:b9:d1:13:02:bb:40:77:b7: e4:77:ac:95:56:69:cf:0a:d9:80:1e:08:d6:01:ac: ca:28:4b:37:53:2f:18:12:25:2c:fd:52:f0:ab:39: 19:f9:f9:5d:0d:17:0f:a6:4d:cf:1b:6d:ae:7e:97: 48:3c:2b:40:b4:6b:0b:0c:c2:05:09:e9:9a:c4:30: fb:17:9d:5d:42:70:d8:38:30:0f:0b:4f:ff:2e:f1: 86:0d:71:51:d3:de:88:78:cc:1f:71:da:ba:88:4c: e1:15:61:b8:81:89:ff:f5:87:a6:b3:3d:fe:39:ab: 84:62:13:32:78:99:d1:55:3a:53:c4:65:ed:94:48: ea:27:d0:ac:3d:f4:24:c4:c8:f4:62:97:99:16:91: c4:4a:df:ae:e6:5a:1c:f1:a7:57:e6:31:17:09:b4: 53:a4:97:4d:93:c3:3c:88:11:ee:ff:0a:c0:fe:b6: 5c:0e:73:b9:20:e6:17:f1:64:c7:b7:13:8a:10:fc: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B1:2A:6F:F2:31:F3:C8:C1:82:A3:37:C3:2B:D0:7A:F1:17:9E:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/145fc24e-597a-4c0c-be83-0ad85b5f7260/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/145fc24e-597a-4c0c-be83-0ad85b5f7260/145fc24e-597a-4c0c-be83-0ad85b5f7260.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2620:19a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26439 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fa:59:90:c2:a3:44:1e:9b:82:23:18:53:b0:d1:0a:b2:3f: 07:77:19:4c:63:75:09:ac:e6:d5:5b:c9:85:ed:34:72:9f:b9: 0a:6f:41:0f:9e:76:3a:39:2b:35:a1:37:fa:be:9f:76:9c:51: f7:8f:06:80:d1:1d:64:96:2b:8e:0e:97:43:7c:36:71:99:12: 17:ef:0d:14:fe:7b:5b:13:e2:56:0b:13:7c:4f:06:78:ab:b1: 82:d7:69:39:7c:57:02:11:91:22:4a:4f:29:e4:56:c5:fe:2b: b4:d0:16:ae:76:25:fc:ef:47:a4:af:bc:bc:a4:50:17:51:33: 66:18:0e:b0:82:49:9a:07:79:1d:b2:f7:a7:3e:94:24:66:0d: f0:21:ec:41:37:b7:3a:2a:d2:83:ec:39:77:bf:4b:a0:93:84: ef:93:05:5d:1b:9c:b8:af:80:56:bc:9e:7e:ea:38:7b:ec:ca: 88:be:f5:ed:64:93:29:a5:f1:76:7e:42:6c:2c:89:25:03:8f: dd:f8:f3:36:3c:42:17:d3:0f:7f:87:36:7d:f9:d8:70:b9:09: b4:bd:2c:0c:e5:9b:da:86:9d:d9:c1:7a:f2:8b:35:ab:d3:22: 49:ae:db:65:e2:ba:dd:35:bc:ba:5e:58:24:5e:c1:5f:14:65: cc:fb:62:05 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE3gTBYiSmbMPGR+SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxODE2MTU1N1oXDTI4MDgyMDE2MTU1N1owLzEtMCsGA1UEAxMk MTQ1ZmMyNGUtNTk3YS00YzBjLWJlODMtMGFkODViNWY3MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8+2nX2XspbEOrRhbxEECFzNGxxDn8NehpGu 884YlUWpzkJcAoaCpajRcRb2GboWl8g5PdLjvGREZmqM9OqZcFGoudETArtAd7fk d6yVVmnPCtmAHgjWAazKKEs3Uy8YEiUs/VLwqzkZ+fldDRcPpk3PG22ufpdIPCtA tGsLDMIFCemaxDD7F51dQnDYODAPC0//LvGGDXFR096IeMwfcdq6iEzhFWG4gYn/ 9Yemsz3+OauEYhMyeJnRVTpTxGXtlEjqJ9CsPfQkxMj0YpeZFpHESt+u5loc8adX 5jEXCbRTpJdNk8M8iBHu/wrA/rZcDnO5IOYX8WTHtxOKEPz+ewIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFJWxKm/yMfPIwYKjN8Mr0HrxF54KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8x NDVmYzI0ZS01OTdhLTRjMGMtYmU4My0wYWQ4NWI1ZjcyNjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzE0NWZjMjRlLTU5N2EtNGMwYy1i ZTgzLTBhZDg1YjVmNzI2MC8xNDVmYzI0ZS01OTdhLTRjMGMtYmU4My0wYWQ4NWI1 ZjcyNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAGaADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJnRzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCF+lmQwqNEHpuCIxhTsNEKsj8HdxlMY3UJrObVW8mF7TRy n7kKb0EPnnY6OSs1oTf6vp92nFH3jwaA0R1kliuODpdDfDZxmRIX7w0U/ntbE+JW CxN8TwZ4q7GC12k5fFcCEZEiSk8p5FbF/iu00BaudiX870ekr7y8pFAXUTNmGA6w gkmaB3kdsvenPpQkZg3wIexBN7c6KtKD7Dl3v0ugk4TvkwVdG5y4r4BWvJ5+6jh7 7MqIvvXtZJMppfF2fkJsLIklA4/d+PM2PEIX0w9/hzZ9+dhwuQm0vSwM5Zvahp3Z wXryizWr0yJJrttl4rrdNby6XlgkXsFfFGXM+2IF -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:30 2026 by rpki-client