$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f.cer File: 1c893490-b8e0-4924-81b3-82310cb7253f.cer (raw, json) Hash identifier: YdX4CbivuZ35FvgeiLRH9iiyNdKsPqgAGXpEEM4wiNk= Subject key identifier: 19:2E:47:7E:BB:1E:DC:5D:20:18:26:79:BF:A6:8C:24:35:1F:0F:B2 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9FC1DB56F3A0D802742DF980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Apr 2026 13:25:42 +0000 Certificate not after: Fri 28 Jul 2028 13:25:42 +0000 Subordinate resources: AS: 401077 IP: 23.186.40.0/24 IP: 2620:cc:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:c1:db:56:f3:a0:d8:02:74:2d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 25 13:25:42 2026 GMT Not After : Jul 28 13:25:42 2028 GMT Subject: CN=1c893490-b8e0-4924-81b3-82310cb7253f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0d:db:47:8e:11:c3:17:70:5b:58:fe:27:9d: 01:fe:f3:b1:8b:e8:ca:e9:b9:de:5d:87:06:50:3c: bf:f6:73:f6:ac:2e:3e:88:a8:f7:70:fc:c2:9a:d0: 30:b9:8d:db:4c:af:77:ce:22:08:a3:9b:00:b8:9a: 58:8a:90:69:f4:eb:45:ad:db:a1:4d:6d:1b:b0:07: 8c:af:22:b4:c7:9a:68:cb:0f:48:da:c4:b4:4d:af: ca:86:d2:3d:14:16:2f:b6:83:fa:3a:d9:02:88:f3: ad:a5:aa:06:51:b8:b2:e9:02:46:2c:2b:e7:ea:63: a2:8e:6c:12:30:73:15:60:eb:c7:67:25:c7:92:26: d2:42:71:07:f2:e8:38:4c:90:c1:cc:6b:f4:7a:b6: c7:56:f5:fb:5f:79:1f:db:c5:87:6d:77:d2:8b:ba: aa:28:38:f5:c6:78:bf:35:54:f6:7c:b4:42:97:02: b2:7e:6e:d7:95:5c:ff:da:ba:14:25:3b:bf:6a:9c: c5:34:b0:dd:5e:16:be:27:58:fc:40:34:ea:31:c7: 08:65:a5:73:a0:7b:30:bd:94:ee:da:d4:27:3b:b0: bd:50:9e:93:63:66:17:2a:43:b5:ac:eb:51:0d:c4: 4d:85:7a:97:51:40:23:6a:29:60:63:a2:5c:39:85: b2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:47:7E:BB:1E:DC:5D:20:18:26:79:BF:A6:8C:24:35:1F:0F:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.186.40.0/24 IPv6: 2620:cc:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401077 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:31:6c:a7:25:51:0b:63:40:f8:7c:6e:ec:fc:0c:64:94:3c: 45:f9:d3:eb:fa:54:6c:5f:80:c7:39:e6:e1:3b:d3:07:4c:9a: b0:8c:89:f7:e4:80:02:58:09:68:53:df:4f:cc:03:d9:67:0d: 7f:a6:06:29:7d:9c:69:6b:c6:2d:3c:26:64:4a:87:ba:9a:a8: c8:06:31:44:0f:ec:a2:d1:e1:0b:ea:fa:8e:dd:37:97:8e:d1: 27:62:03:6d:e5:d2:82:c9:14:22:00:7b:fd:b6:aa:ff:32:23: cb:65:39:7e:ce:e2:c4:c2:27:4d:ac:ce:f8:5c:64:a0:22:d2: c2:2c:4a:dd:dd:a6:30:37:4d:c9:0b:89:96:07:3f:8c:f7:e6: dc:8a:8f:83:17:61:14:c9:e8:ae:cf:f8:7f:f6:d2:f1:53:60: 8d:1d:11:f1:b4:e8:6f:f1:51:e6:48:46:36:fb:43:60:ee:bb: 8b:78:df:53:4e:16:fd:15:06:30:7c:5e:8d:f3:87:b9:b2:54: d6:f2:80:8a:ed:44:84:60:b7:cc:6d:cf:b8:62:c8:64:58:85: 7d:c3:c1:0b:55:a2:ad:bb:5a:07:26:36:1b:07:c1:c2:7a:4a: 3d:6e:4e:fc:9e:42:01:7f:3b:44:da:ca:6e:30:60:a2:82:18: 7f:d0:51:13 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE2fwdtW86DYAnQt+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNTEzMjU0MloXDTI4MDcyODEzMjU0MlowLzEtMCsGA1UEAxMk MWM4OTM0OTAtYjhlMC00OTI0LTgxYjMtODIzMTBjYjcyNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q3bR44RwxdwW1j+J50B/vOxi+jK6bneXYcG UDy/9nP2rC4+iKj3cPzCmtAwuY3bTK93ziIIo5sAuJpYipBp9OtFrduhTW0bsAeM ryK0x5poyw9I2sS0Ta/KhtI9FBYvtoP6OtkCiPOtpaoGUbiy6QJGLCvn6mOijmwS MHMVYOvHZyXHkibSQnEH8ug4TJDBzGv0erbHVvX7X3kf28WHbXfSi7qqKDj1xni/ NVT2fLRClwKyfm7XlVz/2roUJTu/apzFNLDdXha+J1j8QDTqMccIZaVzoHswvZTu 2tQnO7C9UJ6TY2YXKkO1rOtRDcRNhXqXUUAjailgY6JcOYWyzwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBkuR367HtxdIBgmeb+mjCQ1Hw+yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8x Yzg5MzQ5MC1iOGUwLTQ5MjQtODFiMy04MjMxMGNiNzI1M2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzFjODkzNDkwLWI4ZTAtNDkyNC04 MWIzLTgyMzEwY2I3MjUzZi8xYzg5MzQ5MC1iOGUwLTQ5MjQtODFiMy04MjMxMGNi NzI1M2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXuigwDwQCAAIwCQMHACYgAMxgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGHrUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADjFspyVRC2NA+Hxu7PwMZJQ8 RfnT6/pUbF+Axznm4TvTB0yasIyJ9+SAAlgJaFPfT8wD2WcNf6YGKX2caWvGLTwm ZEqHupqoyAYxRA/sotHhC+r6jt03l47RJ2IDbeXSgskUIgB7/baq/zIjy2U5fs7i xMInTazO+FxkoCLSwixK3d2mMDdNyQuJlgc/jPfm3IqPgxdhFMnors/4f/bS8VNg jR0R8bTob/FR5khGNvtDYO67i3jfU04W/RUGMHxejfOHubJU1vKAiu1EhGC3zG3P uGLIZFiFfcPBC1WirbtaByY2GwfBwnpKPW5O/J5CAX87RNrKbjBgooIYf9BREw== -----END CERTIFICATE-----Generated at Thu Apr 30 12:46:45 2026 by rpki-client