$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1f97d156-a79a-4b26-a6a8-12a2d235b9c0.cer File: 1f97d156-a79a-4b26-a6a8-12a2d235b9c0.cer (raw, json) Hash identifier: lt5flZVhMANRtlcTeYZZ2YzzjCrFisvP4ta38D+WgGM= Subject key identifier: A1:2D:33:BA:4E:45:1A:0C:C5:A6:F9:A9:E4:19:C8:BE:FD:62:CA:70 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DDC23317EA8CD0C8F8DA20B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1f97d156-a79a-4b26-a6a8-12a2d235b9c0/1f97d156-a79a-4b26-a6a8-12a2d235b9c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1f97d156-a79a-4b26-a6a8-12a2d235b9c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 04:30:19 +0000 Certificate not after: Sat 19 Aug 2028 04:30:19 +0000 Subordinate resources: AS: 394785 IP: 23.155.52.0/24 IP: 2602:f41e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dc:23:31:7e:a8:cd:0c:8f:8d:a2:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 17 04:30:19 2026 GMT Not After : Aug 19 04:30:19 2028 GMT Subject: CN=1f97d156-a79a-4b26-a6a8-12a2d235b9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:87:82:b3:6a:c5:63:40:2f:e1:d4:f6:19:6e: 1a:99:82:ab:80:43:ad:af:cd:42:af:0c:80:6e:f6: 22:e3:97:1e:66:77:fe:d6:79:44:5b:e4:b1:45:1b: a4:5b:40:d7:cf:23:a8:d0:26:5c:2f:ab:8a:9d:76: 23:e6:bd:50:06:14:02:25:5c:3a:a6:1f:1a:3f:c6: 7b:19:13:c9:03:11:c0:f2:38:cf:2c:aa:84:19:a6: 9b:69:f9:dd:36:ac:9b:7a:bb:bc:b0:54:76:1f:cd: e5:ee:af:a0:59:e6:74:9b:2f:ff:a8:94:54:b6:41: ec:9d:75:b1:3d:f9:dc:99:1e:e6:07:7c:91:1e:0b: be:61:40:9e:e5:e0:30:42:12:1c:fb:0f:9b:2c:72: 4a:5c:1e:87:0f:50:d5:07:eb:13:88:c6:e5:16:53: 6b:63:b7:42:40:9d:d4:3f:0d:f3:60:c2:77:3c:c8: 8d:0b:1e:9a:29:0b:e1:25:4a:e5:a0:3e:e1:04:ae: d0:6c:dc:31:b0:8c:f2:94:05:80:f5:4f:c5:27:ed: 23:65:1c:6a:b8:7b:e4:ff:cf:83:9f:77:d5:f4:f9: 8e:74:32:6c:84:16:25:e3:f7:62:e6:cb:b1:ac:43: 02:ed:eb:0b:69:40:e4:f3:77:07:e5:3e:b7:c9:88: f0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2D:33:BA:4E:45:1A:0C:C5:A6:F9:A9:E4:19:C8:BE:FD:62:CA:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1f97d156-a79a-4b26-a6a8-12a2d235b9c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1f97d156-a79a-4b26-a6a8-12a2d235b9c0/1f97d156-a79a-4b26-a6a8-12a2d235b9c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.155.52.0/24 IPv6: 2602:f41e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394785 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:24:00:32:87:2f:c3:c6:27:76:e1:50:50:02:5b:1c:b7:9a: 30:e8:1d:b6:5a:e6:6b:81:b4:ef:25:a2:24:7d:65:a9:60:67: fc:cf:20:7d:67:99:a0:72:02:4f:5c:fb:6f:10:d2:fc:5b:ae: ff:aa:63:50:a5:a6:d6:af:56:1f:3c:bd:c4:ac:9b:f3:74:05: 08:39:78:e5:50:40:6e:86:e6:dc:62:dd:d0:6a:7e:f5:6c:af: 42:c8:2d:35:3a:0f:f6:3a:94:36:7b:f0:c5:84:64:ba:fa:f1: d9:e8:ed:3d:29:d3:76:00:70:da:e9:ff:48:09:a2:de:76:47: a0:e8:41:17:f8:46:0b:b0:a2:ef:40:fb:ae:6a:de:f1:b5:44: 12:4c:ad:45:b8:4d:c6:67:95:0c:5e:1c:d8:d1:1c:ed:d7:65: fc:0f:38:06:87:b8:91:89:11:a8:d5:62:e9:10:e2:60:92:22: 1f:78:7e:12:7d:d7:89:9e:23:5f:a2:90:cc:50:f0:75:54:b1: a9:b9:73:55:3e:ff:db:2d:ad:c4:63:7e:df:25:3a:7b:52:f2: d0:ce:fd:4e:5f:68:6b:83:11:6e:ff:a5:4b:8d:e4:06:bb:58: 14:ad:45:14:82:df:3b:67:19:0f:a4:67:4f:c4:02:f9:85:1f: a3:bd:02:f4 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3cIzF+qM0Mj42iC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNzA0MzAxOVoXDTI4MDgxOTA0MzAxOVowLzEtMCsGA1UEAxMk MWY5N2QxNTYtYTc5YS00YjI2LWE2YTgtMTJhMmQyMzViOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoeCs2rFY0Av4dT2GW4amYKrgEOtr81CrwyA bvYi45ceZnf+1nlEW+SxRRukW0DXzyOo0CZcL6uKnXYj5r1QBhQCJVw6ph8aP8Z7 GRPJAxHA8jjPLKqEGaabafndNqyberu8sFR2H83l7q+gWeZ0my//qJRUtkHsnXWx PfncmR7mB3yRHgu+YUCe5eAwQhIc+w+bLHJKXB6HD1DVB+sTiMblFlNrY7dCQJ3U Pw3zYMJ3PMiNCx6aKQvhJUrloD7hBK7QbNwxsIzylAWA9U/FJ+0jZRxquHvk/8+D n3fV9PmOdDJshBYl4/di5suxrEMC7esLaUDk83cH5T63yYjw7QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKEtM7pORRoMxab5qeQZyL79YspwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8x Zjk3ZDE1Ni1hNzlhLTRiMjYtYTZhOC0xMmEyZDIzNWI5YzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzFmOTdkMTU2LWE3OWEtNGIyNi1h NmE4LTEyYTJkMjM1YjljMC8xZjk3ZDE1Ni1hNzlhLTRiMjYtYTZhOC0xMmEyZDIz NWI5YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmzQwDgQCAAIwCAMGACYC9B4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGITBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZJAAyhy/Dxid24VBQAlsct5ow 6B22WuZrgbTvJaIkfWWpYGf8zyB9Z5mgcgJPXPtvENL8W67/qmNQpabWr1YfPL3E rJvzdAUIOXjlUEBuhubcYt3Qan71bK9CyC01Og/2OpQ2e/DFhGS6+vHZ6O09KdN2 AHDa6f9ICaLedkeg6EEX+EYLsKLvQPuuat7xtUQSTK1FuE3GZ5UMXhzY0Rzt12X8 DzgGh7iRiRGo1WLpEOJgkiIfeH4SfdeJniNfopDMUPB1VLGpuXNVPv/bLa3EY37f JTp7UvLQzv1OX2hrgxFu/6VLjeQGu1gUrUUUgt87ZxkPpGdPxAL5hR+jvQL0 -----END CERTIFICATE-----Generated at Thu May 28 16:14:31 2026 by rpki-client