$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer File: 23b681ff-ef1d-4309-92ea-79d112449bb2.cer (raw, json) Hash identifier: BHe/DGIrCUdgVKp151W1zBVzNVW0tY5SivJxMNZJVYE= Subject key identifier: 16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4A449E3B6D33596A6FDFFE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Jun 2026 15:16:35 +0000 Certificate not after: Wed 27 Sep 2028 15:16:35 +0000 Subordinate resources: AS: 33306 IP: 23.128.12.0/24 IP: 142.249.84.0/22 IP: 2602:f7cc::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:44:9e:3b:6d:33:59:6a:6f:df:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 25 15:16:35 2026 GMT Not After : Sep 27 15:16:35 2028 GMT Subject: CN=23b681ff-ef1d-4309-92ea-79d112449bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:f8:8a:77:6a:86:90:3b:6f:37:1b:dc:ce: d4:dc:07:d6:21:8f:6d:cb:19:f6:9b:d0:27:ca:a9: 9f:ac:84:e6:c9:e9:14:17:22:1c:33:3f:de:7e:ce: 65:f9:4f:1a:e7:b8:df:44:f8:74:9c:30:d0:0d:27: 01:71:e5:89:ef:56:4a:88:7c:4a:be:a2:4e:8e:6e: 23:bc:d2:97:3c:a0:f6:c8:68:13:e5:a6:10:f7:75: 07:77:11:07:4c:34:b9:70:66:a5:eb:dd:a3:b4:62: 51:d9:29:73:4a:42:e2:a7:a7:6f:e9:71:9a:c4:77: ad:d6:5c:92:b2:79:6f:5f:b5:3a:c8:66:46:e7:c4: 8e:79:14:58:a9:c0:15:a3:c8:ab:e0:4f:b0:63:2e: bf:1d:29:2d:2e:23:33:66:bc:ef:e7:9b:6b:96:80: 81:99:b0:23:d9:95:b0:d9:3b:03:06:da:bd:1e:03: 8b:4a:26:33:cc:5f:a1:7a:91:4a:e8:15:5b:cc:83: ab:4a:7b:f4:3a:9b:1b:e3:ef:9c:e1:d8:2b:f9:d3: c8:60:8f:ed:cc:fd:2a:23:94:d8:48:c0:14:e5:a2: 6d:62:8e:b3:74:7a:b3:91:60:37:69:9f:d8:62:6c: 2f:07:38:c9:b8:af:fe:46:04:04:7d:09:34:30:2d: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.128.12.0/24 142.249.84.0/22 IPv6: 2602:f7cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33306 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:31:b1:1d:3a:b0:5b:6d:38:e5:65:60:94:95:9c:08:5d:d6: 5e:c3:f2:7c:b4:39:28:71:1a:e8:a8:a3:35:03:f6:ac:eb:b4: fa:f1:7b:b2:aa:6e:5e:ce:ce:7b:60:e4:b6:76:ac:60:5e:c3: d5:74:b3:6c:c9:26:17:43:58:af:f9:7f:7c:e3:e5:15:0c:07: 14:6a:53:72:6b:fd:fa:df:a9:8d:78:1f:7d:1b:31:9e:dd:d9: af:44:d8:62:3b:d0:60:f3:e5:47:3f:c1:5f:78:0a:2b:68:4a: 82:73:7d:29:a9:73:75:4a:1c:27:6d:0c:0a:e2:14:7d:f9:97: e1:79:e8:63:0e:06:b8:70:89:a9:7f:2f:aa:d5:c2:e1:92:97: cc:ba:62:72:6b:f9:93:30:0e:15:b9:ac:90:9f:dd:54:a9:06: 5d:39:c8:f5:4e:de:3c:d5:7d:57:13:0c:b8:2f:17:a5:17:28: d0:3a:05:21:44:49:19:1d:92:7f:8d:e7:0f:87:6e:53:ce:f1: 98:20:bb:72:02:bf:5d:df:95:42:2e:bd:c9:1d:32:08:ff:fc: e0:72:56:e4:33:d6:c6:5b:a2:05:01:e3:16:1a:f9:2b:6e:1c: 36:e1:ef:fe:dd:77:8a:ca:2e:c9:7e:f8:b4:54:36:2a:3e:9e: 25:49:c7:d0 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5KRJ47bTNZam/f/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNTE1MTYzNVoXDTI4MDkyNzE1MTYzNVowLzEtMCsGA1UEAxMk MjNiNjgxZmYtZWYxZC00MzA5LTkyZWEtNzlkMTEyNDQ5YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuz4indqhpA7bzcb3M7U3AfWIY9tyxn2m9An yqmfrITmyekUFyIcMz/efs5l+U8a57jfRPh0nDDQDScBceWJ71ZKiHxKvqJOjm4j vNKXPKD2yGgT5aYQ93UHdxEHTDS5cGal692jtGJR2SlzSkLip6dv6XGaxHet1lyS snlvX7U6yGZG58SOeRRYqcAVo8ir4E+wYy6/HSktLiMzZrzv55trloCBmbAj2ZWw 2TsDBtq9HgOLSiYzzF+hepFK6BVbzIOrSnv0Opsb4++c4dgr+dPIYI/tzP0qI5TY SMAU5aJtYo6zdHqzkWA3aZ/YYmwvBzjJuK/+RgQEfQk0MC1BXQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBaFbAQIVPjEllpkLRs/ctP/ORNTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y M2I2ODFmZi1lZjFkLTQzMDktOTJlYS03OWQxMTI0NDliYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzIzYjY4MWZmLWVmMWQtNDMwOS05 MmVhLTc5ZDExMjQ0OWJiMi8yM2I2ODFmZi1lZjFkLTQzMDktOTJlYS03OWQxMTI0 NDliYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXgAwDBAKO+VQwDQQCAAIwBwMFACYC98wwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAIIaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABgxsR06sFttOOVlYJSV nAhd1l7D8ny0OShxGuioozUD9qzrtPrxe7Kqbl7Ozntg5LZ2rGBew9V0s2zJJhdD WK/5f3zj5RUMBxRqU3Jr/frfqY14H30bMZ7d2a9E2GI70GDz5Uc/wV94CitoSoJz fSmpc3VKHCdtDAriFH35l+F56GMOBrhwial/L6rVwuGSl8y6YnJr+ZMwDhW5rJCf 3VSpBl05yPVO3jzVfVcTDLgvF6UXKNA6BSFESRkdkn+N5w+HblPO8Zggu3ICv13f lUIuvckdMgj//OByVuQz1sZbogUB4xYa+StuHDbh7/7dd4rKLsl++LRUNio+niVJ x9A= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:47 2026 by rpki-client