$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer File: 23b9386a-5c2a-4a69-bd44-c9076f51301f.cer (raw, json) Hash identifier: 50P2rXsTnExs9Yms41vb9Y2WoIMFHQ7CBXDQODv1+P8= Subject key identifier: A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E074295830AB8D0F84AE64580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jun 2026 15:13:20 +0000 Certificate not after: Sun 03 Sep 2028 15:13:20 +0000 Subordinate resources: AS: 36489 AS: 393775 AS: 394297 IP: 24.235.14.0/23 IP: 65.61.48.0/23 IP: 143.223.142.0/23 IP: 192.103.11.0/24 IP: 199.116.136.0/21 IP: 209.127.254.0/23 IP: 2604:9d00::/32 IP: 2606:4180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:42:95:83:0a:b8:d0:f8:4a:e6:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 1 15:13:20 2026 GMT Not After : Sep 3 15:13:20 2028 GMT Subject: CN=23b9386a-5c2a-4a69-bd44-c9076f51301f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:90:48:fd:af:cf:31:2b:79:cd:62:cf:34: 1b:ac:4d:50:e2:f9:a0:05:15:5d:db:cf:36:8a:8c: b5:0c:ae:e2:a7:50:5e:d6:34:23:8a:86:77:3a:4a: 5e:c0:db:30:46:6a:e4:47:a2:ed:dc:17:26:85:f3: bf:f7:5f:b6:45:e3:b6:0b:ad:75:54:15:f1:6a:3c: f5:13:2b:7e:b2:b0:7a:69:80:10:b5:aa:e6:1c:4a: ef:36:ad:54:01:56:8e:8b:19:c0:0c:a4:d2:2d:22: 92:6b:b5:b3:0b:4c:34:86:63:f1:75:89:86:e0:26: c7:87:46:81:87:c9:8f:a0:6b:87:04:37:d3:c7:e4: 25:2f:ed:c8:fb:1e:3a:34:d0:99:7c:e4:50:dd:e7: 7c:97:de:dd:b1:d5:9c:a0:c1:92:17:43:ea:21:ca: 54:23:87:3e:11:80:6d:33:62:97:84:fb:e1:ec:c9: df:1e:a8:f8:6e:13:9d:e9:e0:3d:97:09:96:3f:f4: 57:71:0c:a4:86:d5:16:f2:7e:3b:85:1f:fe:9b:79: af:18:de:31:3e:d2:8f:5c:73:30:86:44:2f:f4:2c: b9:f6:41:78:5e:0f:e0:3a:60:6f:f5:a4:5c:c0:4c: cc:6a:21:a5:5e:e2:42:7e:29:d1:03:b0:ae:14:31: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 24.235.14.0/23 65.61.48.0/23 143.223.142.0/23 192.103.11.0/24 199.116.136.0/21 209.127.254.0/23 IPv6: 2604:9d00::/32 2606:4180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36489 393775 394297 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:62:ea:22:1f:74:4f:df:42:8d:fe:e9:15:cb:4f:9d:bf:64: 71:22:76:0f:a2:6c:00:95:dd:9c:54:d8:77:75:56:50:a0:87: 64:ca:3e:9b:f3:8e:b1:9d:bb:64:22:cc:33:b9:3a:6d:9b:9e: d6:f1:15:61:c4:6a:5c:cc:b2:da:18:36:f1:2d:56:12:0d:24: f9:83:31:f8:7b:71:c2:fe:4f:83:1a:e2:2d:2c:5c:dc:f8:c2: 4a:5f:ff:e7:1a:22:30:de:11:7d:ce:58:6a:c4:36:bd:b7:16: ba:28:97:12:e1:92:bc:2a:f2:ba:58:27:8b:3c:85:7e:51:25: 92:5a:2b:a7:68:47:c1:64:8a:36:d1:69:b6:7c:5a:6c:cf:ed: d9:04:fc:2e:95:b0:09:3c:81:e7:f4:de:2f:51:7c:db:bb:c6: f2:ba:0d:c7:52:6c:17:f4:97:da:bc:24:1c:66:45:a5:44:64: 9b:10:7b:40:a0:f2:57:f2:bd:cf:7a:83:97:f7:20:74:2b:d6: 5b:55:cf:90:b0:0f:38:1e:5a:c2:bb:62:8d:a0:5c:1c:b7:c5: aa:7a:cf:d4:26:2c:10:ea:50:60:fc:3b:2c:e7:b3:12:c7:79: e2:a9:36:b8:e6:e9:2c:73:c0:9b:d0:08:35:1e:2b:b7:17:29: 5a:f6:18:c6 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWE4HQpWDCrjQ+ErmRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwMTE1MTMyMFoXDTI4MDkwMzE1MTMyMFowLzEtMCsGA1UEAxMk MjNiOTM4NmEtNWMyYS00YTY5LWJkNDQtYzkwNzZmNTEzMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5GQSP2vzzErec1izzQbrE1Q4vmgBRVd2882 ioy1DK7ip1Be1jQjioZ3OkpewNswRmrkR6Lt3BcmhfO/91+2ReO2C611VBXxajz1 Eyt+srB6aYAQtarmHErvNq1UAVaOixnADKTSLSKSa7WzC0w0hmPxdYmG4CbHh0aB h8mPoGuHBDfTx+QlL+3I+x46NNCZfORQ3ed8l97dsdWcoMGSF0PqIcpUI4c+EYBt M2KXhPvh7MnfHqj4bhOd6eA9lwmWP/RXcQykhtUW8n47hR/+m3mvGN4xPtKPXHMw hkQv9Cy59kF4Xg/gOmBv9aRcwEzMaiGlXuJCfinRA7CuFDGe8QIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFKZR6ysbCItfuQzziNJYi39opfGjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y M2I5Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3NmY1MTMwMWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzIzYjkzODZhLTVjMmEtNGE2OS1i ZDQ0LWM5MDc2ZjUxMzAxZi8yM2I5Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3NmY1 MTMwMWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMCoEAgABMCQDBAEY6w4DBAFBPTADBAGP344DBADAZwsDBAPHdIgD BAHRf/4wFAQCAAIwDgMFACYEnQADBQAmBkGAMCQGCCsGAQUFBwEIAQH/BBUwE6AR MA8CAwCOiQIDBgIvAgMGBDkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANGLqIh90T99Cjf7pFctPnb9kcSJ2 D6JsAJXdnFTYd3VWUKCHZMo+m/OOsZ27ZCLMM7k6bZue1vEVYcRqXMyy2hg28S1W Eg0k+YMx+Htxwv5PgxriLSxc3PjCSl//5xoiMN4Rfc5YasQ2vbcWuiiXEuGSvCry ulgnizyFflElklorp2hHwWSKNtFptnxabM/t2QT8LpWwCTyB5/TeL1F827vG8roN x1JsF/SX2rwkHGZFpURkmxB7QKDyV/K9z3qDl/cgdCvWW1XPkLAPOB5awrtijaBc HLfFqnrP1CYsEOpQYPw7LOezEsd54qk2uObpLHPAm9AINR4rtxcpWvYYxg== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:27 2026 by rpki-client