$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer File: 24f82d36-633a-44e0-9b31-a523e1609720.cer (raw, json) Hash identifier: UMCuXQt+qUnQHtWhmus/wSXSOP+DSHs/1IMzj5N9wiM= Subject key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D93D93BAACB431681C3B20CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 07:03:06 +0000 Certificate not after: Mon 24 Jul 2028 07:03:06 +0000 Subordinate resources: AS: 32132 IP: 64.16.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:d9:3b:aa:cb:43:16:81:c3:b2:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 21 07:03:06 2026 GMT Not After : Jul 24 07:03:06 2028 GMT Subject: CN=24f82d36-633a-44e0-9b31-a523e1609720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:1e:e7:73:81:48:44:7d:93:b6:5f:64:a0: b9:87:a3:95:85:17:95:68:5b:2e:a4:bb:4b:17:b3: 49:ef:f8:8a:f5:c4:12:f2:76:0b:31:52:24:5e:81: d0:7d:50:51:af:a7:a4:c0:dd:e3:dc:6e:90:4e:26: b0:c1:92:86:3d:62:3a:22:ef:08:ba:4c:9b:b4:78: 8a:26:1d:78:bf:7e:4f:b4:6b:7f:ad:eb:c8:cf:53: 1a:8c:09:45:35:c0:5a:3b:9d:dd:c4:f3:b2:ea:fd: 28:8c:6c:79:8c:ab:99:51:52:6f:d8:37:2c:68:8e: 48:8e:7c:a4:3a:09:0e:5b:18:75:e5:68:ba:5c:26: 0d:a3:20:8b:82:4d:7a:89:ef:7e:f6:29:a2:0f:3e: 81:6d:c0:49:e8:0f:35:2b:4a:e3:ec:6d:ec:84:98: 5f:55:77:86:9c:ae:f8:ff:9a:2d:0b:c6:51:c1:ec: ab:62:9d:2c:a1:21:2b:52:11:52:b3:be:dc:d9:c0: 61:08:e5:3c:0a:c0:0b:04:19:fc:59:ff:d7:2d:b3: 80:e8:6f:8d:38:10:c0:1b:c3:7d:1e:a7:6d:b6:bf: ca:21:fc:ed:6e:62:8a:46:e5:5d:96:4e:5d:c4:7f: d8:48:a7:82:6f:b0:99:d4:ce:3b:67:6a:90:45:89: e3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.16.128.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32132 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1b:51:ff:fe:7b:e8:1e:23:27:70:76:a8:62:8f:e6:ce:49: 1d:a6:e3:b0:be:be:ef:ed:6d:d6:14:2d:58:05:e9:ec:5a:93: c5:70:e1:3e:df:2e:75:a4:7e:30:bc:a6:e7:f0:ff:a5:30:77: 65:e7:42:d1:de:99:ee:63:ba:a8:e8:0c:50:66:61:e6:f9:c3: de:b1:bf:7e:95:63:34:a1:8a:90:e0:85:f9:65:90:4b:4e:31: 2f:84:a0:f4:f8:68:f4:81:66:2c:28:b8:24:78:61:15:89:71: fc:6f:9b:e7:67:57:be:50:0f:d0:a7:10:91:f8:b8:ac:12:21: 31:b9:b2:04:15:45:1d:15:c3:10:7b:5f:3e:f6:69:e8:27:ea: ed:e0:6e:05:97:e3:5f:05:14:ee:48:0b:83:26:18:58:bd:32: 0a:f5:de:eb:7a:cf:2f:99:2d:5d:bd:1a:7d:b7:1f:cf:4a:44: 6a:7a:ab:69:3c:98:89:be:ca:47:3f:fe:a9:76:c3:db:d4:2c: 7e:ce:d3:03:45:66:8b:ac:cd:36:31:5d:0f:8b:cd:fd:26:7d: 87:da:b4:e5:13:e2:72:cf:57:2c:c9:e3:68:52:2e:13:8b:e4: d3:af:24:5b:ee:6f:d4:c0:6b:c6:83:a3:c0:0f:73:ca:5a:98: 41:2a:d6:e5 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE2T2Tuqy0MWgcOyDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMTA3MDMwNloXDTI4MDcyNDA3MDMwNlowLzEtMCsGA1UEAxMk MjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusEe53OBSER9k7ZfZKC5h6OVhReVaFsupLtL F7NJ7/iK9cQS8nYLMVIkXoHQfVBRr6ekwN3j3G6QTiawwZKGPWI6Iu8IukybtHiK Jh14v35PtGt/revIz1MajAlFNcBaO53dxPOy6v0ojGx5jKuZUVJv2DcsaI5Ijnyk OgkOWxh15Wi6XCYNoyCLgk16ie9+9imiDz6BbcBJ6A81K0rj7G3shJhfVXeGnK74 /5otC8ZRweyrYp0soSErUhFSs77c2cBhCOU8CsALBBn8Wf/XLbOA6G+NOBDAG8N9 Hqdttr/KIfztbmKKRuVdlk5dxH/YSKeCb7CZ1M47Z2qQRYnjTQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKkdz25p47PfMSUSy83JhTv23c9vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y NGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzI0ZjgyZDM2LTYzM2EtNDRlMC05 YjMxLWE1MjNlMTYwOTcyMC8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2 MDk3MjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAZAEIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAfxtR//576B4jJ3B2qGKP5s5JHabjsL6+7+1t1hQtWAXp7FqT xXDhPt8udaR+MLym5/D/pTB3ZedC0d6Z7mO6qOgMUGZh5vnD3rG/fpVjNKGKkOCF +WWQS04xL4Sg9Pho9IFmLCi4JHhhFYlx/G+b52dXvlAP0KcQkfi4rBIhMbmyBBVF HRXDEHtfPvZp6Cfq7eBuBZfjXwUU7kgLgyYYWL0yCvXe63rPL5ktXb0afbcfz0pE anqraTyYib7KRz/+qXbD29Qsfs7TA0Vmi6zNNjFdD4vN/SZ9h9q05RPics9XLMnj aFIuE4vk068kW+5v1MBrxoOjwA9zylqYQSrW5Q== -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:51 2026 by rpki-client