$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer File: 2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer (raw, json) Hash identifier: RofSAMHIhZER1f9VPcK+Li7ib3eXJEGmCueB03012xM= Subject key identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F5ED84E2DB5D601939F4AFCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 16:57:16 +0000 Certificate not after: Fri 04 Aug 2028 14:56:57 +0000 Subordinate resources: AS: 54255 IP: 23.128.48.0/24 IP: 143.203.72.0/22 IP: 2604:3740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:d8:4e:2d:b5:d6:01:93:9f:4a:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 2 16:57:16 2026 GMT Not After : Aug 4 14:56:57 2028 GMT Subject: CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:3c:bb:20:e4:07:eb:03:62:a7:95:db:a7: 8f:c0:84:fe:66:f0:b3:04:fa:26:b7:09:53:43:6b: eb:b3:93:54:80:8b:55:b9:c7:0c:b5:e8:0f:ee:fb: 8e:79:67:89:29:be:08:02:0d:28:39:c6:f0:b6:f9: e9:68:31:75:ef:6f:cb:dd:dc:4b:d5:02:b4:c8:9b: eb:db:4d:b7:9c:e9:2c:cc:db:e2:6f:dc:69:7d:99: 1e:cf:c4:bb:57:65:73:81:c5:97:02:00:46:67:64: 33:38:31:b6:f0:f6:00:72:da:9a:b5:c7:e7:f0:38: 14:11:96:89:b3:03:51:f8:b3:75:85:62:17:2c:a8: 62:1b:8f:99:fa:cb:a7:02:9f:b9:5c:b6:e6:88:1c: 4d:46:76:ff:ff:7d:57:b5:64:c8:2b:d2:77:aa:5a: 27:d5:e4:32:89:9d:c6:ad:f8:47:98:91:fd:50:8b: 1d:a8:bc:0e:25:71:bb:fe:bf:31:2f:ab:c0:30:d5: 78:a7:40:ab:49:06:5b:b9:1e:22:25:3b:0e:b1:29: eb:e2:11:e9:f9:b1:02:63:af:9d:ab:c9:f8:81:2c: b0:cc:e1:67:ea:a9:3a:ea:e1:78:f5:95:4a:e5:f1: 72:e3:ab:25:ba:c4:16:42:a6:f3:84:43:2f:80:02: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.128.48.0/24 143.203.72.0/22 IPv6: 2604:3740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e2:6c:61:c2:1d:6f:65:da:be:02:fb:50:0a:e2:a8:04:97: 60:38:24:40:5b:25:13:17:e7:0f:fb:f3:9a:b8:0a:4d:ff:84: dc:1d:27:d5:60:78:d4:91:0f:4e:66:bc:4c:3c:b7:b0:04:da: ef:73:51:d9:44:57:77:e9:1b:85:ee:a3:a5:60:af:a1:fa:5a: 83:ac:90:05:49:c8:82:1d:0d:d2:ff:08:80:39:4c:c9:54:72: f6:38:c1:32:60:73:78:ec:a2:88:81:01:96:74:23:d1:90:27: ab:1d:f5:c1:49:83:57:62:e9:44:6d:d6:b7:30:13:ce:8a:a1: 43:eb:4c:a9:ba:51:1c:a8:a5:b9:ef:3b:22:98:17:1e:dc:9f: 19:de:92:dc:3e:38:da:2d:30:0b:99:cf:78:56:2a:13:f3:43: 31:40:ed:45:41:c6:12:f3:7b:f9:52:24:47:f5:66:a5:9d:83: 50:2e:03:bf:e3:0b:e8:86:b0:ee:c0:d0:3f:73:d6:23:c1:06: be:ff:1c:c4:a3:be:4d:d0:82:fe:e2:54:4d:0f:17:0b:45:58: 11:d1:2e:94:4f:f0:d1:ff:70:0e:3f:b9:ea:d4:f7:a7:c6:66: 25:ba:b6:c2:d0:4e:07:88:80:9d:e5:00:9b:bb:b4:e1:95:b1: 39:1b:65:62 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9e2E4ttdYBk59K/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwMjE2NTcxNloXDTI4MDgwNDE0NTY1N1owLzEtMCsGA1UEAxMk MmQwMDYzZjgtNTM4YS00NzE3LTg1ZWUtN2VmOWVlNTJiZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Q8uyDkB+sDYqeV26ePwIT+ZvCzBPomtwlT Q2vrs5NUgItVuccMtegP7vuOeWeJKb4IAg0oOcbwtvnpaDF172/L3dxL1QK0yJvr 2023nOkszNvib9xpfZkez8S7V2VzgcWXAgBGZ2QzODG28PYActqatcfn8DgUEZaJ swNR+LN1hWIXLKhiG4+Z+sunAp+5XLbmiBxNRnb//31XtWTIK9J3qlon1eQyiZ3G rfhHmJH9UIsdqLwOJXG7/r8xL6vAMNV4p0CrSQZbuR4iJTsOsSnr4hHp+bECY6+d q8n4gSywzOFn6qk66uF49ZVK5fFy46slusQWQqbzhEMvgAKR3wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDX5udsfzAlMb+aCw0qDICr3hCfNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y ZDAwNjNmOC01MzhhLTQ3MTctODVlZS03ZWY5ZWU1MmJkZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzJkMDA2M2Y4LTUzOGEtNDcxNy04 NWVlLTdlZjllZTUyYmRlMy8yZDAwNjNmOC01MzhhLTQ3MTctODVlZS03ZWY5ZWU1 MmJkZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXgDADBAKPy0gwDQQCAAIwBwMFACYEN0AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANPvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACDibGHCHW9l2r4C+1AK 4qgEl2A4JEBbJRMX5w/785q4Ck3/hNwdJ9VgeNSRD05mvEw8t7AE2u9zUdlEV3fp G4Xuo6Vgr6H6WoOskAVJyIIdDdL/CIA5TMlUcvY4wTJgc3jsooiBAZZ0I9GQJ6sd 9cFJg1di6URt1rcwE86KoUPrTKm6URyopbnvOyKYFx7cnxnektw+ONotMAuZz3hW KhPzQzFA7UVBxhLze/lSJEf1ZqWdg1AuA7/jC+iGsO7A0D9z1iPBBr7/HMSjvk3Q gv7iVE0PFwtFWBHRLpRP8NH/cA4/uerU96fGZiW6tsLQTgeIgJ3lAJu7tOGVsTkb ZWI= -----END CERTIFICATE-----Generated at Sat Oct 17 15:21:19 2026 by rpki-client