$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer File: 2e23f82b-dfd5-4328-8256-8d7abb886b20.cer (raw, json) Hash identifier: S2jGX7tyQ4VBjuBEq/jrEg0oYNEcCIUUrGrJKJJBF48= Subject key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E68C0502DC4B084570BD67900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 13:20:04 +0000 Certificate not after: Sun 08 Oct 2028 13:20:04 +0000 Subordinate resources: AS: 7352 IP: 23.189.128.0/24 IP: 104.166.0.0/20 IP: 198.54.136.0/22 IP: 2604:cd00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:c0:50:2d:c4:b0:84:57:0b:d6:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 6 13:20:04 2026 GMT Not After : Oct 8 13:20:04 2028 GMT Subject: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:a6:11:2e:e9:72:bf:82:b8:70:9c:e2:a2: e3:14:ad:72:61:0e:11:99:c7:f2:6b:96:22:55:6b: e7:8d:02:53:e7:94:ff:a2:34:30:61:12:d3:cd:d3: 5c:cf:56:74:58:c8:5a:ff:22:fd:04:39:78:2f:7b: 78:9e:9e:26:df:a7:30:dc:6a:da:ef:eb:43:b6:24: 2f:b9:57:b6:1a:6c:88:43:60:c8:74:2a:21:b7:ad: af:a9:98:ea:d7:35:43:6b:4e:02:2f:f9:dc:01:dc: 6b:7f:f7:ce:09:f0:0e:5f:2a:06:9f:73:b7:24:d3: 54:6f:7a:58:2e:08:28:f2:84:47:dd:5b:63:28:8d: 71:b1:1c:77:5d:27:a8:9c:da:e2:89:d8:b7:2f:59: b7:b8:9e:62:a7:57:9d:10:ed:34:48:83:d6:2b:0b: 95:d9:b5:05:0e:13:f0:69:0f:0b:fc:74:67:32:8b: 9b:c5:b6:03:45:d4:94:d2:31:0e:1d:60:02:a5:4d: b5:11:1a:72:ff:a1:ca:2b:42:f9:4b:87:31:11:11: e8:91:22:3c:38:12:a5:b8:8b:81:bf:f0:9d:56:9b: ce:25:e2:8b:8d:08:92:85:49:60:88:75:65:72:f0: 8d:6f:44:16:a6:34:f1:18:45:f5:0a:27:2c:68:b3: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.189.128.0/24 104.166.0.0/20 198.54.136.0/22 IPv6: 2604:cd00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7352 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2e:46:d4:9d:04:9e:a0:a7:8a:30:9e:bd:3e:31:f8:26:4d: 7a:e1:3b:20:34:cb:cf:7f:31:07:89:9a:04:f4:2b:d1:a4:fb: e1:a5:fa:ed:10:98:ab:27:b3:26:92:f9:d6:42:ba:3b:15:29: cf:b4:fb:6c:dd:e1:d6:2b:8f:6a:8c:b3:bf:b5:25:73:cd:2d: ec:1e:dc:56:d3:a5:b5:92:85:11:18:8e:a9:c8:6b:55:19:be: 50:07:e4:3e:b0:64:b4:3b:5d:5e:a7:f3:d6:f7:13:9c:64:f9: 7e:99:05:a7:74:fe:b9:2a:64:b2:25:e7:d5:8d:77:eb:f9:2d: e6:f3:95:0d:b4:d2:91:a4:19:97:e9:3a:2e:94:20:d3:a6:38: bd:6b:64:d7:c2:ce:f1:fd:d0:e2:58:93:1f:cf:ac:0d:8b:44: 1d:eb:d8:09:af:32:33:d0:60:09:36:47:44:49:05:83:7e:6d: 8b:32:ed:bd:3e:64:c3:7f:08:cd:f6:88:e9:b7:51:35:62:f4: 99:f4:df:1f:96:3d:50:9d:47:41:3e:35:0f:35:6a:27:00:ca: 4e:76:b9:02:70:29:cc:c5:77:04:6d:34:51:a0:77:6a:7f:43: ac:01:18:7a:ed:30:02:e0:6b:42:b6:00:32:02:55:39:8a:ed: 3e:56:71:a3 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE5owFAtxLCEVwvWeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNjEzMjAwNFoXDTI4MTAwODEzMjAwNFowLzEtMCsGA1UEAxMk MmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra2mES7pcr+CuHCc4qLjFK1yYQ4Rmcfya5Yi VWvnjQJT55T/ojQwYRLTzdNcz1Z0WMha/yL9BDl4L3t4np4m36cw3Gra7+tDtiQv uVe2GmyIQ2DIdCoht62vqZjq1zVDa04CL/ncAdxrf/fOCfAOXyoGn3O3JNNUb3pY Lggo8oRH3VtjKI1xsRx3XSeonNriidi3L1m3uJ5ip1edEO00SIPWKwuV2bUFDhPw aQ8L/HRnMoubxbYDRdSU0jEOHWACpU21ERpy/6HKK0L5S4cxERHokSI8OBKluIuB v/CdVpvOJeKLjQiShUlgiHVlcvCNb0QWpjTxGEX1CicsaLNZ9wIDAQABo4IENTCC BDEwHQYDVR0OBBYEFFLzUB5+QZCEJApZ+cN7UANjWmspMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y ZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzJlMjNmODJiLWRmZDUtNDMyOC04 MjU2LThkN2FiYjg4NmIyMC8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4 ODZiMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXvYADBARopgADBALGNogwDQQCAAIwBwMFACYE zQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICHLgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOS5G1J0EnqCn ijCevT4x+CZNeuE7IDTLz38xB4maBPQr0aT74aX67RCYqyezJpL51kK6OxUpz7T7 bN3h1iuPaoyzv7Ulc80t7B7cVtOltZKFERiOqchrVRm+UAfkPrBktDtdXqfz1vcT nGT5fpkFp3T+uSpksiXn1Y136/kt5vOVDbTSkaQZl+k6LpQg06Y4vWtk18LO8f3Q 4liTH8+sDYtEHevYCa8yM9BgCTZHREkFg35tizLtvT5kw38IzfaI6bdRNWL0mfTf H5Y9UJ1HQT41DzVqJwDKTna5AnApzMV3BG00UaB3an9DrAEYeu0wAuBrQrYAMgJV OYrtPlZxow== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:35 2026 by rpki-client