$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer File: 31737d94-3b81-41f9-b1fb-fbdeacfc665a.cer (raw, json) Hash identifier: ahnVeKXJE8ab7pZ/8wvb1E21rk3npWGSTQRH5ku2c9o= Subject key identifier: 64:16:61:31:56:4D:3B:26:BC:59:4C:81:89:7D:A2:8A:C2:C5:A7:CC Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F66E2011030559FA6302F0140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 14:03:16 +0000 Certificate not after: Wed 16 Aug 2028 01:13:01 +0000 Subordinate resources: AS: 402495 IP: 23.158.100.0/24 IP: 198.134.180.0/24 IP: 2602:f3c7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:e2:01:10:30:55:9f:a6:30:2f:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 5 14:03:16 2026 GMT Not After : Aug 16 01:13:01 2028 GMT Subject: CN=31737d94-3b81-41f9-b1fb-fbdeacfc665a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:8b:28:c6:78:ca:3d:fb:7a:e0:9e:82:26: 76:ca:4c:7a:44:bc:53:a9:64:e9:eb:6b:b9:51:98: b1:11:df:23:94:68:71:c2:a4:2c:9f:ca:77:84:34: b9:af:4f:cd:7e:43:8c:f5:c2:55:b8:0b:02:ed:98: 73:43:6b:d0:22:7f:7f:93:71:e4:87:73:75:c6:1b: fd:19:58:f1:5f:21:df:01:f0:b8:06:20:58:4e:0b: bd:9b:27:ad:da:c2:12:5a:64:5f:4f:27:d5:c9:c4: 31:83:48:b4:be:d5:55:72:da:89:a3:ce:ff:12:48: 45:78:a4:48:0a:f2:fe:a1:49:7d:d3:b3:38:82:97: 61:a7:14:e5:55:64:00:4f:17:78:42:e0:ef:7d:46: a3:55:fa:53:13:6e:4a:12:7e:9b:e8:7b:36:91:3d: 89:31:b5:f7:53:3b:bf:83:c9:02:e8:21:15:b1:0e: 8e:d5:12:50:a4:78:ac:e1:d8:b2:0f:d8:fb:c6:00: 80:7c:4c:12:5f:68:89:d2:3c:60:4d:87:d8:c6:a2: b9:21:91:f4:f2:2a:d4:51:06:44:14:ba:28:38:1d: 29:0a:fa:35:bc:6b:fd:56:24:2b:5e:3e:97:5a:77: c8:9c:30:27:8f:2a:a0:01:6a:b0:a1:85:0e:22:b4: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:16:61:31:56:4D:3B:26:BC:59:4C:81:89:7D:A2:8A:C2:C5:A7:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31737d94-3b81-41f9-b1fb-fbdeacfc665a/31737d94-3b81-41f9-b1fb-fbdeacfc665a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.158.100.0/24 198.134.180.0/24 IPv6: 2602:f3c7::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402495 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7c:48:c5:77:9a:2b:ff:76:2d:c8:c0:26:0a:84:09:5f:c8: eb:ae:4b:e8:f3:db:f6:37:f3:df:1c:61:4f:62:28:3e:08:77: 9b:f6:4e:00:ee:1d:cd:a8:07:25:88:dc:fa:7c:10:e9:87:c8: ac:ad:96:8a:ce:18:43:e7:13:bd:2a:56:fe:e9:c1:46:15:2b: 8a:d2:48:1f:78:62:71:9f:08:70:2c:38:12:d9:19:df:ac:07: e0:4e:cf:b4:4a:cd:39:9d:a6:0c:62:14:e4:63:38:5a:08:2a: c0:a1:b1:c9:af:f1:ee:a0:cc:1b:a3:a4:d3:e5:5d:42:b2:b3: 0e:8c:83:b8:20:d8:ec:e2:df:d8:9b:c4:23:f3:d8:d1:0b:d9: c4:df:81:dd:8a:ad:63:50:35:48:00:ee:54:a3:bb:4c:6d:09: 31:4b:e7:9b:52:47:82:d0:50:fa:a8:52:a8:1f:a9:4a:8e:5b: 6d:0a:cb:c5:ee:17:1c:f1:db:18:a9:7c:aa:ff:4f:73:63:7c: a9:dd:4c:57:8a:ab:21:f9:49:ad:1b:62:84:04:88:27:cd:93: 54:ab:d0:27:72:0d:df:5c:a0:26:b7:69:59:7a:21:8f:52:0a: 6e:16:57:69:89:1d:54:3d:c1:9a:97:5e:86:96:4e:84:b3:11: 55:c5:ea:8b -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9m4gEQMFWfpjAvAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNTE0MDMxNloXDTI4MDgxNjAxMTMwMVowLzEtMCsGA1UEAxMk MzE3MzdkOTQtM2I4MS00MWY5LWIxZmItZmJkZWFjZmM2NjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOaLKMZ4yj37euCegiZ2ykx6RLxTqWTp62u5 UZixEd8jlGhxwqQsn8p3hDS5r0/NfkOM9cJVuAsC7ZhzQ2vQIn9/k3Hkh3N1xhv9 GVjxXyHfAfC4BiBYTgu9myet2sISWmRfTyfVycQxg0i0vtVVctqJo87/EkhFeKRI CvL+oUl907M4gpdhpxTlVWQATxd4QuDvfUajVfpTE25KEn6b6Hs2kT2JMbX3Uzu/ g8kC6CEVsQ6O1RJQpHis4diyD9j7xgCAfEwSX2iJ0jxgTYfYxqK5IZH08irUUQZE FLooOB0pCvo1vGv9ViQrXj6XWnfInDAnjyqgAWqwoYUOIrSbGQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFGQWYTFWTTsmvFlMgYl9oorCxafMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z MTczN2Q5NC0zYjgxLTQxZjktYjFmYi1mYmRlYWNmYzY2NWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzMxNzM3ZDk0LTNiODEtNDFmOS1i MWZiLWZiZGVhY2ZjNjY1YS8zMTczN2Q5NC0zYjgxLTQxZjktYjFmYi1mYmRlYWNm YzY2NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXnmQDBADGhrQwDgQCAAIwCAMGACYC88cAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYkPzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1fEjFd5or/3YtyMAm CoQJX8jrrkvo89v2N/PfHGFPYig+CHeb9k4A7h3NqAcliNz6fBDph8isrZaKzhhD 5xO9Klb+6cFGFSuK0kgfeGJxnwhwLDgS2RnfrAfgTs+0Ss05naYMYhTkYzhaCCrA obHJr/HuoMwbo6TT5V1CsrMOjIO4INjs4t/Ym8Qj89jRC9nE34Hdiq1jUDVIAO5U o7tMbQkxS+ebUkeC0FD6qFKoH6lKjlttCsvF7hcc8dsYqXyq/09zY3yp3UxXiqsh +UmtG2KEBIgnzZNUq9Ancg3fXKAmt2lZeiGPUgpuFldpiR1UPcGal16Glk6EsxFV xeqL -----END CERTIFICATE-----Generated at Sat Oct 24 00:33:05 2026 by rpki-client