$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd.cer File: 3d677108-5bec-47ac-8782-e1b85707e0dd.cer (raw, json) Hash identifier: 8d3dchBxkUv14NrBn8aOZ5HSY+BXkPvdWnyJUltt3LE= Subject key identifier: C3:96:08:F5:A0:63:43:E1:0D:84:7B:50:F8:8D:D5:4E:31:23:1B:A3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F66D31FA9F78FB2D12C98CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/3d677108-5bec-47ac-8782-e1b85707e0dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 13:33:17 +0000 Certificate not after: Wed 23 Aug 2028 15:06:04 +0000 Subordinate resources: AS: 402537 IP: 204.138.145.0/24 IP: 2602:f3b5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:d3:1f:a9:f7:8f:b2:d1:2c:98:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 5 13:33:17 2026 GMT Not After : Aug 23 15:06:04 2028 GMT Subject: CN=3d677108-5bec-47ac-8782-e1b85707e0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:0b:36:dd:d6:62:c5:e2:18:7b:9a:74:f0: a0:ee:a2:64:66:c9:d4:0f:57:e0:da:0f:9a:ea:87: 74:bd:c7:83:d0:69:b4:c3:91:60:e3:e6:a7:38:42: e1:e9:a4:75:0a:c8:a5:4f:c9:a3:69:0e:2d:9c:d0: 7a:b1:69:d9:41:e4:d3:0c:57:75:0e:8b:a1:4c:ac: 74:ba:8a:1f:28:34:66:8b:2f:92:f8:e1:e9:b1:e8: 61:38:98:2b:83:d0:a3:cc:d6:39:35:f4:15:a0:e6: 32:57:94:1c:d7:1b:ba:84:51:9c:1d:bf:0b:8b:c0: ff:7c:4e:33:dd:07:28:9c:21:d7:7a:ec:11:61:9b: 96:ed:9e:91:3c:02:ae:86:7d:76:f2:00:a9:1a:bb: e3:37:6a:cd:dc:d6:56:cf:c8:9e:b2:09:ac:8f:dc: 41:f6:98:4b:47:31:36:37:36:a8:75:e9:3b:6d:15: e3:88:c4:2c:b7:03:5e:ff:db:67:39:be:7f:0e:cf: 88:6a:2e:ea:5b:49:52:14:85:7c:02:67:db:c6:f4: 4e:07:2d:f7:ef:2c:73:ed:38:ee:63:11:54:16:72: f0:65:56:ff:67:2f:d3:31:73:89:6b:96:d3:f1:da: aa:ef:34:b8:fd:f0:58:a6:eb:a0:07:ba:e3:44:b6: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:08:F5:A0:63:43:E1:0D:84:7B:50:F8:8D:D5:4E:31:23:1B:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/3d677108-5bec-47ac-8782-e1b85707e0dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 204.138.145.0/24 IPv6: 2602:f3b5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402537 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:28:1d:22:5a:5c:97:bc:6d:ed:0c:23:db:47:0f:b8:a1:9e: d3:37:5f:b0:fb:36:34:03:bf:b9:6c:9d:06:a4:22:eb:b7:5e: 73:de:44:f9:05:62:2e:28:ff:06:d9:db:d6:49:f7:51:3f:49: 17:d8:cd:08:e1:5d:ad:8a:3d:02:48:28:2d:e3:c5:c7:56:ee: 22:9e:ef:80:52:e6:77:e3:66:6c:b9:99:fa:34:35:48:1e:8f: bf:39:f3:00:c4:33:24:1e:04:67:dc:dd:27:99:3b:6e:a1:41: 1d:ea:4d:d5:09:6c:b5:ff:e2:df:f6:7d:67:ac:00:58:a8:66: 5e:77:b2:af:fd:9f:a4:f7:c2:5f:ad:30:d6:d1:e3:cf:91:2d: 30:f3:39:8a:24:3f:e1:c7:c2:1d:8b:9a:e9:c9:a7:d6:7b:48: d3:7f:aa:ac:65:c7:ec:f5:5a:e0:e9:9c:aa:89:16:a8:58:88: 1c:76:45:f4:b3:ac:11:50:5e:6e:bc:ce:ff:d5:06:87:16:89: de:ed:af:7d:49:e0:10:ac:a8:f6:b5:eb:37:c6:72:a6:54:50: 1f:e8:b3:53:6a:0a:a6:c9:3c:d6:e8:dc:aa:0e:20:92:82:df: 2c:e5:f1:1e:0f:fd:22:a2:47:a9:3d:f4:7d:09:ed:4d:56:8a: 0a:52:49:cd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9m0x+p94+y0SyYy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNTEzMzMxN1oXDTI4MDgyMzE1MDYwNFowLzEtMCsGA1UEAxMk M2Q2NzcxMDgtNWJlYy00N2FjLTg3ODItZTFiODU3MDdlMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs4LNt3WYsXiGHuadPCg7qJkZsnUD1fg2g+a 6od0vceD0Gm0w5Fg4+anOELh6aR1CsilT8mjaQ4tnNB6sWnZQeTTDFd1DouhTKx0 uoofKDRmiy+S+OHpsehhOJgrg9CjzNY5NfQVoOYyV5Qc1xu6hFGcHb8Li8D/fE4z 3QconCHXeuwRYZuW7Z6RPAKuhn128gCpGrvjN2rN3NZWz8iesgmsj9xB9phLRzE2 Nzaodek7bRXjiMQstwNe/9tnOb5/Ds+Iai7qW0lSFIV8AmfbxvROBy337yxz7Tju YxFUFnLwZVb/Zy/TMXOJa5bT8dqq7zS4/fBYpuugB7rjRLY2ZQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMOWCPWgY0PhDYR7UPiN1U4xIxujMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z ZDY3NzEwOC01YmVjLTQ3YWMtODc4Mi1lMWI4NTcwN2UwZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzNkNjc3MTA4LTViZWMtNDdhYy04 NzgyLWUxYjg1NzA3ZTBkZC8zZDY3NzEwOC01YmVjLTQ3YWMtODc4Mi1lMWI4NTcw N2UwZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADMipEwDgQCAAIwCAMGACYC87UAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkaTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASKB0iWlyXvG3tDCPbRw+4oZ7T N1+w+zY0A7+5bJ0GpCLrt15z3kT5BWIuKP8G2dvWSfdRP0kX2M0I4V2tij0CSCgt 48XHVu4inu+AUuZ342ZsuZn6NDVIHo+/OfMAxDMkHgRn3N0nmTtuoUEd6k3VCWy1 /+Lf9n1nrABYqGZed7Kv/Z+k98JfrTDW0ePPkS0w8zmKJD/hx8Idi5rpyafWe0jT f6qsZcfs9Vrg6ZyqiRaoWIgcdkX0s6wRUF5uvM7/1QaHFone7a99SeAQrKj2tes3 xnKmVFAf6LNTagqmyTzW6NyqDiCSgt8s5fEeD/0iokepPfR9Ce1NVooKUknN -----END CERTIFICATE-----Generated at Tue Oct 20 18:23:42 2026 by rpki-client