$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43.cer File: 3f710d44-4a34-4e9d-af9f-8179f05b2c43.cer (raw, json) Hash identifier: S//GETEG5vnQu7pX0dIGvVcKCRPQd2r8VV8+APONpyE= Subject key identifier: D3:38:92:33:28:E9:3C:25:6C:D7:CB:B3:B0:E5:2D:6C:D8:AD:88:6E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5A28C30FFA329928194C380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/3f710d44-4a34-4e9d-af9f-8179f05b2c43.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 14:09:12 +0000 Certificate not after: Tue 22 Aug 2028 14:09:12 +0000 Subordinate resources: AS: 402515 IP: 23.158.140.0/24 IP: 2602:f3c1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:a2:8c:30:ff:a3:29:92:81:94:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 14:09:12 2026 GMT Not After : Aug 22 14:09:12 2028 GMT Subject: CN=3f710d44-4a34-4e9d-af9f-8179f05b2c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:05:85:d4:f5:3b:6b:d6:b1:c8:60:ca:a2: 10:d1:68:f8:68:31:93:1c:d9:e8:4b:90:aa:27:a5: ed:3d:22:89:fc:50:a3:ea:ba:e6:e7:e0:d9:4d:a8: 0d:83:2d:9e:9d:88:9d:a8:bd:73:80:96:4f:81:c6: 4b:97:ca:b3:66:91:ed:1a:b1:12:69:18:95:19:09: ac:98:57:b2:4a:19:8c:5a:56:1b:fc:c2:b0:04:16: 0c:8f:1f:2d:a3:1e:37:43:c1:f2:bb:32:1a:5a:23: 2c:f8:a5:12:2c:09:d3:b1:48:18:2c:da:ec:99:87: bf:8f:0f:66:28:9c:ea:41:70:57:51:95:e1:24:37: 50:7b:61:c4:b6:1b:ab:73:1e:1e:7c:fd:bd:77:c3: a1:96:a7:04:b2:a5:29:63:77:ae:55:10:1a:fe:d7: 62:75:81:0a:05:a9:9e:a2:f5:67:ae:f6:ec:9c:d0: 97:95:a2:81:88:a2:d2:06:a7:86:28:3d:4f:6f:33: f7:d1:9e:22:96:4f:7a:6e:4d:94:7a:5e:0e:f7:0f: 59:8e:97:3b:9d:7f:69:42:6f:25:c3:33:9f:e1:47: a5:75:06:0a:8b:a2:2f:9b:c2:28:d3:56:44:62:ce: aa:1e:f2:da:36:43:f0:92:b5:97:30:98:0b:e9:b1: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:38:92:33:28:E9:3C:25:6C:D7:CB:B3:B0:E5:2D:6C:D8:AD:88:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f710d44-4a34-4e9d-af9f-8179f05b2c43/3f710d44-4a34-4e9d-af9f-8179f05b2c43.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.158.140.0/24 IPv6: 2602:f3c1::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402515 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:13:3b:17:05:1a:c5:80:27:51:46:a6:06:21:84:14:9c:5a: 43:b4:2a:8b:2b:17:b4:73:c8:8b:a8:ba:0a:7f:27:53:ab:f6: 09:c0:4e:f0:c9:1c:d2:86:5f:6f:17:55:8d:64:aa:d8:48:e7: 06:51:c9:47:45:7e:cc:ce:15:e2:87:ca:8b:7b:07:1b:6f:fb: d5:6e:ae:82:73:cf:88:88:fa:e2:3e:69:13:fb:69:f7:b9:c9: d9:6b:8b:eb:30:ca:bc:fb:8c:db:05:45:ba:3f:96:d9:49:d1: 95:3c:54:ce:58:73:e7:c4:b5:da:5b:3e:3a:15:18:32:70:a3: 62:ea:f7:1c:78:d8:12:be:f6:21:c7:20:73:89:e6:fd:54:e8: 26:0e:7d:78:b7:e5:70:a8:6b:5a:1f:27:46:e2:7f:e0:48:21: 8c:3c:36:20:07:5b:f3:ab:47:6a:8f:07:f9:12:a0:27:c3:ff: bb:0e:7d:5d:71:b4:ce:8d:1c:e8:70:30:6d:64:a8:1b:ef:f8: c3:f6:b0:33:8a:53:6a:d8:be:59:b2:38:3e:2e:65:66:da:36: 2d:5a:2b:4c:ea:15:93:09:d3:dd:c0:6b:d9:20:0f:f0:20:d8: 01:7b:46:f3:37:b1:0d:82:08:88:d2:01:20:6e:e4:fc:e6:77: 71:13:3e:b3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3looww/6MpkoGUw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE0MDkxMloXDTI4MDgyMjE0MDkxMlowLzEtMCsGA1UEAxMk M2Y3MTBkNDQtNGEzNC00ZTlkLWFmOWYtODE3OWYwNWIyYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXIFhdT1O2vWschgyqIQ0Wj4aDGTHNnoS5Cq J6XtPSKJ/FCj6rrm5+DZTagNgy2enYidqL1zgJZPgcZLl8qzZpHtGrESaRiVGQms mFeyShmMWlYb/MKwBBYMjx8tox43Q8HyuzIaWiMs+KUSLAnTsUgYLNrsmYe/jw9m KJzqQXBXUZXhJDdQe2HEthurcx4efP29d8OhlqcEsqUpY3euVRAa/tdidYEKBame ovVnrvbsnNCXlaKBiKLSBqeGKD1PbzP30Z4ilk96bk2Uel4O9w9Zjpc7nX9pQm8l wzOf4UeldQYKi6Ivm8Io01ZEYs6qHvLaNkPwkrWXMJgL6bF2YwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNM4kjMo6TwlbNfLs7DlLWzYrYhuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z ZjcxMGQ0NC00YTM0LTRlOWQtYWY5Zi04MTc5ZjA1YjJjNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzNmNzEwZDQ0LTRhMzQtNGU5ZC1h ZjlmLTgxNzlmMDViMmM0My8zZjcxMGQ0NC00YTM0LTRlOWQtYWY5Zi04MTc5ZjA1 YjJjNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnowwDgQCAAIwCAMGACYC88EAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnEzsXBRrFgCdRRqYGIYQUnFpD tCqLKxe0c8iLqLoKfydTq/YJwE7wyRzShl9vF1WNZKrYSOcGUclHRX7MzhXih8qL ewcbb/vVbq6Cc8+IiPriPmkT+2n3ucnZa4vrMMq8+4zbBUW6P5bZSdGVPFTOWHPn xLXaWz46FRgycKNi6vcceNgSvvYhxyBzieb9VOgmDn14t+VwqGtaHydG4n/gSCGM PDYgB1vzq0dqjwf5EqAnw/+7Dn1dcbTOjRzocDBtZKgb7/jD9rAzilNq2L5Zsjg+ LmVm2jYtWitM6hWTCdPdwGvZIA/wINgBe0bzN7ENggiI0gEgbuT85ndxEz6z -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:40 2026 by rpki-client