$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163.cer File: 486c86fe-953b-43e7-8b81-bd76e3514163.cer (raw, json) Hash identifier: 4pD8Hgu9FreOmUTJs8wfX6QnFTo5e3HABX8u7NaUOMc= Subject key identifier: 7B:74:D0:55:7B:E5:7A:CF:AA:9C:9F:E3:80:0E:15:0E:79:1D:99:FF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D982E94168D1915F7287AAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 20:18:18 +0000 Certificate not after: Tue 25 Jul 2028 20:18:18 +0000 Subordinate resources: AS: 19669 IP: 23.135.108.0/24 IP: 2604:560::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:2e:94:16:8d:19:15:f7:28:7a:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 22 20:18:18 2026 GMT Not After : Jul 25 20:18:18 2028 GMT Subject: CN=486c86fe-953b-43e7-8b81-bd76e3514163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:46:78:71:9f:3d:10:b6:c5:54:97:72:3d: ca:52:bb:b4:a2:b2:1d:33:38:9b:6d:3b:b1:e4:c8: bb:5d:54:96:48:00:8a:13:b2:08:ea:02:5f:6b:c3: e4:75:e4:37:bc:2f:00:4f:69:9f:ea:31:31:6a:cd: 5b:23:01:fd:1c:49:7d:13:b1:71:11:25:65:c4:d8: 44:85:4f:08:ad:a9:5e:45:0d:1d:1b:f0:c2:70:07: 4f:d7:e3:0d:c9:68:a5:2e:79:7c:b7:ab:00:70:d3: 3d:57:52:42:36:72:60:7a:50:e6:21:d7:bc:7a:58: 2c:2a:70:69:ef:06:16:53:07:1b:02:4b:13:3d:70: b5:ee:db:2e:99:1d:99:c9:2d:aa:ef:b2:51:68:52: bc:a1:a4:b1:ae:5a:83:4a:df:7e:c0:aa:9a:8e:f5: 07:12:6a:7a:27:f2:31:8a:df:95:b5:79:5d:9b:e6: aa:5f:b6:f9:54:ab:e8:59:5c:e2:62:9b:41:bf:62: a3:36:4c:73:9f:fa:02:d1:62:e5:ce:5f:45:e1:43: 88:e0:f9:85:d6:53:88:70:40:21:ad:06:b9:6e:4e: d8:67:7e:6d:f2:9c:98:bf:89:56:35:d3:81:63:cd: 96:e5:88:22:2f:db:d8:c1:4a:5e:1c:fa:f5:c8:1c: cd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:74:D0:55:7B:E5:7A:CF:AA:9C:9F:E3:80:0E:15:0E:79:1D:99:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/486c86fe-953b-43e7-8b81-bd76e3514163/486c86fe-953b-43e7-8b81-bd76e3514163.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.135.108.0/24 IPv6: 2604:560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19669 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:56:b2:c9:68:52:57:88:e6:9c:7a:8d:1c:97:c0:aa:9f:4a: cb:09:d6:9c:7a:51:d3:e1:4a:ba:bb:e2:44:8d:08:8d:f5:d7: 38:79:2f:2b:50:d1:eb:8b:d2:d5:ea:55:1c:14:f2:5e:9a:40: 3e:e1:f0:5e:d0:81:45:43:9b:cb:1e:ba:11:5e:c4:53:f9:d7: 7e:67:ff:5d:5c:e6:06:4d:95:e0:c3:9f:31:46:15:94:0b:d5: 08:18:db:6a:57:ce:49:ac:9d:1c:36:22:68:1d:a5:9e:0f:74: ad:02:28:86:35:e6:1d:df:a6:b4:20:2f:a6:8e:bd:ec:a2:90: 26:d1:33:a7:36:28:c8:90:b3:d5:7c:3a:0e:32:4b:e8:58:e7: 30:bf:54:17:ca:1f:57:99:23:72:6f:be:c1:68:6e:44:45:a6: a3:fa:56:3e:95:16:86:ca:d5:a2:53:2c:d8:af:da:44:7b:aa: a1:18:76:3a:2c:c7:0c:79:8e:10:9b:c8:d6:02:90:b5:34:bf: f2:35:9a:38:a5:50:50:29:7f:fe:ca:3c:3d:cd:8e:65:06:4d: 24:fd:2a:c9:46:65:09:2e:52:26:4c:cc:4c:fd:81:db:68:77: 83:15:74:b1:43:ef:1a:83:bc:1d:d4:55:09:bc:2e:8a:2f:20: 2d:7e:e3:8d -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE2YLpQWjRkV9yh6qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMjIwMTgxOFoXDTI4MDcyNTIwMTgxOFowLzEtMCsGA1UEAxMk NDg2Yzg2ZmUtOTUzYi00M2U3LThiODEtYmQ3NmUzNTE0MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFNGeHGfPRC2xVSXcj3KUru0orIdMzibbTux 5Mi7XVSWSACKE7II6gJfa8PkdeQ3vC8AT2mf6jExas1bIwH9HEl9E7FxESVlxNhE hU8IraleRQ0dG/DCcAdP1+MNyWilLnl8t6sAcNM9V1JCNnJgelDmIde8elgsKnBp 7wYWUwcbAksTPXC17tsumR2ZyS2q77JRaFK8oaSxrlqDSt9+wKqajvUHEmp6J/Ix it+VtXldm+aqX7b5VKvoWVziYptBv2KjNkxzn/oC0WLlzl9F4UOI4PmF1lOIcEAh rQa5bk7YZ35t8pyYv4lWNdOBY82W5YgiL9vYwUpeHPr1yBzN4wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFHt00FV75XrPqpyf44AOFQ55HZn/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 ODZjODZmZS05NTNiLTQzZTctOGI4MS1iZDc2ZTM1MTQxNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ4NmM4NmZlLTk1M2ItNDNlNy04 YjgxLWJkNzZlMzUxNDE2My80ODZjODZmZS05NTNiLTQzZTctOGI4MS1iZDc2ZTM1 MTQxNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXh2wwDQQCAAIwBwMFACYEBWAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICTNUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIFayyWhSV4jmnHqNHJfAqp9KywnW nHpR0+FKurviRI0IjfXXOHkvK1DR64vS1epVHBTyXppAPuHwXtCBRUObyx66EV7E U/nXfmf/XVzmBk2V4MOfMUYVlAvVCBjbalfOSaydHDYiaB2lng90rQIohjXmHd+m tCAvpo697KKQJtEzpzYoyJCz1Xw6DjJL6FjnML9UF8ofV5kjcm++wWhuREWmo/pW PpUWhsrVolMs2K/aRHuqoRh2OizHDHmOEJvI1gKQtTS/8jWaOKVQUCl//so8Pc2O ZQZNJP0qyUZlCS5SJkzMTP2B22h3gxV0sUPvGoO8HdRVCbwuii8gLX7jjQ== -----END CERTIFICATE-----Generated at Mon Apr 27 14:23:46 2026 by rpki-client