$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer File: 4965f432-2d7f-4618-aa63-bb50ab54c527.cer (raw, json) Hash identifier: KS5aahhdtHbmi1kawqBo54LLrGlVD8uf96LieDvTl48= Subject key identifier: 83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAE3B2D32D4D330991A1BC3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 17:51:28 +0000 Certificate not after: Wed 02 Aug 2028 17:51:28 +0000 Subordinate resources: AS: 396879 IP: 23.134.32.0/24 IP: 2604:d040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:3b:2d:32:d4:d3:30:99:1a:1b:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 30 17:51:28 2026 GMT Not After : Aug 2 17:51:28 2028 GMT Subject: CN=4965f432-2d7f-4618-aa63-bb50ab54c527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:b9:e8:40:38:4a:ac:ca:bf:39:9a:db:c5: 5b:5a:f3:8f:67:18:7f:13:98:00:0d:ac:ec:87:59: 5f:52:3f:a0:e8:b3:79:42:eb:5a:be:e6:a6:46:43: a6:54:de:5e:60:e1:2a:89:64:7a:22:c0:76:f0:f5: 54:7e:91:be:49:7a:b1:7d:3a:03:00:c1:06:20:11: 8a:f8:cc:35:df:a7:a0:85:f1:df:f9:c7:fa:98:a7: 93:da:72:17:cc:6f:9f:9f:6c:a6:63:2e:24:e6:72: 32:db:34:cf:17:96:b6:3e:dc:fa:e6:3b:ab:12:c4: 02:a5:23:e2:32:75:22:fd:75:be:f7:fe:03:f9:60: af:07:3d:b2:78:94:ab:f8:d3:cd:eb:06:4a:6c:3d: f8:a4:11:56:c0:e9:99:d6:ee:95:5c:d8:f6:61:45: bb:ea:f1:56:a6:37:8d:59:d7:c5:ce:55:9c:49:55: 98:8a:55:ce:47:ac:26:46:79:1f:89:55:47:6f:6e: 54:c8:2c:cf:26:a7:c0:74:3b:2b:74:82:70:92:d0: db:00:b8:0e:ea:3b:72:ba:94:39:8e:a9:71:5e:7b: b2:e8:ce:fe:13:e2:aa:5c:e0:c1:74:20:6c:12:8a: 8c:b7:e2:38:0d:fc:53:1a:e4:e5:4f:3c:1b:56:48: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.134.32.0/24 IPv6: 2604:d040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396879 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0d:da:55:75:1e:69:35:9b:b3:96:07:9c:5e:04:8a:a0:7a: 13:72:e1:ce:33:a9:7b:9f:eb:d9:84:ed:04:f3:93:74:2b:c5: 17:29:74:3d:17:ad:04:93:2f:7f:eb:4f:fc:8a:59:ef:a5:df: f7:66:f8:3f:d2:ee:3b:ea:66:59:d4:b8:3a:9a:86:49:31:5c: 27:fb:cb:c2:73:d6:be:a4:29:1d:57:e5:a7:ba:d6:e5:6f:89: 7f:56:a7:62:1b:ff:7a:ad:6d:d6:7d:3b:b7:1c:86:7c:11:af: 31:dd:b9:04:eb:74:76:3b:68:1b:9b:18:6b:20:ba:dd:ad:86: 58:f5:8c:6d:e3:84:77:22:4d:77:ca:fe:22:80:c5:c2:8c:5d: 2b:f0:e2:61:5f:88:1d:04:a2:32:f2:8a:97:b0:8d:cc:81:c7: 10:37:ca:88:cd:44:61:f0:82:0e:4b:cc:f7:c4:33:5d:28:4c: 86:85:d0:4a:2e:5b:6d:12:df:c7:e8:e8:ea:cb:19:79:ad:6e: d6:8b:0a:3e:f5:69:59:ce:e5:2d:09:b1:59:ec:67:4a:92:1f: 4d:ac:e7:c2:de:84:21:13:a8:88:1d:fe:6b:f0:e9:21:84:51: d7:d9:83:e6:05:93:98:67:5d:8f:39:67:8e:33:ab:d4:58:44: 93:bb:0f:cc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2uOy0y1NMwmRobw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQzMDE3NTEyOFoXDTI4MDgwMjE3NTEyOFowLzEtMCsGA1UEAxMk NDk2NWY0MzItMmQ3Zi00NjE4LWFhNjMtYmI1MGFiNTRjNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoK56EA4SqzKvzma28VbWvOPZxh/E5gADazs h1lfUj+g6LN5QutavuamRkOmVN5eYOEqiWR6IsB28PVUfpG+SXqxfToDAMEGIBGK +Mw136eghfHf+cf6mKeT2nIXzG+fn2ymYy4k5nIy2zTPF5a2Ptz65jurEsQCpSPi MnUi/XW+9/4D+WCvBz2yeJSr+NPN6wZKbD34pBFWwOmZ1u6VXNj2YUW76vFWpjeN WdfFzlWcSVWYilXOR6wmRnkfiVVHb25UyCzPJqfAdDsrdIJwktDbALgO6jtyupQ5 jqlxXnuy6M7+E+KqXODBdCBsEoqMt+I4DfxTGuTlTzwbVkgl6wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIORytKFFgYrv/vSPHfniDm3XZ4JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 OTY1ZjQzMi0yZDdmLTQ2MTgtYWE2My1iYjUwYWI1NGM1MjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ5NjVmNDMyLTJkN2YtNDYxOC1h YTYzLWJiNTBhYjU0YzUyNy80OTY1ZjQzMi0yZDdmLTQ2MTgtYWE2My1iYjUwYWI1 NGM1MjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXhiAwDQQCAAIwBwMFACYE0EAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg5PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGYN2lV1Hmk1m7OWB5xeBIqgehNy 4c4zqXuf69mE7QTzk3QrxRcpdD0XrQSTL3/rT/yKWe+l3/dm+D/S7jvqZlnUuDqa hkkxXCf7y8Jz1r6kKR1X5ae61uVviX9Wp2Ib/3qtbdZ9O7cchnwRrzHduQTrdHY7 aBubGGsgut2thlj1jG3jhHciTXfK/iKAxcKMXSvw4mFfiB0EojLyipewjcyBxxA3 yojNRGHwgg5LzPfEM10oTIaF0EouW20S38fo6OrLGXmtbtaLCj71aVnO5S0JsVns Z0qSH02s58LehCETqIgd/mvw6SGEUdfZg+YFk5hnXY85Z44zq9RYRJO7D8w= -----END CERTIFICATE-----Generated at Sat May 9 21:51:33 2026 by rpki-client