$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831.cer File: 4e92ac73-1d76-496f-82fd-a279a12fe831.cer (raw, json) Hash identifier: lhc6dl5Amjhla1bHHVo5uvaXVY/+5foYky+InlzQ0AI= Subject key identifier: 6F:3D:6A:33:1D:E7:7B:BB:D9:E2:BC:4A:D4:EF:06:F8:56:26:71:61 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9C90953E8E7516E96CAE2A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/4e92ac73-1d76-496f-82fd-a279a12fe831.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Apr 2026 09:59:00 +0000 Certificate not after: Thu 27 Jul 2028 09:59:00 +0000 Subordinate resources: IP: 23.152.52.0/24 IP: 2602:f47d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:90:95:3e:8e:75:16:e9:6c:ae:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 24 09:59:00 2026 GMT Not After : Jul 27 09:59:00 2028 GMT Subject: CN=4e92ac73-1d76-496f-82fd-a279a12fe831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:a6:4e:a2:e4:b9:56:7e:9d:00:81:aa:b2: f6:bf:42:d4:d1:54:77:af:91:b5:6f:ec:3e:3f:f6: 54:29:e2:48:f9:e7:1b:b7:0f:17:d2:fe:d9:df:05: 44:de:9f:ee:ec:20:7a:f3:31:bd:48:89:b0:07:3a: 02:f6:6b:0d:d1:b7:e7:be:39:8b:4e:b1:82:9f:c7: 94:c5:af:a8:ae:e0:7f:28:c9:5e:75:65:f6:5e:7e: 59:ae:6b:71:cf:14:7c:0a:2b:4a:97:25:49:f3:80: a2:7c:9d:be:1e:59:fe:d1:94:7e:7f:04:ba:33:ab: 68:e3:8f:15:cb:40:a6:5e:85:54:ce:50:ee:0b:a6: 8d:aa:3e:01:75:5e:c3:65:1d:61:eb:56:27:79:e4: 9f:5c:ca:d6:3e:0d:98:0e:c6:00:0b:61:dd:8c:d5: 69:b5:06:10:c1:ad:4e:27:00:de:80:0c:c7:c4:86: e6:f9:46:d4:5d:7f:27:c8:50:9e:30:9a:77:e5:50: dc:45:b7:7c:52:bd:a1:2e:6d:04:a7:0b:db:99:17: 08:14:10:98:d0:fe:44:12:4d:f5:f0:5c:c8:f6:40: 5d:49:6a:9e:d5:92:eb:50:c4:2a:cb:18:ea:eb:c2: ba:6d:14:42:fd:62:03:aa:1c:c5:d9:3f:59:77:d1: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:6A:33:1D:E7:7B:BB:D9:E2:BC:4A:D4:EF:06:F8:56:26:71:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/4e92ac73-1d76-496f-82fd-a279a12fe831.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.152.52.0/24 IPv6: 2602:f47d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:16:d5:33:66:a8:47:15:84:32:79:7d:97:60:0a:a7:67:42: be:dc:bf:fe:1a:e6:ef:4d:ee:72:d8:af:35:95:c5:ad:29:85: 36:58:cd:ec:05:33:3c:1c:f6:99:34:3e:c0:b0:05:98:bf:29: 5e:24:2c:14:e5:c6:94:ce:7e:bf:b3:11:a8:8b:2a:81:2a:80: 3d:1f:ec:de:94:d0:8b:40:47:c0:7c:8c:de:19:a0:cb:72:97: b1:ca:ed:a5:e8:59:27:d1:64:c4:52:67:30:1b:cb:b2:b6:22: e6:68:c5:33:d3:a0:53:c4:08:b0:3c:cd:64:eb:c1:66:2e:da: e7:e2:65:90:9f:ed:f3:3c:26:f8:a1:fb:3a:00:ac:6a:1e:66: 68:91:1d:c1:3b:de:92:25:62:5a:86:da:58:38:1f:dd:1c:2a: 50:13:ef:91:69:54:7e:74:6c:32:e0:55:8f:ed:ad:73:71:52: aa:17:e9:46:ec:a6:e0:db:e3:0c:78:c3:fc:a6:b3:8e:f3:90: fe:2b:eb:af:6a:cd:9e:2a:0b:9b:71:ca:03:f8:ad:61:b4:40: 5f:f8:c4:26:51:a8:e1:96:c4:9e:4e:e4:63:fa:2c:ef:b7:f5: 9b:00:fa:ae:af:7b:e5:e9:10:90:17:8b:18:fe:83:ba:f4:c6: 70:91:06:ae -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE2ckJU+jnUW6WyuKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNDA5NTkwMFoXDTI4MDcyNzA5NTkwMFowLzEtMCsGA1UEAxMk NGU5MmFjNzMtMWQ3Ni00OTZmLTgyZmQtYTI3OWExMmZlODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjSmTqLkuVZ+nQCBqrL2v0LU0VR3r5G1b+w+ P/ZUKeJI+ecbtw8X0v7Z3wVE3p/u7CB68zG9SImwBzoC9msN0bfnvjmLTrGCn8eU xa+oruB/KMledWX2Xn5ZrmtxzxR8CitKlyVJ84CifJ2+Hln+0ZR+fwS6M6to448V y0CmXoVUzlDuC6aNqj4BdV7DZR1h61YneeSfXMrWPg2YDsYAC2HdjNVptQYQwa1O JwDegAzHxIbm+UbUXX8nyFCeMJp35VDcRbd8Ur2hLm0EpwvbmRcIFBCY0P5EEk31 8FzI9kBdSWqe1ZLrUMQqyxjq68K6bRRC/WIDqhzF2T9Zd9FvoQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFG89ajMd53u72eK8StTvBvhWJnFhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 ZTkyYWM3My0xZDc2LTQ5NmYtODJmZC1hMjc5YTEyZmU4MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzRlOTJhYzczLTFkNzYtNDk2Zi04 MmZkLWEyNzlhMTJmZTgzMS80ZTkyYWM3My0xZDc2LTQ5NmYtODJmZC1hMjc5YTEy ZmU4MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmDQwDgQCAAIwCAMGACYC9H0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEkW1TNmqEcVhDJ5fZdgCqdnQr7cv/4a5u9N7nLYrzWVxa0phTZYzewFMzwc9pk0 PsCwBZi/KV4kLBTlxpTOfr+zEaiLKoEqgD0f7N6U0ItAR8B8jN4ZoMtyl7HK7aXo WSfRZMRSZzAby7K2IuZoxTPToFPECLA8zWTrwWYu2ufiZZCf7fM8Jvih+zoArGoe ZmiRHcE73pIlYlqG2lg4H90cKlAT75FpVH50bDLgVY/trXNxUqoX6UbspuDb4wx4 w/yms47zkP4r669qzZ4qC5txygP4rWG0QF/4xCZRqOGWxJ5O5GP6LO+39ZsA+q6v e+XpEJAXixj+g7r0xnCRBq4= -----END CERTIFICATE-----Generated at Wed Apr 29 00:02:12 2026 by rpki-client