$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.cer File: 547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.cer (raw, json) Hash identifier: OF5g4ijCzbui7QFS/GCw1H0WGyyzDLJlhF2kGJEthVE= Subject key identifier: 41:C3:10:8E:BE:65:4A:04:1C:07:E7:96:CC:27:DE:20:FF:A7:E1:63 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5C8B07F42DBED1654933680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 15:26:03 +0000 Certificate not after: Tue 22 Aug 2028 15:26:03 +0000 Subordinate resources: AS: 402267 IP: 23.154.108.0/24 IP: 2602:f435::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:c8:b0:7f:42:db:ed:16:54:93:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 15:26:03 2026 GMT Not After : Aug 22 15:26:03 2028 GMT Subject: CN=547bc71b-c4e4-4a73-8d12-8d76dde4f0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:a0:07:cf:6a:b9:aa:37:93:76:24:40:b6: 8b:cc:4a:83:57:e4:e1:10:5a:6c:3b:ee:cf:ce:6a: e9:ea:3c:d5:9f:7d:da:75:a3:be:59:6f:39:f4:ca: 68:4e:e5:1b:8b:d3:e3:bd:fd:8b:f8:45:16:c3:fe: 8a:d4:88:4a:e1:79:e5:6f:53:93:76:6e:19:2b:38: 66:e3:c3:a1:5b:8e:58:0b:12:b9:69:ba:39:2c:33: 56:69:bb:d2:20:0c:8c:53:ee:85:50:5b:f8:79:fd: eb:4e:05:1d:e3:6f:7f:c4:4e:cb:4b:9f:31:ca:c1: 8f:e1:1d:53:8a:b3:ed:ad:6a:d9:59:dd:b9:1f:9e: 5d:fe:c5:f1:37:92:46:03:d6:f9:d0:60:2b:dc:ed: 5e:aa:a3:04:96:43:db:2d:e6:0b:59:a0:f6:9e:5e: 1e:1e:28:cf:1b:64:9d:ee:6c:ed:93:10:28:f4:c1: c9:a9:82:c4:21:cc:ae:35:a6:b8:77:8e:a8:00:ca: cb:ef:06:b0:c2:46:19:5d:f0:78:12:da:2a:e3:3a: 1c:9c:2b:40:94:74:3b:39:4a:2a:04:44:b4:51:6c: b0:8b:08:e7:0f:27:63:40:3f:d2:86:2c:b5:5d:73: 8c:d1:ad:4a:9e:01:3c:1a:27:1a:b4:c2:ed:e1:07: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C3:10:8E:BE:65:4A:04:1C:07:E7:96:CC:27:DE:20:FF:A7:E1:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.108.0/24 IPv6: 2602:f435::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402267 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:02:6b:35:f1:10:db:a0:ac:69:b2:38:1c:af:f7:90:27:27: 4a:6e:38:15:8e:19:be:0a:fd:f0:1f:84:c8:e0:9a:07:54:69: de:5e:a2:4d:b1:14:81:20:2d:bb:71:e2:18:79:25:b9:fd:fa: 37:fa:9e:29:da:cb:f6:4a:6e:83:fd:fe:c7:ea:d1:1e:95:ea: ea:a0:9d:86:f0:fe:f9:a3:39:73:5c:69:40:98:a8:43:e0:15: ae:63:ab:f6:3b:a7:e8:89:5d:72:18:a0:78:ab:41:8e:0e:d4: fe:3c:31:60:f4:2a:91:67:0c:09:39:e1:3e:a0:db:8f:81:5e: da:c5:9c:dd:b6:97:00:af:20:ae:3e:4f:c7:70:45:3b:45:96: 2b:17:ac:60:6e:4b:02:8f:fc:10:bd:36:81:4d:2e:76:a5:17: 30:43:74:f5:fa:b5:1e:c2:72:45:19:e6:ec:a5:21:8b:5d:e3: 23:42:f3:af:af:c4:75:4a:7f:c9:86:71:90:ba:7e:1e:ed:9a: f4:56:dd:53:15:20:8c:a2:99:f6:72:11:ff:6f:98:35:c3:34: 28:09:d6:71:34:c5:6f:8e:18:5b:7b:2e:be:f9:1b:dd:b3:84: 11:64:5c:fe:42:2c:61:ae:c2:0e:e4:52:a7:b0:9d:82:9b:94: e7:af:19:97 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3lyLB/QtvtFlSTNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE1MjYwM1oXDTI4MDgyMjE1MjYwM1owLzEtMCsGA1UEAxMk NTQ3YmM3MWItYzRlNC00YTczLThkMTItOGQ3NmRkZTRmMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuCgB89quao3k3YkQLaLzEqDV+ThEFpsO+7P zmrp6jzVn33adaO+WW859MpoTuUbi9Pjvf2L+EUWw/6K1IhK4Xnlb1OTdm4ZKzhm 48OhW45YCxK5abo5LDNWabvSIAyMU+6FUFv4ef3rTgUd429/xE7LS58xysGP4R1T irPtrWrZWd25H55d/sXxN5JGA9b50GAr3O1eqqMElkPbLeYLWaD2nl4eHijPG2Sd 7mztkxAo9MHJqYLEIcyuNaa4d46oAMrL7wawwkYZXfB4Etoq4zocnCtAlHQ7OUoq BES0UWywiwjnDydjQD/Shiy1XXOM0a1KngE8GicatMLt4QcM4wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEHDEI6+ZUoEHAfnlswn3iD/p+FjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NDdiYzcxYi1jNGU0LTRhNzMtOGQxMi04ZDc2ZGRlNGYwYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU0N2JjNzFiLWM0ZTQtNGE3My04 ZDEyLThkNzZkZGU0ZjBjMy81NDdiYzcxYi1jNGU0LTRhNzMtOGQxMi04ZDc2ZGRl NGYwYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmmwwDgQCAAIwCAMGACYC9DUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjWzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQAms18RDboKxpsjgcr/eQJydK bjgVjhm+Cv3wH4TI4JoHVGneXqJNsRSBIC27ceIYeSW5/fo3+p4p2sv2Sm6D/f7H 6tEelerqoJ2G8P75ozlzXGlAmKhD4BWuY6v2O6foiV1yGKB4q0GODtT+PDFg9CqR ZwwJOeE+oNuPgV7axZzdtpcAryCuPk/HcEU7RZYrF6xgbksCj/wQvTaBTS52pRcw Q3T1+rUewnJFGebspSGLXeMjQvOvr8R1Sn/JhnGQun4e7Zr0Vt1TFSCMopn2chH/ b5g1wzQoCdZxNMVvjhhbey6++Rvds4QRZFz+QixhrsIO5FKnsJ2Cm5TnrxmX -----END CERTIFICATE-----Generated at Sun May 24 13:45:00 2026 by rpki-client