$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7.cer File: 55459e1c-c761-4deb-9fd3-660282edd2d7.cer (raw, json) Hash identifier: URDw15/57bGDaTBihGup8hQf1+tm/iH4P6Y/M0gHtlM= Subject key identifier: C3:4F:9A:8B:59:B3:0A:DD:B7:96:1A:37:18:7B:73:FF:1D:6F:2B:4A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA8CF64767A7282A9F8685E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 19:15:15 +0000 Certificate not after: Wed 26 Jul 2028 16:43:46 +0000 Subordinate resources: AS: 402440 IP: 23.157.156.0/24 IP: 2602:f3e3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:cf:64:76:7a:72:82:a9:f8:68:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 28 19:15:15 2026 GMT Not After : Jul 26 16:43:46 2028 GMT Subject: CN=55459e1c-c761-4deb-9fd3-660282edd2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:18:9e:8f:b4:99:dc:36:b2:39:93:6f:34: b2:08:a5:2c:e6:57:a4:3e:08:51:e8:51:d1:f6:73: 27:f8:f9:da:af:2d:15:87:55:c1:d4:ae:29:16:e3: aa:2a:ea:0a:25:1c:c3:f4:c0:f5:f9:a0:ac:77:86: c5:d6:99:b0:a9:d3:b4:75:2e:7a:08:8e:cd:fc:4f: 9b:3f:36:34:d7:25:ef:80:a9:ff:fb:ee:c3:b2:37: ea:2d:2f:96:47:5d:30:f5:5a:43:2f:6c:2a:0f:0b: e3:a4:0e:b2:65:50:af:12:dd:fa:1e:57:3f:cf:97: d8:23:75:9d:1d:9e:d8:34:12:f3:ec:c9:80:1c:1c: 85:34:3c:85:eb:a8:7d:e0:ad:9a:ef:4a:93:1f:9b: b7:b6:0c:b9:c1:b9:67:1c:b5:c7:6c:8c:e6:56:8b: 66:d8:87:77:81:16:2e:80:ab:a5:39:3b:35:cb:69: e6:22:e0:45:92:a3:9b:91:3a:d5:2a:a5:7c:8f:28: b4:45:a0:3c:4a:23:f3:c4:3d:85:b1:f2:c3:82:95: 9a:4f:b2:4d:18:1c:55:91:56:2e:d0:92:cf:cd:c2: 63:f1:5b:18:e2:77:5c:32:15:1d:ce:31:1f:b7:4e: 25:be:95:03:3b:06:fd:94:f4:5e:22:23:81:de:f7: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4F:9A:8B:59:B3:0A:DD:B7:96:1A:37:18:7B:73:FF:1D:6F:2B:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/55459e1c-c761-4deb-9fd3-660282edd2d7/55459e1c-c761-4deb-9fd3-660282edd2d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.157.156.0/24 IPv6: 2602:f3e3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402440 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6e:6e:40:c0:f3:7e:e4:b6:8a:44:03:c2:51:77:4a:1d:6d: 44:e7:93:cd:93:14:ef:5e:15:fd:45:96:dc:18:fc:ce:05:fe: 48:71:cc:45:de:db:c4:3e:f1:0a:9c:de:ec:85:8a:cc:2d:7c: 4c:d6:1f:84:61:b2:c7:c8:63:50:f0:2a:84:63:e3:c2:64:be: ee:20:f1:89:6b:8a:84:89:6e:ce:9a:c8:6f:5a:5a:15:ad:b2: b0:ea:12:a2:4e:37:f2:4e:62:5f:c3:12:5c:bb:d3:ec:45:38: fe:61:98:a2:10:fa:d6:bb:8c:74:f1:ab:9d:be:51:1d:90:45: 47:c9:f5:11:1e:fb:c4:7d:4a:b6:71:69:9f:6e:90:bb:16:98: 73:82:82:bc:86:0e:c0:7a:09:c6:cb:9c:46:cb:55:ae:1e:47: d0:0f:74:76:87:67:1c:db:5f:01:78:bd:1f:ae:0f:00:d5:76: e0:91:58:c6:3b:a6:e4:42:fc:64:b5:d9:22:06:4a:4f:aa:f3: 07:43:a0:a7:c9:36:0a:95:d2:2a:49:38:1c:8b:b0:d3:7d:17: 27:50:b1:f7:5d:c8:1a:ab:71:da:75:ad:8c:48:c7:55:42:14: bf:ec:01:c8:45:b6:b9:46:af:9b:48:c3:57:30:53:ae:79:76: e2:b9:4b:41 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2oz2R2enKCqfhoXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyODE5MTUxNVoXDTI4MDcyNjE2NDM0NlowLzEtMCsGA1UEAxMk NTU0NTllMWMtYzc2MS00ZGViLTlmZDMtNjYwMjgyZWRkMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hAYno+0mdw2sjmTbzSyCKUs5lekPghR6FHR 9nMn+Pnary0Vh1XB1K4pFuOqKuoKJRzD9MD1+aCsd4bF1pmwqdO0dS56CI7N/E+b PzY01yXvgKn/++7DsjfqLS+WR10w9VpDL2wqDwvjpA6yZVCvEt36Hlc/z5fYI3Wd HZ7YNBLz7MmAHByFNDyF66h94K2a70qTH5u3tgy5wblnHLXHbIzmVotm2Id3gRYu gKulOTs1y2nmIuBFkqObkTrVKqV8jyi0RaA8SiPzxD2FsfLDgpWaT7JNGBxVkVYu 0JLPzcJj8VsY4ndcMhUdzjEft04lvpUDOwb9lPReIiOB3vfmEwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMNPmotZswrdt5YaNxh7c/8dbytKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NTQ1OWUxYy1jNzYxLTRkZWItOWZkMy02NjAyODJlZGQyZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU1NDU5ZTFjLWM3NjEtNGRlYi05 ZmQzLTY2MDI4MmVkZDJkNy81NTQ1OWUxYy1jNzYxLTRkZWItOWZkMy02NjAyODJl ZGQyZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnZwwDgQCAAIwCAMGACYC8+MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARbm5AwPN+5LaKRAPCUXdKHW1E 55PNkxTvXhX9RZbcGPzOBf5IccxF3tvEPvEKnN7shYrMLXxM1h+EYbLHyGNQ8CqE Y+PCZL7uIPGJa4qEiW7OmshvWloVrbKw6hKiTjfyTmJfwxJcu9PsRTj+YZiiEPrW u4x08audvlEdkEVHyfURHvvEfUq2cWmfbpC7FphzgoK8hg7AegnGy5xGy1WuHkfQ D3R2h2cc218BeL0frg8A1XbgkVjGO6bkQvxktdkiBkpPqvMHQ6CnyTYKldIqSTgc i7DTfRcnULH3Xcgaq3Hada2MSMdVQhS/7AHIRba5Rq+bSMNXMFOueXbiuUtB -----END CERTIFICATE-----Generated at Thu Apr 30 12:46:19 2026 by rpki-client