$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5769e220-725d-403a-8948-14db0624a3c4.cer File: 5769e220-725d-403a-8948-14db0624a3c4.cer (raw, json) Hash identifier: 33O7Eam+jxQHZMo4mzsP66DhNqwZYHlAKRJ6A53nZ6A= Subject key identifier: 2C:A8:B5:51:13:1B:DE:69:CB:7B:AF:1F:23:F1:0D:17:68:A8:9A:E5 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F66BE419BF38F0FD482405280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5769e220-725d-403a-8948-14db0624a3c4/5769e220-725d-403a-8948-14db0624a3c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5769e220-725d-403a-8948-14db0624a3c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 12:51:15 +0000 Certificate not after: Tue 19 Sep 2028 05:12:12 +0000 Subordinate resources: AS: 402605 IP: 23.160.20.0/24 IP: 192.203.242.0/24 IP: 2602:f396::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:be:41:9b:f3:8f:0f:d4:82:40:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 5 12:51:15 2026 GMT Not After : Sep 19 05:12:12 2028 GMT Subject: CN=5769e220-725d-403a-8948-14db0624a3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:70:49:4c:a3:86:11:09:ca:68:57:9d:7e: 62:c4:ce:02:d7:36:97:b1:a3:26:75:58:44:35:35: b2:5a:76:e9:43:b2:d9:44:a5:13:7a:eb:8a:b5:be: f8:87:18:29:b7:b5:14:d4:8b:44:14:d8:24:d4:ba: 12:b7:40:64:b4:cb:ec:b0:7d:f3:78:71:16:d9:33: 42:6c:ea:b7:8b:4c:22:da:e5:f3:60:55:55:0b:3a: ab:98:e9:77:d9:e2:42:5e:17:89:fb:a2:f0:ef:b7: d9:d2:75:d1:97:b5:47:89:0b:3c:f2:90:5a:ec:d1: 52:91:d4:75:5d:08:2f:22:e4:4e:e0:b3:57:2d:93: a3:47:64:4b:64:03:5c:5d:fc:2b:3a:77:bb:23:42: 6b:b5:a9:d9:8e:08:f6:ed:57:58:26:b4:ea:e2:1b: 2d:eb:af:f9:31:ba:65:75:f3:e5:1e:6e:8c:8a:3e: 5c:c3:bc:f7:ea:58:c2:23:e7:05:15:19:7a:0a:0e: 26:0d:8a:15:3c:33:cf:a6:46:9b:56:98:86:81:21: 88:e9:f0:0a:62:00:63:08:64:6f:c7:b6:b2:01:0d: 75:5d:91:e4:04:b8:48:ca:53:36:df:d8:bd:ab:17: e9:93:e3:5d:1d:e8:ac:93:8f:b7:04:e4:60:97:d7: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A8:B5:51:13:1B:DE:69:CB:7B:AF:1F:23:F1:0D:17:68:A8:9A:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5769e220-725d-403a-8948-14db0624a3c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5769e220-725d-403a-8948-14db0624a3c4/5769e220-725d-403a-8948-14db0624a3c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.160.20.0/24 192.203.242.0/24 IPv6: 2602:f396::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402605 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:fc:4e:97:78:88:d2:50:e8:2f:68:64:ee:c6:3f:86:87:44: 51:0f:18:37:54:9c:74:1a:16:08:6e:28:07:c6:55:aa:49:d5: f6:8d:a6:98:2f:69:6d:7e:e8:31:57:ba:12:7a:97:2f:44:82: d9:89:4f:5b:cc:64:65:8d:a4:c7:38:ab:8b:af:b6:4b:1e:6e: a3:5a:af:5e:52:79:70:02:c6:80:26:37:bb:ef:da:9d:67:ae: 3a:1f:09:51:6d:2b:63:0e:fa:f1:2a:d8:b4:da:33:53:32:a7: 9b:f2:31:1d:d4:cd:4e:d7:c3:7f:63:8f:b3:28:d3:29:ed:d3: f7:bb:4e:a3:dc:67:e8:37:de:a8:2e:ef:de:10:b7:90:8f:e8: ba:b8:4f:4d:6a:f1:a7:5e:ac:40:27:8b:5f:06:fc:6c:51:fc: 3b:bc:6e:e0:6f:ac:79:04:b7:17:bd:8b:d8:69:cd:ca:19:f0: a3:6a:f4:5c:ab:2b:76:79:5d:12:7d:e1:3e:81:3a:e7:1d:83: 5a:93:8f:e3:3f:3b:20:dd:de:67:fa:8a:f8:84:59:9e:93:fa: 6d:c3:d9:2c:a4:37:db:5f:18:12:92:7c:17:c0:1c:b7:35:0f: b0:eb:03:e5:10:3e:45:11:5b:a4:fa:91:fe:1a:cc:fe:4b:08: 38:80:03:f5 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9mvkGb848P1IJAUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNTEyNTExNVoXDTI4MDkxOTA1MTIxMlowLzEtMCsGA1UEAxMk NTc2OWUyMjAtNzI1ZC00MDNhLTg5NDgtMTRkYjA2MjRhM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmRwSUyjhhEJymhXnX5ixM4C1zaXsaMmdVhE NTWyWnbpQ7LZRKUTeuuKtb74hxgpt7UU1ItEFNgk1LoSt0BktMvssH3zeHEW2TNC bOq3i0wi2uXzYFVVCzqrmOl32eJCXheJ+6Lw77fZ0nXRl7VHiQs88pBa7NFSkdR1 XQgvIuRO4LNXLZOjR2RLZANcXfwrOne7I0JrtanZjgj27VdYJrTq4hst66/5Mbpl dfPlHm6Mij5cw7z36ljCI+cFFRl6Cg4mDYoVPDPPpkabVpiGgSGI6fAKYgBjCGRv x7ayAQ11XZHkBLhIylM239i9qxfpk+NdHeisk4+3BORgl9c9lQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCyotVETG95py3uvHyPxDRdoqJrlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NzY5ZTIyMC03MjVkLTQwM2EtODk0OC0xNGRiMDYyNGEzYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU3NjllMjIwLTcyNWQtNDAzYS04 OTQ4LTE0ZGIwNjI0YTNjNC81NzY5ZTIyMC03MjVkLTQwM2EtODk0OC0xNGRiMDYy NGEzYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXoBQDBADAy/IwDgQCAAIwCAMGACYC85YAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYkrTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCo/E6XeIjSUOgvaGTu xj+Gh0RRDxg3VJx0GhYIbigHxlWqSdX2jaaYL2ltfugxV7oSepcvRILZiU9bzGRl jaTHOKuLr7ZLHm6jWq9eUnlwAsaAJje779qdZ646HwlRbStjDvrxKti02jNTMqeb 8jEd1M1O18N/Y4+zKNMp7dP3u06j3GfoN96oLu/eELeQj+i6uE9NavGnXqxAJ4tf BvxsUfw7vG7gb6x5BLcXvYvYac3KGfCjavRcqyt2eV0SfeE+gTrnHYNak4/jPzsg 3d5n+or4hFmek/ptw9kspDfbXxgSknwXwBy3NQ+w6wPlED5FEVuk+pH+Gsz+Swg4 gAP1 -----END CERTIFICATE-----Generated at Tue Oct 20 05:17:51 2026 by rpki-client