$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.cer File: 5874d3ec-2bf0-47ba-83dc-efab2cca4f45.cer (raw, json) Hash identifier: UeV/PBe/Z4r+cPxB0J4g7GC1H4D9uo24yGzK/KRHHGY= Subject key identifier: BA:62:CD:A8:64:D8:70:96:BF:A5:C7:B3:90:54:86:8B:82:32:81:41 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DDC14D7A5E81E5994983B7EE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 04:01:24 +0000 Certificate not after: Sat 19 Aug 2028 04:01:24 +0000 Subordinate resources: AS: 395131 IP: 23.155.20.0/24 IP: 2602:f41d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dc:14:d7:a5:e8:1e:59:94:98:3b:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 17 04:01:24 2026 GMT Not After : Aug 19 04:01:24 2028 GMT Subject: CN=5874d3ec-2bf0-47ba-83dc-efab2cca4f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:07:69:a5:28:9d:aa:d8:15:45:6b:f4:97: a8:aa:58:48:f8:a2:45:a5:40:e1:a8:b6:1f:2c:9a: e2:b6:b1:d2:81:f4:20:e3:67:df:1b:13:20:9b:2b: 44:d5:2d:fc:b3:9c:40:e6:12:d9:8b:e1:9a:26:16: b0:e5:34:49:e1:12:de:bc:6f:de:ac:26:95:a8:f2: 45:7e:e5:26:eb:70:f2:3d:1d:4c:7a:ac:08:93:7b: d5:ac:82:b6:05:56:be:65:73:7a:48:3b:e2:9d:56: 5b:ba:f5:aa:a9:e7:31:bf:41:49:f1:21:9c:9f:74: 95:96:de:31:62:fe:c2:32:b5:99:c6:00:33:6b:e2: 44:d0:4b:d3:13:2d:ab:39:4d:1a:69:5d:22:08:02: fb:ed:d1:44:c8:a0:29:70:c8:a4:e9:9c:3a:ad:65: 44:53:c9:92:d3:27:3b:c1:80:f0:4c:e4:b9:0b:26: fd:44:01:8b:c8:9a:36:e0:92:fe:2b:09:5e:ef:1c: 6a:f6:58:36:77:2d:bb:9d:b5:8a:30:4b:d6:8f:30: a1:89:4f:af:35:a5:34:84:06:69:76:ca:97:86:ea: f9:20:9c:bc:8d:86:8a:76:bb:81:02:4b:81:17:ab: 57:c7:bd:02:64:e7:b0:00:5d:8c:be:98:71:6d:f4: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:CD:A8:64:D8:70:96:BF:A5:C7:B3:90:54:86:8B:82:32:81:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.155.20.0/24 IPv6: 2602:f41d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395131 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d8:1a:72:9e:4b:4d:f4:10:d4:f2:d1:9e:11:a4:6c:11:cc: e4:0c:56:e5:a9:df:90:13:51:8f:b9:42:e8:a8:9a:67:d7:bf: 6e:37:0d:3c:ff:9b:2c:ee:c6:1d:f0:ee:4b:56:c3:26:25:9e: 35:29:11:cb:5f:d7:1f:e6:62:90:2f:d3:f6:35:e8:0a:10:58: 4e:32:17:f0:62:03:82:c0:bc:f7:fa:f8:ac:15:17:10:be:4e: 6d:b0:8e:6b:ba:09:3b:06:a3:c3:07:e1:7a:63:ba:19:8d:53: 2a:94:3f:2f:93:ba:a5:36:5f:96:8d:1c:f4:a1:cc:a1:57:01: f6:18:4b:06:18:86:d6:47:08:71:44:bc:1c:07:37:2e:73:72: 35:fc:a1:67:2e:96:83:68:e5:99:ec:c4:b6:80:7a:a6:30:79: 4d:8e:8c:84:10:0b:5d:f6:a3:8a:d7:a3:ec:cd:2e:71:fa:62: b5:b3:0e:2f:25:3b:5c:09:64:86:30:b1:c4:62:ec:62:ee:94: 59:4e:26:65:79:eb:c1:f7:ac:74:dd:fe:5d:fd:66:00:80:23: 52:62:e7:aa:51:7c:f6:2e:bc:7a:c2:45:10:a0:22:1e:33:d9: 2a:28:4c:fb:39:bc:4d:47:8a:64:17:37:ec:44:95:48:d5:12: a2:13:6d:6e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3cFNel6B5ZlJg7fuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNzA0MDEyNFoXDTI4MDgxOTA0MDEyNFowLzEtMCsGA1UEAxMk NTg3NGQzZWMtMmJmMC00N2JhLTgzZGMtZWZhYjJjY2E0ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBEHaaUonarYFUVr9JeoqlhI+KJFpUDhqLYf LJritrHSgfQg42ffGxMgmytE1S38s5xA5hLZi+GaJhaw5TRJ4RLevG/erCaVqPJF fuUm63DyPR1MeqwIk3vVrIK2BVa+ZXN6SDvinVZbuvWqqecxv0FJ8SGcn3SVlt4x Yv7CMrWZxgAza+JE0EvTEy2rOU0aaV0iCAL77dFEyKApcMik6Zw6rWVEU8mS0yc7 wYDwTOS5Cyb9RAGLyJo24JL+Kwle7xxq9lg2dy27nbWKMEvWjzChiU+vNaU0hAZp dsqXhur5IJy8jYaKdruBAkuBF6tXx70CZOewAF2MvphxbfTGWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLpizahk2HCWv6XHs5BUhouCMoFBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 ODc0ZDNlYy0yYmYwLTQ3YmEtODNkYy1lZmFiMmNjYTRmNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU4NzRkM2VjLTJiZjAtNDdiYS04 M2RjLWVmYWIyY2NhNGY0NS81ODc0ZDNlYy0yYmYwLTQ3YmEtODNkYy1lZmFiMmNj YTRmNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmxQwDgQCAAIwCAMGACYC9B0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYHezBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAL2BpynktN9BDU8tGeEaRsEczk DFblqd+QE1GPuULoqJpn179uNw08/5ss7sYd8O5LVsMmJZ41KRHLX9cf5mKQL9P2 NegKEFhOMhfwYgOCwLz3+visFRcQvk5tsI5rugk7BqPDB+F6Y7oZjVMqlD8vk7ql Nl+WjRz0ocyhVwH2GEsGGIbWRwhxRLwcBzcuc3I1/KFnLpaDaOWZ7MS2gHqmMHlN joyEEAtd9qOK16PszS5x+mK1sw4vJTtcCWSGMLHEYuxi7pRZTiZleevB96x03f5d /WYAgCNSYueqUXz2Lrx6wkUQoCIeM9kqKEz7ObxNR4pkFzfsRJVI1RKiE21u -----END CERTIFICATE-----Generated at Thu May 28 16:14:13 2026 by rpki-client