$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.cer File: 5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.cer (raw, json) Hash identifier: OFM8JKDTV7cKA2mDMzXWwQ3NElz88kLumN6H8rIzE9c= Subject key identifier: 4F:A1:CE:C1:B0:58:1E:F7:D3:79:D9:CE:E8:8A:18:FE:2C:31:61:A3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E2E768F9F29E74E73DA250200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jun 2026 16:14:35 +0000 Certificate not after: Sun 17 Sep 2028 16:14:35 +0000 Subordinate resources: AS: 401320 IP: 23.191.88.0/24 IP: 130.12.90.0/24 IP: 2602:f7ec::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2e:76:8f:9f:29:e7:4e:73:da:25:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 15 16:14:35 2026 GMT Not After : Sep 17 16:14:35 2028 GMT Subject: CN=5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:5e:e6:b7:43:34:02:b2:e3:67:63:63:96: 8e:c1:a7:ba:40:1e:7a:f6:33:0e:12:99:3a:5f:47: 55:06:21:83:dc:76:74:85:ef:14:2c:1b:13:bd:28: 4e:f9:0b:1a:cf:b3:cd:00:85:70:97:cf:ad:d7:9d: b3:50:85:98:9c:21:bd:fd:fc:f5:e4:e9:fb:92:09: b6:83:23:8a:e2:d2:ab:0d:46:f6:98:a9:08:7c:e7: 57:cc:64:d7:26:80:d2:2f:dd:48:d8:ee:31:b2:e1: d4:a5:c5:27:69:a9:12:e2:db:9f:d4:c5:2a:e6:33: 65:de:4e:d5:2a:80:fc:fa:f4:fb:f6:b2:20:17:14: c0:85:fb:8b:3a:99:c6:2b:50:56:76:e0:ae:c0:a2: c7:0a:f1:c7:0a:97:c6:e1:3b:3e:73:3f:a3:b7:6d: 15:b6:39:cb:63:7b:c6:81:57:ff:96:e6:87:99:11: 21:01:5d:88:60:14:ba:2f:cd:5d:00:47:0c:43:4a: 21:c4:22:ee:21:2a:14:b7:cd:f1:a2:12:94:bf:c5: fe:4d:87:c0:92:75:e5:e8:49:ce:f1:a4:95:21:19: 3e:1c:8b:d9:8b:48:67:e1:a3:67:7d:a4:4e:9e:d3: db:8f:6f:79:22:10:2c:0f:70:d5:b4:bc:27:0a:b0: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A1:CE:C1:B0:58:1E:F7:D3:79:D9:CE:E8:8A:18:FE:2C:31:61:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1/5c836ef9-5c33-4e25-8b4c-30bec8bfe1e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.191.88.0/24 130.12.90.0/24 IPv6: 2602:f7ec::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401320 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:13:b4:85:34:23:45:e4:13:2d:ad:1f:33:f6:22:d3:c1:0d: 25:26:72:e7:82:f9:30:20:0c:37:bd:d6:be:bb:c4:ee:fe:96: 91:23:a8:61:7b:8c:c9:9b:45:30:87:1a:87:e1:e4:c1:3a:06: 6a:82:a1:3b:17:8e:44:be:fc:91:52:e0:66:1b:f9:fe:bf:8e: c4:77:df:84:96:49:15:21:fe:0e:ec:88:8e:b4:7a:ef:8e:ee: ac:6d:60:c4:59:4e:5a:56:79:b1:55:31:fe:a2:69:64:a0:45: f9:a0:82:1f:0e:7b:74:b7:d5:68:19:68:e5:34:28:5c:80:d5: 69:76:8e:50:20:b4:c3:53:c2:54:34:10:e1:de:f9:43:ba:02: 9f:f1:48:ac:6d:a8:9b:b8:3e:53:99:b3:82:d9:7a:08:f7:b4: bb:4e:38:27:da:84:09:b5:b5:f1:0b:8f:5b:ac:65:8e:69:15: cf:a7:64:0a:fa:36:7c:fe:b6:a8:18:df:81:dd:10:a7:4d:f2: 40:dd:5e:52:ed:a0:ee:5a:96:fe:f3:2a:30:07:97:71:47:af: e2:e9:bb:63:f1:43:fc:59:8e:15:3b:89:db:85:e6:88:89:6f: 51:ef:c8:24:bd:40:79:10:b2:7d:25:a1:f8:60:c2:9f:ee:a2: e2:d8:17:b6 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE4udo+fKedOc9olAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxNTE2MTQzNVoXDTI4MDkxNzE2MTQzNVowLzEtMCsGA1UEAxMk NWM4MzZlZjktNWMzMy00ZTI1LThiNGMtMzBiZWM4YmZlMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNBe5rdDNAKy42djY5aOwae6QB569jMOEpk6 X0dVBiGD3HZ0he8ULBsTvShO+Qsaz7PNAIVwl8+t152zUIWYnCG9/fz15On7kgm2 gyOK4tKrDUb2mKkIfOdXzGTXJoDSL91I2O4xsuHUpcUnaakS4tuf1MUq5jNl3k7V KoD8+vT79rIgFxTAhfuLOpnGK1BWduCuwKLHCvHHCpfG4Ts+cz+jt20VtjnLY3vG gVf/luaHmREhAV2IYBS6L81dAEcMQ0ohxCLuISoUt83xohKUv8X+TYfAknXl6EnO 8aSVIRk+HIvZi0hn4aNnfaROntPbj295IhAsD3DVtLwnCrBc2wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFE+hzsGwWB7303nZzuiKGP4sMWGjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 YzgzNmVmOS01YzMzLTRlMjUtOGI0Yy0zMGJlYzhiZmUxZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVjODM2ZWY5LTVjMzMtNGUyNS04 YjRjLTMwYmVjOGJmZTFlMS81YzgzNmVmOS01YzMzLTRlMjUtOGI0Yy0zMGJlYzhi ZmUxZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXv1gDBACCDFowDgQCAAIwCAMGACYC9+wAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYfqDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1E7SFNCNF5BMtrR8z 9iLTwQ0lJnLngvkwIAw3vda+u8Tu/paRI6hhe4zJm0UwhxqH4eTBOgZqgqE7F45E vvyRUuBmG/n+v47Ed9+ElkkVIf4O7IiOtHrvju6sbWDEWU5aVnmxVTH+omlkoEX5 oIIfDnt0t9VoGWjlNChcgNVpdo5QILTDU8JUNBDh3vlDugKf8UisbaibuD5TmbOC 2XoI97S7Tjgn2oQJtbXxC49brGWOaRXPp2QK+jZ8/raoGN+B3RCnTfJA3V5S7aDu Wpb+8yowB5dxR6/i6btj8UP8WY4VO4nbheaIiW9R78gkvUB5ELJ9JaH4YMKf7qLi 2Be2 -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:35 2026 by rpki-client