$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.cer File: 5dfc19b2-15c9-4fcd-9fee-64d61bd31357.cer (raw, json) Hash identifier: X0aV+nSgDk9+BvS7UnZ73pFg6PBaGZNslvC3FE5S/to= Subject key identifier: 3A:54:9D:17:D2:86:C6:59:65:02:F0:6B:02:1C:6C:11:A8:A3:A3:C3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F66B5520789352D23E2902BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 12:33:14 +0000 Certificate not after: Wed 20 Sep 2028 16:13:26 +0000 Subordinate resources: AS: 402630 IP: 198.135.109.0/24 IP: 2620:36:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:b5:52:07:89:35:2d:23:e2:90:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 5 12:33:14 2026 GMT Not After : Sep 20 16:13:26 2028 GMT Subject: CN=5dfc19b2-15c9-4fcd-9fee-64d61bd31357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:8d:f5:2f:cd:ab:3d:51:c3:85:49:a2:10: 9c:43:68:46:b6:da:22:03:37:b0:c7:55:b6:f7:30: dc:ae:81:22:39:2a:81:b5:43:1a:52:b4:dc:f9:39: 70:48:eb:7a:3d:ea:db:39:3b:ed:7d:8a:7e:74:96: ed:4a:1d:7c:9b:1a:ed:77:4a:fe:d1:9b:98:03:91: 1f:63:cf:46:5c:b4:b5:40:0f:c6:f0:8d:66:7b:ab: c9:85:d1:a7:9b:00:11:21:f7:dc:f9:4c:09:ee:aa: dc:7b:a7:da:8a:8a:b8:ab:1f:fb:ee:9e:01:42:de: dc:e3:c8:44:e5:ae:1d:44:65:3e:16:9a:ae:92:9b: e6:84:2b:dc:d0:fd:6c:b6:30:9f:73:ff:da:6d:f9: e0:84:bd:6c:8d:15:4d:9c:70:f9:14:63:77:c2:a3: 51:8c:90:ec:55:f4:cb:ae:02:23:87:ff:df:4c:3f: 63:a6:f7:68:2b:f1:3c:93:14:48:32:f2:6c:00:3f: 14:c7:35:e4:37:8c:82:a3:eb:66:c0:a4:14:60:84: 86:71:d4:ee:82:91:e1:39:09:50:69:ba:cf:1d:9b: b8:9c:79:1b:03:9c:ec:a4:e4:01:8c:17:3c:dc:53: 8b:09:25:14:d7:d9:e8:fa:7f:e7:71:19:8f:b0:ca: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:9D:17:D2:86:C6:59:65:02:F0:6B:02:1C:6C:11:A8:A3:A3:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.135.109.0/24 IPv6: 2620:36:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402630 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:66:ce:27:6b:06:6c:1c:64:8f:04:43:fd:f8:3a:6d:0a:7a: f2:31:05:fb:1d:f7:4f:04:ff:99:5c:a2:fa:ba:c2:6d:4f:69: ad:e9:92:0a:9a:93:86:4a:20:be:00:dc:ff:46:ba:df:38:ee: 6c:03:37:3d:fe:eb:b0:02:00:2d:ad:5d:6a:29:04:63:78:6e: 1c:4c:4b:9a:06:99:52:90:59:23:04:e5:f3:57:e8:76:82:84: bb:e2:18:c7:8c:b2:ad:72:37:3c:71:a9:76:5a:bc:ba:bc:bd: 39:92:b2:22:86:66:27:bd:f7:0e:3e:8e:66:3c:c0:75:97:cc: 43:f3:c1:3f:15:b6:c7:1d:5e:f9:1f:ca:48:ea:4e:88:9c:e5: b1:39:a7:02:cd:23:c4:b4:70:dd:02:84:57:ec:94:9d:81:09: b9:1b:8c:70:c9:16:a8:9f:a1:be:09:35:ec:5b:86:a5:04:b1: d8:15:1d:ee:3c:c0:d4:fc:fd:3c:71:f0:1c:20:1b:42:b8:36: a6:aa:21:7e:f7:4e:8a:76:48:1c:1c:41:ca:32:56:bc:fa:e3: f4:8c:70:5b:d3:bb:9d:39:8d:bd:71:ff:41:79:f0:d1:53:40: 46:7d:f4:59:6c:47:67:a0:66:de:df:e7:0c:ab:ce:18:e4:52: c2:44:d5:d9 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9mtVIHiTUtI+KQK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNTEyMzMxNFoXDTI4MDkyMDE2MTMyNlowLzEtMCsGA1UEAxMk NWRmYzE5YjItMTVjOS00ZmNkLTlmZWUtNjRkNjFiZDMxMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsuN9S/Nqz1Rw4VJohCcQ2hGttoiAzewx1W2 9zDcroEiOSqBtUMaUrTc+TlwSOt6PerbOTvtfYp+dJbtSh18mxrtd0r+0ZuYA5Ef Y89GXLS1QA/G8I1me6vJhdGnmwARIffc+UwJ7qrce6faioq4qx/77p4BQt7c48hE 5a4dRGU+FpqukpvmhCvc0P1stjCfc//abfnghL1sjRVNnHD5FGN3wqNRjJDsVfTL rgIjh//fTD9jpvdoK/E8kxRIMvJsAD8UxzXkN4yCo+tmwKQUYISGcdTugpHhOQlQ abrPHZu4nHkbA5zspOQBjBc83FOLCSUU19no+n/ncRmPsMqbgwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDpUnRfShsZZZQLwawIcbBGoo6PDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 ZGZjMTliMi0xNWM5LTRmY2QtOWZlZS02NGQ2MWJkMzEzNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVkZmMxOWIyLTE1YzktNGZjZC05 ZmVlLTY0ZDYxYmQzMTM1Ny81ZGZjMTliMi0xNWM5LTRmY2QtOWZlZS02NGQ2MWJk MzEzNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADGh20wDwQCAAIwCQMHACYgADYgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJMYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS2bOJ2sGbBxkjwRD/fg6bQp6 8jEF+x33TwT/mVyi+rrCbU9premSCpqThkogvgDc/0a63zjubAM3Pf7rsAIALa1d aikEY3huHExLmgaZUpBZIwTl81fodoKEu+IYx4yyrXI3PHGpdlq8ury9OZKyIoZm J733Dj6OZjzAdZfMQ/PBPxW2xx1e+R/KSOpOiJzlsTmnAs0jxLRw3QKEV+yUnYEJ uRuMcMkWqJ+hvgk17FuGpQSx2BUd7jzA1Pz9PHHwHCAbQrg2pqohfvdOinZIHBxB yjJWvPrj9IxwW9O7nTmNvXH/QXnw0VNARn30WWxHZ6Bm3t/nDKvOGORSwkTV2Q== -----END CERTIFICATE-----Generated at Tue Oct 20 05:17:20 2026 by rpki-client