$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69.cer File: 608792f3-3f15-42ce-a477-e1ec35f67e69.cer (raw, json) Hash identifier: BKz0wS2EurgZykZMEPTRZd8urT/F25fHGfp4pkYzXCA= Subject key identifier: 96:C4:FD:95:70:1B:04:D8:09:D6:30:1C:F6:08:08:0E:D1:B8:36:6F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5B27CA6ECCD5E3E0DCA63880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/608792f3-3f15-42ce-a477-e1ec35f67e69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 16:27:15 +0000 Certificate not after: Mon 31 Jul 2028 14:18:51 +0000 Subordinate resources: AS: 398925 IP: 23.150.4.0/24 IP: 169.128.80.0/22 IP: 2602:f4bc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:27:ca:6e:cc:d5:e3:e0:dc:a6:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 1 16:27:15 2026 GMT Not After : Jul 31 14:18:51 2028 GMT Subject: CN=608792f3-3f15-42ce-a477-e1ec35f67e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:cc:73:c5:be:64:65:99:33:8d:00:7a:3f: f1:c4:be:51:f4:78:77:ec:fd:77:cd:45:fe:c1:ae: be:d8:ab:86:0d:c0:5e:8e:6a:4d:9a:af:95:aa:07: 97:6a:d8:13:c3:b3:0c:d7:0a:76:4c:74:d6:e8:05: 70:75:47:da:cc:8e:31:42:a6:82:b2:c7:31:db:dd: e4:6e:e3:25:39:6b:72:a8:3d:13:78:8d:8e:2f:db: 55:cd:9e:24:28:f9:2c:bc:3f:db:af:48:aa:3e:04: 07:0e:7c:87:a3:c0:8a:64:54:c4:6a:9b:2e:f5:ec: 9e:d9:2e:22:1e:e9:d5:dc:d8:45:ca:03:d4:6c:45: 9e:95:15:1c:8f:93:8c:8f:0c:4e:7b:c8:47:65:88: 0f:0d:b5:d8:9f:15:70:e0:3e:8f:77:8c:5a:06:45: 83:52:14:ec:a7:d1:e7:ab:15:d5:d6:53:e5:8c:1e: 32:5a:ab:41:f6:e7:51:02:c5:a3:d5:73:a8:b8:6d: d1:5d:f5:87:1e:fb:69:64:5b:34:aa:ae:a4:4f:e1: 29:0d:cd:89:85:76:25:90:cc:fb:91:4e:bc:65:88: f5:5a:61:d6:7a:4a:4c:e0:4f:60:1d:a5:d5:08:2a: 12:3a:a4:02:c8:5c:56:15:2d:5f:cd:d1:3a:f9:0a: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C4:FD:95:70:1B:04:D8:09:D6:30:1C:F6:08:08:0E:D1:B8:36:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/608792f3-3f15-42ce-a477-e1ec35f67e69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.150.4.0/24 169.128.80.0/22 IPv6: 2602:f4bc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398925 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bb:6b:16:b6:b1:9d:c3:d7:d2:f3:66:1f:6d:83:81:8f:5e: e2:6f:1b:91:2e:12:50:3e:ae:b4:58:7f:9d:6b:4c:d8:c7:fc: e8:a6:2b:2a:f2:40:e8:60:9b:cd:f1:7b:de:7c:86:1b:fa:4d: cd:8e:17:b4:31:59:57:03:fd:e8:a7:6d:21:29:eb:7d:05:66: 3f:6d:0f:a6:83:c3:07:a3:df:d6:5d:48:0d:1a:df:b4:c2:a9: f3:87:bb:9e:50:2a:b0:f3:31:52:e2:ae:64:f8:8f:08:8e:3f: f2:12:38:dc:82:9e:ad:66:58:d2:fa:3b:a8:01:42:44:c1:12: 79:f2:2b:eb:6e:68:b1:e7:5b:b9:e9:ea:b9:74:a9:d8:68:c6: 59:95:f7:86:22:c2:20:fc:83:c4:7d:b1:06:26:2f:60:9d:8c: 8c:5d:f9:de:f5:d3:d2:78:c2:bb:25:92:42:5f:93:73:6b:55: 38:1a:bc:24:24:f6:42:83:43:0c:ba:a8:d3:79:9b:f1:14:18: d3:b0:1d:9a:d9:69:e8:6b:19:87:25:dc:58:64:37:50:c5:b3: f9:a3:83:fc:0f:65:61:f1:e7:29:5e:e2:29:8e:6f:09:b3:0f: 29:1b:2e:2d:d3:32:dc:6c:af:0d:89:a0:a4:a0:9e:cc:63:ec: d4:9b:8e:bc -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5bJ8puzNXj4NymOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMTE2MjcxNVoXDTI4MDczMTE0MTg1MVowLzEtMCsGA1UEAxMk NjA4NzkyZjMtM2YxNS00MmNlLWE0NzctZTFlYzM1ZjY3ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi/Mc8W+ZGWZM40Aej/xxL5R9Hh37P13zUX+ wa6+2KuGDcBejmpNmq+VqgeXatgTw7MM1wp2THTW6AVwdUfazI4xQqaCsscx293k buMlOWtyqD0TeI2OL9tVzZ4kKPksvD/br0iqPgQHDnyHo8CKZFTEapsu9eye2S4i HunV3NhFygPUbEWelRUcj5OMjwxOe8hHZYgPDbXYnxVw4D6Pd4xaBkWDUhTsp9Hn qxXV1lPljB4yWqtB9udRAsWj1XOouG3RXfWHHvtpZFs0qq6kT+EpDc2JhXYlkMz7 kU68ZYj1WmHWekpM4E9gHaXVCCoSOqQCyFxWFS1fzdE6+QpMTwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJbE/ZVwGwTYCdYwHPYICA7RuDZvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 MDg3OTJmMy0zZjE1LTQyY2UtYTQ3Ny1lMWVjMzVmNjdlNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzYwODc5MmYzLTNmMTUtNDJjZS1h NDc3LWUxZWMzNWY2N2U2OS82MDg3OTJmMy0zZjE1LTQyY2UtYTQ3Ny1lMWVjMzVm NjdlNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlgQDBAKpgFAwDgQCAAIwCAMGACYC9LwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWTTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZu2sWtrGdw9fS82Yf bYOBj17ibxuRLhJQPq60WH+da0zYx/zopisq8kDoYJvN8XvefIYb+k3Njhe0MVlX A/3op20hKet9BWY/bQ+mg8MHo9/WXUgNGt+0wqnzh7ueUCqw8zFS4q5k+I8Ijj/y Ejjcgp6tZljS+juoAUJEwRJ58ivrbmix51u56eq5dKnYaMZZlfeGIsIg/IPEfbEG Ji9gnYyMXfne9dPSeMK7JZJCX5Nza1U4GrwkJPZCg0MMuqjTeZvxFBjTsB2a2Wno axmHJdxYZDdQxbP5o4P8D2Vh8ecpXuIpjm8Jsw8pGy4t0zLcbK8NiaCkoJ7MY+zU m468 -----END CERTIFICATE-----Generated at Tue Jul 21 14:30:38 2026 by rpki-client