$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer File: 641fbbfd-7877-429d-ba4c-4decd1bb342b.cer (raw, json) Hash identifier: ZfjEcjpmB0IIC58RGIAhJ6VoaixJV893MWL+a4vNFpY= Subject key identifier: EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D990C5C4A9CF79A80E5141500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Apr 2026 03:45:09 +0000 Certificate not after: Wed 26 Jul 2028 03:45:09 +0000 Subordinate resources: AS: 30084 IP: 23.150.12.0/24 IP: 2604:2a20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:99:0c:5c:4a:9c:f7:9a:80:e5:14:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 23 03:45:09 2026 GMT Not After : Jul 26 03:45:09 2028 GMT Subject: CN=641fbbfd-7877-429d-ba4c-4decd1bb342b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:12:b1:c7:5e:1d:2e:87:34:cb:2b:9a:e8: 1e:24:c3:03:5d:7a:63:6f:0c:02:38:59:0e:47:bb: 36:8b:25:1a:31:78:6b:09:e7:56:f5:e7:56:af:5a: 2b:fa:67:44:56:0d:24:8f:d1:3b:32:16:f9:b8:c2: 42:8b:f2:47:24:09:92:22:2b:aa:c8:df:5c:a6:f7: 28:73:7d:98:9e:5f:c6:5c:8f:6b:4e:17:1e:94:d6: 27:fd:e6:14:29:6a:51:9a:4e:88:23:97:c2:d1:15: 1b:2a:97:f6:14:13:60:67:33:cb:66:6c:13:77:ad: c5:00:4c:c0:85:e4:c9:85:41:6d:85:11:b3:33:68: 39:66:df:d7:8b:e9:a1:c2:9f:f5:bb:09:ba:0e:13: aa:24:68:5f:f3:ad:a3:de:69:8f:ed:3d:62:fe:cb: d0:9a:cc:ea:6b:20:9b:03:b8:88:3b:42:d9:9c:e7: f3:70:e4:ab:7f:1d:36:4c:30:fc:42:41:1b:1b:ee: 88:76:9d:6f:4f:d2:73:4c:2e:eb:0b:8e:97:73:c6: 88:58:e3:ce:b8:63:bf:45:71:3a:ab:46:66:fe:30: a4:22:37:d6:b7:f1:b9:50:67:54:f8:fa:18:fc:52: 94:6c:78:2e:99:48:6a:c4:d7:80:99:16:54:86:c1: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.150.12.0/24 IPv6: 2604:2a20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30084 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:14:e1:f5:64:b8:47:5c:3f:3b:44:eb:13:b6:8f:68:7d:c7: 46:34:69:12:d3:53:6e:ba:7b:73:0a:51:d6:75:1a:17:31:3d: a3:bc:fa:be:f7:d9:08:a1:4f:d5:ca:87:49:70:cb:f8:35:11: ab:d0:e5:9a:fc:77:85:ab:77:ec:c4:5f:e0:48:24:e9:17:a0: 54:d4:4c:fa:ea:bb:29:08:50:73:2a:45:f7:f7:53:9c:1e:d9: c9:67:43:fd:6e:29:89:42:0a:18:57:03:d5:cd:d4:a9:73:39: 25:e1:b4:41:b9:e7:c6:21:51:6e:b3:01:a3:62:a5:44:e3:7f: e2:69:57:38:bb:cd:83:74:46:95:4d:74:92:29:b5:1c:c8:ff: 67:5c:e0:b4:41:61:a9:00:ea:9b:66:db:bc:53:ea:68:f5:4b: 56:4a:01:44:16:c3:84:7f:d3:24:cd:54:96:9f:5e:a8:9d:67: b8:4e:df:da:94:37:8b:52:5e:12:fb:cf:b4:14:67:32:3c:c8: fb:e4:07:02:57:dd:ea:3f:4b:e4:59:54:db:84:75:92:9d:96: 49:a9:5c:f8:84:04:f7:3b:b1:10:66:d0:de:18:e0:36:49:f0: 10:0a:d8:ce:5c:89:8c:49:f1:3b:6f:2c:76:e5:53:7c:14:63: 84:8e:e8:f1 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE2ZDFxKnPeagOUUFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMzAzNDUwOVoXDTI4MDcyNjAzNDUwOVowLzEtMCsGA1UEAxMk NjQxZmJiZmQtNzg3Ny00MjlkLWJhNGMtNGRlY2QxYmIzNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0SscdeHS6HNMsrmugeJMMDXXpjbwwCOFkO R7s2iyUaMXhrCedW9edWr1or+mdEVg0kj9E7Mhb5uMJCi/JHJAmSIiuqyN9cpvco c32Ynl/GXI9rThcelNYn/eYUKWpRmk6II5fC0RUbKpf2FBNgZzPLZmwTd63FAEzA heTJhUFthRGzM2g5Zt/Xi+mhwp/1uwm6DhOqJGhf862j3mmP7T1i/svQmszqayCb A7iIO0LZnOfzcOSrfx02TDD8QkEbG+6Idp1vT9JzTC7rC46Xc8aIWOPOuGO/RXE6 q0Zm/jCkIjfWt/G5UGdU+PoY/FKUbHgumUhqxNeAmRZUhsHk7wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFOthP+ty3vQzoSJF+cbTNEvppHP3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 NDFmYmJmZC03ODc3LTQyOWQtYmE0Yy00ZGVjZDFiYjM0MmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY0MWZiYmZkLTc4NzctNDI5ZC1i YTRjLTRkZWNkMWJiMzQyYi82NDFmYmJmZC03ODc3LTQyOWQtYmE0Yy00ZGVjZDFi YjM0MmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXlgwwDQQCAAIwBwMFACYEKiAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIBTh9WS4R1w/O0TrE7aPaH3HRjRp EtNTbrp7cwpR1nUaFzE9o7z6vvfZCKFP1cqHSXDL+DURq9Dlmvx3hat37MRf4Egk 6RegVNRM+uq7KQhQcypF9/dTnB7ZyWdD/W4piUIKGFcD1c3UqXM5JeG0QbnnxiFR brMBo2KlRON/4mlXOLvNg3RGlU10kim1HMj/Z1zgtEFhqQDqm2bbvFPqaPVLVkoB RBbDhH/TJM1Ulp9eqJ1nuE7f2pQ3i1JeEvvPtBRnMjzI++QHAlfd6j9L5FlU24R1 kp2WSalc+IQE9zuxEGbQ3hjgNknwEArYzlyJjEnxO28sduVTfBRjhI7o8Q== -----END CERTIFICATE-----Generated at Mon Apr 27 23:40:30 2026 by rpki-client