$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer File: 64e40858-5cbf-4756-8298-1db55fc66d82.cer (raw, json) Hash identifier: oLOB0DPcWxdaKWvpgd5cMrBtyLUNpC6SPUAFcQ4kuIo= Subject key identifier: 7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5C305BE561435D4E8E0ED40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 15:14:38 +0000 Certificate not after: Tue 22 Aug 2028 15:14:38 +0000 Subordinate resources: AS: 402289 IP: 23.154.148.0/24 IP: 2602:f42e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:c3:05:be:56:14:35:d4:e8:e0:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 15:14:38 2026 GMT Not After : Aug 22 15:14:38 2028 GMT Subject: CN=64e40858-5cbf-4756-8298-1db55fc66d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:74:e3:b3:e5:50:2c:5f:ed:b1:01:c3:83: 5e:9b:6b:72:93:10:27:0d:34:11:5d:14:9e:45:75: bd:26:d2:a3:3b:e6:3b:38:d5:24:10:57:7f:94:b2: aa:82:3b:4a:95:f9:41:de:ec:1a:4a:be:64:97:40: ba:37:05:a1:7d:42:1a:10:2e:92:f5:46:33:e8:0a: 9e:05:df:26:29:28:38:8b:3f:e1:25:fe:09:5c:86: aa:8b:c7:59:f7:e4:51:a7:d2:80:d7:71:4f:3b:75: 74:13:58:9d:ff:0b:ec:04:f6:e6:64:84:d3:f2:66: 24:ea:ea:41:79:fe:da:44:3e:03:13:d6:62:14:66: f3:2d:a1:c2:b4:a0:4d:5a:2f:53:c0:c3:6d:bc:5e: fe:48:5c:58:ef:57:2b:b9:7b:47:02:2c:bb:cb:64: 58:83:5f:de:38:33:38:27:d8:b8:94:3e:65:5a:f4: af:97:0d:1e:cf:cc:74:a1:73:31:d0:c4:4e:b8:f6: 3f:a1:69:11:8b:b1:9c:8f:25:47:d1:d6:f3:7c:a5: 69:ca:00:c1:6e:f5:5c:27:c1:54:30:7e:b1:8d:c5: 2c:6e:de:00:05:b3:3a:18:b1:d8:f8:2f:54:d3:ac: 7f:c9:2f:17:c5:16:5b:e9:ba:a8:e9:a8:14:17:4a: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.148.0/24 IPv6: 2602:f42e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:48:95:af:a1:af:bd:87:3c:78:bc:0b:fe:12:70:ce:5a:2d: 11:e7:5b:c5:7f:24:61:7a:63:e9:38:7b:2b:bc:2a:e5:51:d6: d3:ef:e9:5e:1d:e1:a7:cd:79:13:45:31:7e:79:52:46:90:91: 56:32:b2:96:63:b7:9b:14:c1:a8:41:a9:2a:af:fc:d5:99:b1: 59:93:5c:4b:99:e6:d1:71:35:03:c8:56:2c:5b:db:6a:61:74: 5a:c1:29:cb:cb:d3:4a:c4:d4:51:fb:af:6c:c4:d7:24:7b:e3: ad:6a:a6:77:1c:a4:23:0f:1f:6e:f6:19:82:ef:94:11:7e:b6: 10:7c:53:d8:1a:70:06:b4:63:82:b0:46:3b:47:bf:ac:50:df: 3a:11:9f:9d:05:b4:bb:5f:a3:4c:c2:ba:4f:37:8d:48:69:f7: 80:54:64:f8:ee:32:02:09:2f:94:58:a2:01:cf:74:34:ad:4a: b8:0f:7f:fa:65:1f:8a:6a:9c:28:32:55:7d:2a:48:47:1d:a5: 9e:19:54:d9:5a:39:b2:a6:9d:3e:8e:e8:4b:a8:cc:95:fa:0d: bc:db:77:7e:f4:ea:9a:4e:18:a9:ad:39:82:37:0d:5a:53:e1: c1:18:2e:fa:af:7e:d4:2d:37:d9:c7:a1:48:d8:d6:34:6d:99: 3a:63:6c:df -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3lwwW+VhQ11Ojg7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE1MTQzOFoXDTI4MDgyMjE1MTQzOFowLzEtMCsGA1UEAxMk NjRlNDA4NTgtNWNiZi00NzU2LTgyOTgtMWRiNTVmYzY2ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4J047PlUCxf7bEBw4Nem2tykxAnDTQRXRSe RXW9JtKjO+Y7ONUkEFd/lLKqgjtKlflB3uwaSr5kl0C6NwWhfUIaEC6S9UYz6Aqe Bd8mKSg4iz/hJf4JXIaqi8dZ9+RRp9KA13FPO3V0E1id/wvsBPbmZITT8mYk6upB ef7aRD4DE9ZiFGbzLaHCtKBNWi9TwMNtvF7+SFxY71cruXtHAiy7y2RYg1/eODM4 J9i4lD5lWvSvlw0ez8x0oXMx0MROuPY/oWkRi7GcjyVH0dbzfKVpygDBbvVcJ8FU MH6xjcUsbt4ABbM6GLHY+C9U06x/yS8XxRZb6bqo6agUF0olawIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFH2kUCffRNPLbJxrm8xLmXKzk6c4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 NGU0MDg1OC01Y2JmLTQ3NTYtODI5OC0xZGI1NWZjNjZkODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY0ZTQwODU4LTVjYmYtNDc1Ni04 Mjk4LTFkYjU1ZmM2NmQ4Mi82NGU0MDg1OC01Y2JmLTQ3NTYtODI5OC0xZGI1NWZj NjZkODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmpQwDgQCAAIwCAMGACYC9C4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjcTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqSJWvoa+9hzx4vAv+EnDOWi0R 51vFfyRhemPpOHsrvCrlUdbT7+leHeGnzXkTRTF+eVJGkJFWMrKWY7ebFMGoQakq r/zVmbFZk1xLmebRcTUDyFYsW9tqYXRawSnLy9NKxNRR+69sxNcke+OtaqZ3HKQj Dx9u9hmC75QRfrYQfFPYGnAGtGOCsEY7R7+sUN86EZ+dBbS7X6NMwrpPN41IafeA VGT47jICCS+UWKIBz3Q0rUq4D3/6ZR+KapwoMlV9KkhHHaWeGVTZWjmypp0+juhL qMyV+g2823d+9OqaThiprTmCNw1aU+HBGC76r37ULTfZx6FI2NY0bZk6Y2zf -----END CERTIFICATE-----Generated at Sun May 24 13:45:15 2026 by rpki-client