$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e.cer File: 6510af47-9f04-4f45-970f-534894be357e.cer (raw, json) Hash identifier: sUgIl+spxj6p8iaqrrRGc+KR4NPmeClnQEWGqgMjR54= Subject key identifier: B8:3B:12:CD:CB:BB:A6:03:63:F0:3B:67:00:9E:33:A4:2E:0D:A7:34 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F5F22C097632E8C44E8A0D320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/6510af47-9f04-4f45-970f-534894be357e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 19:27:16 +0000 Certificate not after: Wed 27 Sep 2028 17:16:48 +0000 Subordinate resources: AS: 402665 IP: 23.161.156.0/24 IP: 143.203.200.0/22 IP: 2602:f378::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:22:c0:97:63:2e:8c:44:e8:a0:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 2 19:27:16 2026 GMT Not After : Sep 27 17:16:48 2028 GMT Subject: CN=6510af47-9f04-4f45-970f-534894be357e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:52:74:51:f3:23:16:7b:8f:40:e0:11:63: 2c:43:41:50:1a:73:82:7c:4b:f0:7e:ee:c5:37:77: bb:4f:ea:8e:a6:12:76:15:bc:32:0c:00:ba:0e:7c: 07:34:56:23:83:9f:95:13:89:33:b8:fe:55:fb:76: 70:a7:17:b0:c3:59:65:d0:0f:3d:b8:50:46:40:79: d5:f5:26:b8:77:ee:df:fb:f5:e8:71:7a:e1:29:bd: cd:cd:bb:a4:03:c4:b1:d5:cc:ca:0b:43:57:d8:69: 41:a2:16:66:05:6e:bf:da:e4:ab:ea:34:23:f0:1d: 5b:ee:c8:4e:73:c5:0f:38:db:08:68:3b:5f:cd:df: ea:fa:69:1b:9b:91:25:60:f6:b9:84:44:ec:9a:4a: 95:8a:ce:ef:9c:89:6c:8d:6e:1c:37:37:78:8f:21: a0:8c:6a:46:a0:96:68:bc:e3:65:66:23:cb:f8:13: 92:81:0e:45:7a:dd:45:eb:f6:0c:ee:9b:62:1a:5e: 11:e8:dc:0b:6e:72:df:48:0e:e5:87:82:fd:77:85: dd:e0:c2:8e:43:a4:06:c6:48:0f:64:a0:f0:26:fb: 60:ef:fe:cb:ac:2b:c0:20:fa:40:0f:4b:62:6d:c9: d2:7d:11:72:2e:c4:a0:cb:f8:62:cf:03:a1:4d:e0: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:12:CD:CB:BB:A6:03:63:F0:3B:67:00:9E:33:A4:2E:0D:A7:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6510af47-9f04-4f45-970f-534894be357e/6510af47-9f04-4f45-970f-534894be357e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.156.0/24 143.203.200.0/22 IPv6: 2602:f378::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402665 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:24:60:67:2b:d8:db:e2:2e:94:92:1a:91:3e:c1:8d:90:5a: 9b:19:ab:52:c5:42:38:20:3e:e5:ab:73:3b:49:eb:86:b1:29: ea:31:a9:b5:9d:a7:17:eb:4b:44:10:c2:1c:f5:77:fc:c6:f7: e8:fa:27:f4:00:d6:75:24:8c:28:d0:48:44:02:ba:3a:8e:d4: 8f:54:1c:5b:a0:88:22:eb:f1:aa:e3:3a:ee:ca:fe:52:60:ce: 38:0e:fe:f3:e1:85:97:be:be:a3:96:5a:6e:a0:b3:26:57:19: 91:01:38:98:e8:d6:f4:a5:50:eb:c6:22:04:79:50:c8:37:26: ef:2e:7e:8d:3b:e5:3c:48:3f:63:db:71:89:d4:e2:d7:0e:21: 34:b0:c7:be:17:9f:e4:bf:1d:61:f9:2b:18:d5:08:80:90:70: 6e:fd:a0:d9:43:26:fe:cc:74:2e:60:00:83:41:8a:9d:3b:11: cd:17:37:0b:54:f4:94:86:3d:d4:32:36:7e:bb:1e:59:ca:2e: ec:5f:04:a3:32:e8:74:bb:0d:f5:e9:0e:37:4f:e0:76:94:f5: 94:37:59:d0:ce:4a:07:61:48:0b:2c:ad:d3:96:74:34:71:32: a8:3d:24:82:0c:d4:a4:06:dd:51:1f:a9:78:6f:34:a8:dd:80: 01:83:24:d0 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9fIsCXYy6MROig0yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwMjE5MjcxNloXDTI4MDkyNzE3MTY0OFowLzEtMCsGA1UEAxMk NjUxMGFmNDctOWYwNC00ZjQ1LTk3MGYtNTM0ODk0YmUzNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNZSdFHzIxZ7j0DgEWMsQ0FQGnOCfEvwfu7F N3e7T+qOphJ2FbwyDAC6DnwHNFYjg5+VE4kzuP5V+3Zwpxeww1ll0A89uFBGQHnV 9Sa4d+7f+/XocXrhKb3NzbukA8Sx1czKC0NX2GlBohZmBW6/2uSr6jQj8B1b7shO c8UPONsIaDtfzd/q+mkbm5ElYPa5hETsmkqVis7vnIlsjW4cNzd4jyGgjGpGoJZo vONlZiPL+BOSgQ5Fet1F6/YM7ptiGl4R6NwLbnLfSA7lh4L9d4Xd4MKOQ6QGxkgP ZKDwJvtg7/7LrCvAIPpAD0tibcnSfRFyLsSgy/hizwOhTeAJHwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFLg7Es3Lu6YDY/A7ZwCeM6QuDac0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 NTEwYWY0Ny05ZjA0LTRmNDUtOTcwZi01MzQ4OTRiZTM1N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY1MTBhZjQ3LTlmMDQtNGY0NS05 NzBmLTUzNDg5NGJlMzU3ZS82NTEwYWY0Ny05ZjA0LTRmNDUtOTcwZi01MzQ4OTRi ZTM1N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXoZwDBAKPy8gwDgQCAAIwCAMGACYC83gAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYk6TBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfJGBnK9jb4i6UkhqR PsGNkFqbGatSxUI4ID7lq3M7SeuGsSnqMam1nacX60tEEMIc9Xf8xvfo+if0ANZ1 JIwo0EhEAro6jtSPVBxboIgi6/Gq4zruyv5SYM44Dv7z4YWXvr6jllpuoLMmVxmR ATiY6Nb0pVDrxiIEeVDINybvLn6NO+U8SD9j23GJ1OLXDiE0sMe+F5/kvx1h+SsY 1QiAkHBu/aDZQyb+zHQuYACDQYqdOxHNFzcLVPSUhj3UMjZ+ux5Zyi7sXwSjMuh0 uw316Q43T+B2lPWUN1nQzkoHYUgLLK3TlnQ0cTKoPSSCDNSkBt1RH6l4bzSo3YAB gyTQ -----END CERTIFICATE-----Generated at Wed Oct 21 04:00:11 2026 by rpki-client