$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a.cer File: 6e3baee7-85dd-484a-bdbd-415ab1a6863a.cer (raw, json) Hash identifier: bRMW5VgGp5Z3q6eQpXw989gz1LdjWBSzRQLyHm9/RbQ= Subject key identifier: 8C:0F:CC:9C:11:44:66:84:1E:92:EC:D4:61:8A:43:56:8D:22:E6:01 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD5061B0A177AB7F28EB84F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/6e3baee7-85dd-484a-bdbd-415ab1a6863a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 May 2026 15:21:03 +0000 Certificate not after: Wed 16 Aug 2028 15:21:03 +0000 Subordinate resources: AS: 396497 IP: 23.249.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d5:06:1b:0a:17:7a:b7:f2:8e:b8:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 14 15:21:03 2026 GMT Not After : Aug 16 15:21:03 2028 GMT Subject: CN=6e3baee7-85dd-484a-bdbd-415ab1a6863a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:22:f9:aa:48:89:04:73:73:40:a8:b1:16: ae:a5:35:ed:a4:a2:ed:3b:9d:4f:b6:d8:c5:92:e4: f0:ec:a2:89:17:57:70:31:02:30:ee:81:1a:92:93: 8b:84:8d:ec:f0:4e:1e:ac:23:44:d0:13:ea:d5:1e: fb:40:06:10:e9:2f:c3:61:57:1b:ca:ef:18:80:d6: 28:6d:12:1e:52:25:ae:98:81:e1:03:bc:c9:17:49: 27:04:4d:bf:e9:f6:61:f9:cd:f9:9d:e0:1d:58:db: 80:85:73:90:61:81:5a:5e:65:c6:0d:a5:5b:fe:a3: e9:b3:e1:ec:cc:21:93:09:26:53:f1:23:35:73:9c: c0:7f:f7:19:92:dd:e9:dc:91:59:04:28:c3:e8:d7: 8c:1e:3f:47:d6:09:ea:ac:02:7d:61:a8:a7:05:39: 60:38:60:c8:1f:b6:56:2a:17:fa:b3:8c:94:22:4d: 3c:82:50:06:dd:6b:9f:55:7c:56:71:85:b4:cd:18: 6a:68:4a:d8:b5:6c:5c:03:14:f8:fc:00:c4:b2:d4: 72:0c:79:b3:a2:3d:ae:c4:69:ba:3e:8c:45:92:fa: 92:c5:c2:f1:c9:48:e8:a4:ea:82:38:7e:cd:37:5f: 8f:61:7b:6f:86:a3:aa:c0:4b:40:d0:82:35:2a:ea: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0F:CC:9C:11:44:66:84:1E:92:EC:D4:61:8A:43:56:8D:22:E6:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/6e3baee7-85dd-484a-bdbd-415ab1a6863a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.249.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396497 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:13:08:14:e7:93:07:ac:a3:93:c1:4b:db:9b:5d:65:7e:fa: bb:8c:c0:b8:83:56:68:ad:13:0d:47:71:28:50:cc:94:ae:6e: ee:67:fb:da:f5:59:62:ab:a0:f7:c7:d9:7e:13:1e:3d:b8:7c: c8:ef:c6:ff:a2:e0:25:63:31:1f:07:73:d9:ef:46:38:0d:5f: e4:19:29:46:68:9a:7f:71:0a:5e:a5:2f:84:02:73:35:7d:23: 68:c3:74:09:89:55:dd:e8:2c:5a:8d:6c:28:e2:1f:ef:80:01: a1:49:35:7d:0a:67:8d:37:9b:47:2b:ce:b6:80:54:73:58:41: 20:fd:c7:62:0a:62:27:b0:d0:a0:6f:08:53:49:25:22:1a:ac: 4c:59:f9:96:41:0d:4c:5b:6c:f3:3b:c7:50:35:70:16:6b:2a: a8:ef:bb:99:43:7a:8a:51:57:a5:e7:8d:81:c1:38:90:1c:d5: 68:e7:3c:7f:6d:46:fd:38:ca:dc:7b:5f:ab:1b:c0:cb:c2:e0: c5:86:6f:01:9d:8e:3b:7c:6a:a7:5c:db:3d:ff:96:43:ac:07: 1f:b8:c5:2f:ef:26:b6:96:e5:cd:c0:c2:df:92:a0:ad:73:57: 3c:37:6f:0a:85:1d:c2:01:bb:75:ba:c2:a1:eb:4f:bc:98:3d: e0:55:be:34 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3VBhsKF3q38o64TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNDE1MjEwM1oXDTI4MDgxNjE1MjEwM1owLzEtMCsGA1UEAxMk NmUzYmFlZTctODVkZC00ODRhLWJkYmQtNDE1YWIxYTY4NjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdki+apIiQRzc0CosRaupTXtpKLtO51PttjF kuTw7KKJF1dwMQIw7oEakpOLhI3s8E4erCNE0BPq1R77QAYQ6S/DYVcbyu8YgNYo bRIeUiWumIHhA7zJF0knBE2/6fZh+c35neAdWNuAhXOQYYFaXmXGDaVb/qPps+Hs zCGTCSZT8SM1c5zAf/cZkt3p3JFZBCjD6NeMHj9H1gnqrAJ9YainBTlgOGDIH7ZW Khf6s4yUIk08glAG3WufVXxWcYW0zRhqaErYtWxcAxT4/ADEstRyDHmzoj2uxGm6 PoxFkvqSxcLxyUjopOqCOH7NN1+PYXtvhqOqwEtA0II1KuoKhwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIwPzJwRRGaEHpLs1GGKQ1aNIuYBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 ZTNiYWVlNy04NWRkLTQ4NGEtYmRiZC00MTVhYjFhNjg2M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzZlM2JhZWU3LTg1ZGQtNDg0YS1i ZGJkLTQxNWFiMWE2ODYzYS82ZTNiYWVlNy04NWRkLTQ4NGEtYmRiZC00MTVhYjFh Njg2M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIX+QwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgzRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEQTCBTnkweso5PBS9ubXWV++ruMwLiDVmitEw1HcShQzJSu bu5n+9r1WWKroPfH2X4THj24fMjvxv+i4CVjMR8Hc9nvRjgNX+QZKUZomn9xCl6l L4QCczV9I2jDdAmJVd3oLFqNbCjiH++AAaFJNX0KZ403m0crzraAVHNYQSD9x2IK Yiew0KBvCFNJJSIarExZ+ZZBDUxbbPM7x1A1cBZrKqjvu5lDeopRV6XnjYHBOJAc 1WjnPH9tRv04ytx7X6sbwMvC4MWGbwGdjjt8aqdc2z3/lkOsBx+4xS/vJraW5c3A wt+SoK1zVzw3bwqFHcIBu3W6wqHrT7yYPeBVvjQ= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:35 2026 by rpki-client