$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3.cer File: 6e515aa0-534b-4527-ba50-26195a997cc3.cer (raw, json) Hash identifier: umXEzInvDRNnHpxa1nINX5fbRAEJz6LxysiwCd8UmNw= Subject key identifier: B9:94:23:E1:95:FC:1D:7D:B3:0B:72:3E:16:21:51:DA:93:C4:74:91 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E88055E0C3A62474757F29100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/6e515aa0-534b-4527-ba50-26195a997cc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Jul 2026 18:09:16 +0000 Certificate not after: Fri 18 Aug 2028 12:21:39 +0000 Subordinate resources: AS: 395673 IP: 23.190.168.0/24 IP: 2602:f815::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:05:5e:0c:3a:62:47:47:57:f2:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 17 18:09:16 2026 GMT Not After : Aug 18 12:21:39 2028 GMT Subject: CN=6e515aa0-534b-4527-ba50-26195a997cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:db:97:aa:af:83:62:88:85:0e:c5:1d:5c: e9:5b:fe:a6:4b:b0:4d:c5:2b:24:02:78:be:99:c9: 39:57:21:76:dc:9b:b6:34:9a:35:22:d7:dc:fd:37: ca:b3:aa:7c:d8:d5:f4:dc:b7:b1:c6:3f:c2:50:49: 47:d0:1b:4f:a1:9f:55:68:1e:ff:02:0f:76:b1:91: 09:3b:49:4e:e5:21:ea:3c:4f:21:3a:a0:96:b9:aa: c5:f5:52:80:30:f5:d8:43:c6:92:53:ea:66:06:63: cd:8f:e4:45:6a:66:20:5c:27:be:f7:2a:02:2b:f5: 2a:28:b3:67:b0:a5:b5:ab:11:0c:b0:24:34:f0:85: 85:dd:97:a7:fc:b1:19:01:67:cc:86:bc:41:ea:83: e2:2f:93:5f:fe:ef:a5:fb:c1:3e:47:26:d3:fd:87: 8a:15:68:ab:8a:9a:38:ef:21:c3:92:95:74:93:25: dc:53:7b:a2:e1:ff:ea:33:a2:aa:5d:bc:5e:66:4b: ca:53:6c:78:8b:ff:c3:b5:7c:7a:4f:58:26:da:93: c3:52:5d:9a:fd:5c:8e:91:55:be:6a:26:74:36:96: 70:0a:1b:19:f6:6c:43:f4:5a:b4:df:5f:0f:a6:5c: f9:90:20:13:ed:03:1d:98:c0:8a:74:86:68:f9:f6: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:94:23:E1:95:FC:1D:7D:B3:0B:72:3E:16:21:51:DA:93:C4:74:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e515aa0-534b-4527-ba50-26195a997cc3/6e515aa0-534b-4527-ba50-26195a997cc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.190.168.0/24 IPv6: 2602:f815::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395673 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:15:6c:c4:c7:27:d3:fb:93:14:5e:36:8d:de:7d:e9:e1:c5: 79:20:e7:b7:1c:70:50:5c:ec:d5:53:60:ea:0f:f9:23:a4:cc: f0:fc:08:40:5e:a8:9a:43:51:46:c6:e2:12:52:ff:80:69:05: 38:79:b8:06:f7:1c:3f:6e:f7:e5:b1:c6:4d:2a:f7:72:79:fc: 3c:e1:48:88:d2:cc:3c:6a:2f:dd:bb:d7:53:5d:ee:6d:15:11: 8c:11:f6:6f:e8:b7:46:cc:82:b2:fe:97:0a:70:c4:8a:15:a3: ba:d2:38:99:0e:54:9c:88:bc:98:92:60:96:8f:44:08:27:db: 68:e9:56:ad:f2:46:25:8d:b4:2e:cf:9c:3e:f3:95:b6:9e:05: c6:98:2b:5d:01:8b:74:15:87:9b:88:3f:90:93:d1:93:46:6d: 93:2d:e3:e4:80:f2:82:01:10:d9:a2:1b:57:9c:3d:09:27:84: ff:1b:ff:22:30:4c:f4:51:e3:cb:b8:69:37:b0:8f:8e:6e:8c: ec:58:eb:40:5b:99:54:cd:03:9e:6b:ef:10:13:0e:cc:b3:77: 7b:a9:be:fc:38:1f:8d:c4:d3:4c:f7:22:3b:99:15:51:ea:57: 8c:68:17:89:30:2a:85:95:19:7d:38:b5:99:74:ce:7d:be:92: 2b:d5:a2:8d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6IBV4MOmJHR1fykQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxNzE4MDkxNloXDTI4MDgxODEyMjEzOVowLzEtMCsGA1UEAxMk NmU1MTVhYTAtNTM0Yi00NTI3LWJhNTAtMjYxOTVhOTk3Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61/bl6qvg2KIhQ7FHVzpW/6mS7BNxSskAni+ mck5VyF23Ju2NJo1Itfc/TfKs6p82NX03Lexxj/CUElH0BtPoZ9VaB7/Ag92sZEJ O0lO5SHqPE8hOqCWuarF9VKAMPXYQ8aSU+pmBmPNj+RFamYgXCe+9yoCK/UqKLNn sKW1qxEMsCQ08IWF3Zen/LEZAWfMhrxB6oPiL5Nf/u+l+8E+RybT/YeKFWiripo4 7yHDkpV0kyXcU3ui4f/qM6KqXbxeZkvKU2x4i//DtXx6T1gm2pPDUl2a/VyOkVW+ aiZ0NpZwChsZ9mxD9Fq0318Pplz5kCAT7QMdmMCKdIZo+fbwNQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLmUI+GV/B19swtyPhYhUdqTxHSRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 ZTUxNWFhMC01MzRiLTQ1MjctYmE1MC0yNjE5NWE5OTdjYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzZlNTE1YWEwLTUzNGItNDUyNy1i YTUwLTI2MTk1YTk5N2NjMy82ZTUxNWFhMC01MzRiLTQ1MjctYmE1MC0yNjE5NWE5 OTdjYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvqgwDgQCAAIwCAMGBCYC+BUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYJmTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzFWzExyfT+5MUXjaN3n3p4cV5 IOe3HHBQXOzVU2DqD/kjpMzw/AhAXqiaQ1FGxuISUv+AaQU4ebgG9xw/bvflscZN Kvdyefw84UiI0sw8ai/du9dTXe5tFRGMEfZv6LdGzIKy/pcKcMSKFaO60jiZDlSc iLyYkmCWj0QIJ9to6Vat8kYljbQuz5w+85W2ngXGmCtdAYt0FYebiD+Qk9GTRm2T LePkgPKCARDZohtXnD0JJ4T/G/8iMEz0UePLuGk3sI+ObozsWOtAW5lUzQOea+8Q Ew7Ms3d7qb78OB+NxNNM9yI7mRVR6leMaBeJMCqFlRl9OLWZdM59vpIr1aKN -----END CERTIFICATE-----Generated at Tue Jul 21 14:31:22 2026 by rpki-client