$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/712514bd-9297-4ea3-bd26-961756430547.cer File: 712514bd-9297-4ea3-bd26-961756430547.cer (raw, json) Hash identifier: rH56wUE2BP6zHi6+WZJcvz2PliRpGIwGKi631hYHxLE= Subject key identifier: 42:E5:E0:06:AC:39:E6:AA:A9:43:46:B3:08:1E:29:6C:4E:DC:79:65 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5C65ABAA12E1D8727AD4980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/712514bd-9297-4ea3-bd26-961756430547/712514bd-9297-4ea3-bd26-961756430547.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/712514bd-9297-4ea3-bd26-961756430547/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 15:21:21 +0000 Certificate not after: Tue 22 Aug 2028 15:21:21 +0000 Subordinate resources: IP: 23.154.92.0/24 IP: 2602:f436::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:c6:5a:ba:a1:2e:1d:87:27:ad:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 15:21:21 2026 GMT Not After : Aug 22 15:21:21 2028 GMT Subject: CN=712514bd-9297-4ea3-bd26-961756430547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:bb:bd:6a:92:67:6d:03:36:7f:cf:3e:b9: 3a:d5:f9:2b:02:1a:6c:1e:e5:ad:bf:31:3d:4a:9d: ae:27:ea:b0:1b:18:65:e8:34:f9:85:45:c9:f0:5c: d0:8b:a4:09:58:3a:95:53:67:35:4f:6e:e6:ef:74: ba:3b:80:08:3b:6c:1f:f6:fb:7f:1d:96:e0:55:f7: 4b:f4:cc:23:4e:2c:97:d0:0d:13:cb:2d:60:7c:26: 85:da:8b:33:f8:5f:8c:0e:d8:58:f8:b3:5c:69:27: 22:25:09:77:30:0c:6f:03:0d:25:10:8f:84:d7:b3: 1b:be:ac:22:ce:fb:68:2f:9d:d0:54:8b:e9:9c:1b: 28:a9:ee:8f:e6:4f:f5:24:49:14:33:09:0b:f7:4d: b1:8b:61:60:4a:58:cc:39:80:56:90:71:9a:d5:05: 1f:b0:ba:da:f2:ea:26:47:0c:ad:6b:12:83:3c:1a: f7:6b:22:67:18:8d:c4:16:dd:f7:72:b4:93:12:97: ba:a5:28:49:86:9e:1c:21:70:08:72:16:14:ea:6f: eb:44:73:6a:02:36:ee:6b:a6:b1:c3:ca:80:42:59: e3:f3:24:e0:f3:2a:80:f7:fb:e2:47:0c:b7:c5:3d: bd:2c:a6:a5:e4:64:62:04:a8:2b:8d:d0:92:07:c9: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E5:E0:06:AC:39:E6:AA:A9:43:46:B3:08:1E:29:6C:4E:DC:79:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/712514bd-9297-4ea3-bd26-961756430547/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/712514bd-9297-4ea3-bd26-961756430547/712514bd-9297-4ea3-bd26-961756430547.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.92.0/24 IPv6: 2602:f436::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5d:77:e9:22:b8:f4:5e:ac:ab:51:46:81:40:c0:05:9f:91: 49:f8:71:bb:44:dc:e0:6d:2e:3d:dd:d6:ec:50:53:6e:f1:46: ad:ec:bf:76:92:5f:43:5b:88:12:68:da:60:ce:86:46:85:2d: 6a:7c:85:f3:e4:4b:ec:a5:0b:c4:71:88:3e:92:00:18:78:7b: 45:49:22:77:e0:d6:ae:af:90:f3:d5:3c:e5:8b:6b:34:bd:15: 30:0b:19:4c:2d:9f:d7:ef:01:f3:0b:5f:f4:71:9f:45:60:5e: 66:62:0b:39:1f:09:54:fc:90:43:bf:db:53:6b:ed:52:b0:dc: 57:5b:1d:40:2f:40:a5:71:15:c3:6e:fa:84:61:3c:4e:6d:bc: bf:f7:fd:20:bd:98:46:b8:12:8d:3c:92:7d:d7:b9:d9:77:b8: 3c:39:e8:bb:1f:e1:6f:de:ef:0c:aa:c5:f7:4d:cd:a9:ba:14: e0:17:5d:d9:9c:8d:05:b6:03:62:0a:75:58:97:26:0f:e0:e2: ce:ff:bd:68:48:23:22:5a:4f:63:8b:ee:26:8b:c0:84:40:bd: ab:d5:ad:3d:bb:84:77:67:47:45:01:53:30:da:ab:69:e6:cf: 11:14:eb:21:af:fe:d8:4c:a2:e2:dc:f4:90:df:c0:13:21:86: 56:7b:81:07 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3lxlq6oS4dhyetSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE1MjEyMVoXDTI4MDgyMjE1MjEyMVowLzEtMCsGA1UEAxMk NzEyNTE0YmQtOTI5Ny00ZWEzLWJkMjYtOTYxNzU2NDMwNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKW7vWqSZ20DNn/PPrk61fkrAhpsHuWtvzE9 Sp2uJ+qwGxhl6DT5hUXJ8FzQi6QJWDqVU2c1T27m73S6O4AIO2wf9vt/HZbgVfdL 9MwjTiyX0A0Tyy1gfCaF2osz+F+MDthY+LNcaSciJQl3MAxvAw0lEI+E17Mbvqwi zvtoL53QVIvpnBsoqe6P5k/1JEkUMwkL902xi2FgSljMOYBWkHGa1QUfsLra8uom RwytaxKDPBr3ayJnGI3EFt33crSTEpe6pShJhp4cIXAIchYU6m/rRHNqAjbua6ax w8qAQlnj8yTg8yqA9/viRwy3xT29LKal5GRiBKgrjdCSB8m7cQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFELl4AasOeaqqUNGswgeKWxO3HllMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MTI1MTRiZC05Mjk3LTRlYTMtYmQyNi05NjE3NTY0MzA1NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzcxMjUxNGJkLTkyOTctNGVhMy1i ZDI2LTk2MTc1NjQzMDU0Ny83MTI1MTRiZC05Mjk3LTRlYTMtYmQyNi05NjE3NTY0 MzA1NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmlwwDgQCAAIwCAMGACYC9DYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACxdd+kiuPRerKtRRoFAwAWfkUn4cbtE3OBtLj3d1uxQU27xRq3sv3aSX0NbiBJo 2mDOhkaFLWp8hfPkS+ylC8RxiD6SABh4e0VJInfg1q6vkPPVPOWLazS9FTALGUwt n9fvAfMLX/Rxn0VgXmZiCzkfCVT8kEO/21Nr7VKw3FdbHUAvQKVxFcNu+oRhPE5t vL/3/SC9mEa4Eo08kn3Xudl3uDw56Lsf4W/e7wyqxfdNzam6FOAXXdmcjQW2A2IK dViXJg/g4s7/vWhIIyJaT2OL7iaLwIRAvavVrT27hHdnR0UBUzDaq2nmzxEU6yGv /thMouLc9JDfwBMhhlZ7gQc= -----END CERTIFICATE-----Generated at Sun May 24 13:45:33 2026 by rpki-client