$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8.cer File: 716e2469-c74e-486a-96b0-bb74f8ae86f8.cer (raw, json) Hash identifier: qKHIgcpD01RDxf7mOPhI7dvVmettcE1bUR//3KUNFm0= Subject key identifier: 1F:56:86:01:F9:E8:D4:71:7A:20:32:E0:07:65:F5:06:28:B5:80:86 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5C4491B560531DC63B11AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/716e2469-c74e-486a-96b0-bb74f8ae86f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 15:17:11 +0000 Certificate not after: Tue 22 Aug 2028 15:17:11 +0000 Subordinate resources: AS: 402281 IP: 23.154.140.0/24 IP: 2602:f433::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:c4:49:1b:56:05:31:dc:63:b1:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 15:17:11 2026 GMT Not After : Aug 22 15:17:11 2028 GMT Subject: CN=716e2469-c74e-486a-96b0-bb74f8ae86f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4d:69:dd:8d:63:4a:6a:47:d0:28:30:42:ed: 21:48:6a:4a:84:89:11:fb:6c:41:29:c5:aa:ad:cf: 4b:24:65:c0:a8:89:fc:b2:a1:21:9f:c2:85:bf:f6: 69:08:ec:de:81:ce:c6:2f:c8:0d:a4:b0:a6:e3:58: 74:2a:de:0f:69:08:ef:5e:c5:37:17:92:c8:04:5b: c9:b5:2f:29:5c:a2:f8:ff:c1:d6:5a:01:44:68:5c: 5c:de:78:db:44:aa:f6:ca:9c:ea:bd:31:8a:2e:83: 5c:08:f8:1b:a6:c7:6c:4c:b1:0c:c9:b7:30:d4:29: 41:7d:4c:f0:ba:e3:ee:9c:45:6e:e6:3f:54:df:56: 76:63:5d:54:9a:e3:bc:94:65:ca:7d:45:27:85:2a: ec:68:2b:7c:c1:fc:c5:d3:d4:b1:e0:ac:6c:68:95: 6c:bb:cb:e2:b3:30:8a:7e:5b:0b:00:29:d8:c8:bd: 33:1c:30:ce:bf:63:88:08:2a:09:81:ba:97:64:87: f8:00:53:15:59:ba:9f:5d:83:48:0c:54:28:01:d6: cb:5a:d5:e4:34:78:c7:3d:02:b8:f3:31:0b:9b:5d: 21:50:e2:05:f4:a0:0c:c8:6e:82:7d:19:94:c9:28: 16:5b:89:6f:26:80:44:fd:5c:f6:20:f7:18:3c:36: 7d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:56:86:01:F9:E8:D4:71:7A:20:32:E0:07:65:F5:06:28:B5:80:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/716e2469-c74e-486a-96b0-bb74f8ae86f8/716e2469-c74e-486a-96b0-bb74f8ae86f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.140.0/24 IPv6: 2602:f433::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402281 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:69:7a:ed:d6:fa:61:aa:ca:45:ae:be:74:03:f0:63:b4:69: 2f:64:86:d0:b5:d7:95:c1:63:24:5b:0b:a4:b2:39:42:db:81: 39:b4:db:90:18:da:d7:c0:cd:41:90:b5:de:7e:59:db:04:4f: 7b:ac:90:fa:46:a3:57:8a:dd:9e:f7:56:9f:62:3b:84:3c:1a: 6e:62:f2:c2:4c:4b:e9:a4:98:1a:3f:60:ae:ba:40:6e:f1:b3: 8f:16:07:64:87:66:db:d6:74:10:f1:3a:59:bf:f2:4c:9a:48: 8b:c8:4d:0f:93:bd:e3:6e:ef:49:f9:dc:88:1c:6a:cb:da:03: 87:05:91:64:e2:6f:e5:94:e4:1d:14:65:97:44:f8:f1:01:82: e3:0f:d9:d6:b5:88:af:d4:9c:2f:26:8c:b3:c4:71:b1:98:c1: 1c:ae:ad:53:ab:5f:ce:ca:a9:3a:e0:a9:bc:54:2e:15:16:38: d9:64:d2:08:12:b9:4f:90:bb:b3:dd:07:9d:1f:1a:96:df:0a: dc:2c:01:8b:d5:30:80:84:15:7f:c6:f1:d3:39:4f:07:3b:03: 26:f4:b3:fd:67:55:75:34:ed:99:76:ab:0d:b8:30:d7:7a:bd: c4:a0:39:0f:28:89:ef:09:74:e3:89:bb:15:0a:11:ab:c4:72: 67:26:81:41 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3lxEkbVgUx3GOxGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE1MTcxMVoXDTI4MDgyMjE1MTcxMVowLzEtMCsGA1UEAxMk NzE2ZTI0NjktYzc0ZS00ODZhLTk2YjAtYmI3NGY4YWU4NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU1p3Y1jSmpH0CgwQu0hSGpKhIkR+2xBKcWq rc9LJGXAqIn8sqEhn8KFv/ZpCOzegc7GL8gNpLCm41h0Kt4PaQjvXsU3F5LIBFvJ tS8pXKL4/8HWWgFEaFxc3njbRKr2ypzqvTGKLoNcCPgbpsdsTLEMybcw1ClBfUzw uuPunEVu5j9U31Z2Y11UmuO8lGXKfUUnhSrsaCt8wfzF09Sx4KxsaJVsu8viszCK flsLACnYyL0zHDDOv2OICCoJgbqXZIf4AFMVWbqfXYNIDFQoAdbLWtXkNHjHPQK4 8zELm10hUOIF9KAMyG6CfRmUySgWW4lvJoBE/Vz2IPcYPDZ9mQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFB9WhgH56NRxeiAy4Adl9QYotYCGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MTZlMjQ2OS1jNzRlLTQ4NmEtOTZiMC1iYjc0ZjhhZTg2ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzcxNmUyNDY5LWM3NGUtNDg2YS05 NmIwLWJiNzRmOGFlODZmOC83MTZlMjQ2OS1jNzRlLTQ4NmEtOTZiMC1iYjc0Zjhh ZTg2ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmowwDgQCAAIwCAMGACYC9DMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjaTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgaXrt1vphqspFrr50A/BjtGkv ZIbQtdeVwWMkWwuksjlC24E5tNuQGNrXwM1BkLXeflnbBE97rJD6RqNXit2e91af YjuEPBpuYvLCTEvppJgaP2CuukBu8bOPFgdkh2bb1nQQ8TpZv/JMmkiLyE0Pk73j bu9J+dyIHGrL2gOHBZFk4m/llOQdFGWXRPjxAYLjD9nWtYiv1JwvJoyzxHGxmMEc rq1Tq1/Oyqk64Km8VC4VFjjZZNIIErlPkLuz3QedHxqW3wrcLAGL1TCAhBV/xvHT OU8HOwMm9LP9Z1V1NO2ZdqsNuDDXer3EoDkPKInvCXTjibsVChGrxHJnJoFB -----END CERTIFICATE-----Generated at Sun May 24 13:49:07 2026 by rpki-client