$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144.cer File: 7d4b5dad-e51a-483b-88aa-d70fd450f144.cer (raw, json) Hash identifier: 9eo6idN+4wm0BiULdDL7u/1kpi94mRicZpJ1nDOh+Nk= Subject key identifier: 70:A4:9E:86:C2:30:D5:98:62:55:71:40:02:B0:09:86:1E:92:BE:67 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD82D352A26CEEC407C02E4A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 15 May 2026 18:27:16 +0000 Certificate not after: Wed 16 Aug 2028 16:45:14 +0000 Subordinate resources: AS: 40117 IP: 23.158.52.0/24 IP: 2602:f3e4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:2d:35:2a:26:ce:ec:40:7c:02:e4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 15 18:27:16 2026 GMT Not After : Aug 16 16:45:14 2028 GMT Subject: CN=7d4b5dad-e51a-483b-88aa-d70fd450f144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f4:c9:4e:0a:72:48:ee:53:45:92:d6:14:6e: 51:96:92:32:44:44:bd:17:2f:f0:9c:bf:6a:19:c9: 87:8b:e7:12:11:95:5b:98:08:90:b2:8e:67:ab:53: 68:bb:da:f4:12:6a:ad:e7:91:69:a3:e3:01:f5:6e: e5:b3:0a:d4:08:b0:c8:f0:39:45:d5:1f:5a:3b:ba: f4:a9:c1:75:a6:fb:3b:40:ae:81:f5:7e:f4:af:2d: dc:37:d3:66:76:43:75:a5:0f:f3:92:5d:26:32:c0: 0e:7d:c4:16:85:d7:74:3a:56:cd:e6:b6:7c:0e:06: 3a:85:cf:b5:e9:8b:ad:22:5c:31:48:86:28:84:45: b0:22:e7:3a:2d:c3:78:38:1c:3e:fd:cb:9e:53:4a: a2:70:2f:42:be:14:62:64:03:df:98:e2:1c:35:8f: b3:51:98:7e:61:26:6f:d5:07:79:fd:b1:a6:82:f7: fd:3e:7c:99:36:63:99:58:7b:bb:3b:8d:c0:2b:bb: ac:e1:c0:ff:6e:44:0b:88:8d:0b:7c:aa:3a:f5:0d: d7:de:19:ec:69:69:3c:01:da:ef:da:af:29:5f:28: 2f:26:d6:d0:11:9f:66:34:87:cb:d7:a6:2e:db:d6: 82:d5:a1:9d:31:36:9d:c8:26:70:85:01:f7:e0:e6: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:9E:86:C2:30:D5:98:62:55:71:40:02:B0:09:86:1E:92:BE:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.158.52.0/24 IPv6: 2602:f3e4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40117 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:53:0f:5d:81:f8:c5:0a:13:84:ac:ff:2b:24:05:77:48:51: 0d:01:45:a4:d0:45:57:7a:64:b8:ce:4f:d1:6d:d7:69:ae:6b: ec:b1:13:86:93:75:0f:57:87:eb:93:06:d8:21:3f:25:ac:4b: 82:d9:ae:f0:a3:32:23:63:53:a1:42:8e:65:c5:35:48:82:5e: 29:ee:92:bd:d7:b2:fe:b9:75:d7:b4:36:dd:2e:5b:0b:76:be: f4:e0:af:1b:2f:4e:fa:51:73:99:ad:d4:b2:43:8f:43:68:c5: ce:24:3e:2e:92:29:5c:3f:38:e0:3c:5b:b1:b9:16:38:4b:16: 25:c2:80:4c:80:85:24:ef:d7:48:e4:a1:3a:7e:e6:01:59:41: 1a:05:c6:da:fd:f2:2c:15:30:e2:64:0e:52:53:cb:fb:fc:8f: 03:e1:85:5f:60:05:93:7c:59:02:3f:0c:1d:4f:19:2a:ba:3a: 0d:53:9b:1d:03:fa:2f:10:19:10:2e:11:60:97:29:d4:22:10: 73:76:9d:75:5f:ef:e6:ae:fd:a3:15:f0:8e:49:12:51:28:26: ef:d1:50:12:4e:23:df:af:ad:87:f3:33:25:c5:3c:58:96:06: bc:8a:da:ec:96:04:2f:4e:66:ba:75:7f:4b:23:6e:32:ba:96: 30:e7:51:be -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3YLTUqJs7sQHwC5KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNTE4MjcxNloXDTI4MDgxNjE2NDUxNFowLzEtMCsGA1UEAxMk N2Q0YjVkYWQtZTUxYS00ODNiLTg4YWEtZDcwZmQ0NTBmMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPTJTgpySO5TRZLWFG5RlpIyRES9Fy/wnL9q GcmHi+cSEZVbmAiQso5nq1Nou9r0Emqt55Fpo+MB9W7lswrUCLDI8DlF1R9aO7r0 qcF1pvs7QK6B9X70ry3cN9NmdkN1pQ/zkl0mMsAOfcQWhdd0OlbN5rZ8DgY6hc+1 6YutIlwxSIYohEWwIuc6LcN4OBw+/cueU0qicC9CvhRiZAPfmOIcNY+zUZh+YSZv 1Qd5/bGmgvf9PnyZNmOZWHu7O43AK7us4cD/bkQLiI0LfKo69Q3X3hnsaWk8Adrv 2q8pXygvJtbQEZ9mNIfL16Yu29aC1aGdMTadyCZwhQH34OZyZwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHCknobCMNWYYlVxQAKwCYYekr5nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 ZDRiNWRhZC1lNTFhLTQ4M2ItODhhYS1kNzBmZDQ1MGYxNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzdkNGI1ZGFkLWU1MWEtNDgzYi04 OGFhLWQ3MGZkNDUwZjE0NC83ZDRiNWRhZC1lNTFhLTQ4M2ItODhhYS1kNzBmZDQ1 MGYxNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnjQwDgQCAAIwCAMGACYC8+QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCctTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDDUw9dgfjFChOErP8rJAV3SFEN AUWk0EVXemS4zk/RbddprmvssROGk3UPV4frkwbYIT8lrEuC2a7wozIjY1OhQo5l xTVIgl4p7pK917L+uXXXtDbdLlsLdr704K8bL076UXOZrdSyQ49DaMXOJD4ukilc PzjgPFuxuRY4SxYlwoBMgIUk79dI5KE6fuYBWUEaBcba/fIsFTDiZA5SU8v7/I8D 4YVfYAWTfFkCPwwdTxkqujoNU5sdA/ovEBkQLhFglynUIhBzdp11X+/mrv2jFfCO SRJRKCbv0VASTiPfr62H8zMlxTxYlga8itrslgQvTma6dX9LI24yupYw51G+ -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:43 2026 by rpki-client