$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e.cer File: 7d69a54d-e6bb-43b2-a363-308bc5f4225e.cer (raw, json) Hash identifier: pq7+uOYppNrPlhPVGTDPrj/x1v+yOsBnh9mg01dIzIA= Subject key identifier: E8:3B:E0:23:4A:2C:B5:A5:39:09:32:19:CD:33:53:8F:DF:26:84:53 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F69965C13D8323A3CE1D1EAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/7d69a54d-e6bb-43b2-a363-308bc5f4225e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 13:18:17 +0000 Certificate not after: Thu 24 Aug 2028 15:38:48 +0000 Subordinate resources: AS: 402547 IP: 23.158.228.0/24 IP: 156.9.84.0/22 IP: 2602:f3ae::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:96:5c:13:d8:32:3a:3c:e1:d1:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 6 13:18:17 2026 GMT Not After : Aug 24 15:38:48 2028 GMT Subject: CN=7d69a54d-e6bb-43b2-a363-308bc5f4225e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d2:6c:24:79:e8:5e:0f:e5:25:4e:6a:96:79: 67:de:5c:17:9f:0d:d5:e0:46:77:ad:b4:de:9f:e5: e1:46:62:5a:3d:71:15:fc:91:03:61:e2:81:c1:3e: 89:d3:60:f7:b1:35:12:a5:45:86:5e:b5:5f:73:7f: 16:d4:30:1a:10:5c:bc:34:b8:8d:7d:ba:9c:db:f1: bc:72:2f:7d:74:c0:e7:37:c6:d3:e8:a1:fd:81:6d: 60:bd:2c:c1:7e:08:fa:c5:19:cd:b2:65:97:44:43: 6f:b5:57:5e:39:0d:19:3c:98:36:36:11:ee:d8:c2: 38:97:f0:71:7d:ab:c6:8d:bf:9b:e8:54:e7:d6:16: d6:04:24:72:13:2d:1c:2a:e4:5e:62:11:79:45:22: 8a:24:be:c1:03:0f:e1:7c:b8:c5:27:10:9a:91:a8: db:3b:c0:dd:a9:c2:4c:6f:02:83:f5:0b:90:da:2e: a7:2a:02:67:69:29:51:e0:01:d3:e0:5a:5c:a0:40: db:ac:41:67:b0:40:38:32:eb:c5:0f:f5:e0:42:44: 4d:29:4e:2c:69:a9:9c:95:1a:57:9c:9f:32:9d:fd: 25:de:c8:fe:50:f5:d5:f0:e3:6f:8a:9e:d1:67:11: 53:ce:27:36:c6:30:48:c6:ef:98:6e:27:b3:cb:f1: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:E0:23:4A:2C:B5:A5:39:09:32:19:CD:33:53:8F:DF:26:84:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/7d69a54d-e6bb-43b2-a363-308bc5f4225e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.158.228.0/24 156.9.84.0/22 IPv6: 2602:f3ae::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402547 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f2:8f:dd:34:67:e1:71:c5:0c:68:1e:98:7f:f7:59:71:53: 11:8f:ee:87:f0:3d:89:5e:08:bc:b6:66:53:86:a6:62:b1:1e: 1f:85:af:72:62:e4:0e:64:2b:7a:03:e4:d2:06:f7:a0:21:ca: 6c:2b:8d:0b:18:99:05:db:fd:b8:5f:75:1a:e2:dd:73:cd:47: a4:89:ff:a3:96:48:9f:7c:69:14:80:0c:33:06:ef:03:b9:3c: 04:3f:3d:3f:e5:38:99:22:93:68:10:bd:e9:33:69:b8:65:a8: 8a:d8:13:25:df:e8:11:46:72:8b:ba:7a:c2:0b:aa:1a:db:9b: b3:26:dd:93:79:03:5e:0f:31:cb:a7:06:79:8a:58:ab:c3:c2: 1f:0b:7f:55:cb:a5:be:dd:4f:ce:51:7f:80:60:a2:ad:ed:91: 3e:76:08:46:76:b8:77:96:ce:cc:5c:68:5e:78:64:20:1f:d6: 7b:0f:18:c9:6d:36:fc:b0:00:4b:60:58:45:b6:8d:c0:72:2c: 6e:2e:9f:55:78:21:cc:b5:31:10:06:35:f7:c9:ff:b0:e7:4e: de:6d:a3:e3:92:4a:06:ce:ca:05:87:79:d8:ed:93:84:a1:88: 91:43:ba:5c:62:4c:cd:8f:b0:0b:e3:fc:92:01:d0:3a:f8:bf: c7:26:10:a2 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9pllwT2DI6POHR6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNjEzMTgxN1oXDTI4MDgyNDE1Mzg0OFowLzEtMCsGA1UEAxMk N2Q2OWE1NGQtZTZiYi00M2IyLWEzNjMtMzA4YmM1ZjQyMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9JsJHnoXg/lJU5qlnln3lwXnw3V4EZ3rbTe n+XhRmJaPXEV/JEDYeKBwT6J02D3sTUSpUWGXrVfc38W1DAaEFy8NLiNfbqc2/G8 ci99dMDnN8bT6KH9gW1gvSzBfgj6xRnNsmWXRENvtVdeOQ0ZPJg2NhHu2MI4l/Bx favGjb+b6FTn1hbWBCRyEy0cKuReYhF5RSKKJL7BAw/hfLjFJxCakajbO8DdqcJM bwKD9QuQ2i6nKgJnaSlR4AHT4FpcoEDbrEFnsEA4MuvFD/XgQkRNKU4saamclRpX nJ8ynf0l3sj+UPXV8ONvip7RZxFTzic2xjBIxu+Ybiezy/FV+wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOg74CNKLLWlOQkyGc0zU4/fJoRTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 ZDY5YTU0ZC1lNmJiLTQzYjItYTM2My0zMDhiYzVmNDIyNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzdkNjlhNTRkLWU2YmItNDNiMi1h MzYzLTMwOGJjNWY0MjI1ZS83ZDY5YTU0ZC1lNmJiLTQzYjItYTM2My0zMDhiYzVm NDIyNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXnuQDBAKcCVQwDgQCAAIwCAMGACYC864AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYkczBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/8o/dNGfhccUMaB6Y f/dZcVMRj+6H8D2JXgi8tmZThqZisR4fha9yYuQOZCt6A+TSBvegIcpsK40LGJkF 2/24X3Ua4t1zzUekif+jlkiffGkUgAwzBu8DuTwEPz0/5TiZIpNoEL3pM2m4ZaiK 2BMl3+gRRnKLunrCC6oa25uzJt2TeQNeDzHLpwZ5ilirw8IfC39Vy6W+3U/OUX+A YKKt7ZE+dghGdrh3ls7MXGheeGQgH9Z7DxjJbTb8sABLYFhFto3AcixuLp9VeCHM tTEQBjX3yf+w507ebaPjkkoGzsoFh3nY7ZOEoYiRQ7pcYkzNj7AL4/ySAdA6+L/H JhCi -----END CERTIFICATE-----Generated at Tue Oct 20 05:17:30 2026 by rpki-client