$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer File: 8f5572eb-07c1-491f-b1e4-6f63872a6e80.cer (raw, json) Hash identifier: Y2WLEXe9UOG2BTxC0ygJSOxpZ3oEhwY/GJ6ThhHVnZs= Subject key identifier: 59:A1:D7:DE:D7:5D:6B:41:B5:4C:94:B5:DA:AD:5C:83:C0:4D:62:29 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D910EF249A74A369069EEBD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 07:03:54 +0000 Certificate not after: Sun 23 Jul 2028 07:03:54 +0000 Subordinate resources: AS: 55177 IP: 23.186.96.0/24 IP: 2602:f455::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:0e:f2:49:a7:4a:36:90:69:ee:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 20 07:03:54 2026 GMT Not After : Jul 23 07:03:54 2028 GMT Subject: CN=8f5572eb-07c1-491f-b1e4-6f63872a6e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:2f:ae:d8:3e:2d:e5:9d:fa:d5:95:4f:1c: 95:eb:b4:a3:d9:2d:70:31:53:30:de:1a:e1:fe:30: ac:fb:32:0c:d2:2a:6a:ed:1a:9d:9b:a8:a0:65:d6: 54:fd:3c:55:49:93:ff:79:e1:43:98:74:36:5f:e8: 42:69:c5:7e:cc:63:34:d1:2f:64:12:96:ce:e9:d1: 72:c1:5d:75:a6:44:a9:8b:c1:a7:77:3b:4f:ef:2e: 6f:ba:66:1a:16:4c:82:c7:81:25:39:61:8d:e2:c5: 49:b8:c7:a4:15:d2:d0:70:da:85:45:2c:4b:d7:3d: ea:0e:65:d9:d2:79:ea:d7:45:38:cb:5e:b9:65:51: 1f:25:d0:54:2e:35:fa:47:33:f6:13:2d:76:ef:4f: bb:21:ca:13:ea:04:db:3f:04:fd:fc:39:83:86:14: 8f:82:3a:99:ea:2a:2f:4a:c6:4c:e5:58:b9:a6:08: 6c:57:21:d4:c0:c4:a1:a5:c9:0c:5f:c5:0b:b1:99: 17:70:c6:01:7a:d8:b0:a8:58:66:65:e8:bf:e5:cc: 67:6e:71:f0:93:bc:bb:e5:ef:4d:4d:e3:61:f1:7a: 79:9c:78:af:1d:bf:7f:f8:7e:3e:29:66:e2:97:b5: ca:3a:56:53:47:1a:7f:85:5f:1d:2c:f5:ac:d7:1b: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A1:D7:DE:D7:5D:6B:41:B5:4C:94:B5:DA:AD:5C:83:C0:4D:62:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f5572eb-07c1-491f-b1e4-6f63872a6e80/8f5572eb-07c1-491f-b1e4-6f63872a6e80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.186.96.0/24 IPv6: 2602:f455::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55177 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:aa:4f:c8:1f:f6:3f:6f:c9:7f:c9:1b:0d:ff:42:af:63:fb: 91:4e:83:97:96:2f:9e:4e:34:16:be:80:12:f7:40:7e:bd:e6: a1:07:af:4b:c4:f3:5c:ce:02:49:91:d7:6c:41:99:fc:6b:54: 5e:be:bd:7f:ef:23:4f:4b:bd:45:1d:d0:f4:45:3e:01:fa:f3: f5:0b:5a:45:b7:82:24:61:96:58:8c:c1:d2:b9:76:11:7f:d6: be:dc:6b:88:c1:7e:e4:2d:93:4b:98:4d:0e:a7:f9:08:dd:4d: 87:23:16:4a:ff:3c:21:cf:9a:2d:61:3e:88:d3:cd:23:ba:61: a8:13:5b:58:62:8f:33:da:df:a3:82:4e:35:33:60:1c:6d:50: 8c:b3:18:c4:d4:f7:6d:76:5c:9c:de:5f:6a:d2:0c:4d:5c:68: 4c:90:d0:f6:ea:3a:db:f3:c6:6d:51:10:7f:30:61:e5:16:43: 55:76:be:70:19:46:6e:d1:d0:bf:3f:d7:63:87:f7:96:33:76: 16:2c:11:2c:b4:7d:27:a7:dc:83:0f:9e:cf:87:79:39:d1:6e: cf:41:76:78:e7:98:96:b5:09:86:83:ed:83:3c:09:10:0f:1a: 5d:0b:f3:db:2d:ab:a3:a2:e5:94:03:c2:39:cb:f6:f4:e4:0b: 6f:7d:da:73 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2RDvJJp0o2kGnuvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMDA3MDM1NFoXDTI4MDcyMzA3MDM1NFowLzEtMCsGA1UEAxMk OGY1NTcyZWItMDdjMS00OTFmLWIxZTQtNmY2Mzg3MmE2ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Qvrtg+LeWd+tWVTxyV67Sj2S1wMVMw3hrh /jCs+zIM0ipq7Rqdm6igZdZU/TxVSZP/eeFDmHQ2X+hCacV+zGM00S9kEpbO6dFy wV11pkSpi8GndztP7y5vumYaFkyCx4ElOWGN4sVJuMekFdLQcNqFRSxL1z3qDmXZ 0nnq10U4y165ZVEfJdBULjX6RzP2Ey1270+7IcoT6gTbPwT9/DmDhhSPgjqZ6iov SsZM5Vi5pghsVyHUwMShpckMX8ULsZkXcMYBetiwqFhmZei/5cxnbnHwk7y75e9N TeNh8Xp5nHivHb9/+H4+KWbil7XKOlZTRxp/hV8dLPWs1xugEQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFmh197XXWtBtUyUtdqtXIPATWIpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 ZjU1NzJlYi0wN2MxLTQ5MWYtYjFlNC02ZjYzODcyYTZlODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzhmNTU3MmViLTA3YzEtNDkxZi1i MWU0LTZmNjM4NzJhNmU4MC84ZjU1NzJlYi0wN2MxLTQ5MWYtYjFlNC02ZjYzODcy YTZlODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXumAwDgQCAAIwCAMGACYC9FUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDXiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaqk/IH/Y/b8l/yRsN/0KvY/uR ToOXli+eTjQWvoAS90B+veahB69LxPNczgJJkddsQZn8a1Revr1/7yNPS71FHdD0 RT4B+vP1C1pFt4IkYZZYjMHSuXYRf9a+3GuIwX7kLZNLmE0Op/kI3U2HIxZK/zwh z5otYT6I080jumGoE1tYYo8z2t+jgk41M2AcbVCMsxjE1Pdtdlyc3l9q0gxNXGhM kND26jrb88ZtURB/MGHlFkNVdr5wGUZu0dC/P9djh/eWM3YWLBEstH0np9yDD57P h3k50W7PQXZ455iWtQmGg+2DPAkQDxpdC/PbLaujouWUA8I5y/b05Atvfdpz -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:54 2026 by rpki-client