$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e.cer File: 903d8031-038f-4173-84c3-7662f2a30c5e.cer (raw, json) Hash identifier: Moj1p2VP3vsG71PcdF82X4yzQ9OwrI5Fh+psMH1ATqA= Subject key identifier: A7:33:51:BD:DE:D5:1D:97:AD:F1:E9:0D:D4:52:47:7B:36:7B:44:32 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F6711A60CB6ECB02D93DB2360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/903d8031-038f-4173-84c3-7662f2a30c5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 15:39:16 +0000 Certificate not after: Wed 02 Aug 2028 19:34:00 +0000 Subordinate resources: AS: 402448 IP: 198.148.232.0/24 IP: 2602:81d:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:11:a6:0c:b6:ec:b0:2d:93:db:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 5 15:39:16 2026 GMT Not After : Aug 2 19:34:00 2028 GMT Subject: CN=903d8031-038f-4173-84c3-7662f2a30c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:08:e4:b3:92:7c:99:b6:c7:80:b2:29:00: 9b:c9:07:57:63:4f:bd:b9:6f:f8:67:33:9a:7e:63: 64:74:f2:13:4d:66:09:09:f6:19:47:88:37:43:ad: b1:6b:93:64:35:ec:dd:8d:9a:7d:bb:e8:b1:88:df: 95:70:39:3f:e2:9e:69:c6:88:60:98:49:1b:f3:f6: a6:57:e6:c8:eb:e7:6f:85:7c:10:cd:1e:61:4d:c5: 3d:81:85:5e:16:46:bf:d6:e5:86:b5:18:7c:ad:dd: 38:c5:28:60:dd:fb:ab:0d:29:ec:2c:be:35:79:c6: 24:41:45:e5:6b:c8:dc:86:90:10:13:89:9f:77:b3: f8:e3:33:f0:08:56:ef:01:08:2e:5a:0e:55:58:68: 11:5d:43:09:45:1e:05:c0:2e:5d:55:ed:5f:0e:3b: b4:79:45:1b:60:d1:85:eb:70:99:0e:97:dc:27:a5: 27:b5:c8:62:87:7d:16:e6:0e:d2:6a:29:aa:e0:32: 72:a9:56:70:b0:9a:4d:1d:e5:11:c6:e0:47:14:fe: aa:57:89:a3:08:e2:de:bc:bb:42:3d:79:d8:d8:8f: 24:f4:56:e0:4f:5c:77:d7:3b:bb:b1:8c:a1:b9:ab: d5:1d:f4:b1:88:80:f4:7a:20:11:b7:e6:19:49:f1: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:33:51:BD:DE:D5:1D:97:AD:F1:E9:0D:D4:52:47:7B:36:7B:44:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/903d8031-038f-4173-84c3-7662f2a30c5e/903d8031-038f-4173-84c3-7662f2a30c5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.148.232.0/24 IPv6: 2602:81d:b000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402448 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e9:46:da:65:95:67:5f:85:82:d2:1b:09:8d:29:7c:f2:40: a3:ab:01:f6:5a:d4:f8:28:e4:65:c9:15:b8:de:57:40:9e:c2: 09:b2:49:99:2b:64:7b:03:a9:99:c9:59:e1:5d:5b:4b:4b:62: cd:34:e0:a6:d5:59:ea:38:9e:af:0d:28:4f:33:27:4d:f9:c6: c9:1b:1a:55:e8:88:26:27:ba:b3:e7:7d:fe:e8:08:6a:3f:74: f9:d8:d7:9c:0f:e8:af:17:fe:d0:26:d2:d9:fd:dc:49:89:e8: d6:c7:ec:a3:e7:76:e7:ec:a1:cd:bf:f7:7d:95:4d:8d:ac:cf: c5:46:47:35:54:1d:25:77:05:1c:98:f1:f9:34:1b:04:5f:26: 27:19:46:4a:30:c7:46:5b:de:da:d3:e7:f0:97:23:a5:6f:23: 1e:04:39:58:12:12:ca:d0:4e:0b:ce:e8:3f:cc:75:c9:6a:4f: ec:d6:d0:2e:a0:be:65:3b:ed:51:e2:55:7e:50:45:c9:bb:e9: e0:30:ac:19:60:9a:01:8b:52:ba:93:a3:ae:00:a1:13:8c:62: 7d:19:ed:cc:0c:99:77:43:dc:15:44:e2:fb:30:be:b5:29:67: 0f:af:8a:40:c9:8c:4b:e1:49:d4:1c:16:e7:9e:f6:19:8c:78: ee:eb:bf:57 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9nEaYMtuywLZPbI2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNTE1MzkxNloXDTI4MDgwMjE5MzQwMFowLzEtMCsGA1UEAxMk OTAzZDgwMzEtMDM4Zi00MTczLTg0YzMtNzY2MmYyYTMwYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmII5LOSfJm2x4CyKQCbyQdXY0+9uW/4ZzOa fmNkdPITTWYJCfYZR4g3Q62xa5NkNezdjZp9u+ixiN+VcDk/4p5pxohgmEkb8/am V+bI6+dvhXwQzR5hTcU9gYVeFka/1uWGtRh8rd04xShg3furDSnsLL41ecYkQUXl a8jchpAQE4mfd7P44zPwCFbvAQguWg5VWGgRXUMJRR4FwC5dVe1fDju0eUUbYNGF 63CZDpfcJ6Untchih30W5g7Saimq4DJyqVZwsJpNHeURxuBHFP6qV4mjCOLevLtC PXnY2I8k9FbgT1x31zu7sYyhuavVHfSxiID0eiARt+YZSfHUCQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFKczUb3e1R2XrfHpDdRSR3s2e0QyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 MDNkODAzMS0wMzhmLTQxNzMtODRjMy03NjYyZjJhMzBjNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzkwM2Q4MDMxLTAzOGYtNDE3My04 NGMzLTc2NjJmMmEzMGM1ZS85MDNkODAzMS0wMzhmLTQxNzMtODRjMy03NjYyZjJh MzBjNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADGlOgwDwQCAAIwCQMHBCYCCB2wADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJBAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj+lG2mWVZ1+FgtIbCY0pfPJA o6sB9lrU+CjkZckVuN5XQJ7CCbJJmStkewOpmclZ4V1bS0tizTTgptVZ6jierw0o TzMnTfnGyRsaVeiIJie6s+d9/ugIaj90+djXnA/orxf+0CbS2f3cSYno1sfso+d2 5+yhzb/3fZVNjazPxUZHNVQdJXcFHJjx+TQbBF8mJxlGSjDHRlve2tPn8JcjpW8j HgQ5WBISytBOC87oP8x1yWpP7NbQLqC+ZTvtUeJVflBFybvp4DCsGWCaAYtSupOj rgChE4xifRntzAyZd0PcFUTi+zC+tSlnD6+KQMmMS+FJ1BwW5572GYx47uu/Vw== -----END CERTIFICATE-----Generated at Wed Oct 21 01:29:48 2026 by rpki-client