$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer File: a327249c-db27-40a5-b04c-da03ae2d60a8.cer (raw, json) Hash identifier: TauFq36GAZAtdsBkTHV6JftWoU0XSm+lhRpA9H/yKs8= Subject key identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F6988EFF95B038473BE3B2180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 12:51:14 +0000 Certificate not after: Thu 21 Sep 2028 06:18:47 +0000 Subordinate resources: AS: 402647 IP: 23.160.60.0/24 IP: 156.9.16.0/22 IP: 2607:9440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:88:ef:f9:5b:03:84:73:be:3b:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 6 12:51:14 2026 GMT Not After : Sep 21 06:18:47 2028 GMT Subject: CN=a327249c-db27-40a5-b04c-da03ae2d60a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:75:72:03:89:f2:45:25:53:af:77:ff:c1: 1f:5c:b0:38:65:d2:3f:07:5b:df:d4:01:58:c1:79: ca:56:85:21:50:54:1e:78:78:2b:be:f1:85:08:e9: fb:52:d4:aa:57:04:e8:54:11:c5:c7:15:b0:70:2f: 9a:7e:5e:c9:22:94:46:c9:76:2c:d1:04:df:f5:7c: ce:cf:a2:b0:81:ff:4b:dc:81:9a:04:a8:41:a9:ef: bc:7b:a4:f6:17:22:fa:2e:30:bf:24:99:2b:bd:ad: 25:2b:4f:67:da:71:73:a8:3b:bf:a3:52:b5:50:60: 89:8a:ff:4d:fc:b3:05:c7:c9:ae:47:49:fe:9b:41: 71:0e:38:6d:8a:2f:e2:fe:7a:e1:16:38:e8:47:ff: e3:c5:8d:3f:3f:32:0a:3c:0c:37:de:79:48:98:6c: cf:72:bf:ec:e4:dd:f3:01:aa:5b:8d:e1:b3:75:15: de:93:ef:99:3a:9e:e8:9b:27:39:5f:4f:81:95:54: ce:4b:58:30:78:37:3c:8e:28:7c:76:67:e7:7c:1e: 78:55:30:ca:aa:d3:c2:35:8d:2d:98:9b:c5:c5:be: 2f:c6:8b:95:8d:fc:30:73:55:c4:18:56:cd:8f:bb: 50:39:ca:c8:d1:42:86:5e:2f:d5:9c:8b:8b:85:b5: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.160.60.0/24 156.9.16.0/22 IPv6: 2607:9440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402647 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3e:6f:52:db:da:4b:0c:5a:77:1f:b7:f6:0b:56:1a:4c:b1: 92:6d:f6:d2:c2:a4:8f:59:dd:89:8f:2f:76:95:16:d3:9d:ab: 72:45:e6:e7:36:b0:1f:b5:62:5f:c7:20:ee:56:c3:a5:f0:b1: 19:19:77:0a:d3:33:2e:20:0f:8e:9f:50:45:cc:a4:c1:1b:70: 2a:00:84:50:b6:00:c1:5b:fc:87:51:22:cd:1a:0b:4f:6f:b8: 44:ca:6c:17:22:ae:3c:50:0b:30:5f:4b:ca:c1:67:f3:37:1a: 1c:65:98:85:19:34:69:34:1e:6e:1c:aa:1f:53:39:82:70:dd: ff:5f:69:84:c6:ec:a1:79:2e:44:fa:45:69:c1:50:2b:52:64: 3b:00:7a:c1:1e:36:36:60:de:7f:81:85:47:28:af:4f:43:2b: 9a:38:92:d8:de:26:aa:9d:42:37:77:fc:01:ab:6f:3f:7b:69: 17:77:78:35:8a:4c:59:1d:21:41:62:b2:83:97:7f:21:52:08: 07:9d:35:8a:2f:6e:ab:ad:f1:dd:36:67:96:f1:16:37:2e:01: ee:dc:0d:d5:ab:cb:31:8e:a9:04:b3:26:af:96:f8:20:c8:b2: e4:0f:da:1a:13:65:1d:7c:55:ad:26:74:d1:ec:76:2a:04:57: 25:69:7a:ba -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9piO/5WwOEc747IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNjEyNTExNFoXDTI4MDkyMTA2MTg0N1owLzEtMCsGA1UEAxMk YTMyNzI0OWMtZGIyNy00MGE1LWIwNGMtZGEwM2FlMmQ2MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5l1cgOJ8kUlU693/8EfXLA4ZdI/B1vf1AFY wXnKVoUhUFQeeHgrvvGFCOn7UtSqVwToVBHFxxWwcC+afl7JIpRGyXYs0QTf9XzO z6Kwgf9L3IGaBKhBqe+8e6T2FyL6LjC/JJkrva0lK09n2nFzqDu/o1K1UGCJiv9N /LMFx8muR0n+m0FxDjhtii/i/nrhFjjoR//jxY0/PzIKPAw33nlImGzPcr/s5N3z AapbjeGzdRXek++ZOp7omyc5X0+BlVTOS1gweDc8jih8dmfnfB54VTDKqtPCNY0t mJvFxb4vxouVjfwwc1XEGFbNj7tQOcrI0UKGXi/VnIuLhbXxZQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOsmGZaOBDC1CSfZBcmpswiiBsdrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h MzI3MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAzYWUyZDYwYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2EzMjcyNDljLWRiMjctNDBhNS1i MDRjLWRhMDNhZTJkNjBhOC9hMzI3MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAzYWUy ZDYwYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXoDwDBAKcCRAwDQQCAAIwBwMFACYHlEAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBiTXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIs+b1Lb2ksMWncft/YL VhpMsZJt9tLCpI9Z3YmPL3aVFtOdq3JF5uc2sB+1Yl/HIO5Ww6XwsRkZdwrTMy4g D46fUEXMpMEbcCoAhFC2AMFb/IdRIs0aC09vuETKbBcirjxQCzBfS8rBZ/M3Ghxl mIUZNGk0Hm4cqh9TOYJw3f9faYTG7KF5LkT6RWnBUCtSZDsAesEeNjZg3n+BhUco r09DK5o4ktjeJqqdQjd3/AGrbz97aRd3eDWKTFkdIUFisoOXfyFSCAedNYovbqut 8d02Z5bxFjcuAe7cDdWryzGOqQSzJq+W+CDIsuQP2hoTZR18Va0mdNHsdioEVyVp ero= -----END CERTIFICATE-----Generated at Sat Oct 17 12:03:49 2026 by rpki-client