$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.cer File: a6a248a6-cae0-4e08-9f1a-ab65f5e41773.cer (raw, json) Hash identifier: zl8mrbBowCWQxiEzkeyeRunEdr3uYiGqpNlTiz4BDHs= Subject key identifier: 3C:1D:90:F2:50:74:C2:06:1E:BD:BD:D1:EB:D9:C0:39:E3:EF:67:3F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D97EB3514A7C0B0528BBBDD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 18:02:33 +0000 Certificate not after: Tue 25 Jul 2028 18:02:33 +0000 Subordinate resources: AS: 31991 IP: 161.210.100.0/22 IP: 2602:81c:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:eb:35:14:a7:c0:b0:52:8b:bb:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 22 18:02:33 2026 GMT Not After : Jul 25 18:02:33 2028 GMT Subject: CN=a6a248a6-cae0-4e08-9f1a-ab65f5e41773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:d5:91:3c:6c:22:b3:26:2c:9c:e8:a8:8c: 61:f1:3a:00:47:20:a0:3d:96:cf:a3:2d:a6:5a:73: 17:62:3c:fe:26:3a:1e:7e:10:d0:a3:5d:b6:4f:a5: 63:fd:9b:ee:1b:b1:bd:51:28:f0:53:52:73:f8:c1: 82:9c:43:2a:6c:30:29:be:40:42:eb:6e:6a:f4:e4: 83:b5:3c:75:05:3f:bc:d8:dd:6d:d9:04:56:9e:28: 44:e0:6f:d6:c0:e9:37:72:f9:48:91:4c:74:54:d2: 4b:0d:ed:81:17:47:24:ca:bc:8d:ed:c5:6b:55:d0: ea:56:97:d9:a6:43:cd:5a:9f:c5:df:7b:17:c8:cb: 2a:4b:08:29:ce:7b:d9:75:ac:88:4b:4f:05:73:a6: 24:04:bd:3a:71:f9:0c:ac:ed:41:3c:b5:48:0e:c7: a3:eb:4b:19:66:bc:f9:64:1b:af:9b:0b:e0:09:8a: c9:c6:46:a3:95:25:48:f9:5f:8b:c7:8b:67:42:cf: 51:ed:da:26:ac:f2:6c:1a:ba:4f:19:b8:d7:bc:9e: eb:8a:6c:f6:e3:19:ae:a0:6d:7a:3c:34:45:ce:fd: fa:ee:a7:9c:19:22:ee:1e:9f:45:f7:68:66:c0:47: fd:14:f0:5f:e1:c4:9f:7f:0e:73:00:c4:4b:1f:30: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:90:F2:50:74:C2:06:1E:BD:BD:D1:EB:D9:C0:39:E3:EF:67:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a6a248a6-cae0-4e08-9f1a-ab65f5e41773/a6a248a6-cae0-4e08-9f1a-ab65f5e41773.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 161.210.100.0/22 IPv6: 2602:81c:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31991 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a0:38:38:c4:85:04:d6:ef:c0:b2:ee:ea:75:0c:ca:ca:a6: a6:88:1c:46:cd:b3:ae:75:17:a0:20:6b:48:e7:bf:5a:38:69: e8:4b:8e:25:99:55:c4:8c:69:d0:30:07:b9:7e:81:b5:2f:06: 46:8e:11:00:3c:0a:5d:37:9d:0e:e1:44:f7:f8:7c:f0:d3:6f: 87:e0:b6:47:4f:72:ad:dd:57:05:14:c4:5f:1e:ce:d7:5a:a6: b5:ed:80:de:3f:df:be:4b:7f:3a:16:09:2e:c0:e4:1c:a9:69: ac:84:93:1d:48:b4:10:63:5e:40:f8:8a:1b:50:fb:ec:ea:87: 4a:9e:bd:c0:db:ec:bb:9c:4f:4a:3a:9b:a4:52:1f:e7:3c:c0: a4:80:23:df:d8:32:16:b7:d6:39:f4:4e:bb:ec:8d:52:04:af: 0f:56:5f:0c:a5:c5:14:bd:30:4a:c5:6e:5e:1c:a8:fe:13:fa: 3f:86:ca:cf:66:2f:05:33:e9:f3:2c:d5:0f:2a:c3:48:ae:25: 96:56:66:fc:0f:7c:da:a9:75:1c:93:51:4c:a8:b6:dc:46:50: 47:11:ba:03:36:61:30:5c:b8:2b:4b:ae:ee:0e:43:4f:e9:3b: de:de:ac:4b:f6:f4:2d:61:3c:b5:84:e1:c2:69:81:77:d2:98: a1:f9:d7:e9 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2X6zUUp8CwUou73YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMjE4MDIzM1oXDTI4MDcyNTE4MDIzM1owLzEtMCsGA1UEAxMk YTZhMjQ4YTYtY2FlMC00ZTA4LTlmMWEtYWI2NWY1ZTQxNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2fVkTxsIrMmLJzoqIxh8ToARyCgPZbPoy2m WnMXYjz+JjoefhDQo122T6Vj/ZvuG7G9USjwU1Jz+MGCnEMqbDApvkBC625q9OSD tTx1BT+82N1t2QRWnihE4G/WwOk3cvlIkUx0VNJLDe2BF0ckyryN7cVrVdDqVpfZ pkPNWp/F33sXyMsqSwgpznvZdayIS08Fc6YkBL06cfkMrO1BPLVIDsej60sZZrz5 ZBuvmwvgCYrJxkajlSVI+V+Lx4tnQs9R7domrPJsGrpPGbjXvJ7rimz24xmuoG16 PDRFzv367qecGSLuHp9F92hmwEf9FPBf4cSffw5zAMRLHzB36wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDwdkPJQdMIGHr290evZwDnj72c/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h NmEyNDhhNi1jYWUwLTRlMDgtOWYxYS1hYjY1ZjVlNDE3NzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2E2YTI0OGE2LWNhZTAtNGUwOC05 ZjFhLWFiNjVmNWU0MTc3My9hNmEyNDhhNi1jYWUwLTRlMDgtOWYxYS1hYjY1ZjVl NDE3NzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKh0mQwDgQCAAIwCAMGACYCCBzAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnz3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJigODjEhQTW78Cy7up1DMrKpqaI HEbNs651F6Aga0jnv1o4aehLjiWZVcSMadAwB7l+gbUvBkaOEQA8Cl03nQ7hRPf4 fPDTb4fgtkdPcq3dVwUUxF8eztdaprXtgN4/375LfzoWCS7A5BypaayEkx1ItBBj XkD4ihtQ++zqh0qevcDb7LucT0o6m6RSH+c8wKSAI9/YMha31jn0TrvsjVIErw9W XwylxRS9MErFbl4cqP4T+j+Gys9mLwUz6fMs1Q8qw0iuJZZWZvwPfNqpdRyTUUyo ttxGUEcRugM2YTBcuCtLru4OQ0/pO97erEv29C1hPLWE4cJpgXfSmKH51+k= -----END CERTIFICATE-----Generated at Thu Apr 30 12:40:19 2026 by rpki-client