$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b.cer File: b404b454-9c30-4034-9607-35f217ad2f6b.cer (raw, json) Hash identifier: /AplcQQ+kFVetkYeMZkAg0S4tRjMyDZueYYMdDWEKN8= Subject key identifier: DE:7C:99:66:B0:65:F3:5B:37:6F:A9:E4:C7:76:7C:47:49:0F:44:8B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD39AB51A8BF2FEE00BD01900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/b404b454-9c30-4034-9607-35f217ad2f6b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 May 2026 03:08:51 +0000 Certificate not after: Wed 16 Aug 2028 03:08:51 +0000 Subordinate resources: AS: 13795 IP: 23.152.144.0/23 IP: 2602:fd6c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:9a:b5:1a:8b:f2:fe:e0:0b:d0:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 14 03:08:51 2026 GMT Not After : Aug 16 03:08:51 2028 GMT Subject: CN=b404b454-9c30-4034-9607-35f217ad2f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:11:9d:b1:37:33:d7:e5:6c:f9:2c:ce:f0: 70:d7:e7:7a:b0:f9:bb:b5:50:f3:0f:c0:b5:15:61: 36:0b:50:02:04:b6:85:a3:4c:55:27:b0:b3:74:b1: fd:1b:a8:54:64:15:e3:14:9b:74:f3:54:8f:fc:9a: 50:b0:fb:99:57:b6:ce:16:59:98:dc:df:96:07:f7: 62:87:2f:f8:d3:3c:b2:52:49:e9:37:bb:60:6f:d8: 3f:ba:4c:7a:4d:6b:f1:a1:5d:ef:3d:d7:50:e9:78: 37:cc:78:36:e2:f8:3a:f3:38:6c:9b:00:6f:39:a3: 37:c4:e9:59:9e:55:0a:55:f6:d3:db:60:de:7d:03: 44:ba:9f:f2:0c:11:4e:f1:a7:21:15:27:02:9d:09: f1:e8:35:b7:5f:26:d2:64:db:08:73:35:c1:b5:3c: 64:54:58:59:8c:13:48:7f:45:52:8c:21:06:c5:b3: ae:4d:0f:ad:1c:ab:c8:8a:a5:ae:f1:f9:ae:4a:d7: a4:64:89:1d:70:c0:09:1e:ad:11:e2:73:7d:04:b8: c6:8f:7a:fe:98:44:4f:35:de:f1:32:d4:62:1a:71: dd:e2:a1:fa:1f:52:fc:f4:9b:0d:bb:ef:fe:6f:31: 22:da:51:2c:ae:c8:67:be:94:92:ed:22:23:6b:a5: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7C:99:66:B0:65:F3:5B:37:6F:A9:E4:C7:76:7C:47:49:0F:44:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b404b454-9c30-4034-9607-35f217ad2f6b/b404b454-9c30-4034-9607-35f217ad2f6b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.152.144.0/23 IPv6: 2602:fd6c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13795 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b5:8d:26:69:e8:2d:2a:45:37:2b:96:62:01:74:f2:de:c9: be:32:30:de:f8:57:80:cb:fb:01:1d:04:11:b2:32:d0:3b:66: 21:56:ba:59:6e:0c:05:1d:5c:64:ab:8d:ce:a1:07:f1:70:b0: a3:42:67:4c:58:45:8a:01:ca:b4:59:01:72:25:b6:dc:96:b7: f0:9e:9e:e8:19:bf:68:e4:5f:f6:70:f6:71:96:fe:21:88:d4: 61:d6:59:b2:7c:10:b1:94:d5:18:33:80:12:c5:e4:4c:ee:49: e2:db:90:4d:41:17:8b:da:2c:e3:c5:63:d2:3b:62:a8:40:4e: dd:fb:b0:83:ae:dd:b6:0f:4a:90:e9:c3:eb:57:b1:bb:5d:27: ad:83:22:9b:8a:22:da:ed:47:af:53:15:27:76:1d:47:7c:f2: d3:0d:86:22:44:7d:55:00:3c:eb:55:1c:37:73:c6:88:4e:50: b6:98:f4:74:f5:4e:4a:e2:ed:05:e4:3a:56:5b:1d:c4:48:f6: 59:79:3a:70:c4:97:8f:94:de:51:99:23:29:93:23:81:12:1e: 06:3b:75:b5:ad:21:e3:07:93:50:f4:57:ea:39:5f:1e:f2:7e: fa:b7:c3:24:95:df:da:8e:0a:37:78:b3:cf:44:a5:90:dc:e2: 08:18:d3:bb -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE3TmrUai/L+4AvQGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNDAzMDg1MVoXDTI4MDgxNjAzMDg1MVowLzEtMCsGA1UEAxMk YjQwNGI0NTQtOWMzMC00MDM0LTk2MDctMzVmMjE3YWQyZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn8RnbE3M9flbPkszvBw1+d6sPm7tVDzD8C1 FWE2C1ACBLaFo0xVJ7CzdLH9G6hUZBXjFJt081SP/JpQsPuZV7bOFlmY3N+WB/di hy/40zyyUknpN7tgb9g/ukx6TWvxoV3vPddQ6Xg3zHg24vg68zhsmwBvOaM3xOlZ nlUKVfbT22DefQNEup/yDBFO8achFScCnQnx6DW3XybSZNsIczXBtTxkVFhZjBNI f0VSjCEGxbOuTQ+tHKvIiqWu8fmuStekZIkdcMAJHq0R4nN9BLjGj3r+mERPNd7x MtRiGnHd4qH6H1L89JsNu+/+bzEi2lEsrshnvpSS7SIja6W/ZwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN58mWawZfNbN2+p5Md2fEdJD0SLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i NDA0YjQ1NC05YzMwLTQwMzQtOTYwNy0zNWYyMTdhZDJmNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I0MDRiNDU0LTljMzAtNDAzNC05 NjA3LTM1ZjIxN2FkMmY2Yi9iNDA0YjQ1NC05YzMwLTQwMzQtOTYwNy0zNWYyMTdh ZDJmNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXmJAwDgQCAAIwCAMGBCYC/WwAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjXjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEG1jSZp6C0qRTcrlmIBdPLeyb4y MN74V4DL+wEdBBGyMtA7ZiFWulluDAUdXGSrjc6hB/FwsKNCZ0xYRYoByrRZAXIl ttyWt/CenugZv2jkX/Zw9nGW/iGI1GHWWbJ8ELGU1RgzgBLF5EzuSeLbkE1BF4va LOPFY9I7YqhATt37sIOu3bYPSpDpw+tXsbtdJ62DIpuKItrtR69TFSd2HUd88tMN hiJEfVUAPOtVHDdzxohOULaY9HT1Tkri7QXkOlZbHcRI9ll5OnDEl4+U3lGZIymT I4ESHgY7dbWtIeMHk1D0V+o5Xx7yfvq3wySV39qOCjd4s89EpZDc4ggY07s= -----END CERTIFICATE-----Generated at Thu May 21 22:31:05 2026 by rpki-client