$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85.cer File: d2ef481a-1f0d-4a55-938d-f008c7790d85.cer (raw, json) Hash identifier: qNCJw9X+851gAksrUeG59tv41nPZG6t4I0xkfuuLTFs= Subject key identifier: CD:C1:AD:3C:4E:0C:60:04:21:BD:31:6E:82:E6:DA:B1:37:9B:FE:59 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F54438B90FD9567003EDF4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/d2ef481a-1f0d-4a55-938d-f008c7790d85.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 21:59:27 +0000 Certificate not after: Sun 31 Dec 2028 22:59:27 +0000 Subordinate resources: AS: 397540 IP: 23.154.160.0/24 IP: 131.143.220.0/23 IP: 209.127.204.0/24 IP: 2604:17c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:43:8b:90:fd:95:67:00:3e:df:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Sep 28 21:59:27 2026 GMT Not After : Dec 31 22:59:27 2028 GMT Subject: CN=d2ef481a-1f0d-4a55-938d-f008c7790d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:5b:f7:29:41:da:6c:ec:91:13:de:08:b1: 83:64:71:9e:23:01:9a:c2:24:c8:21:bf:fe:3b:fb: 3d:4f:81:3b:cc:84:e2:06:cb:4f:c3:ba:5e:85:87: 34:84:d6:89:ee:11:78:44:1f:c6:72:65:9f:84:c2: 6f:6d:36:c0:6a:5b:b3:b8:47:b8:f9:9e:d1:77:f0: f1:b6:a2:09:2f:bc:80:d3:b0:8a:11:11:37:92:97: 0f:0a:a5:cc:d4:76:83:3f:e3:e9:d8:01:f3:4e:02: 7c:80:74:58:9a:59:b1:43:e1:07:f5:44:de:93:9a: d3:f6:41:df:78:4c:84:57:a4:0a:aa:bd:51:da:f9: 35:f5:c1:2a:8b:f3:37:83:bc:65:02:56:43:af:e9: b3:f8:31:f3:18:3c:48:bf:3b:51:df:51:53:61:81: 56:69:6f:11:15:d7:3c:1d:d8:22:79:30:75:e7:bf: 50:72:46:d0:7c:c2:ab:e6:51:f4:c3:b2:d0:f1:80: 83:a5:90:f0:11:fd:9a:0b:c9:ed:7c:ef:34:0c:4b: 70:a1:f7:74:96:3d:6f:f2:77:8b:ec:f4:44:da:9d: 1b:66:e1:46:27:22:71:3a:19:0f:1e:56:c4:f1:18: 12:0f:cd:d0:c0:fc:30:9b:68:62:dd:8b:51:51:08: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C1:AD:3C:4E:0C:60:04:21:BD:31:6E:82:E6:DA:B1:37:9B:FE:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2ef481a-1f0d-4a55-938d-f008c7790d85/d2ef481a-1f0d-4a55-938d-f008c7790d85.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.160.0/24 131.143.220.0/23 209.127.204.0/24 IPv6: 2604:17c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397540 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a3:f6:ff:54:6d:53:32:a8:4b:ac:a2:96:5b:4a:4c:52:8e: 5c:ea:d4:0a:c9:1d:c5:98:de:4c:1b:43:5b:cd:63:c1:bc:a6: 0a:a8:cf:34:86:d7:44:c1:ec:0b:06:ee:e2:f3:3a:7d:28:7f: bc:a2:9c:3b:7f:e5:10:9e:e6:95:ca:85:ce:63:97:ba:ef:fc: 0d:ef:9f:9b:1b:85:1e:ed:b6:27:9f:ec:10:92:d8:a9:00:3e: 71:6f:38:7a:c7:f3:50:9f:6d:03:4a:0e:eb:80:92:bd:ed:fc: 8a:b7:ab:3f:44:96:24:ea:5c:31:7d:29:da:c8:9d:4a:4a:a6: 64:95:ed:d1:d6:54:7d:bb:b9:02:d4:23:48:b3:91:34:06:45: ae:98:40:77:47:00:a3:f8:6c:21:c1:4d:a2:23:bc:40:01:6a: a8:62:d0:bd:7f:af:ef:89:4a:34:bf:41:81:81:da:b2:fb:c7: 65:b8:db:24:1e:95:1a:77:33:bd:b0:6f:1a:ea:11:61:13:3c: 4c:34:42:24:d9:35:0c:20:78:80:6b:c1:e7:c5:83:c4:1b:88: 52:52:c1:78:06:7c:98:eb:6f:4d:62:5e:97:77:7d:a5:d0:ef: de:45:10:62:48:09:59:1d:e3:65:e0:ff:75:ac:aa:e0:4a:61: 28:bb:7a:80 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9UQ4uQ/ZVnAD7fT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDkyODIxNTkyN1oXDTI4MTIzMTIyNTkyN1owLzEtMCsGA1UEAxMk ZDJlZjQ4MWEtMWYwZC00YTU1LTkzOGQtZjAwOGM3NzkwZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wxb9ylB2mzskRPeCLGDZHGeIwGawiTIIb/+ O/s9T4E7zITiBstPw7pehYc0hNaJ7hF4RB/GcmWfhMJvbTbAaluzuEe4+Z7Rd/Dx tqIJL7yA07CKERE3kpcPCqXM1HaDP+Pp2AHzTgJ8gHRYmlmxQ+EH9UTek5rT9kHf eEyEV6QKqr1R2vk19cEqi/M3g7xlAlZDr+mz+DHzGDxIvztR31FTYYFWaW8RFdc8 HdgieTB1579QckbQfMKr5lH0w7LQ8YCDpZDwEf2aC8ntfO80DEtwofd0lj1v8neL 7PRE2p0bZuFGJyJxOhkPHlbE8RgSD83QwPwwm2hi3YtRUQilbwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFM3BrTxODGAEIb0xboLm2rE3m/5ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k MmVmNDgxYS0xZjBkLTRhNTUtOTM4ZC1mMDA4Yzc3OTBkODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2QyZWY0ODFhLTFmMGQtNGE1NS05 MzhkLWYwMDhjNzc5MGQ4NS9kMmVmNDgxYS0xZjBkLTRhNTUtOTM4ZC1mMDA4Yzc3 OTBkODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXmqADBAGDj9wDBADRf8wwDQQCAAIwBwMFACYE F8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhDkMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEKj9v9UbVMy qEusopZbSkxSjlzq1ArJHcWY3kwbQ1vNY8G8pgqozzSG10TB7AsG7uLzOn0of7yi nDt/5RCe5pXKhc5jl7rv/A3vn5sbhR7ttief7BCS2KkAPnFvOHrH81CfbQNKDuuA kr3t/Iq3qz9EliTqXDF9KdrInUpKpmSV7dHWVH27uQLUI0izkTQGRa6YQHdHAKP4 bCHBTaIjvEABaqhi0L1/r++JSjS/QYGB2rL7x2W42yQelRp3M72wbxrqEWETPEw0 QiTZNQwgeIBrwefFg8QbiFJSwXgGfJjrb01iXpd3faXQ795FEGJICVkd42Xg/3Ws quBKYSi7eoA= -----END CERTIFICATE-----Generated at Tue Oct 20 08:18:23 2026 by rpki-client