$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7ed97e9-f361-4dc7-916a-4bb6eb8261b3.cer File: d7ed97e9-f361-4dc7-916a-4bb6eb8261b3.cer (raw, json) Hash identifier: RfOe3OQD0ul15CKonXiUzXD/BiFD1KFYwpQ/L3zP9UQ= Subject key identifier: 8A:9F:07:09:D6:AB:46:DB:BB:78:5E:D1:66:92:C4:C4:2C:3F:35:5A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DDC1B9ED325DD31638BBDA800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7ed97e9-f361-4dc7-916a-4bb6eb8261b3/d7ed97e9-f361-4dc7-916a-4bb6eb8261b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7ed97e9-f361-4dc7-916a-4bb6eb8261b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 04:15:04 +0000 Certificate not after: Sat 19 Aug 2028 04:15:04 +0000 Subordinate resources: AS: 402296 IP: 23.154.180.0/24 IP: 2602:f42c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dc:1b:9e:d3:25:dd:31:63:8b:bd:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 17 04:15:04 2026 GMT Not After : Aug 19 04:15:04 2028 GMT Subject: CN=d7ed97e9-f361-4dc7-916a-4bb6eb8261b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:0f:e0:b3:7f:af:be:a3:77:b4:cb:a6:49: d8:a3:4d:a4:f5:a5:4c:18:8e:88:ae:25:3e:17:c5: 52:5d:a4:bd:fd:43:18:9c:80:07:5b:6c:be:37:df: c0:73:41:98:35:ef:81:c9:89:47:51:a2:d5:1d:2b: 6f:e5:30:42:5e:37:ee:fa:3e:1c:9d:47:d4:50:77: 5c:32:3f:df:f7:98:79:79:9d:67:fc:74:40:93:ce: ff:3e:4c:a8:8b:19:b7:b3:44:31:73:0f:cd:18:e2: 4a:06:68:81:4c:cf:ff:d3:a0:0b:c4:ac:e2:1b:4c: 27:a4:1c:07:2f:a7:5a:1b:63:95:6a:e2:78:91:f2: 13:61:97:23:fb:59:ee:40:c3:05:f1:6c:05:a0:00: 40:c0:d8:77:a0:d9:15:12:74:f8:ed:f7:15:a4:0c: 33:70:27:92:53:d8:96:3d:59:05:41:7c:9c:c0:3b: dd:4b:b8:13:13:a7:61:06:f6:74:15:91:ae:7d:cf: 29:b6:86:b6:46:b1:0d:00:8e:af:04:3d:d2:f3:d6: 4d:16:77:c6:56:8f:a5:8b:58:ed:f4:8f:10:9d:47: 44:a6:b7:a1:23:df:c7:f1:a6:c1:a9:cb:2a:99:5d: de:b7:a2:34:5f:a1:b9:51:06:d6:9e:40:1f:39:5d: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:07:09:D6:AB:46:DB:BB:78:5E:D1:66:92:C4:C4:2C:3F:35:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7ed97e9-f361-4dc7-916a-4bb6eb8261b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7ed97e9-f361-4dc7-916a-4bb6eb8261b3/d7ed97e9-f361-4dc7-916a-4bb6eb8261b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.180.0/24 IPv6: 2602:f42c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402296 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5f:f4:66:60:62:78:a9:13:d2:f5:23:f8:1b:71:69:2b:76: 2f:a9:87:85:f3:61:b8:a6:25:82:fc:b7:cf:eb:51:d6:61:ee: 85:c7:a7:27:ef:9e:4d:7e:fa:3b:6d:f3:f6:12:b9:1b:20:0c: 5f:b7:f5:b6:b3:50:c3:d6:84:87:b9:96:95:4f:cf:73:d5:85: 4f:a4:55:f4:ec:44:ba:3c:10:80:4d:02:c1:f1:c5:2a:05:4c: 11:b7:e8:11:ed:59:a7:03:7b:a6:52:48:4c:93:4a:92:ef:d6: 01:44:df:69:6c:82:4a:4c:6c:40:eb:54:46:75:54:b9:d6:b7: 24:e6:7c:12:03:83:89:f4:ff:cd:c6:dc:12:11:0a:8e:af:50: 8a:35:ee:ae:8e:6a:cf:40:99:3b:53:08:14:19:60:63:b3:63: 9b:7f:4d:18:a2:b9:0e:fe:07:25:fe:55:7c:a2:31:c4:7e:c5: 6a:66:03:a4:c4:15:c5:e9:08:b8:fd:03:af:36:31:4f:fa:ec: fb:e8:57:06:70:ca:b5:ff:24:d8:83:1a:60:b8:6e:68:e8:bc: 53:bb:09:0e:69:04:be:61:81:47:02:99:be:c7:97:53:f3:87: c8:21:a5:d8:7e:02:8a:58:ef:04:5a:cf:8c:a4:c3:27:95:f5: 91:47:3f:9e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3cG57TJd0xY4u9qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNzA0MTUwNFoXDTI4MDgxOTA0MTUwNFowLzEtMCsGA1UEAxMk ZDdlZDk3ZTktZjM2MS00ZGM3LTkxNmEtNGJiNmViODI2MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUsP4LN/r76jd7TLpknYo02k9aVMGI6IriU+ F8VSXaS9/UMYnIAHW2y+N9/Ac0GYNe+ByYlHUaLVHStv5TBCXjfu+j4cnUfUUHdc Mj/f95h5eZ1n/HRAk87/Pkyoixm3s0Qxcw/NGOJKBmiBTM//06ALxKziG0wnpBwH L6daG2OVauJ4kfITYZcj+1nuQMMF8WwFoABAwNh3oNkVEnT47fcVpAwzcCeSU9iW PVkFQXycwDvdS7gTE6dhBvZ0FZGufc8ptoa2RrENAI6vBD3S89ZNFnfGVo+li1jt 9I8QnUdEprehI9/H8abBqcsqmV3et6I0X6G5UQbWnkAfOV1rFQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIqfBwnWq0bbu3he0WaSxMQsPzVaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k N2VkOTdlOS1mMzYxLTRkYzctOTE2YS00YmI2ZWI4MjYxYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Q3ZWQ5N2U5LWYzNjEtNGRjNy05 MTZhLTRiYjZlYjgyNjFiMy9kN2VkOTdlOS1mMzYxLTRkYzctOTE2YS00YmI2ZWI4 MjYxYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmrQwDgQCAAIwCAMGACYC9CwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjeDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEX/RmYGJ4qRPS9SP4G3FpK3Yv qYeF82G4piWC/LfP61HWYe6Fx6cn755Nfvo7bfP2ErkbIAxft/W2s1DD1oSHuZaV T89z1YVPpFX07ES6PBCATQLB8cUqBUwRt+gR7VmnA3umUkhMk0qS79YBRN9pbIJK TGxA61RGdVS51rck5nwSA4OJ9P/NxtwSEQqOr1CKNe6ujmrPQJk7UwgUGWBjs2Ob f00YorkO/gcl/lV8ojHEfsVqZgOkxBXF6Qi4/QOvNjFP+uz76FcGcMq1/yTYgxpg uG5o6LxTuwkOaQS+YYFHApm+x5dT84fIIaXYfgKKWO8EWs+MpMMnlfWRRz+e -----END CERTIFICATE-----Generated at Thu May 28 16:10:03 2026 by rpki-client