$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d80185a7-e7a5-4472-8c7c-369ae6438b57.cer File: d80185a7-e7a5-4472-8c7c-369ae6438b57.cer (raw, json) Hash identifier: bE3fab35bK6+eHKgPvuP9ty/pxfKQJGgY2VHLqN8Lk8= Subject key identifier: 6C:2C:65:5F:83:96:A8:2C:26:A3:40:D2:88:A7:2E:BC:85:0F:A6:3B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DDC15AB6AC1A4D098EDFD0080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d80185a7-e7a5-4472-8c7c-369ae6438b57/d80185a7-e7a5-4472-8c7c-369ae6438b57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d80185a7-e7a5-4472-8c7c-369ae6438b57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 04:03:04 +0000 Certificate not after: Sat 19 Aug 2028 04:03:04 +0000 Subordinate resources: AS: 402392 IP: 23.156.196.0/24 IP: 2602:f3f8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dc:15:ab:6a:c1:a4:d0:98:ed:fd:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 17 04:03:04 2026 GMT Not After : Aug 19 04:03:04 2028 GMT Subject: CN=d80185a7-e7a5-4472-8c7c-369ae6438b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:b3:71:b4:28:b9:84:9a:48:c8:f0:d8:86: 7b:12:e0:a0:a1:b7:2f:b2:58:23:2e:19:4c:c2:10: d5:51:dd:48:bf:87:45:bc:ed:89:99:63:04:fe:b3: 5d:a6:a7:6f:11:dc:3e:7d:e7:59:db:d1:80:6e:b7: a5:4d:84:cb:77:a6:67:4b:7a:70:dd:1b:7b:cb:83: c9:8f:14:a3:4f:d7:3c:01:5c:e0:e8:04:44:e4:2a: 0a:2d:10:58:b4:1e:1f:d9:2f:c7:57:4f:8c:b8:79: d9:01:65:7a:69:6c:74:44:d6:76:27:81:39:b3:d9: 63:16:e9:57:3c:41:27:4d:e2:0a:dd:67:a5:74:ab: ad:3a:27:f1:93:14:68:ea:3a:8f:e0:3d:62:fb:3e: 09:3a:61:7b:90:36:df:1f:e7:29:79:a9:c7:6e:aa: bb:5d:aa:c2:02:d3:0e:29:78:16:87:d6:66:93:f4: 56:32:5a:79:50:7a:ea:30:6b:e4:6c:3c:6a:b9:48: a3:29:f3:1d:1e:6d:26:51:5d:33:ba:20:7b:cf:58: 3c:06:51:38:a4:20:90:f9:01:84:01:53:1b:20:f9: ef:e9:80:6d:3e:cc:6e:f8:91:59:61:09:9e:b7:40: b5:ae:fa:ee:8e:03:6b:77:a9:63:63:29:2f:62:97: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:65:5F:83:96:A8:2C:26:A3:40:D2:88:A7:2E:BC:85:0F:A6:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d80185a7-e7a5-4472-8c7c-369ae6438b57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d80185a7-e7a5-4472-8c7c-369ae6438b57/d80185a7-e7a5-4472-8c7c-369ae6438b57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.156.196.0/24 IPv6: 2602:f3f8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402392 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:b5:57:76:72:96:7a:27:9d:39:b0:7e:9e:3f:83:63:f2:1e: e8:0a:29:20:c3:7e:90:b2:b4:09:5c:34:fa:75:de:e9:4c:b7: 73:f0:04:e0:5b:77:31:54:2c:b5:b9:ef:a7:85:ce:f1:0e:86: c9:73:58:ff:de:7c:15:4e:b4:4c:7c:f9:08:35:0f:8e:21:fc: 0f:9a:5b:58:91:ef:6e:9e:23:af:b7:6d:7a:8d:8b:a4:ef:c4: 8e:68:23:7a:96:e2:84:df:01:91:c4:04:cd:7b:cb:77:2b:28: 5e:8b:9b:9d:99:5e:1a:34:4a:2c:b6:e3:d5:85:09:0f:17:f1: ae:7b:1c:b2:7d:03:16:41:25:a3:c4:6f:38:cb:4b:47:65:c0: cb:52:9d:2a:e9:de:e9:e7:62:6c:f0:c1:e2:16:ff:9d:33:86: 1d:29:06:ea:80:e0:fe:8a:3c:f0:27:22:b2:87:5d:bf:1e:8e: 91:2c:93:6d:3a:81:34:b0:a8:cd:12:a2:7d:e4:a4:7f:00:ac: 9f:9f:f1:52:cb:6e:ac:71:b5:ed:7c:5a:ae:1e:a6:e3:23:27: 26:a6:7a:b3:a3:dd:d5:70:60:94:5e:00:2f:e7:da:5e:5b:51: 46:a3:74:71:45:a8:f9:d9:71:2e:f3:9d:ce:6a:1e:8c:49:a5: 58:a7:53:7a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3cFatqwaTQmO39AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNzA0MDMwNFoXDTI4MDgxOTA0MDMwNFowLzEtMCsGA1UEAxMk ZDgwMTg1YTctZTdhNS00NDcyLThjN2MtMzY5YWU2NDM4YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPmzcbQouYSaSMjw2IZ7EuCgobcvslgjLhlM whDVUd1Iv4dFvO2JmWME/rNdpqdvEdw+fedZ29GAbrelTYTLd6ZnS3pw3Rt7y4PJ jxSjT9c8AVzg6ARE5CoKLRBYtB4f2S/HV0+MuHnZAWV6aWx0RNZ2J4E5s9ljFulX PEEnTeIK3WeldKutOifxkxRo6jqP4D1i+z4JOmF7kDbfH+cpeanHbqq7XarCAtMO KXgWh9Zmk/RWMlp5UHrqMGvkbDxquUijKfMdHm0mUV0zuiB7z1g8BlE4pCCQ+QGE AVMbIPnv6YBtPsxu+JFZYQmet0C1rvrujgNrd6ljYykvYpciGQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGwsZV+DlqgsJqNA0oinLryFD6Y7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ODAxODVhNy1lN2E1LTQ0NzItOGM3Yy0zNjlhZTY0MzhiNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Q4MDE4NWE3LWU3YTUtNDQ3Mi04 YzdjLTM2OWFlNjQzOGI1Ny9kODAxODVhNy1lN2E1LTQ0NzItOGM3Yy0zNjlhZTY0 MzhiNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnMQwDgQCAAIwCAMGACYC8/gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYj2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC8tVd2cpZ6J505sH6eP4Nj8h7o Cikgw36QsrQJXDT6dd7pTLdz8ATgW3cxVCy1ue+nhc7xDobJc1j/3nwVTrRMfPkI NQ+OIfwPmltYke9uniOvt216jYuk78SOaCN6luKE3wGRxATNe8t3Kyhei5udmV4a NEostuPVhQkPF/GuexyyfQMWQSWjxG84y0tHZcDLUp0q6d7p52Js8MHiFv+dM4Yd KQbqgOD+ijzwJyKyh12/Ho6RLJNtOoE0sKjNEqJ95KR/AKyfn/FSy26scbXtfFqu HqbjIycmpnqzo93VcGCUXgAv59peW1FGo3RxRaj52XEu853Oah6MSaVYp1N6 -----END CERTIFICATE-----Generated at Thu May 28 16:14:12 2026 by rpki-client