$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70.cer File: d87256b0-8122-4d03-a901-06b0556ada70.cer (raw, json) Hash identifier: igmafhM98Cng1enCPaxgU0hRu8HU87g1xlMEtVgzy50= Subject key identifier: A9:8D:09:1A:86:55:7D:C2:FD:47:D1:21:D5:11:C3:ED:F0:6B:C0:9E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D911200A42253ED4C70F3B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 07:10:04 +0000 Certificate not after: Sun 23 Jul 2028 07:10:04 +0000 Subordinate resources: AS: 402214 IP: 23.180.96.0/24 IP: 2602:f44b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:12:00:a4:22:53:ed:4c:70:f3:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 20 07:10:04 2026 GMT Not After : Jul 23 07:10:04 2028 GMT Subject: CN=d87256b0-8122-4d03-a901-06b0556ada70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:e4:97:00:94:bb:fd:42:41:5f:99:0e:ab: 7d:b7:7f:26:67:5a:6f:2b:71:a2:97:be:30:5d:20: 83:8e:4f:24:36:38:38:ca:63:4c:42:5d:6e:7f:bc: de:15:fa:10:c3:b2:db:74:68:18:31:8a:bd:8f:20: 93:9a:d3:54:57:54:43:82:92:c3:99:3e:75:77:ab: 27:8a:a6:bc:66:15:33:16:18:a5:2c:52:9e:f1:38: f3:19:2f:76:cc:af:05:b3:75:ed:e3:29:f1:36:eb: 51:19:cd:9e:d0:5d:2a:58:2e:da:ec:40:78:0d:07: 0e:78:df:b9:5d:55:c2:4d:df:51:e7:c3:94:ad:8c: 4b:d2:74:12:2c:0f:d3:81:9e:e4:34:74:88:dc:5d: b8:f6:e8:6a:b5:3a:5c:ef:a3:3f:d6:72:14:33:b4: dd:9b:c5:63:e9:02:4c:f5:a9:d3:ff:99:d5:5c:35: ed:87:24:cd:a8:35:0f:36:3a:6b:20:eb:a3:0d:a4: ec:b8:c2:b2:c7:fc:9e:b7:23:d8:04:50:52:bb:66: 36:eb:d9:15:9a:da:37:e8:1e:5c:ef:a8:0d:74:8a: ce:02:1d:b7:fb:49:e2:25:0b:d4:79:9d:7e:39:fa: 1f:f5:df:4a:83:6e:ee:94:ca:30:fd:1c:85:1c:af: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8D:09:1A:86:55:7D:C2:FD:47:D1:21:D5:11:C3:ED:F0:6B:C0:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.180.96.0/24 IPv6: 2602:f44b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402214 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8c:0e:9d:cf:71:9d:5c:2c:9e:9e:7c:76:f1:21:c6:43:da: b3:a5:ba:05:9e:8c:3d:d0:f6:1e:d5:41:4b:37:dd:6d:fa:59: 8c:77:8f:54:c3:c7:d5:b5:88:d1:d8:b1:85:f5:98:a4:22:33: 65:18:60:af:51:56:48:e3:d3:11:22:89:be:b2:0b:ab:31:d4: 3a:26:c4:3e:0d:dc:b0:73:4d:7f:82:e2:ff:a3:e6:b2:cc:2d: 98:3c:f5:a8:0b:dc:84:05:51:e9:13:06:67:2d:54:d3:47:ef: 18:a9:0b:2f:e7:f1:ed:4c:39:e5:d0:e6:17:57:01:17:ab:a5: 58:2b:cc:ec:92:72:57:43:a8:52:c0:86:24:14:4a:30:9d:55: 3b:0c:40:03:59:40:e3:f7:cd:58:56:d5:02:9c:54:15:9a:6e: f8:11:b9:89:75:d0:da:86:47:e4:e8:dc:19:98:2e:9d:f4:06: df:5c:4f:d1:e5:cd:2a:fc:47:c5:78:c2:a7:6a:81:e1:b6:9f: 9d:0f:33:9d:dc:3f:9b:82:e6:85:06:1a:67:68:c3:fc:77:64: 1b:b2:63:a4:a5:5d:f0:86:cc:66:2a:90:f1:74:6d:a5:57:1d: d8:dd:2e:8a:f2:19:da:0d:ef:d6:eb:9d:69:5a:36:93:8e:3c: 18:7f:48:2e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2REgCkIlPtTHDzt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMDA3MTAwNFoXDTI4MDcyMzA3MTAwNFowLzEtMCsGA1UEAxMk ZDg3MjU2YjAtODEyMi00ZDAzLWE5MDEtMDZiMDU1NmFkYTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0zklwCUu/1CQV+ZDqt9t38mZ1pvK3Gil74w XSCDjk8kNjg4ymNMQl1uf7zeFfoQw7LbdGgYMYq9jyCTmtNUV1RDgpLDmT51d6sn iqa8ZhUzFhilLFKe8TjzGS92zK8Fs3Xt4ynxNutRGc2e0F0qWC7a7EB4DQcOeN+5 XVXCTd9R58OUrYxL0nQSLA/TgZ7kNHSI3F249uhqtTpc76M/1nIUM7Tdm8Vj6QJM 9anT/5nVXDXthyTNqDUPNjprIOujDaTsuMKyx/yetyPYBFBSu2Y269kVmto36B5c 76gNdIrOAh23+0niJQvUeZ1+Ofof9d9Kg27ulMow/RyFHK9rtwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKmNCRqGVX3C/UfRIdURw+3wa8CeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ODcyNTZiMC04MTIyLTRkMDMtYTkwMS0wNmIwNTU2YWRhNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Q4NzI1NmIwLTgxMjItNGQwMy1h OTAxLTA2YjA1NTZhZGE3MC9kODcyNTZiMC04MTIyLTRkMDMtYTkwMS0wNmIwNTU2 YWRhNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtGAwDgQCAAIwCAMGACYC9EsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjJjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVjA6dz3GdXCyennx28SHGQ9qz pboFnow90PYe1UFLN91t+lmMd49Uw8fVtYjR2LGF9ZikIjNlGGCvUVZI49MRIom+ sgurMdQ6JsQ+Ddywc01/guL/o+ayzC2YPPWoC9yEBVHpEwZnLVTTR+8YqQsv5/Ht TDnl0OYXVwEXq6VYK8zsknJXQ6hSwIYkFEownVU7DEADWUDj981YVtUCnFQVmm74 EbmJddDahkfk6NwZmC6d9AbfXE/R5c0q/EfFeMKnaoHhtp+dDzOd3D+bguaFBhpn aMP8d2QbsmOkpV3whsxmKpDxdG2lVx3Y3S6K8hnaDe/W651pWjaTjjwYf0gu -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:52 2026 by rpki-client