$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd.cer File: e328149d-d077-4e6a-93b2-829a96c70afd.cer (raw, json) Hash identifier: VDfxqwnjGyi7zEfa9AgMMIKDDNUFB+1Em7LYYJqA7k0= Subject key identifier: 4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DF0CF26EEC567854476009722 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 May 2026 14:12:58 +0000 Certificate not after: Sat 26 Aug 2028 14:12:58 +0000 Subordinate resources: IP: 23.158.164.0/24 IP: 2602:f3b7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:cf:26:ee:c5:67:85:44:76:00:97:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 24 14:12:58 2026 GMT Not After : Aug 26 14:12:58 2028 GMT Subject: CN=e328149d-d077-4e6a-93b2-829a96c70afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:6e:01:4b:3b:a5:2c:87:50:28:35:4a:fe: 3f:e3:cb:c1:f7:dd:3d:2e:58:89:08:46:b6:7e:08: 5f:9d:b2:e6:29:02:e4:3b:36:a1:07:94:c6:f1:50: 44:bf:2d:32:e5:65:3a:a0:e8:2b:13:54:3d:9d:c1: 1f:f0:8a:c3:0b:32:e1:45:ae:d8:f1:09:1f:5a:2c: 25:27:13:c5:96:f1:11:84:28:dc:73:be:59:98:32: 3c:53:2b:82:a7:9d:4b:8d:e2:dd:b6:80:7e:b8:bb: 6b:de:a5:cb:22:ec:dc:3d:91:bd:c3:ae:d9:be:b8: c9:b7:7a:03:4a:94:d9:06:09:cd:e8:3c:2e:16:09: a3:3c:70:a6:ec:eb:f2:bf:1b:91:6b:78:88:c0:f3: 61:76:dd:df:73:c5:e0:41:12:d0:8d:15:30:43:7f: dc:89:c2:33:6c:9c:43:15:dc:0b:87:a9:98:40:e1: b8:58:87:fb:1e:d6:de:2c:c2:e0:63:53:32:53:01: a5:1e:c7:64:e2:77:34:76:5e:d2:ed:8f:b8:37:75: 38:83:a1:4f:5b:bb:7a:5f:c6:9f:6f:62:f5:92:95: e7:17:09:d1:20:8d:d1:6a:ac:37:1f:74:fc:7f:c8: 64:09:5c:de:2b:e2:4e:b2:32:0f:cf:64:ce:8c:d3: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:28:3B:C6:E3:14:A3:B3:31:A2:8D:F8:D2:91:66:1F:1D:75:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e328149d-d077-4e6a-93b2-829a96c70afd/e328149d-d077-4e6a-93b2-829a96c70afd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.158.164.0/24 IPv6: 2602:f3b7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:41:5f:64:68:1a:26:d2:1c:37:67:61:2d:af:05:7f:7c:db: 0e:47:eb:2c:36:e4:38:cb:81:5c:35:5e:c7:46:d7:71:cf:81: c0:65:2d:c6:86:aa:3a:97:58:6f:7a:81:8e:22:33:11:f8:5d: 56:0f:2a:b6:68:98:50:32:06:71:9c:74:4b:fb:fb:20:12:ef: 25:52:f7:bd:51:6a:a6:60:53:38:22:db:f3:7a:9c:95:0a:dc: df:75:1a:3c:0c:e3:3e:2e:10:11:cb:d4:1e:fc:76:65:84:f6: c1:ff:bc:31:53:f2:cc:e7:80:93:bd:b4:41:d3:f3:ff:c8:52: 7c:40:c3:72:4e:48:bd:e5:1f:55:d5:3e:86:48:22:2e:92:1f: 67:35:f9:db:05:1a:86:2d:a3:6c:7d:b4:5c:ba:de:52:fb:3f: 7d:e5:70:6f:13:82:f2:79:09:03:eb:a9:ec:d5:43:75:6f:30: eb:3c:ee:b4:45:35:7b:db:c6:a6:3a:66:d0:be:7f:80:b5:1a: 9e:e9:b5:78:84:ea:2d:bf:59:bb:a1:61:4b:12:29:81:7b:37: 97:19:89:e5:cd:44:7f:30:3b:48:7f:6c:6c:61:1a:45:0c:93: ad:97:00:66:71:f3:e9:99:c8:2e:ba:b3:36:3f:8c:60:88:c1: 1d:aa:be:1f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3wzybuxWeFRHYAlyIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyNDE0MTI1OFoXDTI4MDgyNjE0MTI1OFowLzEtMCsGA1UEAxMk ZTMyODE0OWQtZDA3Ny00ZTZhLTkzYjItODI5YTk2YzcwYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OJuAUs7pSyHUCg1Sv4/48vB9909LliJCEa2 fghfnbLmKQLkOzahB5TG8VBEvy0y5WU6oOgrE1Q9ncEf8IrDCzLhRa7Y8QkfWiwl JxPFlvERhCjcc75ZmDI8UyuCp51LjeLdtoB+uLtr3qXLIuzcPZG9w67ZvrjJt3oD SpTZBgnN6DwuFgmjPHCm7OvyvxuRa3iIwPNhdt3fc8XgQRLQjRUwQ3/cicIzbJxD FdwLh6mYQOG4WIf7HtbeLMLgY1MyUwGlHsdk4nc0dl7S7Y+4N3U4g6FPW7t6X8af b2L1kpXnFwnRII3Raqw3H3T8f8hkCVzeK+JOsjIPz2TOjNNKQQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFE1pKDvG4xSjszGijfjSkWYfHXVvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l MzI4MTQ5ZC1kMDc3LTRlNmEtOTNiMi04MjlhOTZjNzBhZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2UzMjgxNDlkLWQwNzctNGU2YS05 M2IyLTgyOWE5NmM3MGFmZC9lMzI4MTQ5ZC1kMDc3LTRlNmEtOTNiMi04MjlhOTZj NzBhZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnqQwDgQCAAIwCAMGACYC87cAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AMZBX2RoGibSHDdnYS2vBX982w5H6yw25DjLgVw1XsdG13HPgcBlLcaGqjqXWG96 gY4iMxH4XVYPKrZomFAyBnGcdEv7+yAS7yVS971RaqZgUzgi2/N6nJUK3N91GjwM 4z4uEBHL1B78dmWE9sH/vDFT8szngJO9tEHT8//IUnxAw3JOSL3lH1XVPoZIIi6S H2c1+dsFGoYto2x9tFy63lL7P33lcG8TgvJ5CQPrqezVQ3VvMOs87rRFNXvbxqY6 ZtC+f4C1Gp7ptXiE6i2/WbuhYUsSKYF7N5cZieXNRH8wO0h/bGxhGkUMk62XAGZx 8+mZyC66szY/jGCIwR2qvh8= -----END CERTIFICATE-----Generated at Thu May 28 16:06:38 2026 by rpki-client