$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer File: f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer (raw, json) Hash identifier: 5ByWP8ng44j5WNQ9gO1AqPsi2T0kGqC+zRzLhBohxO8= Subject key identifier: FB:81:BA:54:5C:A7:44:EE:AD:0D:73:17:9F:B9:F2:DF:58:03:19:F6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5BC60D08346B97ABF065580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 15:01:15 +0000 Certificate not after: Tue 22 Aug 2028 15:01:15 +0000 Subordinate resources: IP: 23.154.44.0/24 IP: 2602:f442::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:bc:60:d0:83:46:b9:7a:bf:06:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 15:01:15 2026 GMT Not After : Aug 22 15:01:15 2028 GMT Subject: CN=f8bd5146-a29d-4a93-883e-fc63eb0b4533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:53:65:1b:6f:c6:0e:99:00:ed:f0:a4:31: 4a:9f:52:0c:8b:70:56:f1:be:66:f0:e1:37:4e:60: 64:66:1e:e1:8e:4b:8f:5f:3e:12:a3:7d:63:a6:66: 5b:9c:8b:db:5e:1d:21:23:30:5a:42:4a:04:2a:87: 6e:68:a3:c9:80:20:b0:1c:f9:1d:18:cf:6c:91:b3: 30:32:5f:84:2f:0d:07:91:0b:5f:9d:51:bf:62:5f: a2:22:2c:38:97:26:db:22:82:4d:23:b3:dc:b0:a4: 11:73:45:4c:04:c4:44:56:45:82:b2:b4:ac:ab:22: 7e:c0:c1:5c:c7:f3:50:32:5d:9e:5e:09:40:fb:2a: 8f:f7:3e:c6:99:56:c0:eb:8b:95:80:a0:c5:79:d2: a1:62:cf:bb:13:d5:8c:47:2e:fc:5b:c4:81:b1:26: 7f:43:6f:47:cd:b1:06:de:d6:41:86:10:90:8a:3f: c7:55:ba:bf:d1:8e:5f:b7:b9:38:81:c7:e7:38:43: a3:5b:2d:55:4a:e1:2e:ff:b3:a1:50:fa:45:d1:3d: 07:98:44:fb:c2:22:58:37:60:5f:0c:59:8a:21:f9: 05:9b:bc:27:77:33:b1:8f:08:58:33:51:8a:42:3b: 64:e3:28:b3:e7:19:07:f3:e7:a3:3e:6a:47:d8:e1: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:81:BA:54:5C:A7:44:EE:AD:0D:73:17:9F:B9:F2:DF:58:03:19:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.154.44.0/24 IPv6: 2602:f442::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:63:c0:30:30:b9:27:72:95:be:4d:61:10:d4:d2:3a:d8:9f: d2:65:d7:5f:e5:ad:ba:46:78:c2:dc:cf:f8:7f:11:36:66:cd: 53:15:f4:b7:a1:51:d5:10:3d:03:1d:6a:30:32:e7:bd:9f:c9: ed:11:d8:33:7d:4e:98:f1:a0:1b:53:d3:90:ad:3a:c2:ca:79: bb:67:29:47:5b:57:52:d6:e9:c2:86:43:31:7e:1f:28:de:35: 21:1d:60:6d:e4:90:03:6d:16:07:b6:df:a4:5d:63:63:56:03: b3:86:c7:e2:32:d0:65:39:67:89:7c:0f:64:13:67:00:4d:2a: 19:1e:d7:3c:b8:ca:a5:85:7e:cb:a0:67:24:bc:8b:80:84:86: 2d:68:3f:c5:3c:57:93:b0:d3:07:11:f7:9a:1b:1e:b6:79:90: b2:8b:53:81:10:86:1b:5d:fd:57:d4:9d:55:da:22:1e:d3:5b: b0:e9:1a:5a:97:96:89:fd:76:98:45:55:46:bb:2b:9d:f6:a2: 14:5d:42:5d:16:39:a4:57:e9:3c:d8:b5:f4:f8:9b:4a:88:a4: 44:e6:51:80:eb:1d:36:9d:70:2f:7d:dd:1b:d2:cf:57:03:e3: 15:70:60:5b:1a:fb:a4:83:bd:70:f9:b9:9a:11:3b:1e:ca:cf: 23:00:0f:1b -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3lvGDQg0a5er8GVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE1MDExNVoXDTI4MDgyMjE1MDExNVowLzEtMCsGA1UEAxMk ZjhiZDUxNDYtYTI5ZC00YTkzLTg4M2UtZmM2M2ViMGI0NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxspTZRtvxg6ZAO3wpDFKn1IMi3BW8b5m8OE3 TmBkZh7hjkuPXz4So31jpmZbnIvbXh0hIzBaQkoEKoduaKPJgCCwHPkdGM9skbMw Ml+ELw0HkQtfnVG/Yl+iIiw4lybbIoJNI7PcsKQRc0VMBMREVkWCsrSsqyJ+wMFc x/NQMl2eXglA+yqP9z7GmVbA64uVgKDFedKhYs+7E9WMRy78W8SBsSZ/Q29HzbEG 3tZBhhCQij/HVbq/0Y5ft7k4gcfnOEOjWy1VSuEu/7OhUPpF0T0HmET7wiJYN2Bf DFmKIfkFm7wndzOxjwhYM1GKQjtk4yiz5xkH8+ejPmpH2OEQbQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPuBulRcp0TurQ1zF5+58t9YAxn2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m OGJkNTE0Ni1hMjlkLTRhOTMtODgzZS1mYzYzZWIwYjQ1MzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y4YmQ1MTQ2LWEyOWQtNGE5My04 ODNlLWZjNjNlYjBiNDUzMy9mOGJkNTE0Ni1hMjlkLTRhOTMtODgzZS1mYzYzZWIw YjQ1MzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmiwwDgQCAAIwCAMGACYC9EIAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGdjwDAwuSdylb5NYRDU0jrYn9Jl11/lrbpGeMLcz/h/ETZmzVMV9LehUdUQPQMd ajAy572fye0R2DN9TpjxoBtT05CtOsLKebtnKUdbV1LW6cKGQzF+HyjeNSEdYG3k kANtFge236RdY2NWA7OGx+Iy0GU5Z4l8D2QTZwBNKhke1zy4yqWFfsugZyS8i4CE hi1oP8U8V5Ow0wcR95obHrZ5kLKLU4EQhhtd/VfUnVXaIh7TW7DpGlqXlon9dphF VUa7K532ohRdQl0WOaRX6TzYtfT4m0qIpETmUYDrHTadcC993RvSz1cD4xVwYFsa +6SDvXD5uZoROx7KzyMADxs= -----END CERTIFICATE-----Generated at Sun May 24 13:49:50 2026 by rpki-client