$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer File: 0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer (raw, json) Hash identifier: /lr9aCsQ3362JTZbOrDulz8mf3KMemOWlRxOI2Irft0= Subject key identifier: 29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DC1503E877E15B581616CB480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 May 2026 13:54:16 +0000 Certificate not after: Wed 09 Aug 2028 13:54:16 +0000 Subordinate resources: IP: 23.157.204.0/24 IP: 2602:f3de::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:50:3e:87:7e:15:b5:81:61:6c:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 7 13:54:16 2026 GMT Not After : Aug 9 13:54:16 2028 GMT Subject: CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:ae:d2:00:e3:70:a4:d3:86:c5:95:c5:07: 82:e4:c6:08:7b:71:69:cc:c5:f2:6f:4f:5a:bb:ba: e1:f4:8e:bc:02:2e:a8:0e:b6:a1:f6:40:f1:7a:e7: 6d:b7:76:a5:1d:e2:ad:cd:74:69:6e:d2:37:95:2b: 37:b3:19:78:6e:5a:18:a0:ff:f1:c3:51:04:fc:ed: 54:18:3f:c0:06:9f:91:8a:74:82:1a:42:fc:0c:18: cb:da:75:1f:ac:72:fb:18:ad:0e:31:9b:29:b1:f1: f2:3b:1e:72:06:93:78:a7:d0:3a:4a:35:46:e5:13: 35:5e:84:4e:24:a2:4d:2e:fd:98:0b:5f:83:a6:45: 1d:22:39:db:39:5d:da:79:59:56:22:77:50:8e:dc: f2:f3:d2:24:75:f6:95:dd:ee:bd:35:94:45:15:1b: fd:77:46:3b:a7:62:0c:f9:42:92:3d:78:b1:fa:b5: c2:66:9f:c6:40:bf:c8:25:a1:ba:a4:f1:e5:50:a1: dc:ad:22:44:6b:51:a8:45:ed:0a:c6:a0:ad:fc:cd: f6:c7:f7:7b:d7:cc:52:87:a7:7f:17:06:2a:b4:99: 5a:9f:47:bd:d1:8f:b0:fc:31:6f:24:af:3a:80:49: 95:28:0a:a9:48:1d:e3:5b:7f:07:14:92:14:42:96: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.157.204.0/24 IPv6: 2602:f3de::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:17:e3:93:26:eb:4d:37:7c:f0:2d:50:a3:b1:14:fd:25:ee: ed:99:7b:33:5c:08:68:88:d5:0d:25:0b:4f:d0:3b:8b:83:43: 77:bf:89:0f:8b:19:5d:0e:34:6a:66:50:9b:77:37:86:db:34: c0:5a:4c:e4:8e:b2:86:91:ee:92:d2:eb:99:7a:88:5e:b2:51: fc:a5:f8:67:ca:50:39:03:1b:64:4a:4d:2b:98:9d:a8:50:76: 32:4d:b7:73:00:b9:f7:d3:f0:0d:62:3c:94:31:b2:56:38:d0: dc:82:b0:b2:ae:33:fa:9f:94:d4:dd:1d:09:98:8e:11:1f:3b: b6:6a:93:67:c0:44:7e:b3:f9:f9:7c:5b:b6:6d:f9:f9:ef:1b: c4:84:e4:3e:fd:43:d1:65:24:91:17:36:b5:90:63:8a:8b:93: ad:75:df:7b:2c:33:06:db:6d:c2:45:64:f4:80:61:ba:b3:a0: 89:89:61:58:de:06:54:a7:f6:d6:79:b1:20:a3:8e:fd:84:78: f1:ab:ee:b3:28:e9:a7:c1:41:0f:a6:3f:ff:e2:6f:69:5b:88: c3:3c:61:8a:56:72:6a:45:a7:43:0e:f5:e1:7c:88:d1:20:c2: 3a:db:f6:b7:68:90:d7:68:b0:95:6a:cd:80:49:b9:8c:b9:dc: d0:bd:05:62 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE3BUD6HfhW1gWFstIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNzEzNTQxNloXDTI4MDgwOTEzNTQxNlowLzEtMCsGA1UEAxMk MDQ1MmRhMTgtMTI1Mi00ZjJmLWEzYjEtODBiMzJiNmQyYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDmu0gDjcKTThsWVxQeC5MYIe3FpzMXyb09a u7rh9I68Ai6oDrah9kDxeudtt3alHeKtzXRpbtI3lSs3sxl4bloYoP/xw1EE/O1U GD/ABp+RinSCGkL8DBjL2nUfrHL7GK0OMZspsfHyOx5yBpN4p9A6SjVG5RM1XoRO JKJNLv2YC1+DpkUdIjnbOV3aeVlWIndQjtzy89IkdfaV3e69NZRFFRv9d0Y7p2IM +UKSPXix+rXCZp/GQL/IJaG6pPHlUKHcrSJEa1GoRe0KxqCt/M32x/d718xSh6d/ FwYqtJlan0e90Y+w/DFvJK86gEmVKAqpSB3jW38HFJIUQpawxQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCnqLCbD4tQdiYd3NB+34Dw4h8ntMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w NDUyZGExOC0xMjUyLTRmMmYtYTNiMS04MGIzMmI2ZDJhOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzA0NTJkYTE4LTEyNTItNGYyZi1h M2IxLTgwYjMyYjZkMmE5Yi8wNDUyZGExOC0xMjUyLTRmMmYtYTNiMS04MGIzMmI2 ZDJhOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXncwwDgQCAAIwCAMGACYC894AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFMX45Mm6003fPAtUKOxFP0l7u2ZezNcCGiI1Q0lC0/QO4uDQ3e/iQ+LGV0ONGpm UJt3N4bbNMBaTOSOsoaR7pLS65l6iF6yUfyl+GfKUDkDG2RKTSuYnahQdjJNt3MA uffT8A1iPJQxslY40NyCsLKuM/qflNTdHQmYjhEfO7Zqk2fARH6z+fl8W7Zt+fnv G8SE5D79Q9FlJJEXNrWQY4qLk61133ssMwbbbcJFZPSAYbqzoImJYVjeBlSn9tZ5 sSCjjv2EePGr7rMo6afBQQ+mP//ib2lbiMM8YYpWcmpFp0MO9eF8iNEgwjrb9rdo kNdosJVqzYBJuYy53NC9BWI= -----END CERTIFICATE-----Generated at Wed May 13 02:48:19 2026 by rpki-client