$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer File: 0acd930f-69db-4fad-a737-b4b3b2f142c6.cer (raw, json) Hash identifier: 8jrRYz/c34X7Qz0dAGQdfFsvOY1S+VFLN8z04I2iSQA= Subject key identifier: 12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D97A583F39A3B6F9A001EED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 15:42:08 +0000 Certificate not after: Tue 25 Jul 2028 15:42:08 +0000 Subordinate resources: AS: 396836 IP: 23.147.188.0/24 IP: 2604:24e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:a5:83:f3:9a:3b:6f:9a:00:1e:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 22 15:42:08 2026 GMT Not After : Jul 25 15:42:08 2028 GMT Subject: CN=0acd930f-69db-4fad-a737-b4b3b2f142c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:80:c2:0b:01:6a:4d:d0:80:47:35:19:d5: 48:74:52:fc:fe:5c:d3:b9:67:36:fc:62:93:32:02: cc:b6:77:a8:4c:5e:05:34:a2:12:9c:9e:59:54:23: 61:30:be:4a:b0:dd:d9:41:79:1f:be:18:80:1c:45: 6b:a6:36:6d:09:e1:ea:19:e6:53:c5:91:3d:b9:41: f2:df:bf:64:ee:96:a5:59:92:7d:12:61:90:aa:1e: 64:40:f6:e2:82:ac:22:dd:c4:83:91:67:92:f5:f9: b4:67:47:75:fc:41:96:3f:1f:f7:ed:9b:c8:97:e6: 30:35:9d:1a:81:40:60:08:2e:b2:24:0a:d2:c7:35: 9f:7c:2f:34:a2:d1:3e:0d:10:1c:ac:37:95:7d:0a: 0f:2e:c4:11:7b:ac:b6:01:8b:e0:95:1b:0e:4f:35: 46:4d:08:d3:6a:a9:c0:40:07:f0:55:13:95:21:44: 4c:d9:ca:ad:a9:3e:e8:20:29:8f:9f:ee:b1:85:f9: bc:e2:f0:7b:c0:28:19:c0:a7:4e:0f:7f:f8:93:93: 50:80:48:57:33:4b:e7:d4:94:c8:12:01:d2:ab:10: eb:7b:66:77:c9:df:5b:b4:e1:01:a1:3c:e6:9f:1a: 17:8f:51:dd:d6:12:5b:41:17:09:50:3b:49:01:6e: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.147.188.0/24 IPv6: 2604:24e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396836 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:31:14:a9:05:45:78:98:81:84:44:a2:33:44:ca:3d:74:7c: 0e:41:65:ad:c4:dc:21:91:84:ca:17:e9:24:41:06:84:94:d0: 2f:16:9c:fa:d6:7c:ba:ee:5e:7b:ba:bb:2c:7b:03:b0:d2:1a: ee:6a:72:2c:58:55:93:ad:04:5d:b8:c1:64:68:f0:fe:39:c8: 42:25:32:f2:5e:30:c2:b4:1f:60:a0:35:d9:18:3e:21:5a:4d: 40:d8:2c:0c:90:05:a7:7f:84:67:b0:c6:ab:3e:af:a0:9d:f6: 69:ac:3e:18:59:72:7c:8f:4e:92:54:02:39:ab:d8:78:96:28: 5f:56:1f:ca:ed:cc:b9:98:e3:35:1d:ff:27:66:2b:d6:b7:41: 21:a2:78:29:54:08:45:75:3b:bd:1e:ba:67:6c:8f:06:92:35: 1e:59:96:01:01:fa:95:0e:56:4f:e7:af:ed:28:8d:cf:ef:95: 97:0b:19:c9:bc:e3:15:78:66:e9:97:c7:37:58:b8:b9:2a:c2: dc:f6:53:a2:6b:37:92:93:a1:4a:1b:a9:cc:63:97:a0:bb:cd: 30:95:94:f8:f6:48:38:7c:4a:fe:5e:56:ff:7f:5f:19:e5:ef: 92:32:40:df:b0:2f:73:6b:b1:da:32:41:61:b2:6d:f8:85:90: f4:a3:9b:bb -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2XpYPzmjtvmgAe7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMjE1NDIwOFoXDTI4MDcyNTE1NDIwOFowLzEtMCsGA1UEAxMk MGFjZDkzMGYtNjlkYi00ZmFkLWE3MzctYjRiM2IyZjE0MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4CAwgsBak3QgEc1GdVIdFL8/lzTuWc2/GKT MgLMtneoTF4FNKISnJ5ZVCNhML5KsN3ZQXkfvhiAHEVrpjZtCeHqGeZTxZE9uUHy 379k7palWZJ9EmGQqh5kQPbigqwi3cSDkWeS9fm0Z0d1/EGWPx/37ZvIl+YwNZ0a gUBgCC6yJArSxzWffC80otE+DRAcrDeVfQoPLsQRe6y2AYvglRsOTzVGTQjTaqnA QAfwVROVIURM2cqtqT7oICmPn+6xhfm84vB7wCgZwKdOD3/4k5NQgEhXM0vn1JTI EgHSqxDre2Z3yd9btOEBoTzmnxoXj1Hd1hJbQRcJUDtJAW755QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBJ86Qdna4Hid5+cYjddtxlf42RIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w YWNkOTMwZi02OWRiLTRmYWQtYTczNy1iNGIzYjJmMTQyYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBhY2Q5MzBmLTY5ZGItNGZhZC1h NzM3LWI0YjNiMmYxNDJjNi8wYWNkOTMwZi02OWRiLTRmYWQtYTczNy1iNGIzYjJm MTQyYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXk7wwDQQCAAIwBwMFACYEJOAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg4kMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFoxFKkFRXiYgYREojNEyj10fA5B Za3E3CGRhMoX6SRBBoSU0C8WnPrWfLruXnu6uyx7A7DSGu5qcixYVZOtBF24wWRo 8P45yEIlMvJeMMK0H2CgNdkYPiFaTUDYLAyQBad/hGewxqs+r6Cd9mmsPhhZcnyP TpJUAjmr2HiWKF9WH8rtzLmY4zUd/ydmK9a3QSGieClUCEV1O70eumdsjwaSNR5Z lgEB+pUOVk/nr+0ojc/vlZcLGcm84xV4ZumXxzdYuLkqwtz2U6JrN5KToUobqcxj l6C7zTCVlPj2SDh8Sv5eVv9/Xxnl75IyQN+wL3NrsdoyQWGybfiFkPSjm7s= -----END CERTIFICATE-----Generated at Wed May 13 02:48:22 2026 by rpki-client