$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476.cer File: 1e306537-29f1-473a-9c8e-a9132d998476.cer (raw, json) Hash identifier: tlg+bqPHODl/Rs1vGZN9osP22VQ6S02W0y2mjrKf8kg= Subject key identifier: 03:59:43:89:4A:B2:BF:69:06:B3:57:7F:19:71:31:D4:0C:38:10:F6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9D6840D9D36F2C1ACE61AE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/1e306537-29f1-473a-9c8e-a9132d998476.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Apr 2026 17:13:33 +0000 Certificate not after: Thu 27 Jul 2028 17:13:33 +0000 Subordinate resources: AS: 26441 AS: 393388 IP: 198.163.215.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9d:68:40:d9:d3:6f:2c:1a:ce:61:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 24 17:13:33 2026 GMT Not After : Jul 27 17:13:33 2028 GMT Subject: CN=1e306537-29f1-473a-9c8e-a9132d998476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:91:c3:0b:c0:90:1c:7a:8e:a5:51:86:b4: 0f:a3:d0:b2:5d:ba:b5:cc:30:b6:4f:cc:d1:d5:2b: 6d:92:af:95:ed:62:63:3c:93:71:59:98:20:7a:09: 5d:c9:5a:7f:94:f8:b5:38:8f:44:86:e3:b1:62:14: d2:14:f2:48:77:6d:e6:ee:71:f0:77:52:06:3c:64: 86:86:e7:eb:da:b7:64:c6:7c:1f:1f:f1:11:73:79: 24:11:3f:16:4b:bd:46:f7:0e:52:c8:0d:d9:81:b9: ca:f2:f3:20:c6:0e:83:09:b4:6d:ff:a1:5a:44:26: ab:1f:b1:bc:47:07:26:1e:58:08:99:41:68:9f:12: ec:87:5f:d6:f0:f1:a8:a2:51:0e:fe:c4:75:a1:1c: ca:75:18:10:a8:32:75:b0:7c:f1:5a:24:c0:b8:e5: 5a:3f:92:25:f0:c1:7d:f6:ce:8e:5c:50:c4:2b:21: e4:6b:39:78:1e:6b:10:b0:8f:94:6e:e7:77:72:c1: 09:07:01:b3:72:1e:ae:37:1f:0f:9d:10:32:b4:20: a3:08:6e:1a:c6:1d:37:36:06:33:71:b8:78:9d:7a: 9b:66:5a:e0:ca:eb:2c:99:c0:60:9d:73:b8:c5:9f: e2:58:cd:51:e7:0a:1c:ed:55:1e:4b:4f:34:9f:ea: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:59:43:89:4A:B2:BF:69:06:B3:57:7F:19:71:31:D4:0C:38:10:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/1e306537-29f1-473a-9c8e-a9132d998476.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.163.215.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26441 393388 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:b7:6a:77:3e:0d:68:76:ae:98:49:ad:a9:e2:37:05:5a:8b: f9:a7:a6:fd:91:fa:16:82:36:2d:e5:54:d0:f9:ac:2e:a4:b4: 07:d9:66:0c:c8:01:93:09:35:1c:e3:3d:36:52:3a:f1:68:69: 27:eb:17:24:5b:12:76:b4:c7:1d:22:d9:e3:04:6f:bf:ee:29: e9:4f:e7:7e:0b:a9:fd:9f:a8:b3:12:64:e2:72:49:85:59:ff: b3:f0:1d:67:ed:87:52:74:84:f0:6c:01:bb:ad:18:bc:96:55: 21:7f:10:af:1d:e4:60:e3:7d:f4:79:b7:a2:4e:9b:b4:47:bd: 29:69:e9:c6:2a:ab:ae:a2:8c:e6:53:28:02:89:a6:7c:35:c9: 6d:44:05:88:2d:d2:40:ba:ea:55:4e:5e:34:59:4c:9a:8f:26: d9:f4:41:7a:11:f9:89:21:78:13:1f:aa:c6:eb:6e:f3:ca:4e: cb:73:d9:d1:ea:8b:74:21:f9:c6:d4:ec:74:be:6a:bc:c0:5c: 4d:2c:bc:d4:e5:65:84:a8:1d:7e:99:5f:e5:e2:17:32:37:de: 24:1d:3b:2e:98:cf:0e:b0:44:9c:95:c1:2f:6c:c8:76:51:b1: 96:74:3a:19:73:12:f6:db:4c:b8:0e:22:b5:63:00:a1:b7:97: d3:c6:46:0f -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWE2daEDZ028sGs5hrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNDE3MTMzM1oXDTI4MDcyNzE3MTMzM1owLzEtMCsGA1UEAxMk MWUzMDY1MzctMjlmMS00NzNhLTljOGUtYTkxMzJkOTk4NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6qRwwvAkBx6jqVRhrQPo9CyXbq1zDC2T8zR 1Sttkq+V7WJjPJNxWZggegldyVp/lPi1OI9EhuOxYhTSFPJId23m7nHwd1IGPGSG hufr2rdkxnwfH/ERc3kkET8WS71G9w5SyA3ZgbnK8vMgxg6DCbRt/6FaRCarH7G8 RwcmHlgImUFonxLsh1/W8PGoolEO/sR1oRzKdRgQqDJ1sHzxWiTAuOVaP5Il8MF9 9s6OXFDEKyHkazl4HmsQsI+Ubud3csEJBwGzch6uNx8PnRAytCCjCG4axh03NgYz cbh4nXqbZlrgyussmcBgnXO4xZ/iWM1R5woc7VUeS080n+q4mQIDAQABo4IEHzCC BBswHQYDVR0OBBYEFANZQ4lKsr9pBrNXfxlxMdQMOBD2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8x ZTMwNjUzNy0yOWYxLTQ3M2EtOWM4ZS1hOTEzMmQ5OTg0NzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzFlMzA2NTM3LTI5ZjEtNDczYS05 YzhlLWE5MTMyZDk5ODQ3Ni8xZTMwNjUzNy0yOWYxLTQ3M2EtOWM4ZS1hOTEzMmQ5 OTg0NzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGo9cwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC Z0kCAwYArDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQDBt2p3Pg1odq6YSa2p4jcFWov5p6b9kfoWgjYt5VTQ +awupLQH2WYMyAGTCTUc4z02UjrxaGkn6xckWxJ2tMcdItnjBG+/7inpT+d+C6n9 n6izEmTickmFWf+z8B1n7YdSdITwbAG7rRi8llUhfxCvHeRg4330ebeiTpu0R70p aenGKquuoozmUygCiaZ8NcltRAWILdJAuupVTl40WUyajybZ9EF6EfmJIXgTH6rG 627zyk7Lc9nR6ot0IfnG1Ox0vmq8wFxNLLzU5WWEqB1+mV/l4hcyN94kHTsumM8O sESclcEvbMh2UbGWdDoZcxL220y4DiK1YwCht5fTxkYP -----END CERTIFICATE-----Generated at Wed May 13 03:59:12 2026 by rpki-client