$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658.cer File: 2cda86ec-8ca4-4784-9e6e-73eba390a658.cer (raw, json) Hash identifier: 7l65gOWKdn26GR22xBs0woRtZ6pJgJbWSGGCwKxwquI= Subject key identifier: AA:F1:9A:8E:21:69:A0:E6:C0:BF:2D:78:B0:4B:B1:76:8F:24:A2:2A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D97994F7ADB4DB71213FD2900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/2cda86ec-8ca4-4784-9e6e-73eba390a658.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 15:17:32 +0000 Certificate not after: Tue 25 Jul 2028 15:17:32 +0000 Subordinate resources: AS: 394495 IP: 23.169.216.0/24 IP: 2602:f9a7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:99:4f:7a:db:4d:b7:12:13:fd:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 22 15:17:32 2026 GMT Not After : Jul 25 15:17:32 2028 GMT Subject: CN=2cda86ec-8ca4-4784-9e6e-73eba390a658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:6c:bd:5a:39:a6:1c:b5:8c:26:df:63:01: 3b:df:fb:31:b4:b0:78:06:0a:34:55:7e:9d:61:af: 6b:d6:00:bd:6d:72:b4:9f:7a:65:56:68:97:24:41: 55:80:7a:c0:53:c4:1a:de:e1:6b:f5:d0:a8:d8:56: bc:c4:19:14:33:27:19:50:82:3c:e6:c4:47:22:e6: de:db:fc:91:15:c7:ca:7e:20:6c:d6:96:b0:8a:c7: c8:75:89:4b:cf:5c:ff:3f:7b:0a:fd:aa:03:23:a5: 4a:78:7e:e4:0b:19:c2:2e:1e:fb:34:c6:fe:f4:58: 9a:d7:6d:48:75:21:41:86:78:05:25:7a:08:d6:1c: 33:6f:fb:a3:48:9e:ad:e9:38:ef:c6:25:1b:33:60: ea:be:a7:3e:f8:c6:31:e1:b2:d0:73:3c:ea:ec:da: 72:3d:ed:5e:4d:2d:2f:93:4d:08:c2:95:ab:66:92: d8:06:20:ce:1c:69:e5:21:b5:cb:74:b7:1d:38:82: ac:cb:76:a4:97:aa:5f:23:e2:e8:9f:ab:56:6f:ba: 06:98:33:1c:f5:74:d4:2f:53:9a:fc:e0:3e:c8:83: 52:a4:12:01:aa:e7:16:89:05:6b:3d:d3:cc:eb:c5: 5a:8b:0c:78:fc:da:f2:c8:5c:75:89:e2:be:b0:36: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:9A:8E:21:69:A0:E6:C0:BF:2D:78:B0:4B:B1:76:8F:24:A2:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/2cda86ec-8ca4-4784-9e6e-73eba390a658.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.169.216.0/24 IPv6: 2602:f9a7::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394495 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ef:9c:46:d2:53:3f:d3:63:51:ef:52:71:23:33:38:b8:a3: e4:19:cf:d9:68:5c:b2:23:c5:fd:93:23:23:1c:2c:0b:e0:54: 6b:7e:a7:54:95:42:4d:e4:44:bc:37:0d:09:ea:eb:d7:79:ec: db:2f:85:f0:aa:ab:53:77:08:8d:f0:bb:31:78:85:d4:f3:88: f6:a1:d5:fb:0a:2b:42:11:8b:db:88:95:33:0a:93:3a:35:68: 03:75:63:3d:3f:c9:2d:86:72:7d:54:33:7a:64:b7:e7:58:da: 54:d3:3c:e3:4c:9c:03:e5:86:05:4a:eb:d3:f8:21:d9:e3:20: c7:4d:79:e9:4b:6e:5c:1e:fd:39:98:95:24:c7:9b:08:2d:74: ec:d3:8a:1a:cc:cd:ab:e3:a4:2e:b2:a3:b6:ad:20:14:97:67: 23:88:4a:d1:9a:81:8f:79:2e:6b:f3:39:4c:81:69:39:a0:eb: 47:9e:0b:c5:10:ef:b0:1e:f6:3e:f5:c7:38:60:31:19:ba:85: 8f:03:72:dc:4c:2a:e9:77:31:d2:57:f5:bf:54:6a:c0:be:5e: 18:54:44:81:fd:c6:5e:5d:99:a0:ba:a4:4c:62:ab:c3:7f:0f: ab:7e:5c:79:43:e6:22:1f:9f:78:59:1b:76:d4:41:db:77:c9: 9f:33:4a:2b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2XmU962023EhP9KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMjE1MTczMloXDTI4MDcyNTE1MTczMlowLzEtMCsGA1UEAxMk MmNkYTg2ZWMtOGNhNC00Nzg0LTllNmUtNzNlYmEzOTBhNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTJsvVo5phy1jCbfYwE73/sxtLB4Bgo0VX6d Ya9r1gC9bXK0n3plVmiXJEFVgHrAU8Qa3uFr9dCo2Fa8xBkUMycZUII85sRHIube 2/yRFcfKfiBs1pawisfIdYlLz1z/P3sK/aoDI6VKeH7kCxnCLh77NMb+9Fia121I dSFBhngFJXoI1hwzb/ujSJ6t6TjvxiUbM2Dqvqc++MYx4bLQczzq7NpyPe1eTS0v k00IwpWrZpLYBiDOHGnlIbXLdLcdOIKsy3akl6pfI+Lon6tWb7oGmDMc9XTUL1Oa /OA+yINSpBIBqucWiQVrPdPM68Vaiwx4/NryyFx1ieK+sDYl0wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKrxmo4haaDmwL8teLBLsXaPJKIqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y Y2RhODZlYy04Y2E0LTQ3ODQtOWU2ZS03M2ViYTM5MGE2NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzJjZGE4NmVjLThjYTQtNDc4NC05 ZTZlLTczZWJhMzkwYTY1OC8yY2RhODZlYy04Y2E0LTQ3ODQtOWU2ZS03M2ViYTM5 MGE2NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqdgwDgQCAAIwCAMGACYC+acAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYE/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD75xG0lM/02NR71JxIzM4uKPk Gc/ZaFyyI8X9kyMjHCwL4FRrfqdUlUJN5ES8Nw0J6uvXeezbL4XwqqtTdwiN8Lsx eIXU84j2odX7CitCEYvbiJUzCpM6NWgDdWM9P8kthnJ9VDN6ZLfnWNpU0zzjTJwD 5YYFSuvT+CHZ4yDHTXnpS25cHv05mJUkx5sILXTs04oazM2r46QusqO2rSAUl2cj iErRmoGPeS5r8zlMgWk5oOtHngvFEO+wHvY+9cc4YDEZuoWPA3LcTCrpdzHSV/W/ VGrAvl4YVESB/cZeXZmguqRMYqvDfw+rflx5Q+YiH594WRt21EHbd8mfM0or -----END CERTIFICATE-----Generated at Wed May 13 02:48:21 2026 by rpki-client