$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer File: 2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer (raw, json) Hash identifier: baQIOokUdtKwSxPbLJuMY3g6KYsl7YoFBFudFkzy3Rg= Subject key identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DB379EE91E5C2997CAF8A6FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 02 May 2026 14:56:57 +0000 Certificate not after: Fri 04 Aug 2028 14:56:57 +0000 Subordinate resources: AS: 54255 IP: 23.128.48.0/24 IP: 2604:3740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b3:79:ee:91:e5:c2:99:7c:af:8a:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 2 14:56:57 2026 GMT Not After : Aug 4 14:56:57 2028 GMT Subject: CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:3c:bb:20:e4:07:eb:03:62:a7:95:db:a7: 8f:c0:84:fe:66:f0:b3:04:fa:26:b7:09:53:43:6b: eb:b3:93:54:80:8b:55:b9:c7:0c:b5:e8:0f:ee:fb: 8e:79:67:89:29:be:08:02:0d:28:39:c6:f0:b6:f9: e9:68:31:75:ef:6f:cb:dd:dc:4b:d5:02:b4:c8:9b: eb:db:4d:b7:9c:e9:2c:cc:db:e2:6f:dc:69:7d:99: 1e:cf:c4:bb:57:65:73:81:c5:97:02:00:46:67:64: 33:38:31:b6:f0:f6:00:72:da:9a:b5:c7:e7:f0:38: 14:11:96:89:b3:03:51:f8:b3:75:85:62:17:2c:a8: 62:1b:8f:99:fa:cb:a7:02:9f:b9:5c:b6:e6:88:1c: 4d:46:76:ff:ff:7d:57:b5:64:c8:2b:d2:77:aa:5a: 27:d5:e4:32:89:9d:c6:ad:f8:47:98:91:fd:50:8b: 1d:a8:bc:0e:25:71:bb:fe:bf:31:2f:ab:c0:30:d5: 78:a7:40:ab:49:06:5b:b9:1e:22:25:3b:0e:b1:29: eb:e2:11:e9:f9:b1:02:63:af:9d:ab:c9:f8:81:2c: b0:cc:e1:67:ea:a9:3a:ea:e1:78:f5:95:4a:e5:f1: 72:e3:ab:25:ba:c4:16:42:a6:f3:84:43:2f:80:02: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.128.48.0/24 IPv6: 2604:3740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:87:30:a9:6c:e5:69:4b:c5:fc:9d:69:ef:ae:3c:f2:ac:26: 37:81:73:ce:ee:40:fe:ba:a6:7f:44:25:8b:cc:87:c3:44:95: d5:08:39:53:fc:ed:f0:74:89:b8:88:31:68:b1:8b:d7:5a:73: 33:90:cb:b0:c7:ca:2c:a4:93:93:83:d3:eb:55:f2:3b:7e:67: 2f:25:3f:62:c8:5a:be:91:db:ac:49:06:e1:6d:11:9c:b7:ad: cb:7a:82:0d:ac:98:f9:25:02:fa:6d:49:20:c5:96:94:31:f3: ae:b7:3a:cb:ca:f5:4b:22:ce:d0:ae:f9:66:42:4d:64:6c:91: c4:2c:fc:13:ea:31:c1:06:df:62:bf:b1:ca:39:3d:c6:8b:32: 0c:d3:a4:c9:12:a8:61:ee:24:14:5a:f8:e7:36:88:9d:05:7d: 1f:2c:df:21:12:d9:81:7c:da:4f:d9:d9:32:30:c1:1c:c2:44: e9:3c:61:a0:66:4b:ef:3c:19:e8:82:03:25:80:8f:53:0b:38: 3a:55:d6:e9:16:d4:8c:e9:8f:41:fb:02:57:5b:09:c2:d8:2f: 86:45:2d:0d:b6:8a:41:08:34:a0:f6:76:99:92:01:be:d2:54: 43:d0:3f:14:b6:f0:8e:18:0d:54:70:6e:20:6c:80:56:a6:3a: 7d:4b:2d:2b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2zee6R5cKZfK+Kb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwMjE0NTY1N1oXDTI4MDgwNDE0NTY1N1owLzEtMCsGA1UEAxMk MmQwMDYzZjgtNTM4YS00NzE3LTg1ZWUtN2VmOWVlNTJiZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Q8uyDkB+sDYqeV26ePwIT+ZvCzBPomtwlT Q2vrs5NUgItVuccMtegP7vuOeWeJKb4IAg0oOcbwtvnpaDF172/L3dxL1QK0yJvr 2023nOkszNvib9xpfZkez8S7V2VzgcWXAgBGZ2QzODG28PYActqatcfn8DgUEZaJ swNR+LN1hWIXLKhiG4+Z+sunAp+5XLbmiBxNRnb//31XtWTIK9J3qlon1eQyiZ3G rfhHmJH9UIsdqLwOJXG7/r8xL6vAMNV4p0CrSQZbuR4iJTsOsSnr4hHp+bECY6+d q8n4gSywzOFn6qk66uF49ZVK5fFy46slusQWQqbzhEMvgAKR3wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDX5udsfzAlMb+aCw0qDICr3hCfNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y ZDAwNjNmOC01MzhhLTQ3MTctODVlZS03ZWY5ZWU1MmJkZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzJkMDA2M2Y4LTUzOGEtNDcxNy04 NWVlLTdlZjllZTUyYmRlMy8yZDAwNjNmOC01MzhhLTQ3MTctODVlZS03ZWY5ZWU1 MmJkZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXgDAwDQQCAAIwBwMFACYEN0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANPvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAISHMKls5WlLxfydae+uPPKsJjeB c87uQP66pn9EJYvMh8NEldUIOVP87fB0ibiIMWixi9daczOQy7DHyiykk5OD0+tV 8jt+Zy8lP2LIWr6R26xJBuFtEZy3rct6gg2smPklAvptSSDFlpQx8663OsvK9Usi ztCu+WZCTWRskcQs/BPqMcEG32K/sco5PcaLMgzTpMkSqGHuJBRa+Oc2iJ0FfR8s 3yES2YF82k/Z2TIwwRzCROk8YaBmS+88GeiCAyWAj1MLODpV1ukW1Izpj0H7Aldb CcLYL4ZFLQ22ikEINKD2dpmSAb7SVEPQPxS28I4YDVRwbiBsgFamOn1LLSs= -----END CERTIFICATE-----Generated at Wed May 13 02:48:21 2026 by rpki-client