$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007.cer File: 377844c3-b45b-4bca-8728-7590c6f21007.cer (raw, json) Hash identifier: +rFAFGSIcUVHAwQiEA1SoE2eUhxt/Zaz3aTtvbfCVxc= Subject key identifier: BC:2E:C7:FB:B7:F8:6C:EE:0B:60:B6:84:F0:E8:95:91:D3:29:30:BE Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DC19C8898F84C189E7AEC9800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/377844c3-b45b-4bca-8728-7590c6f21007.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 May 2026 16:27:59 +0000 Certificate not after: Wed 09 Aug 2028 16:27:59 +0000 Subordinate resources: AS: 21532 IP: 23.155.4.0/24 IP: 2602:f420::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:9c:88:98:f8:4c:18:9e:7a:ec:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 7 16:27:59 2026 GMT Not After : Aug 9 16:27:59 2028 GMT Subject: CN=377844c3-b45b-4bca-8728-7590c6f21007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:79:f3:3e:31:39:73:e6:82:f1:af:3e:92: 60:9b:99:95:23:0f:cb:10:2f:d1:00:c6:d2:db:d3: 2f:6e:b1:d1:36:9f:70:30:83:77:6e:6f:85:43:38: 19:d2:53:d6:4b:39:b8:db:02:34:37:a6:94:d9:c3: e1:dd:43:f3:c0:7c:67:79:54:28:73:9b:d0:4b:91: d0:2b:d9:1c:97:c4:b1:6c:a4:0f:27:5a:83:44:eb: 6a:87:3c:fe:80:8b:1a:b0:ac:ed:b5:c1:6e:ce:8b: 98:06:af:d0:bd:8e:25:2a:bd:95:74:07:64:4e:2d: ff:ed:f9:a5:fd:b4:d2:db:bb:07:24:7b:2a:03:65: 99:6d:b3:a2:2c:2c:e0:05:43:3b:4d:46:26:70:9c: 95:59:ce:59:e0:be:f0:91:5a:23:3a:e1:e9:de:23: 5d:73:d3:80:32:50:33:16:31:9a:69:b1:4d:8c:27: 9f:8c:d2:b9:17:9e:6b:ca:46:7b:57:4a:7e:fc:8d: 76:96:0d:6f:6a:91:ac:68:c0:bc:45:d7:8f:ae:45: 5c:49:44:36:aa:40:59:be:ba:69:61:1e:db:15:7d: bf:82:bb:ad:26:8e:91:3e:cc:9b:e8:79:27:19:2d: 7c:cd:aa:f0:78:0b:19:d0:6b:2d:86:36:f9:9c:77: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2E:C7:FB:B7:F8:6C:EE:0B:60:B6:84:F0:E8:95:91:D3:29:30:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/377844c3-b45b-4bca-8728-7590c6f21007/377844c3-b45b-4bca-8728-7590c6f21007.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.155.4.0/24 IPv6: 2602:f420::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21532 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:eb:78:10:6a:ca:6a:70:95:37:d9:4b:3f:1b:0a:e8:9f:02: fd:c4:03:60:6c:fa:ad:e8:d3:99:b8:53:2e:13:3c:e9:89:ff: 3d:65:e6:93:4a:43:cc:24:03:7b:24:90:f4:ac:e9:83:d3:f7: 4c:84:ab:58:e9:cb:21:cc:45:67:1c:db:5d:5c:65:f2:de:0e: 5e:a9:34:3a:15:a7:c2:ea:bc:32:e6:9f:8f:5a:0f:cf:1d:13: 21:72:b0:12:f0:62:5d:db:03:15:e9:fc:46:ea:d6:f6:69:cb: 0c:92:74:67:5a:5d:58:7f:4c:7a:d0:86:ba:b9:4a:55:e6:18: 27:89:a2:f2:11:80:17:a8:44:f2:dc:e2:43:98:75:44:95:a5: 58:04:20:a3:ab:3c:dc:74:cd:3d:4f:db:6b:11:e2:cf:05:d3: ec:03:8e:d4:a6:89:4b:42:84:aa:f6:81:f6:aa:0a:2f:64:a5: 56:e2:33:da:48:c7:f1:74:ca:86:a4:53:b4:98:47:0d:28:58: 32:0d:bc:f2:e8:21:76:b7:f9:77:09:b5:e3:4c:38:9d:1f:13: 99:a2:aa:cc:09:40:d8:df:73:ce:9c:e5:4e:5f:a9:e5:b4:57: 08:96:29:79:42:04:b5:6f:dc:70:f7:25:c3:2a:26:81:3b:06: e5:61:1c:33 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE3BnIiY+EwYnnrsmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNzE2Mjc1OVoXDTI4MDgwOTE2Mjc1OVowLzEtMCsGA1UEAxMk Mzc3ODQ0YzMtYjQ1Yi00YmNhLTg3MjgtNzU5MGM2ZjIxMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVt58z4xOXPmgvGvPpJgm5mVIw/LEC/RAMbS 29MvbrHRNp9wMIN3bm+FQzgZ0lPWSzm42wI0N6aU2cPh3UPzwHxneVQoc5vQS5HQ K9kcl8SxbKQPJ1qDROtqhzz+gIsasKzttcFuzouYBq/QvY4lKr2VdAdkTi3/7fml /bTS27sHJHsqA2WZbbOiLCzgBUM7TUYmcJyVWc5Z4L7wkVojOuHp3iNdc9OAMlAz FjGaabFNjCefjNK5F55rykZ7V0p+/I12lg1vapGsaMC8RdePrkVcSUQ2qkBZvrpp YR7bFX2/grutJo6RPsyb6HknGS18zarweAsZ0Gsthjb5nHe/3wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLwux/u3+GzuC2C2hPDolZHTKTC+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z Nzc4NDRjMy1iNDViLTRiY2EtODcyOC03NTkwYzZmMjEwMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzM3Nzg0NGMzLWI0NWItNGJjYS04 NzI4LTc1OTBjNmYyMTAwNy8zNzc4NDRjMy1iNDViLTRiY2EtODcyOC03NTkwYzZm MjEwMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmwQwDgQCAAIwCAMGACYC9CAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlQcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGjreBBqympwlTfZSz8bCuifAv3E A2Bs+q3o05m4Uy4TPOmJ/z1l5pNKQ8wkA3skkPSs6YPT90yEq1jpyyHMRWcc211c ZfLeDl6pNDoVp8LqvDLmn49aD88dEyFysBLwYl3bAxXp/Ebq1vZpywySdGdaXVh/ THrQhrq5SlXmGCeJovIRgBeoRPLc4kOYdUSVpVgEIKOrPNx0zT1P22sR4s8F0+wD jtSmiUtChKr2gfaqCi9kpVbiM9pIx/F0yoakU7SYRw0oWDINvPLoIXa3+XcJteNM OJ0fE5miqswJQNjfc86c5U5fqeW0VwiWKXlCBLVv3HD3JcMqJoE7BuVhHDM= -----END CERTIFICATE-----Generated at Wed May 13 04:02:47 2026 by rpki-client