$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d.cer File: 4997cc35-d26e-45fa-b0fc-e6489213999d.cer (raw, json) Hash identifier: dlFbl8EdpbOaR8VRGuKtdln6k4D6Y5AK0oDtcEL2mRQ= Subject key identifier: 0A:87:68:3E:C5:DB:7D:09:FF:58:D7:2C:5D:53:26:30:B5:F7:C4:18 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DCD18CCD14DB1FBA7D0048200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 19:12:15 +0000 Certificate not after: Wed 02 Aug 2028 13:22:44 +0000 Subordinate resources: AS: 402465 IP: 23.157.244.0/24 IP: 2620:19:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:18:cc:d1:4d:b1:fb:a7:d0:04:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 11 19:12:15 2026 GMT Not After : Aug 2 13:22:44 2028 GMT Subject: CN=4997cc35-d26e-45fa-b0fc-e6489213999d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:68:7c:5d:d1:1c:15:28:71:49:bc:76:d3: e9:88:d1:b5:ec:66:1f:47:18:c7:c7:e4:8d:c4:8b: 06:28:c9:6f:6f:0e:79:30:90:65:ca:76:4a:9f:c2: 83:48:35:ef:17:79:0c:9e:4b:a7:61:24:50:34:62: 94:67:44:26:a8:5f:08:af:de:ec:3a:1a:f6:2e:9d: 6f:94:41:d1:44:6b:38:fd:12:e5:eb:51:2b:d3:82: 8e:9b:cf:2c:a3:3d:51:a9:aa:96:f7:35:fd:43:fe: fa:80:da:9f:87:84:46:09:13:6f:c6:0c:01:cb:3a: 68:e4:69:d3:45:97:2a:94:2c:43:18:fb:7c:ab:81: 53:92:2b:ce:38:ac:06:9f:28:70:04:e6:fb:dd:d9: dd:3b:f9:e4:c1:03:ad:f6:70:23:95:35:f0:a1:ba: 09:59:92:39:91:96:fd:81:e7:a4:76:11:be:3a:46: fe:bd:8f:98:f7:aa:25:fe:a5:32:ea:f2:82:58:5a: ea:37:f8:14:a2:1b:73:dd:30:be:64:8b:68:b9:27: 69:46:24:47:3d:c6:0a:c8:18:88:dc:10:42:3c:1d: cf:3f:bf:6c:cb:e9:62:29:b8:b4:99:89:bf:e9:e1: 28:6c:77:e2:42:e4:f0:03:0c:ab:6a:51:47:6e:6a: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:87:68:3E:C5:DB:7D:09:FF:58:D7:2C:5D:53:26:30:B5:F7:C4:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.157.244.0/24 IPv6: 2620:19:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402465 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c0:78:e4:8c:2e:7b:4e:6d:d3:7f:fa:38:d1:7e:a7:e7:10: 0a:20:ff:08:1e:20:66:5f:6b:e7:84:b4:a1:cb:67:a9:95:e5: ac:97:75:7e:55:43:ad:32:47:38:08:46:28:17:19:8d:e5:9b: 7a:f2:ad:64:0e:67:04:8d:94:20:30:65:5f:bd:e0:aa:0d:f8: d5:e2:82:12:bf:51:9b:db:94:1d:83:22:c6:a3:59:dc:db:14: c7:d0:97:9a:a7:cd:bc:fe:32:10:28:95:39:05:56:99:7f:06: 14:49:fd:d9:49:87:e5:1f:fa:18:91:16:87:59:27:19:61:72: 79:aa:40:16:9a:14:b1:de:ab:6b:e6:7e:91:3e:4c:9d:d8:88: fd:04:86:3f:6a:c5:53:bb:6a:11:0a:13:d7:73:5e:c6:c6:c9: 9b:29:c4:95:a5:f0:53:92:6c:87:40:13:72:9c:4b:00:bb:2a: ca:19:30:2c:dd:9e:cb:ce:7f:ad:e6:a1:9b:2b:f1:cd:f3:b9: 67:a2:f7:6a:4a:b4:9c:5e:ad:a4:15:b0:83:9a:ae:0b:54:4e: 9d:64:8d:a2:1a:b3:55:fa:89:58:c2:ce:00:4a:62:39:03:dd: b9:05:a6:68:02:4f:bf:8a:27:18:ea:0d:9f:32:77:4f:92:c5: 0e:aa:9c:8c -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE3NGMzRTbH7p9AEggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMTE5MTIxNVoXDTI4MDgwMjEzMjI0NFowLzEtMCsGA1UEAxMk NDk5N2NjMzUtZDI2ZS00NWZhLWIwZmMtZTY0ODkyMTM5OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7hofF3RHBUocUm8dtPpiNG17GYfRxjHx+SN xIsGKMlvbw55MJBlynZKn8KDSDXvF3kMnkunYSRQNGKUZ0QmqF8Ir97sOhr2Lp1v lEHRRGs4/RLl61Er04KOm88soz1RqaqW9zX9Q/76gNqfh4RGCRNvxgwByzpo5GnT RZcqlCxDGPt8q4FTkivOOKwGnyhwBOb73dndO/nkwQOt9nAjlTXwoboJWZI5kZb9 geekdhG+Okb+vY+Y96ol/qUy6vKCWFrqN/gUohtz3TC+ZItouSdpRiRHPcYKyBiI 3BBCPB3PP79sy+liKbi0mYm/6eEobHfiQuTwAwyralFHbmqo/QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFAqHaD7F230J/1jXLF1TJjC198QYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 OTk3Y2MzNS1kMjZlLTQ1ZmEtYjBmYy1lNjQ4OTIxMzk5OWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ5OTdjYzM1LWQyNmUtNDVmYS1i MGZjLWU2NDg5MjEzOTk5ZC80OTk3Y2MzNS1kMjZlLTQ1ZmEtYjBmYy1lNjQ4OTIx Mzk5OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXnfQwDwQCAAIwCQMHACYgABnAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJCEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWMB45Iwue05t03/6ONF+p+cQ CiD/CB4gZl9r54S0octnqZXlrJd1flVDrTJHOAhGKBcZjeWbevKtZA5nBI2UIDBl X73gqg341eKCEr9Rm9uUHYMixqNZ3NsUx9CXmqfNvP4yECiVOQVWmX8GFEn92UmH 5R/6GJEWh1knGWFyeapAFpoUsd6ra+Z+kT5MndiI/QSGP2rFU7tqEQoT13NexsbJ mynElaXwU5Jsh0ATcpxLALsqyhkwLN2ey85/reahmyvxzfO5Z6L3akq0nF6tpBWw g5quC1ROnWSNohqzVfqJWMLOAEpiOQPduQWmaAJPv4onGOoNnzJ3T5LFDqqcjA== -----END CERTIFICATE-----Generated at Tue May 12 21:24:33 2026 by rpki-client