$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/559037fe-bf79-4f14-b190-66c7a8b92fc0.cer File: 559037fe-bf79-4f14-b190-66c7a8b92fc0.cer (raw, json) Hash identifier: ZplewLENzWgdIib3RlaINd/bt4BaCOJfABfgAeX4bn0= Subject key identifier: B8:09:E8:C1:CA:C7:29:82:20:F8:6C:F2:1C:BB:00:63:FD:A4:A0:B3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DB9D18E5C8B8F1712E8A3E0E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/559037fe-bf79-4f14-b190-66c7a8b92fc0/559037fe-bf79-4f14-b190-66c7a8b92fc0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/559037fe-bf79-4f14-b190-66c7a8b92fc0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 May 2026 21:28:21 +0000 Certificate not after: Sun 06 Aug 2028 21:28:21 +0000 Subordinate resources: AS: 63059 IP: 23.138.196.0/24 IP: 2602:f653::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b9:d1:8e:5c:8b:8f:17:12:e8:a3:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 4 21:28:21 2026 GMT Not After : Aug 6 21:28:21 2028 GMT Subject: CN=559037fe-bf79-4f14-b190-66c7a8b92fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:eb:3b:bd:f3:09:29:56:bc:4e:05:e6:33: 2a:54:ce:21:45:10:91:35:5c:39:82:57:df:28:96: ce:69:de:cd:db:57:87:28:d2:84:a8:9d:46:3c:97: 6f:b5:ce:23:9f:57:78:88:1b:6b:90:bc:62:af:41: 1a:99:5a:22:37:64:52:40:17:27:4b:6d:45:9d:79: e6:9e:ff:d5:00:80:89:2d:d5:78:7d:b3:66:4c:00: 6d:69:94:b2:76:f8:c8:7b:ec:0e:68:91:3d:96:03: c5:d5:aa:ed:bf:60:e7:2f:b8:aa:af:ca:11:2e:17: 03:44:63:d5:54:15:68:78:64:84:9b:02:ea:2d:f2: 8a:db:f4:22:6a:46:64:b7:60:37:f2:d8:20:77:9b: a8:4d:83:8a:83:c8:91:0c:30:96:39:65:09:78:42: 21:08:5e:66:72:70:d3:07:62:ba:26:0e:ff:00:5c: 8e:5f:d6:e3:55:cc:2f:7d:7e:e3:7d:bf:83:86:5b: 06:5b:cd:af:e4:d8:98:c8:1a:b4:62:72:81:60:86: 36:ba:62:bd:e9:f2:81:48:07:db:60:c8:a5:52:0e: 0c:a7:3d:37:3c:8d:fa:a1:e0:f8:d4:51:ce:bd:02: 4c:fc:5e:5b:c0:d7:19:ae:f3:73:e2:8d:de:ea:7f: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:09:E8:C1:CA:C7:29:82:20:F8:6C:F2:1C:BB:00:63:FD:A4:A0:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/559037fe-bf79-4f14-b190-66c7a8b92fc0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/559037fe-bf79-4f14-b190-66c7a8b92fc0/559037fe-bf79-4f14-b190-66c7a8b92fc0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.138.196.0/24 IPv6: 2602:f653::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63059 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:08:51:dc:f7:f1:0c:f5:bd:ad:c3:8b:e6:70:24:f2:d9:c5: 9c:d7:87:55:28:5e:c3:ab:e5:72:8c:01:ad:5b:ec:74:16:5d: 08:eb:a0:21:8e:95:77:d7:ee:eb:ee:90:7e:a0:28:89:4d:36: 50:56:16:eb:01:36:5d:51:67:95:53:b9:1f:e7:54:ce:74:e8: 15:ab:7f:73:77:b1:2e:f1:7f:a7:63:21:90:82:82:b5:8a:02: 9d:72:eb:b7:71:83:92:96:01:14:cf:61:2c:02:fd:0b:4d:f7: 60:ab:25:fb:0b:1b:2c:88:e0:19:5d:e1:47:8c:2f:b7:2a:17: 6c:06:d6:8e:49:b4:58:e6:5b:9c:db:89:a2:fa:30:a2:59:f4: 23:d4:58:b4:3c:2c:48:f2:85:51:b0:15:4a:7e:18:5b:4e:df: 5c:9c:1c:2d:fa:a0:c7:55:ef:45:e0:7e:f2:11:5a:ef:2f:d7: e4:5a:ea:96:28:7b:ea:3e:57:1c:8b:c1:34:6d:6d:24:1e:0b: 1c:2a:f6:a9:fd:f9:09:51:b9:9e:bb:1a:45:88:cc:50:ca:d0: 6f:b9:d0:9e:57:26:d0:e7:73:05:3e:9b:70:19:91:a1:ab:70: 72:8a:bb:6c:6e:72:7a:b4:63:ee:12:b0:04:bc:6a:30:4a:9d: da:60:90:a2 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE250Y5ci48XEuij4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNDIxMjgyMVoXDTI4MDgwNjIxMjgyMVowLzEtMCsGA1UEAxMk NTU5MDM3ZmUtYmY3OS00ZjE0LWIxOTAtNjZjN2E4YjkyZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQvrO73zCSlWvE4F5jMqVM4hRRCRNVw5glff KJbOad7N21eHKNKEqJ1GPJdvtc4jn1d4iBtrkLxir0EamVoiN2RSQBcnS21FnXnm nv/VAICJLdV4fbNmTABtaZSydvjIe+wOaJE9lgPF1artv2DnL7iqr8oRLhcDRGPV VBVoeGSEmwLqLfKK2/QiakZkt2A38tggd5uoTYOKg8iRDDCWOWUJeEIhCF5mcnDT B2K6Jg7/AFyOX9bjVcwvfX7jfb+DhlsGW82v5NiYyBq0YnKBYIY2umK96fKBSAfb YMilUg4Mpz03PI36oeD41FHOvQJM/F5bwNcZrvNz4o3e6n8j3QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLgJ6MHKxymCIPhs8hy7AGP9pKCzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NTkwMzdmZS1iZjc5LTRmMTQtYjE5MC02NmM3YThiOTJmYzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU1OTAzN2ZlLWJmNzktNGYxNC1i MTkwLTY2YzdhOGI5MmZjMC81NTkwMzdmZS1iZjc5LTRmMTQtYjE5MC02NmM3YThi OTJmYzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXisQwDgQCAAIwCAMGACYC9lMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD2UzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkCFHc9/EM9b2tw4vmcCTy2cWc 14dVKF7Dq+VyjAGtW+x0Fl0I66AhjpV31+7r7pB+oCiJTTZQVhbrATZdUWeVU7kf 51TOdOgVq39zd7Eu8X+nYyGQgoK1igKdcuu3cYOSlgEUz2EsAv0LTfdgqyX7Cxss iOAZXeFHjC+3KhdsBtaOSbRY5luc24mi+jCiWfQj1Fi0PCxI8oVRsBVKfhhbTt9c nBwt+qDHVe9F4H7yEVrvL9fkWuqWKHvqPlcci8E0bW0kHgscKvap/fkJUbmeuxpF iMxQytBvudCeVybQ53MFPptwGZGhq3ByirtsbnJ6tGPuErAEvGowSp3aYJCi -----END CERTIFICATE-----Generated at Wed May 13 02:48:10 2026 by rpki-client