$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69.cer File: 608792f3-3f15-42ce-a477-e1ec35f67e69.cer (raw, json) Hash identifier: slXTDxFF/RrTFkOvjoinbo2Z7TgJUJHvbDEH+fiydHY= Subject key identifier: 96:C4:FD:95:70:1B:04:D8:09:D6:30:1C:F6:08:08:0E:D1:B8:36:6F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA83C4A331AAF906F18CB4E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/608792f3-3f15-42ce-a477-e1ec35f67e69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 14:18:51 +0000 Certificate not after: Mon 31 Jul 2028 14:18:51 +0000 Subordinate resources: AS: 398925 IP: 23.150.4.0/24 IP: 2602:f4bc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:3c:4a:33:1a:af:90:6f:18:cb:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 28 14:18:51 2026 GMT Not After : Jul 31 14:18:51 2028 GMT Subject: CN=608792f3-3f15-42ce-a477-e1ec35f67e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:cc:73:c5:be:64:65:99:33:8d:00:7a:3f: f1:c4:be:51:f4:78:77:ec:fd:77:cd:45:fe:c1:ae: be:d8:ab:86:0d:c0:5e:8e:6a:4d:9a:af:95:aa:07: 97:6a:d8:13:c3:b3:0c:d7:0a:76:4c:74:d6:e8:05: 70:75:47:da:cc:8e:31:42:a6:82:b2:c7:31:db:dd: e4:6e:e3:25:39:6b:72:a8:3d:13:78:8d:8e:2f:db: 55:cd:9e:24:28:f9:2c:bc:3f:db:af:48:aa:3e:04: 07:0e:7c:87:a3:c0:8a:64:54:c4:6a:9b:2e:f5:ec: 9e:d9:2e:22:1e:e9:d5:dc:d8:45:ca:03:d4:6c:45: 9e:95:15:1c:8f:93:8c:8f:0c:4e:7b:c8:47:65:88: 0f:0d:b5:d8:9f:15:70:e0:3e:8f:77:8c:5a:06:45: 83:52:14:ec:a7:d1:e7:ab:15:d5:d6:53:e5:8c:1e: 32:5a:ab:41:f6:e7:51:02:c5:a3:d5:73:a8:b8:6d: d1:5d:f5:87:1e:fb:69:64:5b:34:aa:ae:a4:4f:e1: 29:0d:cd:89:85:76:25:90:cc:fb:91:4e:bc:65:88: f5:5a:61:d6:7a:4a:4c:e0:4f:60:1d:a5:d5:08:2a: 12:3a:a4:02:c8:5c:56:15:2d:5f:cd:d1:3a:f9:0a: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C4:FD:95:70:1B:04:D8:09:D6:30:1C:F6:08:08:0E:D1:B8:36:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/608792f3-3f15-42ce-a477-e1ec35f67e69/608792f3-3f15-42ce-a477-e1ec35f67e69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.150.4.0/24 IPv6: 2602:f4bc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398925 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fc:a4:90:07:91:4a:4d:fc:52:49:03:31:b0:0e:e0:18:d0: 3b:05:4b:e0:56:21:58:3c:47:2f:06:14:86:83:a2:9e:0d:dc: c1:e7:68:20:a8:d3:b2:aa:aa:f9:99:f3:a6:68:51:3a:65:93: 8f:4a:cc:58:26:ec:e1:7c:4d:77:5d:f7:7a:dd:06:a7:93:33: f9:90:42:74:42:31:73:36:42:16:f1:c5:3a:b2:d7:ac:40:eb: 91:f5:5a:88:07:ca:47:43:a8:d0:21:af:66:f5:12:5c:3a:75: 6b:7a:b4:c6:52:31:01:2b:bc:2a:89:c6:8e:cc:da:6a:cc:24: c8:60:e8:78:0c:ed:1d:8b:53:8e:25:e0:59:09:f9:67:3e:66: ee:be:e6:10:a0:aa:68:94:b7:0e:1c:56:37:22:a7:d7:87:fe: 5d:73:0b:13:52:ba:11:29:01:2e:92:db:f3:33:3a:87:7c:6a: b4:89:de:0f:45:ec:65:78:02:eb:9f:7e:d3:7e:34:1b:01:e2: 7c:a2:cd:7b:2d:e0:7a:5c:d3:db:38:48:9d:27:3f:0b:56:e5: b2:05:80:8d:bd:6f:97:9b:3e:ad:e4:60:d7:86:dd:6a:6f:9b: f3:15:51:ac:5b:5d:3e:c8:f8:bb:31:23:5a:97:ed:7f:5b:d5: 8d:ae:62:db -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2oPEozGq+QbxjLToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyODE0MTg1MVoXDTI4MDczMTE0MTg1MVowLzEtMCsGA1UEAxMk NjA4NzkyZjMtM2YxNS00MmNlLWE0NzctZTFlYzM1ZjY3ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi/Mc8W+ZGWZM40Aej/xxL5R9Hh37P13zUX+ wa6+2KuGDcBejmpNmq+VqgeXatgTw7MM1wp2THTW6AVwdUfazI4xQqaCsscx293k buMlOWtyqD0TeI2OL9tVzZ4kKPksvD/br0iqPgQHDnyHo8CKZFTEapsu9eye2S4i HunV3NhFygPUbEWelRUcj5OMjwxOe8hHZYgPDbXYnxVw4D6Pd4xaBkWDUhTsp9Hn qxXV1lPljB4yWqtB9udRAsWj1XOouG3RXfWHHvtpZFs0qq6kT+EpDc2JhXYlkMz7 kU68ZYj1WmHWekpM4E9gHaXVCCoSOqQCyFxWFS1fzdE6+QpMTwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJbE/ZVwGwTYCdYwHPYICA7RuDZvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 MDg3OTJmMy0zZjE1LTQyY2UtYTQ3Ny1lMWVjMzVmNjdlNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzYwODc5MmYzLTNmMTUtNDJjZS1h NDc3LWUxZWMzNWY2N2U2OS82MDg3OTJmMy0zZjE1LTQyY2UtYTQ3Ny1lMWVjMzVm NjdlNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlgQwDgQCAAIwCAMGACYC9LwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYWTTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBt/KSQB5FKTfxSSQMxsA7gGNA7 BUvgViFYPEcvBhSGg6KeDdzB52ggqNOyqqr5mfOmaFE6ZZOPSsxYJuzhfE13Xfd6 3QankzP5kEJ0QjFzNkIW8cU6stesQOuR9VqIB8pHQ6jQIa9m9RJcOnVrerTGUjEB K7wqicaOzNpqzCTIYOh4DO0di1OOJeBZCflnPmbuvuYQoKpolLcOHFY3IqfXh/5d cwsTUroRKQEuktvzMzqHfGq0id4PRexleALrn37TfjQbAeJ8os17LeB6XNPbOEid Jz8LVuWyBYCNvW+Xmz6t5GDXht1qb5vzFVGsW10+yPi7MSNal+1/W9WNrmLb -----END CERTIFICATE-----Generated at Wed May 13 02:48:24 2026 by rpki-client