$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186.cer File: 80935cb6-9291-4119-bca0-1952a00b7186.cer (raw, json) Hash identifier: q+e7pKpoxAYWnd8VOuiy5CxpM7Hy0UTn0G3F1zjWUsQ= Subject key identifier: 66:C9:C9:AF:F6:88:95:3F:91:93:61:1A:FE:93:D0:72:22:7B:60:84 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA8183DDCC2C39FBCE4F72D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/80935cb6-9291-4119-bca0-1952a00b7186.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 13:06:13 +0000 Certificate not after: Mon 31 Jul 2028 13:06:13 +0000 Subordinate resources: AS: 402171 IP: 202.37.194.0/24 IP: 2620:19:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:18:3d:dc:c2:c3:9f:bc:e4:f7:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 28 13:06:13 2026 GMT Not After : Jul 31 13:06:13 2028 GMT Subject: CN=80935cb6-9291-4119-bca0-1952a00b7186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:57:b8:ee:27:c8:50:75:4b:04:41:5b:be:b6: ae:b6:7c:bd:ed:3d:bb:90:0c:c8:dd:db:98:6f:3d: d6:e4:86:0f:cd:2b:3d:bb:cf:f0:e4:f2:30:f6:fd: 09:8d:e5:2d:e3:21:2a:8a:44:78:2a:04:d6:f0:cd: e7:ff:67:c4:69:f7:64:7f:ad:f4:e6:25:56:4d:62: ca:11:1c:e5:5f:d9:5a:ce:3c:b0:cc:99:46:a4:87: 60:54:2b:97:81:50:86:7c:46:60:a1:14:0a:27:18: f9:ce:6b:1e:ef:a9:9c:c2:09:71:ff:66:00:03:6a: 1e:e7:53:af:b8:8b:1f:23:cd:47:fc:cb:ad:2c:63: 41:c2:19:d9:c0:1e:62:75:a0:bd:72:77:2a:a8:4f: 57:f5:33:69:89:09:0e:33:01:a4:8a:ad:ed:a6:ca: 2b:11:ab:59:a0:f7:b4:94:09:e2:68:28:8b:77:24: 69:24:f6:ad:14:7f:74:5f:a5:b2:fa:b9:b3:62:bf: 6d:4b:34:6c:34:e4:59:f5:71:6e:3e:52:bc:3b:bf: 69:17:35:9f:f0:62:02:f1:df:0e:4b:f1:6a:2b:7d: ce:d8:af:f4:4e:69:2c:5b:81:82:bc:18:88:26:c4: b4:61:88:af:de:83:c7:62:01:74:38:bf:86:eb:77: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C9:C9:AF:F6:88:95:3F:91:93:61:1A:FE:93:D0:72:22:7B:60:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80935cb6-9291-4119-bca0-1952a00b7186/80935cb6-9291-4119-bca0-1952a00b7186.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 202.37.194.0/24 IPv6: 2620:19:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402171 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:7e:e4:e4:ec:75:61:8f:a6:3c:2d:63:02:f0:c0:95:f2:07: 2b:85:44:f9:8c:d4:9e:6c:6c:01:20:4e:fe:a8:68:78:ad:06: e8:d8:aa:f1:e0:d1:df:3c:ca:3b:86:e6:a5:63:51:73:25:f4: 2c:39:bd:37:53:54:5e:d3:66:fe:ba:5b:f3:1c:44:f2:48:17: df:8a:fd:72:0b:ac:8c:4d:29:0e:1d:4a:b7:40:e0:40:90:90: 9e:a2:22:ce:d9:f9:05:e0:31:d9:d8:25:af:79:25:c1:6e:1d: 82:48:97:ab:f3:5e:bb:ed:be:a1:a7:7d:47:9b:e2:52:e6:11: 55:f4:52:10:07:72:6e:18:52:9c:66:ee:88:e0:de:bd:13:8c: 92:c5:d9:9b:0a:9f:fb:ef:db:4d:91:40:59:1c:82:49:84:56: 58:dc:7e:07:d2:87:46:a9:51:05:f3:b9:39:2f:00:53:7e:b0: b1:b2:76:fc:d9:fc:32:c2:f6:7e:15:cd:95:62:72:77:41:2e: f4:78:1e:4e:d0:ec:3a:22:82:fa:6c:f5:5a:91:c1:ba:31:78: 9a:3f:2c:5e:c6:e6:1e:ad:a3:d1:bf:58:cd:3e:2f:f8:a6:be: ad:49:ab:5c:88:88:9b:5d:0e:bb:94:82:28:6b:bf:05:30:b7: 63:40:fe:b2 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE2oGD3cwsOfvOT3LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyODEzMDYxM1oXDTI4MDczMTEzMDYxM1owLzEtMCsGA1UEAxMk ODA5MzVjYjYtOTI5MS00MTE5LWJjYTAtMTk1MmEwMGI3MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Fe47ifIUHVLBEFbvrautny97T27kAzI3duY bz3W5IYPzSs9u8/w5PIw9v0JjeUt4yEqikR4KgTW8M3n/2fEafdkf6305iVWTWLK ERzlX9lazjywzJlGpIdgVCuXgVCGfEZgoRQKJxj5zmse76mcwglx/2YAA2oe51Ov uIsfI81H/MutLGNBwhnZwB5idaC9cncqqE9X9TNpiQkOMwGkiq3tpsorEatZoPe0 lAniaCiLdyRpJPatFH90X6Wy+rmzYr9tSzRsNORZ9XFuPlK8O79pFzWf8GIC8d8O S/FqK33O2K/0TmksW4GCvBiIJsS0YYiv3oPHYgF0OL+G63fuWwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFGbJya/2iJU/kZNhGv6T0HIie2CEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 MDkzNWNiNi05MjkxLTQxMTktYmNhMC0xOTUyYTAwYjcxODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzgwOTM1Y2I2LTkyOTEtNDExOS1i Y2EwLTE5NTJhMDBiNzE4Ni84MDkzNWNiNi05MjkxLTQxMTktYmNhMC0xOTUyYTAw YjcxODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADKJcIwDwQCAAIwCQMHACYgABlAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIvswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqn7k5Ox1YY+mPC1jAvDAlfIH K4VE+YzUnmxsASBO/qhoeK0G6Niq8eDR3zzKO4bmpWNRcyX0LDm9N1NUXtNm/rpb 8xxE8kgX34r9cgusjE0pDh1Kt0DgQJCQnqIiztn5BeAx2dglr3klwW4dgkiXq/Ne u+2+oad9R5viUuYRVfRSEAdybhhSnGbuiODevROMksXZmwqf++/bTZFAWRyCSYRW WNx+B9KHRqlRBfO5OS8AU36wsbJ2/Nn8MsL2fhXNlWJyd0Eu9HgeTtDsOiKC+mz1 WpHBujF4mj8sXsbmHq2j0b9YzT4v+Ka+rUmrXIiIm10Ou5SCKGu/BTC3Y0D+sg== -----END CERTIFICATE-----Generated at Wed May 13 04:36:28 2026 by rpki-client