$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer File: 8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer (raw, json) Hash identifier: 6JoNf1c2cDxGRb3VZcfDDBywh4hYJmHZZMyuPvxB/XY= Subject key identifier: B5:85:79:67:67:50:1A:12:2C:8C:D2:2B:0E:2C:4C:13:3F:A5:D9:5B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DBD9C8459FE8E692C07A00D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 06:04:43 +0000 Certificate not after: Tue 08 Aug 2028 06:04:43 +0000 Subordinate resources: IP: 23.152.148.0/24 IP: 2602:f445::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:9c:84:59:fe:8e:69:2c:07:a0:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 6 06:04:43 2026 GMT Not After : Aug 8 06:04:43 2028 GMT Subject: CN=8fdb6fd9-d643-44d1-acb6-3624d356baf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:7d:50:c7:a7:19:4e:8e:23:e0:8c:c1:34: 2b:df:84:b2:42:26:1f:68:76:b5:c5:98:1b:d2:4c: 0c:91:1e:99:c2:dc:61:55:c6:ed:ea:aa:cd:72:43: f0:bf:6c:a4:6e:d3:20:2d:20:a5:76:db:09:e3:da: bb:e8:e3:f5:15:e5:9e:60:35:36:87:5a:88:cf:dd: c8:53:e8:2d:57:3f:8f:38:d9:ce:d2:a0:5b:17:5a: 05:e0:a1:42:f5:56:75:f7:36:10:c7:8d:bf:54:52: 59:6f:ea:26:47:f7:56:5e:3c:df:85:b4:4a:8a:ac: 34:3d:55:76:32:54:0a:6e:56:6b:8d:3d:c6:7e:8a: dd:fb:67:f4:f8:c0:70:39:11:b0:5e:92:b8:5c:53: 2d:0c:8c:69:06:a9:13:10:28:5d:6b:e6:69:85:2a: 21:e8:16:53:81:1c:29:81:8e:9e:09:6f:e8:25:a0: 7e:3a:b9:a3:9e:e3:91:54:75:ca:66:54:e0:4a:f6: e1:7c:05:30:4a:ca:a3:72:7e:52:a4:17:73:c7:ed: 53:ce:10:2b:21:12:a2:67:26:15:c4:4f:9f:01:1a: bd:11:21:d6:63:25:ca:5a:22:16:f8:f1:5f:1b:11: 7f:17:a8:7c:0f:c6:fa:9b:79:ca:7c:78:69:4d:e7: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:79:67:67:50:1A:12:2C:8C:D2:2B:0E:2C:4C:13:3F:A5:D9:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.152.148.0/24 IPv6: 2602:f445::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:27:a5:4b:4e:1f:af:e9:45:2a:4c:50:4c:37:d0:cd:8a:96: 3a:cf:59:db:0f:ed:d7:73:8d:ca:5b:c4:a2:86:ac:8f:16:0a: 75:af:e7:07:96:82:85:75:7c:33:96:6c:7e:91:8a:a6:7a:a9: 0b:4a:cd:bb:5e:3f:84:1d:fd:3f:5d:9e:8f:a1:bf:38:bc:8a: c0:16:6b:cb:a0:3a:de:ba:7f:b9:6e:15:0f:6d:d2:c2:16:c1: e3:69:53:e9:f0:8e:b7:6f:2f:1a:c1:ad:3a:38:c6:7d:51:b0: 8f:53:1d:1b:f5:16:03:24:1e:ff:c2:24:0e:aa:bd:9c:3c:71: 66:b7:d5:31:4c:31:ac:94:e6:56:25:af:32:e7:b7:f1:6e:c6: 8e:57:00:39:6f:c4:18:a3:a4:61:4f:2d:9a:d5:75:a5:bb:b8: ea:b6:bf:d4:c2:b6:f2:4a:a5:a2:c4:1d:e7:ea:f9:28:59:e6: c5:7c:89:0c:8b:b3:d2:39:00:bf:2c:4f:27:39:27:c2:a1:e6: 14:04:7d:4b:c9:f9:e2:da:94:d2:e2:3d:82:86:88:14:c0:44: 58:2e:e2:75:71:98:00:71:ef:2e:4f:98:19:ea:de:76:7d:79: 0b:e4:df:01:a1:61:5c:00:0b:c3:69:78:a0:51:0b:0d:18:0d: 0c:34:6c:34 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE29nIRZ/o5pLAegDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNjA2MDQ0M1oXDTI4MDgwODA2MDQ0M1owLzEtMCsGA1UEAxMk OGZkYjZmZDktZDY0My00NGQxLWFjYjYtMzYyNGQzNTZiYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqF9UMenGU6OI+CMwTQr34SyQiYfaHa1xZgb 0kwMkR6ZwtxhVcbt6qrNckPwv2ykbtMgLSCldtsJ49q76OP1FeWeYDU2h1qIz93I U+gtVz+PONnO0qBbF1oF4KFC9VZ19zYQx42/VFJZb+omR/dWXjzfhbRKiqw0PVV2 MlQKblZrjT3Gford+2f0+MBwORGwXpK4XFMtDIxpBqkTEChda+ZphSoh6BZTgRwp gY6eCW/oJaB+OrmjnuORVHXKZlTgSvbhfAUwSsqjcn5SpBdzx+1TzhArIRKiZyYV xE+fARq9ESHWYyXKWiIW+PFfGxF/F6h8D8b6m3nKfHhpTee3nQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLWFeWdnUBoSLIzSKw4sTBM/pdlbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 ZmRiNmZkOS1kNjQzLTQ0ZDEtYWNiNi0zNjI0ZDM1NmJhZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzhmZGI2ZmQ5LWQ2NDMtNDRkMS1h Y2I2LTM2MjRkMzU2YmFmMC84ZmRiNmZkOS1kNjQzLTQ0ZDEtYWNiNi0zNjI0ZDM1 NmJhZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmJQwDgQCAAIwCAMGACYC9EUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AI0npUtOH6/pRSpMUEw30M2KljrPWdsP7ddzjcpbxKKGrI8WCnWv5weWgoV1fDOW bH6RiqZ6qQtKzbteP4Qd/T9dno+hvzi8isAWa8ugOt66f7luFQ9t0sIWweNpU+nw jrdvLxrBrTo4xn1RsI9THRv1FgMkHv/CJA6qvZw8cWa31TFMMayU5lYlrzLnt/Fu xo5XADlvxBijpGFPLZrVdaW7uOq2v9TCtvJKpaLEHefq+ShZ5sV8iQyLs9I5AL8s Tyc5J8Kh5hQEfUvJ+eLalNLiPYKGiBTARFgu4nVxmABx7y5PmBnq3nZ9eQvk3wGh YVwAC8NpeKBRCw0YDQw0bDQ= -----END CERTIFICATE-----Generated at Wed May 13 02:47:48 2026 by rpki-client