$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b4eeeeda-ff5e-4a33-b225-d3ccd55d127e.cer File: b4eeeeda-ff5e-4a33-b225-d3ccd55d127e.cer (raw, json) Hash identifier: l4zsMsnl+hUT8xxs6vXsjtUuWVKxWPhDWelhNWWdJlo= Subject key identifier: DF:54:8E:4C:E5:74:9C:80:C3:E7:7B:A6:98:E4:93:63:34:97:2E:44 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DC16B87A2996AA49370512900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b4eeeeda-ff5e-4a33-b225-d3ccd55d127e/b4eeeeda-ff5e-4a33-b225-d3ccd55d127e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b4eeeeda-ff5e-4a33-b225-d3ccd55d127e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 May 2026 14:49:15 +0000 Certificate not after: Wed 09 Aug 2028 14:49:15 +0000 Subordinate resources: AS: 402404 IP: 23.156.204.0/24 IP: 2602:f3f5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:6b:87:a2:99:6a:a4:93:70:51:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 7 14:49:15 2026 GMT Not After : Aug 9 14:49:15 2028 GMT Subject: CN=b4eeeeda-ff5e-4a33-b225-d3ccd55d127e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f1:9e:08:52:1a:80:cf:62:57:f9:ea:8f:55: af:85:8c:06:d7:1b:8c:fa:ce:29:96:33:83:17:b5: 92:cf:b4:c3:f8:b5:fe:ca:bd:31:ee:45:50:76:8b: 64:b1:ea:57:1a:88:c6:7d:54:da:e7:b1:9f:ac:70: 06:3e:3c:de:ec:5b:b4:56:20:de:25:db:5b:7b:80: 6a:dc:ef:9c:1d:de:8e:b6:fe:d7:4f:17:e3:f9:79: ad:98:87:cc:85:44:69:8c:67:55:24:d8:14:ab:d3: da:5a:1e:39:63:e2:9f:07:09:8c:7c:3e:ef:e9:7a: a8:ef:01:f1:fa:43:14:9a:22:b6:d1:e7:5b:83:f0: 18:6e:8f:86:54:05:10:bc:de:b1:e9:fe:34:2c:3c: fb:11:b0:b7:82:02:47:ee:fd:0d:cf:e4:6c:7a:25: 86:61:cc:ec:83:bc:d7:eb:67:2d:38:f5:ca:77:ad: 33:01:13:64:ce:0c:18:74:fd:32:8a:67:65:99:82: 12:80:99:ef:c3:8e:75:cd:36:32:b3:12:5e:fc:f3: 6b:23:fd:98:2f:d1:f5:be:7d:51:2c:6c:8b:78:c8: 6e:4a:46:37:33:0a:a1:e8:12:94:a3:e9:44:33:ba: f5:1a:01:4e:7e:d2:6a:63:62:c8:53:f5:ae:59:35: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:8E:4C:E5:74:9C:80:C3:E7:7B:A6:98:E4:93:63:34:97:2E:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b4eeeeda-ff5e-4a33-b225-d3ccd55d127e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b4eeeeda-ff5e-4a33-b225-d3ccd55d127e/b4eeeeda-ff5e-4a33-b225-d3ccd55d127e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.156.204.0/24 IPv6: 2602:f3f5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402404 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:24:f3:b5:77:32:1b:05:4a:26:f5:eb:06:84:6c:c1:f5:bb: 4a:f8:d3:6e:ab:5a:ad:9e:ce:30:90:ff:01:e9:f8:87:a4:8e: 24:a3:66:85:09:d1:22:ac:01:88:74:7c:58:fb:f4:32:c3:ad: 79:02:53:98:1a:21:22:b7:42:8e:76:16:c7:73:ba:22:3f:b6: ba:6c:0b:21:e2:ea:c8:ed:e3:7f:d9:bd:83:07:ef:25:52:b1: 11:40:27:08:26:c1:a2:ee:5b:ea:59:81:7e:b3:0b:13:02:39: 63:08:4f:70:10:2c:e6:84:6f:7b:41:b2:2d:d7:b8:af:73:f0: d8:07:32:00:bb:cc:37:58:49:a1:48:23:74:c1:83:9a:59:c4: 4b:54:4c:db:d3:94:c1:62:10:b0:25:d1:e1:dc:70:48:35:9d: 9f:23:41:ed:3c:f1:53:d7:20:29:8f:78:65:e1:bc:07:44:8b: 12:e6:4c:3c:fb:d7:04:7b:c0:10:68:bd:a3:fb:4d:18:0c:f6: d8:60:d5:dc:a2:13:0c:e3:59:09:f2:d2:f8:ad:58:4d:f4:49: 09:09:5c:d4:15:a8:56:44:ad:bf:8c:26:ce:1a:b7:99:7b:8c: 64:59:54:54:03:ad:1f:45:f2:9d:88:42:01:12:c0:16:8f:e8: c5:49:7e:09 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3Ba4eimWqkk3BRKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNzE0NDkxNVoXDTI4MDgwOTE0NDkxNVowLzEtMCsGA1UEAxMk YjRlZWVlZGEtZmY1ZS00YTMzLWIyMjUtZDNjY2Q1NWQxMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvGeCFIagM9iV/nqj1WvhYwG1xuM+s4pljOD F7WSz7TD+LX+yr0x7kVQdotksepXGojGfVTa57GfrHAGPjze7Fu0ViDeJdtbe4Bq 3O+cHd6Otv7XTxfj+XmtmIfMhURpjGdVJNgUq9PaWh45Y+KfBwmMfD7v6Xqo7wHx +kMUmiK20edbg/AYbo+GVAUQvN6x6f40LDz7EbC3ggJH7v0Nz+RseiWGYczsg7zX 62ctOPXKd60zARNkzgwYdP0yimdlmYISgJnvw451zTYysxJe/PNrI/2YL9H1vn1R LGyLeMhuSkY3Mwqh6BKUo+lEM7r1GgFOftJqY2LIU/WuWTXSSQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN9UjkzldJyAw+d7ppjkk2M0ly5EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i NGVlZWVkYS1mZjVlLTRhMzMtYjIyNS1kM2NjZDU1ZDEyN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I0ZWVlZWRhLWZmNWUtNGEzMy1i MjI1LWQzY2NkNTVkMTI3ZS9iNGVlZWVkYS1mZjVlLTRhMzMtYjIyNS1kM2NjZDU1 ZDEyN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnMwwDgQCAAIwCAMGACYC8/UAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYj5DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXJPO1dzIbBUom9esGhGzB9btK +NNuq1qtns4wkP8B6fiHpI4ko2aFCdEirAGIdHxY+/Qyw615AlOYGiEit0KOdhbH c7oiP7a6bAsh4urI7eN/2b2DB+8lUrERQCcIJsGi7lvqWYF+swsTAjljCE9wECzm hG97QbIt17ivc/DYBzIAu8w3WEmhSCN0wYOaWcRLVEzb05TBYhCwJdHh3HBINZ2f I0HtPPFT1yApj3hl4bwHRIsS5kw8+9cEe8AQaL2j+00YDPbYYNXcohMM41kJ8tL4 rVhN9EkJCVzUFahWRK2/jCbOGreZe4xkWVRUA60fRfKdiEIBEsAWj+jFSX4J -----END CERTIFICATE-----Generated at Wed May 13 02:48:27 2026 by rpki-client