$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer File: bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.cer (raw, json) Hash identifier: kQnhUKjTnn3NuWxazuY8/jobXbi0lhEX9b7dJ9/Kv4E= Subject key identifier: 53:B6:69:BA:CC:6C:AB:D8:FE:23:CB:27:DD:34:9D:72:EA:64:4E:4B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DB2B91ED263B89EA8550790C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 02 May 2026 08:28:27 +0000 Certificate not after: Fri 04 Aug 2028 08:28:27 +0000 Subordinate resources: AS: 54590 IP: 23.174.88.0/24 IP: 130.12.144.0/22 IP: 2607:6240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b2:b9:1e:d2:63:b8:9e:a8:55:07:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 2 08:28:27 2026 GMT Not After : Aug 4 08:28:27 2028 GMT Subject: CN=bd5e022e-e6ed-4042-8a2b-86853dc6ebc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:2a:e1:c5:6d:bd:43:1f:98:fc:5b:df:5b: 34:74:1d:21:e4:78:9e:67:18:46:39:b8:4a:eb:c0: 78:3a:93:50:e5:56:04:41:a3:c6:62:c4:a0:29:c3: 2c:c7:01:82:ee:c7:32:ba:e6:0a:7e:0d:ee:47:79: 46:4e:7f:f6:19:be:31:9b:b2:d5:87:22:a7:ab:a0: 27:3d:f6:1c:e5:f6:af:9f:7e:ee:e2:df:9c:ff:24: 87:ff:82:c4:6a:df:0a:5d:66:46:64:d7:52:e6:ae: 31:a7:b4:f6:48:ee:42:23:54:77:b5:41:66:99:28: f4:e9:00:f0:b9:08:2d:85:19:18:3d:c9:f3:35:06: ae:c7:9e:fb:6d:05:3f:85:45:4c:3b:c0:3a:0a:c9: e5:69:c4:55:fa:9f:89:40:b3:2b:77:1d:9b:25:b9: 0a:90:78:7b:35:c5:be:41:cf:e7:1f:75:9b:80:38: b2:5a:75:81:a9:b0:be:a0:8b:89:7c:ec:95:00:72: 93:c7:ad:19:49:7d:dc:d4:d3:72:31:8c:81:11:9a: 12:e9:5e:f4:ae:47:70:9d:9e:93:14:a3:24:bc:3e: c8:c9:9f:fb:8d:8e:7f:02:87:8f:8d:97:c1:4f:0f: 45:52:74:b7:af:82:fb:3b:98:b0:62:7b:dc:35:38: a8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B6:69:BA:CC:6C:AB:D8:FE:23:CB:27:DD:34:9D:72:EA:64:4E:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9/bd5e022e-e6ed-4042-8a2b-86853dc6ebc9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.174.88.0/24 130.12.144.0/22 IPv6: 2607:6240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54590 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:97:3f:bf:66:5d:31:11:43:65:27:54:17:47:40:60:fe:56: 5b:c4:62:e1:00:1d:68:a5:82:04:45:90:49:34:e3:18:93:74: aa:c9:54:ce:8d:79:d4:1f:37:12:41:8d:a0:9c:f5:f6:fc:92: b3:44:6c:57:53:b6:22:44:35:33:e9:16:7f:b0:83:69:13:c0: 20:16:a4:50:c5:a6:a9:1c:c6:3e:68:71:0b:97:60:81:1a:3d: fe:20:ce:6d:c8:83:0a:79:f7:f6:be:35:27:a6:c9:48:b5:a3: a4:90:22:f4:93:89:6f:c8:76:cb:58:9c:a0:a7:0d:ae:85:0c: 92:9f:5f:bb:bb:ef:d8:48:43:0c:48:bf:f1:a3:09:40:87:4a: b3:29:3b:00:44:f1:d7:57:98:dc:0b:b9:c2:e1:d0:2e:9a:80: fa:0c:2c:bd:5d:99:21:83:29:2d:50:4b:c7:c0:8f:df:5d:c0: 49:86:61:89:40:63:2f:2e:ee:e8:fa:60:7b:bf:26:61:05:65: c6:b2:20:b9:cf:01:d6:4e:e9:54:76:ba:4f:23:63:ff:83:21: 28:f5:18:25:1b:e2:cc:f8:11:c0:10:41:93:39:27:b6:dd:b7: d9:2e:b9:d0:35:6f:7c:68:95:1b:e1:09:09:fd:18:67:7b:a2: d5:21:93:63 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE2yuR7SY7ieqFUHkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwMjA4MjgyN1oXDTI4MDgwNDA4MjgyN1owLzEtMCsGA1UEAxMk YmQ1ZTAyMmUtZTZlZC00MDQyLThhMmItODY4NTNkYzZlYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLgq4cVtvUMfmPxb31s0dB0h5HieZxhGObhK 68B4OpNQ5VYEQaPGYsSgKcMsxwGC7scyuuYKfg3uR3lGTn/2Gb4xm7LVhyKnq6An PfYc5favn37u4t+c/ySH/4LEat8KXWZGZNdS5q4xp7T2SO5CI1R3tUFmmSj06QDw uQgthRkYPcnzNQaux577bQU/hUVMO8A6CsnlacRV+p+JQLMrdx2bJbkKkHh7NcW+ Qc/nH3WbgDiyWnWBqbC+oIuJfOyVAHKTx60ZSX3c1NNyMYyBEZoS6V70rkdwnZ6T FKMkvD7IyZ/7jY5/AoePjZfBTw9FUnS3r4L7O5iwYnvcNTio7QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFO2abrMbKvY/iPLJ900nXLqZE5LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i ZDVlMDIyZS1lNmVkLTQwNDItOGEyYi04Njg1M2RjNmViYzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2JkNWUwMjJlLWU2ZWQtNDA0Mi04 YTJiLTg2ODUzZGM2ZWJjOS9iZDVlMDIyZS1lNmVkLTQwNDItOGEyYi04Njg1M2Rj NmViYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXrlgDBAKCDJAwDQQCAAIwBwMFACYHYkAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANU+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF+XP79mXTERQ2UnVBdH QGD+VlvEYuEAHWilggRFkEk04xiTdKrJVM6NedQfNxJBjaCc9fb8krNEbFdTtiJE NTPpFn+wg2kTwCAWpFDFpqkcxj5ocQuXYIEaPf4gzm3Igwp59/a+NSemyUi1o6SQ IvSTiW/IdstYnKCnDa6FDJKfX7u779hIQwxIv/GjCUCHSrMpOwBE8ddXmNwLucLh 0C6agPoMLL1dmSGDKS1QS8fAj99dwEmGYYlAYy8u7uj6YHu/JmEFZcayILnPAdZO 6VR2uk8jY/+DISj1GCUb4sz4EcAQQZM5J7bdt9kuudA1b3xolRvhCQn9GGd7otUh k2M= -----END CERTIFICATE-----Generated at Wed May 13 02:48:39 2026 by rpki-client