$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer File: e44dc926-726a-4ad2-976b-e9b829bd0554.cer (raw, json) Hash identifier: XkfX4835dAucb5k6hcXLNVWhcSR4jNVuCxXOSS5epPs= Subject key identifier: 43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA4762CB07B6CAD87D7339600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 05:52:15 +0000 Certificate not after: Sun 30 Jul 2028 05:52:15 +0000 Subordinate resources: IP: 23.157.108.0/24 IP: 2602:f3e8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:76:2c:b0:7b:6c:ad:87:d7:33:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 27 05:52:15 2026 GMT Not After : Jul 30 05:52:15 2028 GMT Subject: CN=e44dc926-726a-4ad2-976b-e9b829bd0554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:72:c9:9d:44:63:05:70:4e:e0:52:46:ec: 8b:e7:3e:6e:ac:db:14:7b:a1:40:8c:8b:31:9f:ca: d1:a8:e8:6b:87:2e:b1:18:42:1e:6c:a2:2b:5a:53: ca:45:e1:ab:4d:23:6f:71:ef:18:40:b4:c8:be:b8: 07:af:de:e9:7c:69:00:7a:1a:4e:d2:69:ed:d4:aa: 3c:38:51:97:ea:04:74:53:17:82:e0:05:39:de:5a: 3c:8b:b8:ab:12:82:c3:ad:e4:f1:0a:8e:f0:d4:46: e7:c4:64:ec:93:45:31:51:bd:df:08:4e:c8:bd:8d: 0a:6e:10:51:b5:2c:50:9c:61:b4:43:c5:63:85:21: 81:6c:b3:1e:23:e7:ec:42:2e:a0:23:d9:72:cc:76: e2:87:fa:b3:36:48:d2:df:1f:ae:e9:16:81:43:4f: 75:82:73:b4:f0:e6:fa:7d:1e:74:6a:d1:33:01:2a: ee:f5:cf:8d:0f:34:14:74:4e:fd:1a:62:2d:02:60: b2:9a:db:49:4a:82:5a:b9:14:77:12:27:83:1d:c0: c4:1b:cb:51:60:71:b5:67:2e:b2:81:2c:80:c6:69: 68:97:b5:90:01:2e:a9:a2:18:6c:47:7c:94:f0:d9: 53:de:11:d4:88:a9:70:b6:1d:c2:fb:6b:ad:3d:7a: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.157.108.0/24 IPv6: 2602:f3e8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:1e:b8:70:62:c1:f7:9a:6f:b1:8d:86:17:3e:dc:0a:db:43: a1:7d:e0:2a:7f:16:66:0c:cf:c5:16:ad:bd:3f:78:f3:64:75: 46:c0:3a:d7:bb:6e:86:fb:c4:0f:32:1b:25:5a:c7:4f:1e:85: a8:89:00:f8:93:a1:a3:0f:1a:02:95:e5:73:1c:55:74:6d:fd: 3e:b3:b6:10:f7:39:9d:30:06:6b:c1:84:d3:c3:b2:51:ec:44: d5:3e:c0:b3:c7:7e:c7:e1:a8:f0:00:41:84:ed:1b:60:86:fa: 3b:aa:35:a0:68:79:96:ec:45:9f:8e:98:b2:21:d4:7e:51:e9: cd:63:49:e5:f9:88:cf:e3:27:37:7d:c1:27:37:82:1e:1c:83: 1c:65:08:f6:b1:63:da:8d:6d:d6:f9:81:a8:81:0a:56:c8:12: c9:04:ea:8a:54:7f:c5:44:84:5b:76:04:5c:f0:28:58:7e:a2: 45:72:77:d4:6c:30:6a:3e:1b:f5:76:e0:21:e0:50:79:ec:49: 2b:21:39:1c:6a:a5:b9:04:80:bd:fa:53:ba:bf:41:19:42:62: 3e:94:31:0e:cc:10:06:4b:2b:ae:ff:70:6c:30:0d:f1:f2:cd: 8b:10:8d:d8:12:fc:17:a2:3b:63:10:35:4e:70:97:3e:40:6e: 12:9a:5d:5f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE2kdiywe2yth9czlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNzA1NTIxNVoXDTI4MDczMDA1NTIxNVowLzEtMCsGA1UEAxMk ZTQ0ZGM5MjYtNzI2YS00YWQyLTk3NmItZTliODI5YmQwNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirhyyZ1EYwVwTuBSRuyL5z5urNsUe6FAjIsx n8rRqOhrhy6xGEIebKIrWlPKReGrTSNvce8YQLTIvrgHr97pfGkAehpO0mnt1Ko8 OFGX6gR0UxeC4AU53lo8i7irEoLDreTxCo7w1EbnxGTsk0UxUb3fCE7IvY0KbhBR tSxQnGG0Q8VjhSGBbLMeI+fsQi6gI9lyzHbih/qzNkjS3x+u6RaBQ091gnO08Ob6 fR50atEzASru9c+NDzQUdE79GmItAmCymttJSoJauRR3EieDHcDEG8tRYHG1Zy6y gSyAxmlol7WQAS6pohhsR3yU8NlT3hHUiKlwth3C+2utPXoGzQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEM6SpHgaOU9faq+PoRcT6ZPrDwPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l NDRkYzkyNi03MjZhLTRhZDItOTc2Yi1lOWI4MjliZDA1NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U0NGRjOTI2LTcyNmEtNGFkMi05 NzZiLWU5YjgyOWJkMDU1NC9lNDRkYzkyNi03MjZhLTRhZDItOTc2Yi1lOWI4Mjli ZDA1NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnWwwDgQCAAIwCAMGACYC8+gAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADQeuHBiwfeab7GNhhc+3ArbQ6F94Cp/FmYMz8UWrb0/ePNkdUbAOte7bob7xA8y GyVax08ehaiJAPiToaMPGgKV5XMcVXRt/T6zthD3OZ0wBmvBhNPDslHsRNU+wLPH fsfhqPAAQYTtG2CG+juqNaBoeZbsRZ+OmLIh1H5R6c1jSeX5iM/jJzd9wSc3gh4c gxxlCPaxY9qNbdb5gaiBClbIEskE6opUf8VEhFt2BFzwKFh+okVyd9RsMGo+G/V2 4CHgUHnsSSshORxqpbkEgL36U7q/QRlCYj6UMQ7MEAZLK67/cGwwDfHyzYsQjdgS /BeiO2MQNU5wlz5AbhKaXV8= -----END CERTIFICATE-----Generated at Wed May 13 02:48:30 2026 by rpki-client