$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer File: 641fbbfd-7877-429d-ba4c-4decd1bb342b.cer (raw, json) Hash identifier: MQ/9hXLJNDEfLXXVoSgPq7bHVefmBs+nLjVBi84Mbqs= Subject key identifier: EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F5BEB6104B9B6943371DB18C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 15:48:16 +0000 Certificate not after: Wed 26 Jul 2028 03:45:09 +0000 Subordinate resources: AS: 30084 IP: 23.150.12.0/24 IP: 205.211.4.0/22 IP: 2604:2a20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:eb:61:04:b9:b6:94:33:71:db:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 1 15:48:16 2026 GMT Not After : Jul 26 03:45:09 2028 GMT Subject: CN=641fbbfd-7877-429d-ba4c-4decd1bb342b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:12:b1:c7:5e:1d:2e:87:34:cb:2b:9a:e8: 1e:24:c3:03:5d:7a:63:6f:0c:02:38:59:0e:47:bb: 36:8b:25:1a:31:78:6b:09:e7:56:f5:e7:56:af:5a: 2b:fa:67:44:56:0d:24:8f:d1:3b:32:16:f9:b8:c2: 42:8b:f2:47:24:09:92:22:2b:aa:c8:df:5c:a6:f7: 28:73:7d:98:9e:5f:c6:5c:8f:6b:4e:17:1e:94:d6: 27:fd:e6:14:29:6a:51:9a:4e:88:23:97:c2:d1:15: 1b:2a:97:f6:14:13:60:67:33:cb:66:6c:13:77:ad: c5:00:4c:c0:85:e4:c9:85:41:6d:85:11:b3:33:68: 39:66:df:d7:8b:e9:a1:c2:9f:f5:bb:09:ba:0e:13: aa:24:68:5f:f3:ad:a3:de:69:8f:ed:3d:62:fe:cb: d0:9a:cc:ea:6b:20:9b:03:b8:88:3b:42:d9:9c:e7: f3:70:e4:ab:7f:1d:36:4c:30:fc:42:41:1b:1b:ee: 88:76:9d:6f:4f:d2:73:4c:2e:eb:0b:8e:97:73:c6: 88:58:e3:ce:b8:63:bf:45:71:3a:ab:46:66:fe:30: a4:22:37:d6:b7:f1:b9:50:67:54:f8:fa:18:fc:52: 94:6c:78:2e:99:48:6a:c4:d7:80:99:16:54:86:c1: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.150.12.0/24 205.211.4.0/22 IPv6: 2604:2a20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30084 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b7:a9:6c:52:c5:9d:10:40:da:28:33:7c:b2:ae:0c:20:4d: c1:8e:7c:6b:79:7d:ac:f8:2b:45:37:54:82:1b:b1:f3:7e:8a: 72:1e:56:3b:df:93:92:41:a2:b3:bd:fd:eb:d9:87:30:2a:af: c0:e8:18:6d:34:ee:14:3a:5f:03:a0:9c:92:17:38:42:e3:1b: e3:c5:7a:e2:ea:eb:1b:87:1f:bf:b9:5d:7f:9c:2c:f8:96:02: 45:69:7c:7e:6c:cc:f2:4e:17:df:a9:dd:54:4a:a9:14:da:5c: 61:54:78:a1:3e:d5:06:11:04:fa:7a:ba:f9:39:ee:83:c4:04: 22:97:90:fc:df:df:7d:21:72:39:60:22:2b:89:f8:dd:1d:17: 34:ee:9a:bd:c5:12:83:38:5e:97:be:89:aa:9d:f0:09:11:e5: cd:b0:6c:fa:5a:27:6e:d2:be:88:2a:9c:16:47:81:33:3f:ea: 98:d7:7d:7a:fa:bc:0e:74:4b:20:48:41:68:37:04:a6:e7:1d: 9e:13:8d:d2:87:80:47:10:2a:07:7e:3f:e3:f4:6a:e1:13:e3: 89:ab:df:a2:f5:cb:e3:76:92:1d:01:06:d1:81:7d:07:13:4a: 9c:bb:15:df:e7:5f:63:e9:56:40:b5:6f:ba:f9:31:71:ae:3b: dd:0c:1c:bc -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE9b62EEubaUM3HbGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwMTE1NDgxNloXDTI4MDcyNjAzNDUwOVowLzEtMCsGA1UEAxMk NjQxZmJiZmQtNzg3Ny00MjlkLWJhNGMtNGRlY2QxYmIzNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0SscdeHS6HNMsrmugeJMMDXXpjbwwCOFkO R7s2iyUaMXhrCedW9edWr1or+mdEVg0kj9E7Mhb5uMJCi/JHJAmSIiuqyN9cpvco c32Ynl/GXI9rThcelNYn/eYUKWpRmk6II5fC0RUbKpf2FBNgZzPLZmwTd63FAEzA heTJhUFthRGzM2g5Zt/Xi+mhwp/1uwm6DhOqJGhf862j3mmP7T1i/svQmszqayCb A7iIO0LZnOfzcOSrfx02TDD8QkEbG+6Idp1vT9JzTC7rC46Xc8aIWOPOuGO/RXE6 q0Zm/jCkIjfWt/G5UGdU+PoY/FKUbHgumUhqxNeAmRZUhsHk7wIDAQABo4IELzCC BCswHQYDVR0OBBYEFOthP+ty3vQzoSJF+cbTNEvppHP3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 NDFmYmJmZC03ODc3LTQyOWQtYmE0Yy00ZGVjZDFiYjM0MmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY0MWZiYmZkLTc4NzctNDI5ZC1i YTRjLTRkZWNkMWJiMzQyYi82NDFmYmJmZC03ODc3LTQyOWQtYmE0Yy00ZGVjZDFi YjM0MmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXlgwDBALN0wQwDQQCAAIwBwMFACYEKiAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICdYQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACLepbFLFnRBA2igzfLKu DCBNwY58a3l9rPgrRTdUghux836Kch5WO9+TkkGis73969mHMCqvwOgYbTTuFDpf A6Cckhc4QuMb48V64urrG4cfv7ldf5ws+JYCRWl8fmzM8k4X36ndVEqpFNpcYVR4 oT7VBhEE+nq6+Tnug8QEIpeQ/N/ffSFyOWAiK4n43R0XNO6avcUSgzhel76Jqp3w CRHlzbBs+lonbtK+iCqcFkeBMz/qmNd9evq8DnRLIEhBaDcEpucdnhON0oeARxAq B34/4/Rq4RPjiavfovXL43aSHQEG0YF9BxNKnLsV3+dfY+lWQLVvuvkxca473Qwc vA== -----END CERTIFICATE-----Generated at Thu Nov 5 07:42:06 2026 by rpki-client