$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer File: dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer (raw, json) Hash identifier: szmbDhK7QbmERhDt3mXosj3IP8sZZcEuSKg1qYuUMrA= Subject key identifier: E5:7F:5E:E9:67:53:20:B7:EA:65:22:E4:72:FF:A4:A9:1D:BB:E9:2C Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E27EEF6224650650F13A190C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Jun 2026 08:06:31 +0000 Certificate not after: Fri 15 Sep 2028 08:06:31 +0000 Subordinate resources: IP: 23.148.220.0/24 IP: 2602:f4ea::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:27:ee:f6:22:46:50:65:0f:13:a1:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 13 08:06:31 2026 GMT Not After : Sep 15 08:06:31 2028 GMT Subject: CN=dd4ce57e-c75a-4199-ab3a-1e663124fa84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:1f:de:60:28:ad:4d:aa:e2:64:99:60:85: 02:9e:c1:55:51:97:0a:c1:df:29:6c:80:e6:f1:aa: f8:a1:8d:b7:14:69:b9:4b:62:9b:b9:1f:7d:09:52: c8:05:9d:02:dc:58:de:2b:c7:a4:15:cc:67:ac:6b: 5f:9c:bb:df:ed:1d:02:98:28:49:65:ad:cc:14:e7: 90:46:2c:9f:2b:40:61:85:5d:39:32:ca:12:ab:6d: 5f:86:3f:f2:d8:b2:dd:b4:75:1b:66:e7:c9:3d:8a: 84:c8:6e:6a:b6:5d:e7:27:65:a1:70:67:af:99:3e: b6:94:25:77:a9:ed:09:7d:8e:91:66:41:49:b1:ef: 7c:48:2e:a0:6e:d6:43:df:74:fa:08:d5:06:32:39: db:fc:90:1d:70:e7:6d:dd:ff:39:90:1c:9c:88:9b: 0f:2c:44:6f:c0:0c:32:eb:8e:4b:ac:ba:4d:a0:34: 9d:51:5d:16:4f:36:33:91:f2:8a:da:89:b0:b4:b2: 0e:85:eb:68:2d:4d:52:ee:6c:5a:af:83:5e:28:9d: 64:30:0e:e6:63:aa:bb:4b:65:e5:fc:66:3a:23:45: e8:da:f7:96:02:27:db:c8:c0:6b:90:cb:bf:2c:44: cc:86:47:99:d5:42:53:ad:4a:8e:47:1e:f9:49:9d: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7F:5E:E9:67:53:20:B7:EA:65:22:E4:72:FF:A4:A9:1D:BB:E9:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.148.220.0/24 IPv6: 2602:f4ea::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:06:d5:01:e2:76:6d:cf:bc:b4:5c:d5:1b:ac:8c:7c:1c:9b: a5:ca:f2:fc:e6:35:e8:c6:33:d8:76:4d:61:12:4a:52:4d:c6: cd:28:c2:72:22:4f:d7:06:b6:3f:a7:75:27:d2:8b:e5:df:36: 2e:8e:41:cd:b9:2c:4d:fd:60:e7:b0:f3:b7:88:a1:c5:d4:4f: 38:74:de:e0:f4:37:7b:1f:08:74:97:c3:ac:80:1d:1e:76:86: ae:76:e6:03:6f:68:57:94:db:cf:f2:47:f6:ec:b1:97:1c:1a: e4:f0:09:bb:d5:11:01:ef:02:e5:57:d2:f3:46:6c:57:28:8f: ae:60:58:4f:cc:48:23:1b:1f:d8:fc:76:fe:d9:c0:23:09:af: d9:6c:21:39:fa:ab:75:c6:5c:a9:6f:75:b0:e0:1e:be:8a:4d: 17:04:75:40:49:ef:1e:34:f6:8e:31:e3:b8:7d:8a:7b:9b:34: 96:64:0e:1f:a3:aa:0a:35:1e:ae:53:b7:d5:71:20:da:65:41: 24:a7:05:ff:9b:3a:61:12:4b:06:14:40:10:70:b1:7d:03:27: 97:78:21:90:33:6c:81:95:31:2c:c5:9b:38:33:f3:73:ea:56: 70:98:67:9a:57:83:9c:4a:e9:d2:29:f4:21:93:8e:41:95:0b: b7:bb:f2:bc -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE4n7vYiRlBlDxOhkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxMzA4MDYzMVoXDTI4MDkxNTA4MDYzMVowLzEtMCsGA1UEAxMk ZGQ0Y2U1N2UtYzc1YS00MTk5LWFiM2EtMWU2NjMxMjRmYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikQf3mAorU2q4mSZYIUCnsFVUZcKwd8pbIDm 8ar4oY23FGm5S2KbuR99CVLIBZ0C3FjeK8ekFcxnrGtfnLvf7R0CmChJZa3MFOeQ RiyfK0BhhV05MsoSq21fhj/y2LLdtHUbZufJPYqEyG5qtl3nJ2WhcGevmT62lCV3 qe0JfY6RZkFJse98SC6gbtZD33T6CNUGMjnb/JAdcOdt3f85kByciJsPLERvwAwy 645LrLpNoDSdUV0WTzYzkfKK2omwtLIOhetoLU1S7mxar4NeKJ1kMA7mY6q7S2Xl /GY6I0Xo2veWAifbyMBrkMu/LETMhkeZ1UJTrUqORx75SZ2kOQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOV/XulnUyC36mUi5HL/pKkdu+ksMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ZDRjZTU3ZS1jNzVhLTQxOTktYWIzYS0xZTY2MzEyNGZhODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RkNGNlNTdlLWM3NWEtNDE5OS1h YjNhLTFlNjYzMTI0ZmE4NC9kZDRjZTU3ZS1jNzVhLTQxOTktYWIzYS0xZTY2MzEy NGZhODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlNwwDgQCAAIwCAMGACYC9OoAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABEG1QHidm3PvLRc1RusjHwcm6XK8vzmNejGM9h2TWESSlJNxs0ownIiT9cGtj+n dSfSi+XfNi6OQc25LE39YOew87eIocXUTzh03uD0N3sfCHSXw6yAHR52hq525gNv aFeU28/yR/bssZccGuTwCbvVEQHvAuVX0vNGbFcoj65gWE/MSCMbH9j8dv7ZwCMJ r9lsITn6q3XGXKlvdbDgHr6KTRcEdUBJ7x409o4x47h9inubNJZkDh+jqgo1Hq5T t9VxINplQSSnBf+bOmESSwYUQBBwsX0DJ5d4IZAzbIGVMSzFmzgz83PqVnCYZ5pX g5xK6dIp9CGTjkGVC7e78rw= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:46 2026 by rpki-client