$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e986d0ad-50aa-4481-b07a-38c0fbbe847d.cer File: e986d0ad-50aa-4481-b07a-38c0fbbe847d.cer (raw, json) Hash identifier: BJid0/LHFUB8YbLTnCzI4kge2NZA2guSOn8WK1GTz1A= Subject key identifier: 89:06:C5:15:10:24:C7:F2:0C:6A:38:5B:FD:05:D4:3A:A3:CD:B7:A3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E16BA5F25E7DC2751C9791880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e986d0ad-50aa-4481-b07a-38c0fbbe847d/e986d0ad-50aa-4481-b07a-38c0fbbe847d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e986d0ad-50aa-4481-b07a-38c0fbbe847d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jun 2026 04:11:49 +0000 Certificate not after: Sat 09 Sep 2028 04:11:49 +0000 Subordinate resources: AS: 398835 IP: 163.123.132.0/24 IP: 2602:fb3a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:16:ba:5f:25:e7:dc:27:51:c9:79:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 7 04:11:49 2026 GMT Not After : Sep 9 04:11:49 2028 GMT Subject: CN=e986d0ad-50aa-4481-b07a-38c0fbbe847d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:c1:34:c7:3f:c4:34:7f:2d:94:08:63:1d: 43:b3:59:88:1c:92:56:3c:56:f9:b2:07:9d:29:1c: d9:ad:40:b7:3b:86:c3:d7:cf:82:48:0d:21:66:ed: 99:a4:c1:6d:82:34:5d:e0:d2:c7:fa:d0:fa:11:e5: ec:a0:fd:1d:30:b1:de:cf:a9:f5:5f:e0:ad:3a:5f: 2d:a8:12:bb:3b:c8:f1:db:04:10:84:02:26:ce:ef: 0f:ac:42:b4:f8:42:8b:68:c2:07:7e:dd:03:89:b1: 3d:cb:ec:5a:f7:c9:55:1b:b8:06:8d:97:30:77:18: d6:ee:b2:ef:18:62:fa:da:9e:26:59:d1:de:77:a4: 04:dc:2b:b1:fc:7d:26:dc:11:3f:73:a6:7a:02:2e: 7a:10:0d:a7:c3:b1:a9:7d:81:cc:d0:dc:dc:06:71: a9:97:d9:c0:05:4c:19:b0:b2:23:67:51:ff:fe:e4: 6b:d8:86:87:b4:7b:de:e6:3d:58:c2:c6:65:c7:be: 91:0d:69:9b:29:88:bb:d8:c5:d3:6d:20:09:fc:ee: fd:58:a9:4f:94:78:d6:56:fe:fe:3e:56:c8:79:6e: 93:b0:42:9e:13:54:e3:81:eb:88:50:9c:61:43:ce: d2:50:c1:c9:56:49:5b:3c:0b:66:c1:5a:8a:f0:3a: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:06:C5:15:10:24:C7:F2:0C:6A:38:5B:FD:05:D4:3A:A3:CD:B7:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e986d0ad-50aa-4481-b07a-38c0fbbe847d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e986d0ad-50aa-4481-b07a-38c0fbbe847d/e986d0ad-50aa-4481-b07a-38c0fbbe847d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 163.123.132.0/24 IPv6: 2602:fb3a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398835 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:68:6b:76:22:6b:47:ac:b7:e1:c4:07:63:6a:d1:0b:e7:34: 8c:06:fe:07:8d:66:84:0e:13:c3:cd:76:fc:c4:15:c0:8e:c3: 31:0a:b7:98:43:0d:97:e5:a3:fb:6f:9d:f4:ab:ca:7e:6a:14: db:cd:08:a7:3e:b9:5f:51:87:3b:f6:46:56:ba:92:4e:ad:23: 0f:54:24:16:73:ce:88:bf:0e:90:11:ee:9b:e2:ae:cb:6e:9e: df:8a:48:92:c6:82:73:ae:16:52:ba:e3:75:92:4b:31:2a:11: d6:0a:83:eb:f8:44:3b:09:d8:74:51:0c:80:43:d5:56:5b:7f: 97:f6:ea:44:02:28:99:50:cc:d9:46:77:de:3c:f4:d2:8e:5c: 08:28:b4:f0:b5:e6:c1:eb:ab:69:b2:56:08:f6:f7:2d:89:22: 7d:5f:06:12:00:c8:dc:6f:95:3a:a9:2b:70:76:d3:8a:df:01: 8a:5b:c7:ec:49:c1:9f:93:58:92:d1:a0:09:27:f0:4b:85:08: f0:37:16:a4:31:9d:44:6c:f6:10:05:2e:c0:42:b5:ad:de:6e: fc:8d:e6:8b:8c:d6:02:6f:8e:29:4b:6e:aa:2e:9b:e2:aa:67: 40:b8:82:e5:27:78:49:b0:89:4e:0e:56:13:23:39:9a:b0:ca: 29:49:d1:7d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE4Wul8l59wnUcl5GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwNzA0MTE0OVoXDTI4MDkwOTA0MTE0OVowLzEtMCsGA1UEAxMk ZTk4NmQwYWQtNTBhYS00NDgxLWIwN2EtMzhjMGZiYmU4NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQHBNMc/xDR/LZQIYx1Ds1mIHJJWPFb5sged KRzZrUC3O4bD18+CSA0hZu2ZpMFtgjRd4NLH+tD6EeXsoP0dMLHez6n1X+CtOl8t qBK7O8jx2wQQhAImzu8PrEK0+EKLaMIHft0DibE9y+xa98lVG7gGjZcwdxjW7rLv GGL62p4mWdHed6QE3Cux/H0m3BE/c6Z6Ai56EA2nw7GpfYHM0NzcBnGpl9nABUwZ sLIjZ1H//uRr2IaHtHve5j1YwsZlx76RDWmbKYi72MXTbSAJ/O79WKlPlHjWVv7+ PlbIeW6TsEKeE1TjgeuIUJxhQ87SUMHJVklbPAtmwVqK8DqYIQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIkGxRUQJMfyDGo4W/0F1DqjzbejMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l OTg2ZDBhZC01MGFhLTQ0ODEtYjA3YS0zOGMwZmJiZTg0N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U5ODZkMGFkLTUwYWEtNDQ4MS1i MDdhLTM4YzBmYmJlODQ3ZC9lOTg2ZDBhZC01MGFhLTQ0ODEtYjA3YS0zOGMwZmJi ZTg0N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACje4QwDgQCAAIwCAMGACYC+zoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYV8zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1aGt2ImtHrLfhxAdjatEL5zSM Bv4HjWaEDhPDzXb8xBXAjsMxCreYQw2X5aP7b530q8p+ahTbzQinPrlfUYc79kZW upJOrSMPVCQWc86Ivw6QEe6b4q7Lbp7fikiSxoJzrhZSuuN1kksxKhHWCoPr+EQ7 Cdh0UQyAQ9VWW3+X9upEAiiZUMzZRnfePPTSjlwIKLTwtebB66tpslYI9vctiSJ9 XwYSAMjcb5U6qStwdtOK3wGKW8fsScGfk1iS0aAJJ/BLhQjwNxakMZ1EbPYQBS7A QrWt3m78jeaLjNYCb44pS26qLpviqmdAuILlJ3hJsIlODlYTIzmasMopSdF9 -----END CERTIFICATE-----Generated at Sat Jun 13 09:06:52 2026 by rpki-client