$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.cer File: 0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.cer (raw, json) Hash identifier: AQoB3RcU0EUe+tvC2taakVrh/ecZKioODTY60ty7cJc= Subject key identifier: 27:01:2F:2F:C2:0D:BA:E4:FB:5E:3D:00:15:44:FA:95:C4:51:4E:B5 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2B0B0895738500BE7E2D780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 19:17:20 +0000 Certificate not after: Tue 15 Aug 2028 19:17:20 +0000 Subordinate resources: AS: 25911 AS: 32443 IP: 192.139.215.0 -- 192.139.217.255 IP: 205.173.71.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:b0:b0:89:57:38:50:0b:e7:e2:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 19:17:20 2026 GMT Not After : Aug 15 19:17:20 2028 GMT Subject: CN=0ba53b62-4123-4f79-8a0b-0f01b35e5b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:11:ba:bc:08:6d:f7:6d:51:5f:64:df:b2: 27:a7:16:a4:73:fc:cb:6d:c1:eb:89:43:4d:a7:77: 07:09:47:f6:57:aa:ae:61:d2:64:04:45:58:02:06: a8:2b:6e:52:eb:b0:a1:9d:cd:90:8f:1b:b3:c0:24: e8:e6:3b:ca:50:d6:83:22:1b:76:f2:b2:84:c3:08: 06:e9:5b:a0:95:cd:10:ab:e4:5b:25:52:7d:10:5b: 62:b7:d9:c8:78:6c:9f:a5:7c:72:4f:7f:ce:5c:65: f3:47:08:06:0e:06:29:f4:bb:4e:e5:a5:88:27:02: 6b:ae:b0:59:1c:c8:bd:c0:b8:88:60:46:a1:12:b6: 0b:c0:11:64:e9:1b:e8:33:67:24:ff:42:82:59:d2: 09:d0:8e:c4:78:b5:af:a4:f9:4d:53:28:55:89:ae: 50:82:f6:46:e7:6e:29:fb:78:fd:28:e0:d9:47:ba: 02:85:5f:e9:96:02:8c:3e:4d:fd:d4:d0:d4:e1:c4: 6f:a5:92:cd:f6:22:f8:e9:16:4d:78:cf:6e:b5:72: ae:a7:55:93:1e:13:d5:91:b1:a1:0e:6c:ac:ec:46: 4d:f0:01:bc:8d:e7:4c:1c:3e:25:eb:15:7a:82:0b: 69:50:a7:11:59:49:9c:49:2a:da:0f:31:f5:27:28: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:01:2F:2F:C2:0D:BA:E4:FB:5E:3D:00:15:44:FA:95:C4:51:4E:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a/0ba53b62-4123-4f79-8a0b-0f01b35e5b8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.139.215.0-192.139.217.255 205.173.71.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25911 32443 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:92:f6:5c:3a:93:ae:26:b7:dd:6c:03:c3:5b:fd:81:45:ec: 9d:85:dc:4d:bb:5b:11:f7:01:7c:5b:8f:c5:45:bd:2c:9e:5c: fe:8b:cc:ab:16:13:85:a3:5d:70:32:57:3c:9b:01:45:f5:0f: 04:e7:57:2d:06:ba:8b:6b:df:01:27:c2:37:7a:a0:51:36:3a: 76:80:15:53:dc:d6:c8:1d:69:c5:a2:23:d5:7e:ce:1d:17:d2: 45:52:1c:ca:c6:f9:9a:1d:ab:60:89:bf:8b:fc:fd:7a:5c:cc: 26:97:c7:52:2b:7e:18:93:cc:28:e3:ea:ee:69:d7:46:dc:35: 30:24:e8:5c:22:3b:aa:5b:ca:98:aa:42:cc:5f:f7:8b:88:b3: 1f:7b:58:c2:a9:6d:fe:29:1c:f8:0e:21:86:de:a3:f6:bb:a4: 3d:bf:8c:d6:69:60:46:ff:22:4a:0d:2b:08:79:c9:ba:b9:da: 48:d9:2d:e6:24:31:1c:00:42:a4:d6:dc:4e:bd:19:97:34:3a: 18:8a:39:a3:42:4d:6d:f9:48:45:9e:6d:43:c0:90:67:12:58: ee:8a:74:90:30:36:d8:88:a1:36:c8:49:78:38:ba:e4:cc:92: ed:af:b8:7e:c2:bc:0c:64:8a:bd:46:98:6c:12:f8:3b:f2:36: d5:56:26:35 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE3SsLCJVzhQC+fi14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzE5MTcyMFoXDTI4MDgxNTE5MTcyMFowLzEtMCsGA1UEAxMk MGJhNTNiNjItNDEyMy00Zjc5LThhMGItMGYwMWIzNWU1YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqsRurwIbfdtUV9k37Inpxakc/zLbcHriUNN p3cHCUf2V6quYdJkBEVYAgaoK25S67Chnc2QjxuzwCTo5jvKUNaDIht28rKEwwgG 6Vuglc0Qq+RbJVJ9EFtit9nIeGyfpXxyT3/OXGXzRwgGDgYp9LtO5aWIJwJrrrBZ HMi9wLiIYEahErYLwBFk6RvoM2ck/0KCWdIJ0I7EeLWvpPlNUyhVia5QgvZG524p +3j9KODZR7oChV/plgKMPk391NDU4cRvpZLN9iL46RZNeM9utXKup1WTHhPVkbGh Dmys7EZN8AG8jedMHD4l6xV6ggtpUKcRWUmcSSraDzH1JyiURwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFCcBLy/CDbrk+149ABVE+pXEUU61MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w YmE1M2I2Mi00MTIzLTRmNzktOGEwYi0wZjAxYjM1ZTViOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBiYTUzYjYyLTQxMjMtNGY3OS04 YTBiLTBmMDFiMzVlNWI4YS8wYmE1M2I2Mi00MTIzLTRmNzktOGEwYi0wZjAxYjM1 ZTViOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAMCL1wMEAcCL2AMEAM2tRzAdBggrBgEFBQcB CAEB/wQOMAygCjAIAgJlNwICfrswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiZL2XDqTria33WwDw1v9gUXs nYXcTbtbEfcBfFuPxUW9LJ5c/ovMqxYThaNdcDJXPJsBRfUPBOdXLQa6i2vfASfC N3qgUTY6doAVU9zWyB1pxaIj1X7OHRfSRVIcysb5mh2rYIm/i/z9elzMJpfHUit+ GJPMKOPq7mnXRtw1MCToXCI7qlvKmKpCzF/3i4izH3tYwqlt/ikc+A4hht6j9ruk Pb+M1mlgRv8iSg0rCHnJurnaSNkt5iQxHABCpNbcTr0ZlzQ6GIo5o0JNbflIRZ5t Q8CQZxJY7op0kDA22IihNshJeDi65MyS7a+4fsK8DGSKvUaYbBL4O/I21VYmNQ== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:40 2026 by rpki-client