$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e0be9a1-3756-48f5-aab3-977201c17968.cer File: 1e0be9a1-3756-48f5-aab3-977201c17968.cer (raw, json) Hash identifier: VbvDHP06Xv0yM+mevj7PW9JtQd/set3D9KRy/RedjCM= Subject key identifier: 45:4E:AD:01:E0:76:55:04:F7:BB:18:FB:A0:F9:5B:0E:11:63:9C:B9 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DDC947F9DF5C0196CA67ECDA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e0be9a1-3756-48f5-aab3-977201c17968/1e0be9a1-3756-48f5-aab3-977201c17968.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e0be9a1-3756-48f5-aab3-977201c17968/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 08:18:37 +0000 Certificate not after: Sat 19 Aug 2028 08:18:37 +0000 Subordinate resources: IP: 74.204.192.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dc:94:7f:9d:f5:c0:19:6c:a6:7e:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 17 08:18:37 2026 GMT Not After : Aug 19 08:18:37 2028 GMT Subject: CN=1e0be9a1-3756-48f5-aab3-977201c17968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:ab:2e:12:12:db:56:36:d4:e5:3a:56:5c: 75:06:41:e5:0c:7b:76:d5:0f:0b:ac:35:6e:ec:9a: 43:74:f5:a7:52:7e:a0:bc:92:25:77:bb:34:e7:8b: 8b:66:39:50:39:bb:82:f4:5b:14:70:e1:be:51:11: a1:d5:68:b1:f4:d6:df:9d:47:14:c9:38:3c:b8:f9: 77:ef:6e:cc:87:e1:11:0f:03:e7:14:56:9e:5f:5b: f3:a1:f8:2c:3e:fa:b4:16:0a:51:01:13:b6:71:f4: 17:fd:8f:9d:72:79:78:54:16:b2:ad:39:85:5e:d3: ff:05:79:10:88:e3:a8:8e:f0:5a:93:2d:c4:6e:c2: 56:35:41:15:f5:48:09:9b:1a:3b:00:b5:2d:6e:f9: 52:aa:87:70:41:71:29:75:69:76:cb:ee:d8:1f:1d: 8b:af:34:52:8c:6a:fb:8d:b6:73:d8:7f:36:8e:20: 81:ce:8b:b9:05:ae:eb:60:79:9a:c7:19:12:a1:85: 8d:2d:9d:6c:e6:7c:e5:d5:6a:85:5f:87:04:f4:12: 5d:6c:68:a7:a2:43:52:c0:b8:6c:6b:4a:1c:4e:47: 75:94:a4:3d:2e:20:7b:d2:b9:18:d8:bd:57:a8:1c: a6:96:24:d8:d4:10:3f:7a:87:f9:02:24:b1:79:36: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4E:AD:01:E0:76:55:04:F7:BB:18:FB:A0:F9:5B:0E:11:63:9C:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e0be9a1-3756-48f5-aab3-977201c17968/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e0be9a1-3756-48f5-aab3-977201c17968/1e0be9a1-3756-48f5-aab3-977201c17968.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 74.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4a:9b:bc:da:50:89:a5:07:c4:a7:97:01:a5:3f:07:67:1e: 3d:32:0c:d7:db:0e:65:0d:fd:7e:77:7e:d2:33:34:38:1b:b2: ef:58:e3:5c:85:31:18:b7:4b:f2:c5:d0:f0:05:7e:21:7c:8c: 6d:2b:e5:83:bc:db:23:4e:b2:90:fb:19:d0:b7:b4:6f:5a:08: 3d:1d:3a:a2:b9:47:00:38:50:d0:71:a8:63:f6:70:b6:e3:f3: 46:5c:e8:3d:64:14:32:93:c9:25:3c:99:fc:43:23:22:27:67: 23:16:1a:70:11:f4:ef:7a:10:20:91:4b:1d:2d:b6:a8:f7:61: f3:63:4d:b3:74:42:25:69:9c:08:f3:08:21:88:76:83:92:42: 88:3f:9d:1c:8b:58:ae:82:d8:4a:e0:ea:9b:ab:a7:93:3a:f0: 47:38:26:26:27:cb:9b:64:1a:39:a4:bb:79:92:0b:e6:5e:3e: c9:7e:ae:e5:27:25:42:0e:30:e9:f3:62:46:ee:f0:95:f2:20: 26:dd:61:27:e8:f4:d5:23:93:d0:27:83:19:63:3d:29:34:08: b2:98:2c:6a:e6:3e:e0:95:f4:b4:a4:35:ac:ec:0f:93:36:57: e6:f6:ca:79:36:3b:56:49:3b:f5:bc:c8:62:7d:fc:ff:e5:9e: 1b:df:0f:d1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3clH+d9cAZbKZ+zaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNzA4MTgzN1oXDTI4MDgxOTA4MTgzN1owLzEtMCsGA1UEAxMk MWUwYmU5YTEtMzc1Ni00OGY1LWFhYjMtOTc3MjAxYzE3OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtOrLhIS21Y21OU6Vlx1BkHlDHt21Q8LrDVu 7JpDdPWnUn6gvJIld7s054uLZjlQObuC9FsUcOG+URGh1Wix9NbfnUcUyTg8uPl3 727Mh+ERDwPnFFaeX1vzofgsPvq0FgpRARO2cfQX/Y+dcnl4VBayrTmFXtP/BXkQ iOOojvBaky3EbsJWNUEV9UgJmxo7ALUtbvlSqodwQXEpdWl2y+7YHx2LrzRSjGr7 jbZz2H82jiCBzou5Ba7rYHmaxxkSoYWNLZ1s5nzl1WqFX4cE9BJdbGinokNSwLhs a0ocTkd1lKQ9LiB70rkY2L1XqBymliTY1BA/eof5AiSxeTZPmwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEVOrQHgdlUE97sY+6D5Ww4RY5y5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8x ZTBiZTlhMS0zNzU2LTQ4ZjUtYWFiMy05NzcyMDFjMTc5NjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzFlMGJlOWExLTM3NTYtNDhmNS1h YWIzLTk3NzIwMWMxNzk2OC8xZTBiZTlhMS0zNzU2LTQ4ZjUtYWFiMy05NzcyMDFj MTc5NjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAZKzMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUkqbvNpQiaUHxKeXAaU/ B2cePTIM19sOZQ39fnd+0jM0OBuy71jjXIUxGLdL8sXQ8AV+IXyMbSvlg7zbI06y kPsZ0Le0b1oIPR06orlHADhQ0HGoY/ZwtuPzRlzoPWQUMpPJJTyZ/EMjIidnIxYa cBH073oQIJFLHS22qPdh82NNs3RCJWmcCPMIIYh2g5JCiD+dHItYroLYSuDqm6un kzrwRzgmJifLm2QaOaS7eZIL5l4+yX6u5SclQg4w6fNiRu7wlfIgJt1hJ+j01SOT 0CeDGWM9KTQIspgsauY+4JX0tKQ1rOwPkzZX5vbKeTY7Vkk79bzIYn38/+WeG98P 0Q== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:23 2026 by rpki-client