$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2627ec46-5e29-41fd-8171-38efdaae9b29.cer File: 2627ec46-5e29-41fd-8171-38efdaae9b29.cer (raw, json) Hash identifier: 9GPW49KAsNTO5hOf8kU0vZFuUxtSa7Ety24AfVj7UsU= Subject key identifier: 57:0E:EF:53:CD:45:79:56:CF:7A:E8:62:82:38:99:83:B9:58:C8:4F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2863822D07AEED83DCC6580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2627ec46-5e29-41fd-8171-38efdaae9b29/2627ec46-5e29-41fd-8171-38efdaae9b29.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2627ec46-5e29-41fd-8171-38efdaae9b29/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 17:51:46 +0000 Certificate not after: Tue 15 Aug 2028 17:51:46 +0000 Subordinate resources: AS: 32850 IP: 208.78.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:86:38:22:d0:7a:ee:d8:3d:cc:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 17:51:46 2026 GMT Not After : Aug 15 17:51:46 2028 GMT Subject: CN=2627ec46-5e29-41fd-8171-38efdaae9b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:0a:c6:63:0a:26:60:3e:e5:fd:35:cb:09: 2b:29:fb:54:2e:77:cf:9d:9e:31:b9:f9:66:23:1f: 40:02:a8:8f:d2:bc:46:6e:ab:e8:b3:c2:70:d2:a8: 6b:d0:f4:66:77:f6:2d:74:d7:46:a0:69:58:eb:da: 23:d5:a0:ba:66:e2:ad:e8:72:20:c3:33:8f:de:c8: 34:28:4c:fd:13:fe:26:cd:10:04:82:9d:61:72:f3: 30:7b:14:2b:f6:aa:5a:86:9b:09:f6:ea:e3:f4:63: fa:4b:74:7a:48:c1:fb:fc:a9:94:80:70:07:0f:85: 81:60:21:f2:f7:48:a4:c1:e9:6c:de:d2:0a:72:87: aa:09:1e:3e:7a:77:79:24:ce:b7:d2:23:15:7d:1a: 9d:98:36:5c:91:f0:7f:9c:dd:b5:98:3e:11:a4:63: 3d:c7:da:eb:3d:44:5b:12:b6:ef:6d:87:df:f7:76: 8a:22:05:1a:94:21:83:e8:fa:d6:ed:7e:67:c4:74: 7e:33:fe:17:7b:ce:dd:6d:a7:24:55:1b:c0:84:41: ca:ba:a1:2d:48:70:61:7e:59:81:6f:ba:88:89:bc: ce:c0:48:f3:1a:d4:0b:78:84:13:22:64:d8:54:b4: 86:aa:a8:f9:29:f9:26:5f:29:eb:f5:d1:93:a5:ec: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:EF:53:CD:45:79:56:CF:7A:E8:62:82:38:99:83:B9:58:C8:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2627ec46-5e29-41fd-8171-38efdaae9b29/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2627ec46-5e29-41fd-8171-38efdaae9b29/2627ec46-5e29-41fd-8171-38efdaae9b29.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.78.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32850 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e4:e9:66:17:ee:94:70:3e:af:be:dc:09:47:de:db:d6:70: c1:bb:c4:9c:af:ca:2b:da:8f:f7:17:62:88:82:3e:38:e7:1d: ea:6a:69:c7:27:db:88:e6:fa:60:09:8b:66:cb:67:d9:29:bb: 56:3c:2f:ee:6b:1a:65:14:ba:8a:a5:c4:d4:6a:4d:b9:ec:aa: 69:cb:68:7c:f5:16:67:43:20:30:47:bb:48:de:78:52:4b:0d: c3:a6:90:b2:38:41:06:9d:fc:c0:3d:b3:8c:75:3f:72:3c:63: 5e:18:b5:f6:06:99:e3:e7:a4:98:ff:4d:eb:f2:ad:db:8f:db: 43:fa:8b:b7:00:77:7b:96:b8:ba:4c:db:f7:77:c2:dd:c9:f8: e6:76:a1:35:8b:66:31:80:78:a0:7e:cd:68:61:69:13:87:7e: bf:5a:44:15:74:11:ea:c9:21:11:30:28:84:5c:72:6d:28:2d: 05:31:37:cf:e9:90:28:a5:01:81:49:84:55:63:18:cf:0f:00: c3:1d:5a:ff:df:63:22:60:00:05:df:df:5d:43:2b:c6:da:9c: fa:97:a7:21:b5:f3:98:82:25:cc:d1:29:81:1c:ee:e6:f0:94: c7:fd:72:30:12:f6:34:ac:06:87:9f:06:73:74:7b:d3:9c:be: 13:e6:a7:3f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3Shjgi0Hru2D3MZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzE3NTE0NloXDTI4MDgxNTE3NTE0NlowLzEtMCsGA1UEAxMk MjYyN2VjNDYtNWUyOS00MWZkLTgxNzEtMzhlZmRhYWU5YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJAKxmMKJmA+5f01ywkrKftULnfPnZ4xuflm Ix9AAqiP0rxGbqvos8Jw0qhr0PRmd/YtdNdGoGlY69oj1aC6ZuKt6HIgwzOP3sg0 KEz9E/4mzRAEgp1hcvMwexQr9qpahpsJ9urj9GP6S3R6SMH7/KmUgHAHD4WBYCHy 90ikwels3tIKcoeqCR4+end5JM630iMVfRqdmDZckfB/nN21mD4RpGM9x9rrPURb ErbvbYff93aKIgUalCGD6PrW7X5nxHR+M/4Xe87dbackVRvAhEHKuqEtSHBhflmB b7qIibzOwEjzGtQLeIQTImTYVLSGqqj5KfkmXynr9dGTpeymGwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFcO71PNRXlWz3roYoI4mYO5WMhPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y NjI3ZWM0Ni01ZTI5LTQxZmQtODE3MS0zOGVmZGFhZTliMjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzI2MjdlYzQ2LTVlMjktNDFmZC04 MTcxLTM4ZWZkYWFlOWIyOS8yNjI3ZWM0Ni01ZTI5LTQxZmQtODE3MS0zOGVmZGFh ZTliMjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQThQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIBSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHLk6WYX7pRwPq++3AlH3tvWcMG7xJyvyivaj/cXYoiCPjjn Hepqaccn24jm+mAJi2bLZ9kpu1Y8L+5rGmUUuoqlxNRqTbnsqmnLaHz1FmdDIDBH u0jeeFJLDcOmkLI4QQad/MA9s4x1P3I8Y14YtfYGmePnpJj/TevyrduP20P6i7cA d3uWuLpM2/d3wt3J+OZ2oTWLZjGAeKB+zWhhaROHfr9aRBV0EerJIREwKIRccm0o LQUxN8/pkCilAYFJhFVjGM8PAMMdWv/fYyJgAAXf311DK8banPqXpyG185iCJczR KYEc7ubwlMf9cjAS9jSsBoefBnN0e9OcvhPmpz8= -----END CERTIFICATE-----Generated at Thu May 28 16:22:05 2026 by rpki-client