$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33.cer File: 290d06b5-40de-4ade-b707-b5e165af8b33.cer (raw, json) Hash identifier: sTJRB2cKBeiAQcrPBfFHubvheQ6xKqSwxcYeke41Htk= Subject key identifier: 6D:61:84:98:4C:41:4F:CD:82:AC:C9:F4:FD:6A:A7:62:2A:69:FB:B8 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD90056D52E02E3F996DA1F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 May 2026 01:32:40 +0000 Certificate not after: Fri 18 Aug 2028 01:32:40 +0000 Subordinate resources: IP: 136.143.200.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d9:00:56:d5:2e:02:e3:f9:96:da:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 16 01:32:40 2026 GMT Not After : Aug 18 01:32:40 2028 GMT Subject: CN=290d06b5-40de-4ade-b707-b5e165af8b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:17:6c:40:bd:e4:91:ed:aa:63:9c:ef:37:95: b8:96:bc:d2:99:c9:5d:1a:fe:a9:a6:60:6f:19:41: 9f:31:8e:b9:d5:56:24:f0:98:8e:af:37:44:c6:64: fd:62:ec:f8:46:cb:e7:af:21:b9:e3:a7:d9:2c:02: cd:e4:5a:e6:38:b0:65:3f:fa:4c:a2:b9:2d:08:74: 76:1c:bf:d6:54:09:90:7b:8b:a6:f5:d3:6d:81:55: 39:61:87:1a:dc:56:a7:dc:53:ec:e0:f8:65:6c:b7: d9:97:4c:b1:e4:01:78:d3:34:66:6b:04:32:9d:43: 83:fd:ac:ce:86:ac:3e:b1:f9:87:de:8a:9e:43:c0: f9:68:3c:01:a0:ec:a8:40:07:72:a6:64:75:54:c7: 22:15:67:62:71:56:84:d9:9d:10:bf:43:ea:27:3b: bd:61:1f:d5:f7:ff:7f:d3:04:0b:00:5f:d2:76:93: dc:55:c0:6b:e0:2e:3e:c3:d1:97:15:80:84:80:ca: 56:f0:6b:e7:3e:84:53:6a:2f:ee:3b:5b:ab:3a:30: dd:7d:aa:6f:75:ab:cc:08:8a:93:4e:8e:38:25:6a: f9:39:96:ea:e0:be:79:f4:19:8c:cf:ba:68:b9:4a: 40:a3:f9:08:8e:fa:c5:09:50:ff:6b:67:67:2c:15: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:84:98:4C:41:4F:CD:82:AC:C9:F4:FD:6A:A7:62:2A:69:FB:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/290d06b5-40de-4ade-b707-b5e165af8b33/290d06b5-40de-4ade-b707-b5e165af8b33.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 136.143.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:06:05:f8:33:4b:dc:96:bc:15:50:82:98:da:ff:20:74:28: a8:6e:60:3c:71:c8:51:29:14:6d:7d:01:5a:14:31:79:4a:f3: 0a:e6:61:09:33:7d:65:3b:5d:2c:80:55:c2:6f:a7:f3:ea:58: 03:0c:fe:1d:19:d2:0e:a8:6e:f5:54:04:68:cf:58:0c:1e:75: 7e:ad:c6:aa:c8:c3:0e:07:f8:f7:8c:34:7c:58:96:db:23:41: 0f:c5:cc:7d:d4:d0:32:35:88:e1:56:fc:26:97:b1:1f:a1:3b: 8e:dc:cd:86:a4:91:20:80:93:3b:2b:ba:f2:c7:6e:b0:58:ad: d0:aa:a9:9d:f4:7b:c5:93:34:ae:48:f8:fa:9a:d9:e1:4e:4a: 34:72:30:9f:3e:89:f9:13:19:41:5e:68:e9:fb:04:0a:8b:3e: 22:c8:99:6a:7f:d3:c6:f8:f6:6f:5c:53:e0:12:88:c8:a1:1d: bf:7a:ee:38:65:e9:aa:1d:4b:00:6e:67:69:af:ff:23:dc:db: 75:cf:1e:81:72:e0:30:3e:fc:b8:8b:1f:b6:4e:8b:cc:83:89: 28:83:af:e6:9c:b0:66:9d:92:50:a2:40:7d:f6:d0:7a:99:b6: 1c:cf:9b:48:c9:74:56:c3:e5:ae:da:65:37:1b:ac:34:cf:06: 3a:e6:6f:07 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3ZAFbVLgLj+ZbaH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNjAxMzI0MFoXDTI4MDgxODAxMzI0MFowLzEtMCsGA1UEAxMk MjkwZDA2YjUtNDBkZS00YWRlLWI3MDctYjVlMTY1YWY4YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhdsQL3kke2qY5zvN5W4lrzSmcldGv6ppmBv GUGfMY651VYk8JiOrzdExmT9Yuz4RsvnryG546fZLALN5FrmOLBlP/pMorktCHR2 HL/WVAmQe4um9dNtgVU5YYca3Fan3FPs4PhlbLfZl0yx5AF40zRmawQynUOD/azO hqw+sfmH3oqeQ8D5aDwBoOyoQAdypmR1VMciFWdicVaE2Z0Qv0PqJzu9YR/V9/9/ 0wQLAF/SdpPcVcBr4C4+w9GXFYCEgMpW8GvnPoRTai/uO1urOjDdfapvdavMCIqT To44JWr5OZbq4L559BmMz7pouUpAo/kIjvrFCVD/a2dnLBXpNQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG1hhJhMQU/NgqzJ9P1qp2Iqafu4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y OTBkMDZiNS00MGRlLTRhZGUtYjcwNy1iNWUxNjVhZjhiMzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzI5MGQwNmI1LTQwZGUtNGFkZS1i NzA3LWI1ZTE2NWFmOGIzMy8yOTBkMDZiNS00MGRlLTRhZGUtYjcwNy1iNWUxNjVh ZjhiMzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACIj8gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADgYF+DNL3Ja8FVCCmNr/ IHQoqG5gPHHIUSkUbX0BWhQxeUrzCuZhCTN9ZTtdLIBVwm+n8+pYAwz+HRnSDqhu 9VQEaM9YDB51fq3GqsjDDgf494w0fFiW2yNBD8XMfdTQMjWI4Vb8JpexH6E7jtzN hqSRIICTOyu68sdusFit0KqpnfR7xZM0rkj4+prZ4U5KNHIwnz6J+RMZQV5o6fsE Cos+IsiZan/Txvj2b1xT4BKIyKEdv3ruOGXpqh1LAG5naa//I9zbdc8egXLgMD78 uIsftk6LzIOJKIOv5pywZp2SUKJAffbQepm2HM+bSMl0VsPlrtplNxusNM8GOuZv Bw== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:34 2026 by rpki-client