$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer File: 305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.cer (raw, json) Hash identifier: TRIWGXz4bydCIrZTdPwRCTBmXxRRKSOgvVfG34PL8rI= Subject key identifier: 73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE3460A19CDCA9F44D1B77BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 May 2026 17:51:11 +0000 Certificate not after: Mon 21 Aug 2028 17:51:11 +0000 Subordinate resources: AS: 32869 IP: 66.206.80.0/20 IP: 74.85.224.0/19 IP: 2607:f650::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e3:46:0a:19:cd:ca:9f:44:d1:b7:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 19 17:51:11 2026 GMT Not After : Aug 21 17:51:11 2028 GMT Subject: CN=305a988d-7b75-4ec0-84fc-5cd2f5ec2c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:46:63:a0:70:bb:5a:c5:52:69:cb:db:6c: e9:6a:c3:f5:39:f6:1d:5c:8f:2a:71:51:90:3c:1c: 2d:5e:d2:f0:92:0a:fd:55:8a:d0:0e:65:80:b0:5d: 51:87:59:b8:97:36:98:4e:a7:5f:74:56:c8:e1:07: 36:92:92:f8:bb:a2:3b:3c:85:0b:ae:8a:71:2e:7c: c9:0c:09:28:b0:81:65:f2:04:09:54:e6:af:b6:6e: c8:e1:09:84:44:47:de:dd:25:f1:8d:07:f8:e4:f5: 85:20:3f:d8:f3:1f:4c:86:b8:c8:eb:bc:71:fc:f8: 9a:fc:ac:78:f0:48:73:c6:63:b2:b5:8c:88:40:57: 5f:a6:d9:c3:8d:a9:4c:da:11:09:79:f0:c2:7c:ec: dd:6c:40:a4:5f:ba:a5:11:f9:a3:79:a7:24:db:f1: 0d:41:27:95:c9:d1:dc:dd:97:1c:11:d8:af:b4:f7: 77:92:ce:d6:8f:f3:6f:f3:4a:d1:8e:2a:f4:fa:70: 47:07:e9:90:a6:b5:ec:98:4e:a7:c4:f3:b2:64:a7: 17:fe:ba:0b:fd:7c:20:1e:05:30:32:dc:bd:00:7f: aa:65:1f:62:f6:be:af:fc:2d:98:08:7e:98:ea:36: 09:9e:6f:97:be:7b:ca:5b:cd:4b:43:d5:a9:35:9b: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:53:14:39:91:B6:D0:24:6F:67:B2:8B:84:BE:BF:A4:23:90:7E:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20/305a988d-7b75-4ec0-84fc-5cd2f5ec2c20.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.206.80.0/20 74.85.224.0/19 IPv6: 2607:f650::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32869 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:04:cf:7b:c0:e3:c5:f4:c5:26:5c:7b:a9:cc:50:c2:dd:87: 7e:12:d9:44:54:5c:f0:01:06:a6:69:24:ac:16:be:5a:08:ec: 2b:22:a2:a4:4a:76:3f:43:37:1f:72:73:b8:46:35:87:48:32: c1:08:c7:c1:2f:f4:b7:fb:00:bf:4a:eb:09:d7:92:7e:af:cd: d2:c1:13:2e:a6:c0:9d:d2:ec:55:8f:5a:16:b0:f8:c2:50:fa: 4d:26:db:2e:01:02:04:56:15:e6:94:02:8c:62:7a:3d:51:b1: f5:cd:de:61:11:d6:e7:21:b2:4e:b6:56:05:84:3c:3e:62:bf: 4a:8c:67:d2:63:c7:28:7b:a2:37:1d:bd:44:56:03:d3:e3:55: 92:68:22:10:39:6a:f3:50:64:36:da:f9:26:9b:36:18:e8:9e: 92:4d:80:32:07:12:45:d9:3b:c4:a4:cd:da:cb:c8:fa:d3:3c: 80:d0:b9:4f:3a:80:34:9e:a5:56:63:ac:d7:3d:29:07:1d:ad: 13:6b:da:6a:53:dd:22:0a:67:25:cf:82:7f:65:59:f2:f7:ed: 4b:18:fb:c2:50:9e:a9:a3:44:de:cf:7f:a8:8c:17:72:56:42: b8:90:4f:ec:eb:81:30:e6:b9:fb:43:69:7e:9e:9c:05:22:74: 82:0a:86:dc -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE3jRgoZzcqfRNG3e6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxOTE3NTExMVoXDTI4MDgyMTE3NTExMVowLzEtMCsGA1UEAxMk MzA1YTk4OGQtN2I3NS00ZWMwLTg0ZmMtNWNkMmY1ZWMyYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf9GY6Bwu1rFUmnL22zpasP1OfYdXI8qcVGQ PBwtXtLwkgr9VYrQDmWAsF1Rh1m4lzaYTqdfdFbI4Qc2kpL4u6I7PIULropxLnzJ DAkosIFl8gQJVOavtm7I4QmEREfe3SXxjQf45PWFID/Y8x9MhrjI67xx/Pia/Kx4 8EhzxmOytYyIQFdfptnDjalM2hEJefDCfOzdbECkX7qlEfmjeack2/ENQSeVydHc 3ZccEdivtPd3ks7Wj/Nv80rRjir0+nBHB+mQprXsmE6nxPOyZKcX/roL/XwgHgUw Mty9AH+qZR9i9r6v/C2YCH6Y6jYJnm+XvnvKW81LQ9WpNZuEPQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFHNTFDmRttAkb2eyi4S+v6QjkH5JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z MDVhOTg4ZC03Yjc1LTRlYzAtODRmYy01Y2QyZjVlYzJjMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzMwNWE5ODhkLTdiNzUtNGVjMC04 NGZjLTVjZDJmNWVjMmMyMC8zMDVhOTg4ZC03Yjc1LTRlYzAtODRmYy01Y2QyZjVl YzJjMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARCzlADBAVKVeAwDQQCAAIwBwMFACYH9lAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAIBlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAAEz3vA48X0xSZce6nM UMLdh34S2URUXPABBqZpJKwWvloI7CsioqRKdj9DNx9yc7hGNYdIMsEIx8Ev9Lf7 AL9K6wnXkn6vzdLBEy6mwJ3S7FWPWhaw+MJQ+k0m2y4BAgRWFeaUAoxiej1RsfXN 3mER1uchsk62VgWEPD5iv0qMZ9Jjxyh7ojcdvURWA9PjVZJoIhA5avNQZDba+Sab NhjonpJNgDIHEkXZO8SkzdrLyPrTPIDQuU86gDSepVZjrNc9KQcdrRNr2mpT3SIK ZyXPgn9lWfL37UsY+8JQnqmjRN7Pf6iMF3JWQriQT+zrgTDmuftDaX6enAUidIIK htw= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:42 2026 by rpki-client