$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/33fd47e5-65db-4c87-8d3b-56a5849d6af5.cer File: 33fd47e5-65db-4c87-8d3b-56a5849d6af5.cer (raw, json) Hash identifier: xt8OyUHI7OH1+K0S6do7HR9QqBEo+JFzakpzxY6AEiA= Subject key identifier: 59:19:B8:9A:4D:87:73:3D:D8:D4:D2:DA:7E:D1:55:D8:A2:F3:64:DD Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE5A291387537E736979C0D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/33fd47e5-65db-4c87-8d3b-56a5849d6af5/33fd47e5-65db-4c87-8d3b-56a5849d6af5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/33fd47e5-65db-4c87-8d3b-56a5849d6af5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 14:09:14 +0000 Certificate not after: Tue 25 Jul 2028 17:50:12 +0000 Subordinate resources: AS: 18673 IP: 198.207.195.0/24 IP: 199.249.207.0 -- 199.249.212.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:a2:91:38:75:37:e7:36:97:9c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 14:09:14 2026 GMT Not After : Jul 25 17:50:12 2028 GMT Subject: CN=33fd47e5-65db-4c87-8d3b-56a5849d6af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:73:02:53:67:58:33:90:ff:c6:97:90:6a: 7c:f0:ec:79:f8:26:14:95:16:8f:d0:df:4a:d4:71: e1:f1:3d:28:8a:6c:c3:45:7d:63:1e:32:09:2f:9e: 4e:8d:da:68:0d:22:17:11:d5:52:95:77:0b:9e:a2: 8d:59:28:cb:9c:72:ca:07:eb:71:e3:40:0a:4f:14: bf:ec:30:91:4e:16:2d:f5:89:3d:75:c8:3a:6c:8a: ab:68:eb:f1:33:26:d8:04:59:54:90:32:81:7b:ec: db:41:6b:72:30:b2:0a:f7:74:f4:42:83:b1:73:f3: 72:27:79:cc:fa:90:6a:c8:ac:d0:d4:5e:df:eb:5e: 0f:c1:8c:25:4d:4a:dd:a2:64:25:6d:f3:da:62:15: 3e:4b:d1:d8:91:fd:ba:33:71:39:c5:ad:fc:6b:f3: 8c:cb:d4:ec:9e:2b:a3:c4:96:cc:de:77:c2:8c:20: 51:d9:c7:21:63:29:18:ee:8c:99:0d:b9:03:a8:74: ca:95:24:1e:68:85:57:77:08:0f:c3:07:af:43:8b: 27:81:ec:70:5f:ee:20:7d:70:5c:a6:14:6d:79:c5: 55:12:06:34:65:fc:4e:c3:27:bc:e9:cf:80:8b:bf: 2c:4b:a9:01:2c:d3:55:4e:dd:64:53:88:61:e2:82: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:19:B8:9A:4D:87:73:3D:D8:D4:D2:DA:7E:D1:55:D8:A2:F3:64:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/33fd47e5-65db-4c87-8d3b-56a5849d6af5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/33fd47e5-65db-4c87-8d3b-56a5849d6af5/33fd47e5-65db-4c87-8d3b-56a5849d6af5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.207.195.0/24 199.249.207.0-199.249.212.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18673 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c4:96:71:ba:db:7e:3e:27:26:6f:4b:c7:80:0e:44:1c:16: 90:22:5f:c7:41:ab:16:4e:73:bc:4d:f1:f4:09:84:22:3e:05: f7:f7:31:36:ad:73:53:6a:d4:82:2b:e6:00:82:ed:73:ac:14: 60:2c:8b:e9:e2:a3:a9:ca:8c:ac:b9:41:f4:34:e6:b4:90:0d: ae:34:35:a9:b7:13:da:99:3c:30:3d:f0:2e:b9:a1:0a:51:7c: 12:33:01:95:b5:c4:80:c1:6e:29:4f:9e:a5:eb:91:5c:f6:60: ba:bc:5c:ce:da:22:5f:c4:8e:28:99:86:9a:5a:8e:75:d8:9b: aa:bf:cf:25:83:55:f5:4b:86:a2:6c:24:f3:77:33:68:af:55: 38:69:16:1e:eb:fb:ba:a8:cb:6c:fa:e0:63:c7:a5:aa:b1:b9: b7:37:0a:a9:b2:55:ab:9a:53:f9:9e:cb:f8:64:dc:57:3c:4b: 1c:93:23:94:a7:76:40:94:1c:96:63:7d:29:2c:9c:49:07:11: 05:09:6a:49:c9:e5:cd:ea:4a:58:aa:a2:4e:4a:65:3e:98:d8: a5:30:69:37:7a:dc:99:a4:50:9f:4c:da:24:7a:e5:97:b9:53: ea:af:3a:d9:fe:2e:f3:07:36:83:7d:16:69:82:64:21:3f:64: d7:1e:a5:cf -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWE3lopE4dTfnNpecDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDE0MDkxNFoXDTI4MDcyNTE3NTAxMlowLzEtMCsGA1UEAxMk MzNmZDQ3ZTUtNjVkYi00Yzg3LThkM2ItNTZhNTg0OWQ2YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/dzAlNnWDOQ/8aXkGp88Ox5+CYUlRaP0N9K 1HHh8T0oimzDRX1jHjIJL55OjdpoDSIXEdVSlXcLnqKNWSjLnHLKB+tx40AKTxS/ 7DCRThYt9Yk9dcg6bIqraOvxMybYBFlUkDKBe+zbQWtyMLIK93T0QoOxc/NyJ3nM +pBqyKzQ1F7f614PwYwlTUrdomQlbfPaYhU+S9HYkf26M3E5xa38a/OMy9Tsniuj xJbM3nfCjCBR2cchYykY7oyZDbkDqHTKlSQeaIVXdwgPwwevQ4sngexwX+4gfXBc phRtecVVEgY0ZfxOwye86c+Ai78sS6kBLNNVTt1kU4hh4oK87wIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFFkZuJpNh3M92NTS2n7RVdii82TdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z M2ZkNDdlNS02NWRiLTRjODctOGQzYi01NmE1ODQ5ZDZhZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzMzZmQ0N2U1LTY1ZGItNGM4Ny04 ZDNiLTU2YTU4NDlkNmFmNS8zM2ZkNDdlNS02NWRiLTRjODctOGQzYi01NmE1ODQ5 ZDZhZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADGz8MwDAMEAMf5zwMEAMf51DAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgJI8TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACxJZxutt+Picmb0vHgA5EHBaQIl/H QasWTnO8TfH0CYQiPgX39zE2rXNTatSCK+YAgu1zrBRgLIvp4qOpyoysuUH0NOa0 kA2uNDWptxPamTwwPfAuuaEKUXwSMwGVtcSAwW4pT56l65Fc9mC6vFzO2iJfxI4o mYaaWo512Juqv88lg1X1S4aibCTzdzNor1U4aRYe6/u6qMts+uBjx6Wqsbm3Nwqp slWrmlP5nsv4ZNxXPEsckyOUp3ZAlByWY30pLJxJBxEFCWpJyeXN6kpYqqJOSmU+ mNilMGk3etyZpFCfTNokeuWXuVPqrzrZ/i7zBzaDfRZpgmQhP2TXHqXP -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:36 2026 by rpki-client