$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a.cer File: 359dc5d4-050b-4341-b32a-923e8cb66e3a.cer (raw, json) Hash identifier: i9VcaKck/fPTJr027emw/Vu0zN35ic72IgfwI/N5hUQ= Subject key identifier: 8F:A8:34:75:E4:4A:DF:8D:3D:57:E9:3E:7B:C2:F6:74:BB:F4:1B:45 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE025A0154A1FB5C517DA9E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/359dc5d4-050b-4341-b32a-923e8cb66e3a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 May 2026 14:58:27 +0000 Certificate not after: Sun 20 Aug 2028 14:58:27 +0000 Subordinate resources: AS: 3999 IP: 66.71.0.0/17 IP: 75.102.64.0/18 IP: 104.38.0.0/15 IP: 128.118.0.0/16 IP: 130.203.0.0/16 IP: 146.186.0.0/16 IP: 192.5.157.0 -- 192.5.161.255 IP: 192.112.253.0/24 IP: 2610:8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e0:25:a0:15:4a:1f:b5:c5:17:da:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 18 14:58:27 2026 GMT Not After : Aug 20 14:58:27 2028 GMT Subject: CN=359dc5d4-050b-4341-b32a-923e8cb66e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:6b:3e:21:b7:b7:80:4d:6b:c5:9b:ac:ae: ee:18:03:0f:8c:9e:12:ce:1d:95:a8:a4:00:1b:93: 43:fa:a5:bf:9a:b8:ed:c2:e1:15:52:e0:7e:b4:a7: bf:c1:d3:73:a6:02:65:1b:c7:53:2e:49:74:9c:b9: 28:46:29:45:a7:ec:37:62:5f:19:47:a9:26:68:74: 06:92:5f:06:0c:19:2c:b4:02:e8:86:71:cd:7e:8e: 55:3c:c5:a3:de:33:91:4d:84:ed:8f:ed:a8:c7:9a: 19:a0:92:f9:d9:7d:30:b9:1e:13:2f:40:06:b6:3d: 8d:f9:6d:97:64:a2:93:c4:0f:63:fd:6e:37:01:24: 31:f4:8e:60:29:f8:71:ea:cc:63:90:de:1c:95:eb: 6c:d7:34:37:07:29:9e:54:3a:77:e3:96:a1:3a:03: 11:06:02:14:2b:5f:d5:6c:2b:b8:87:32:91:22:17: 83:72:24:f0:b3:8c:64:14:a1:62:f8:ed:ab:af:6a: 32:64:a4:c0:d4:28:7b:a1:b1:58:c8:10:ec:4d:f8: 30:58:df:97:88:c7:3f:1f:63:ea:fb:1c:75:45:0b: f5:e4:8e:f0:14:5b:72:fe:b9:5b:51:cb:c1:fe:5f: 32:8f:71:9b:9a:91:09:2e:bf:1f:e1:56:8f:ac:48: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:34:75:E4:4A:DF:8D:3D:57:E9:3E:7B:C2:F6:74:BB:F4:1B:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/359dc5d4-050b-4341-b32a-923e8cb66e3a/359dc5d4-050b-4341-b32a-923e8cb66e3a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.71.0.0/17 75.102.64.0/18 104.38.0.0/15 128.118.0.0/16 130.203.0.0/16 146.186.0.0/16 192.5.157.0-192.5.161.255 192.112.253.0/24 IPv6: 2610:8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3999 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f5:51:a5:e8:d5:84:7c:37:f4:98:a9:7b:e2:0c:11:67:7c: cf:d0:da:b8:60:f2:1e:01:78:d2:68:f8:31:b9:10:7c:c8:d9: cd:fa:81:67:aa:bf:ae:d5:56:02:85:fd:67:b1:13:b6:9b:92: 90:1b:05:48:aa:04:96:96:3c:13:d2:2c:ce:86:a0:07:fc:cf: ed:38:05:8f:d2:3d:27:bf:2c:d6:c9:af:aa:63:e9:0c:be:43: b8:9a:e1:9a:46:b5:02:a5:a1:ae:96:84:75:e8:e9:5c:bc:28: 28:dd:2c:b3:9a:32:88:1a:4f:b5:bf:10:b8:10:1f:a8:16:f9: 28:fd:90:da:7a:a2:d4:cd:a1:79:bd:69:ad:d1:5d:fc:a4:47: 89:21:c6:fa:29:fe:02:8e:00:02:0d:ef:cd:e8:6f:20:e2:42: 0f:52:01:ff:02:bd:64:7c:02:2e:58:60:57:9d:ac:7f:6e:9f: e1:e7:98:61:1d:98:57:af:33:a3:94:18:6a:59:ea:08:5c:cc: 2a:55:46:6b:93:19:c1:ef:0b:7b:a2:fe:66:f5:c6:d2:93:04: 41:cc:95:10:f2:ff:2a:4c:fd:c3:66:51:e5:97:30:e1:5b:19: 4e:a6:4e:84:86:b0:25:ea:cb:9f:8a:22:15:43:49:61:61:87: a1:02:f2:60 -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUAQ0Mn0MoWE3gJaAVSh+1xRfangAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxODE0NTgyN1oXDTI4MDgyMDE0NTgyN1owLzEtMCsGA1UEAxMk MzU5ZGM1ZDQtMDUwYi00MzQxLWIzMmEtOTIzZThjYjY2ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XprPiG3t4BNa8WbrK7uGAMPjJ4Szh2VqKQA G5ND+qW/mrjtwuEVUuB+tKe/wdNzpgJlG8dTLkl0nLkoRilFp+w3Yl8ZR6kmaHQG kl8GDBkstALohnHNfo5VPMWj3jORTYTtj+2ox5oZoJL52X0wuR4TL0AGtj2N+W2X ZKKTxA9j/W43ASQx9I5gKfhx6sxjkN4clets1zQ3BymeVDp345ahOgMRBgIUK1/V bCu4hzKRIheDciTws4xkFKFi+O2rr2oyZKTA1Ch7obFYyBDsTfgwWN+XiMc/H2Pq +xx1RQv15I7wFFty/rlbUcvB/l8yj3GbmpEJLr8f4VaPrEji6wIDAQABo4IEVzCC BFMwHQYDVR0OBBYEFI+oNHXkSt+NPVfpPnvC9nS79BtFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z NTlkYzVkNC0wNTBiLTQzNDEtYjMyYS05MjNlOGNiNjZlM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzM1OWRjNWQ0LTA1MGItNDM0MS1i MzJhLTkyM2U4Y2I2NmUzYS8zNTlkYzVkNC0wNTBiLTQzNDEtYjMyYS05MjNlOGNi NjZlM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDBAdCRwADBAZLZkADAwFoJgMDAIB2AwMAgssDAwCS ujAMAwQAwAWdAwQBwAWgAwQAwHD9MA0EAgACMAcDBQAmEAAIMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAg+fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAX1UaXo1YR8N/SYqXviDBFnfM/Q2rhg 8h4BeNJo+DG5EHzI2c36gWeqv67VVgKF/WexE7abkpAbBUiqBJaWPBPSLM6GoAf8 z+04BY/SPSe/LNbJr6pj6Qy+Q7ia4ZpGtQKloa6WhHXo6Vy8KCjdLLOaMogaT7W/ ELgQH6gW+Sj9kNp6otTNoXm9aa3RXfykR4khxvop/gKOAAIN783obyDiQg9SAf8C vWR8Ai5YYFedrH9un+HnmGEdmFevM6OUGGpZ6ghczCpVRmuTGcHvC3ui/mb1xtKT BEHMlRDy/ypM/cNmUeWXMOFbGU6mToSGsCXqy5+KIhVDSWFhh6EC8mA= -----END CERTIFICATE-----Generated at Thu Jun 4 12:16:22 2026 by rpki-client