$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer File: 3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer (raw, json) Hash identifier: T8b8D3mi4u8325R18tHt5RpuZONswD3BW3RucruNT2U= Subject key identifier: 0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DDB23F008E97B949181621E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 May 2026 19:56:01 +0000 Certificate not after: Fri 18 Aug 2028 19:56:01 +0000 Subordinate resources: AS: 40684 IP: 68.67.121.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:23:f0:08:e9:7b:94:91:81:62:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 16 19:56:01 2026 GMT Not After : Aug 18 19:56:01 2028 GMT Subject: CN=3d7a63c0-1781-4cd9-9b1e-477a557ae5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:99:f5:cc:71:76:20:d3:80:0b:b9:15:6d: 7a:c0:36:2f:ac:3e:fe:92:bc:d2:3f:62:52:79:03: da:09:fc:a2:f5:bb:2a:7b:ee:15:5f:a8:5b:f5:96: 94:29:65:5c:22:5f:d4:d8:fc:e0:a4:76:ff:2a:75: 08:c4:dd:45:af:27:7b:12:6d:a7:95:03:55:ff:a8: 88:d2:6a:86:8a:bf:99:cb:6e:38:17:56:56:eb:df: de:78:f1:54:3d:61:3d:d8:22:e7:09:9c:25:c9:af: 21:be:b4:41:95:aa:62:b1:d5:4d:da:a6:2d:ba:14: 2a:53:82:aa:1c:2e:85:30:1a:72:94:37:9b:a0:fb: 9d:9b:31:e1:74:88:ea:b2:3a:8d:43:aa:8b:48:05: 84:9a:36:b4:62:b4:e1:f1:cd:a3:05:39:50:68:44: 2a:88:9d:ef:1d:09:dc:95:56:29:d4:0b:a9:ff:c3: 18:3e:dd:54:92:29:ab:cb:64:ad:26:82:62:24:16: 5b:16:df:24:48:e3:ea:cd:01:52:f1:bd:15:bb:d7: b5:ad:7b:75:45:d2:0b:8a:67:67:21:32:e8:a6:26: be:06:db:27:c3:ef:8e:b4:8a:00:6d:8c:e8:eb:62: 21:fa:f6:bc:e3:20:76:58:f8:a0:4f:3c:bb:fd:e2: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 68.67.121.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40684 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:7e:e2:6a:e5:90:e8:4d:7b:41:74:36:1a:72:eb:6a:23:40: 7f:d0:f2:fb:91:4e:e3:bd:3d:11:7e:fe:ab:93:a9:f4:65:ba: 4c:c8:cc:25:ca:cd:c6:05:5c:52:f3:6d:03:56:ea:d0:3c:4b: 7b:eb:d9:28:96:81:e4:b5:65:f6:f5:47:5b:a3:83:88:ed:4d: 9e:0c:3b:37:d7:01:e8:2c:b2:54:3e:c2:9f:23:d2:12:20:7b: 16:55:8a:df:53:0b:33:58:63:64:d2:07:cd:63:13:b3:0c:56: e9:ed:9e:96:1e:6b:04:c2:e5:be:27:70:81:b8:b6:41:61:88: 68:f4:99:ca:12:a6:86:bb:92:20:30:75:da:f3:5f:32:f0:fa: 49:b2:79:4d:a6:7d:09:4c:60:41:8f:6a:d3:ca:2c:d4:9b:f3: d7:6c:a4:82:3d:61:18:40:d7:0b:93:9c:42:d7:c1:5b:0a:65: b1:23:9f:49:dc:18:55:2b:60:26:9c:a8:11:7d:42:3d:0c:24: be:8d:f7:b7:fe:03:1e:28:f9:0b:99:5d:7b:98:b8:4a:8b:bd: b7:88:41:15:e0:2e:ff:ad:6a:84:ff:3d:0b:2b:0c:8a:bf:51: 6e:03:88:a8:e3:ab:01:e4:26:8a:4e:f1:27:74:78:d9:c2:3d: 7c:a5:4d:d2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3bI/AI6XuUkYFiHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNjE5NTYwMVoXDTI4MDgxODE5NTYwMVowLzEtMCsGA1UEAxMk M2Q3YTYzYzAtMTc4MS00Y2Q5LTliMWUtNDc3YTU1N2FlNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd2Z9cxxdiDTgAu5FW16wDYvrD7+krzSP2JS eQPaCfyi9bsqe+4VX6hb9ZaUKWVcIl/U2PzgpHb/KnUIxN1Fryd7Em2nlQNV/6iI 0mqGir+Zy244F1ZW69/eePFUPWE92CLnCZwlya8hvrRBlapisdVN2qYtuhQqU4Kq HC6FMBpylDeboPudmzHhdIjqsjqNQ6qLSAWEmja0YrTh8c2jBTlQaEQqiJ3vHQnc lVYp1Aup/8MYPt1Ukimry2StJoJiJBZbFt8kSOPqzQFS8b0Vu9e1rXt1RdILimdn ITLopia+Btsnw++OtIoAbYzo62Ih+va84yB2WPigTzy7/eLSJwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFA1Jseve28mdQeRh7YjXKUqXMzVDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z ZDdhNjNjMC0xNzgxLTRjZDktOWIxZS00NzdhNTU3YWU1ZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzNkN2E2M2MwLTE3ODEtNGNkOS05 YjFlLTQ3N2E1NTdhZTVkYi8zZDdhNjNjMC0xNzgxLTRjZDktOWIxZS00NzdhNTU3 YWU1ZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABEQ3kwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ7sMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKB+4mrlkOhNe0F0Nhpy62ojQH/Q8vuRTuO9PRF+/quTqfRl ukzIzCXKzcYFXFLzbQNW6tA8S3vr2SiWgeS1Zfb1R1ujg4jtTZ4MOzfXAegsslQ+ wp8j0hIgexZVit9TCzNYY2TSB81jE7MMVuntnpYeawTC5b4ncIG4tkFhiGj0mcoS poa7kiAwddrzXzLw+kmyeU2mfQlMYEGPatPKLNSb89dspII9YRhA1wuTnELXwVsK ZbEjn0ncGFUrYCacqBF9Qj0MJL6N97f+Ax4o+QuZXXuYuEqLvbeIQRXgLv+taoT/ PQsrDIq/UW4DiKjjqwHkJopO8Sd0eNnCPXylTdI= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:33 2026 by rpki-client