$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932.cer File: 440ded39-398e-4479-b80d-ad4f4c956932.cer (raw, json) Hash identifier: jfXn6/rbpDVqhj0X7DTg+SDieAlZvt/R5LPSziRjjxg= Subject key identifier: 69:E7:72:80:54:F5:45:4E:72:C5:C0:11:E4:F3:EA:39:FA:5E:53:2A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D99A6297A938A6950346C8280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Apr 2026 08:55:03 +0000 Certificate not after: Wed 26 Jul 2028 08:55:03 +0000 Subordinate resources: IP: 134.195.148.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:99:a6:29:7a:93:8a:69:50:34:6c:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 23 08:55:03 2026 GMT Not After : Jul 26 08:55:03 2028 GMT Subject: CN=440ded39-398e-4479-b80d-ad4f4c956932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:68:a3:9e:cb:c2:d7:ab:b8:65:40:be:39: 89:83:3c:c6:0e:f6:82:b8:f6:72:bf:7a:fd:fb:96: ab:0f:17:12:72:51:7b:5e:76:4e:43:78:53:f4:e0: 47:88:c3:c9:51:2d:31:a6:a8:34:24:d0:75:5b:e7: 01:2d:30:cb:8a:57:ec:13:ff:60:d9:99:eb:49:b6: 9f:75:e2:48:f4:0e:10:91:d0:35:f9:e8:41:ad:ab: 21:b4:5e:98:04:6f:13:58:b7:c7:ec:ba:10:9c:0d: 2d:5f:08:84:65:39:e7:e3:63:8a:7d:75:5a:c9:cf: f0:aa:78:fc:bd:9f:e2:bc:fa:50:0e:2d:30:84:0b: d8:49:e2:a7:48:87:a3:76:5b:92:8e:cb:c9:b9:c3: fd:4a:7c:c8:b4:ac:45:79:09:c8:bf:16:97:24:a9: 8e:15:49:2a:ab:f7:fd:ce:e4:fc:ed:de:ae:fd:32: 9a:af:7b:f6:ac:48:9e:df:3f:76:61:10:7b:0d:63: 35:03:77:8b:e5:b2:e0:5b:2e:58:85:29:9d:d6:08: b3:49:44:95:f1:30:da:59:e6:c9:4a:50:37:bb:fe: 58:11:a8:2c:40:ca:78:c3:6e:59:e7:fd:2f:e0:0e: cb:9f:0b:b2:de:9e:91:e6:80:27:67:e5:75:dc:82: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:72:80:54:F5:45:4E:72:C5:C0:11:E4:F3:EA:39:FA:5E:53:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/440ded39-398e-4479-b80d-ad4f4c956932/440ded39-398e-4479-b80d-ad4f4c956932.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 134.195.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:72:96:71:36:13:15:05:ed:20:94:32:cf:6d:21:17:7b:f6: bd:20:6e:43:5f:58:4c:37:97:f5:5d:e4:12:33:e2:35:43:ee: fd:4f:76:67:c2:cb:8e:d0:2b:77:3a:28:9e:4b:c3:93:b1:44: 16:ba:5f:84:e8:ac:61:63:12:37:a1:7e:0a:4e:2a:51:4f:16: d3:26:5a:5d:2f:ee:f9:02:1e:51:4e:97:21:68:c9:e3:e9:48: eb:6c:91:3f:e9:f2:f5:d3:6f:0e:6a:5c:99:07:f6:18:4d:20: 53:44:a3:ef:cd:4b:b7:4e:4c:f9:6a:c3:c7:72:b8:98:c7:13: ae:e9:b7:f3:bf:86:c8:44:f2:7d:5c:95:30:04:b7:bd:44:9d: 41:71:7d:9a:80:6b:1a:6a:9c:0e:94:bb:91:ad:f5:c5:ea:5f: 17:ed:9e:de:99:76:96:af:26:f2:0d:1e:1e:e7:67:3a:52:ce: 3c:64:72:bf:26:6e:9f:53:8c:4c:03:d1:aa:9d:c8:6a:83:2c: 65:e3:99:2d:56:c0:fd:61:ce:d4:98:eb:38:8a:25:e4:11:2d: 89:6d:9b:26:1c:bf:aa:76:7b:55:db:0e:db:9c:a3:5d:f7:ab: 7f:39:5a:98:50:53:b2:d7:93:e0:fa:c1:9d:78:74:eb:d6:0e: 49:bc:51:52 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2Zpil6k4ppUDRsgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMzA4NTUwM1oXDTI4MDcyNjA4NTUwM1owLzEtMCsGA1UEAxMk NDQwZGVkMzktMzk4ZS00NDc5LWI4MGQtYWQ0ZjRjOTU2OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtBoo57LwteruGVAvjmJgzzGDvaCuPZyv3r9 +5arDxcSclF7XnZOQ3hT9OBHiMPJUS0xpqg0JNB1W+cBLTDLilfsE/9g2ZnrSbaf deJI9A4QkdA1+ehBrashtF6YBG8TWLfH7LoQnA0tXwiEZTnn42OKfXVayc/wqnj8 vZ/ivPpQDi0whAvYSeKnSIejdluSjsvJucP9SnzItKxFeQnIvxaXJKmOFUkqq/f9 zuT87d6u/TKar3v2rEie3z92YRB7DWM1A3eL5bLgWy5YhSmd1gizSUSV8TDaWebJ SlA3u/5YEagsQMp4w25Z5/0v4A7Lnwuy3p6R5oAnZ+V13IJw0QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGnncoBU9UVOcsXAEeTz6jn6XlMqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 NDBkZWQzOS0zOThlLTQ0NzktYjgwZC1hZDRmNGM5NTY5MzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ0MGRlZDM5LTM5OGUtNDQ3OS1i ODBkLWFkNGY0Yzk1NjkzMi80NDBkZWQzOS0zOThlLTQ0NzktYjgwZC1hZDRmNGM5 NTY5MzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGGw5QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABnKWcTYTFQXtIJQyz20h F3v2vSBuQ19YTDeX9V3kEjPiNUPu/U92Z8LLjtArdzoonkvDk7FEFrpfhOisYWMS N6F+Ck4qUU8W0yZaXS/u+QIeUU6XIWjJ4+lI62yRP+ny9dNvDmpcmQf2GE0gU0Sj 781Lt05M+WrDx3K4mMcTrum387+GyETyfVyVMAS3vUSdQXF9moBrGmqcDpS7ka31 xepfF+2e3pl2lq8m8g0eHudnOlLOPGRyvyZun1OMTAPRqp3IaoMsZeOZLVbA/WHO 1JjrOIol5BEtiW2bJhy/qnZ7VdsO25yjXferfzlamFBTsteT4PrBnXh069YOSbxR Ug== -----END CERTIFICATE-----Generated at Tue Apr 28 18:36:59 2026 by rpki-client