$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498b1fa6-139d-4ac7-8ec5-b9a385fcf579.cer File: 498b1fa6-139d-4ac7-8ec5-b9a385fcf579.cer (raw, json) Hash identifier: wSMSoTsZ04nuk3S4XYcncAilu6Lf+GJV32N5r9odnpo= Subject key identifier: 2F:02:21:54:BB:D7:BC:1F:79:3A:F1:2B:44:D2:75:9E:AF:4C:B5:35 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E44D3F41CB23C1C6D2A391900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498b1fa6-139d-4ac7-8ec5-b9a385fcf579/498b1fa6-139d-4ac7-8ec5-b9a385fcf579.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498b1fa6-139d-4ac7-8ec5-b9a385fcf579/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Jun 2026 16:30:32 +0000 Certificate not after: Mon 25 Sep 2028 16:30:32 +0000 Subordinate resources: IP: 23.152.216.0/24 IP: 165.140.28.0/22 IP: 208.76.216.0/22 IP: 2606:a140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:44:d3:f4:1c:b2:3c:1c:6d:2a:39:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 23 16:30:32 2026 GMT Not After : Sep 25 16:30:32 2028 GMT Subject: CN=498b1fa6-139d-4ac7-8ec5-b9a385fcf579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:19:56:84:bb:3e:e7:d0:be:40:c4:9e:5d: 17:dc:2b:99:71:0e:f2:a6:3f:16:f3:cb:95:e8:3a: 1e:e1:b6:fd:54:09:80:95:47:2c:97:58:8a:15:00: 97:b4:c5:07:13:95:94:1c:b6:3f:af:f7:7b:2f:cd: c1:63:fc:4e:ee:34:7e:d3:1e:9a:5a:8a:ef:62:46: 4e:77:f7:3e:81:d4:f9:47:3d:48:26:60:29:32:42: 14:03:22:d1:90:c5:0f:23:2f:c9:98:55:1f:27:13: c0:7f:2e:ac:f9:2f:28:7e:50:20:5c:d0:c5:ef:6b: 66:71:3c:06:02:52:be:71:34:36:7f:13:c3:bd:ee: a9:20:99:e5:a5:bc:06:a1:ac:fd:0b:82:b5:f8:ac: 75:52:09:98:e3:51:d7:10:e0:41:33:c0:5a:6f:fd: 96:74:4e:3d:b8:d6:f4:80:2b:6b:c0:7f:76:3f:c0: 95:07:e8:60:75:e1:59:5d:eb:63:c5:4a:b6:ba:1e: 44:0c:fa:36:50:6c:d7:af:72:6e:11:f9:c0:67:57: f7:f3:33:fd:9f:ac:d9:32:85:a1:da:93:d5:06:e0: 12:9b:84:e1:f7:93:13:70:11:cd:d6:79:36:5e:bb: 5f:39:4d:57:48:8d:f0:81:f1:4e:fa:61:9d:4e:82: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:21:54:BB:D7:BC:1F:79:3A:F1:2B:44:D2:75:9E:AF:4C:B5:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498b1fa6-139d-4ac7-8ec5-b9a385fcf579/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498b1fa6-139d-4ac7-8ec5-b9a385fcf579/498b1fa6-139d-4ac7-8ec5-b9a385fcf579.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.152.216.0/24 165.140.28.0/22 208.76.216.0/22 IPv6: 2606:a140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:06:c0:c6:b0:8d:41:1d:32:a3:74:28:a9:da:87:71:95:2c: da:a3:81:42:64:75:4f:09:2b:7b:f0:f7:1d:2e:e5:b8:d5:23: f3:30:58:fc:2a:b9:c5:84:03:fa:54:39:b6:ec:6f:f6:cf:f2: c3:26:6a:59:1a:a9:97:39:2b:d5:c4:8e:41:93:d3:8f:ad:34: 45:f8:3a:65:cb:4e:b0:cd:90:c4:6e:64:34:f7:35:18:1d:43: a1:fd:35:ca:28:78:23:fa:cd:28:b0:d1:b0:93:e7:73:ea:c6: 0b:d4:2b:71:84:4a:53:78:ee:9a:a4:00:14:94:21:df:c0:fd: 1a:3e:26:5a:28:70:6f:4f:fc:95:92:df:d9:04:9f:84:0d:f6: 59:9a:c9:1b:2a:e5:cc:8b:62:ac:64:df:39:92:a9:f2:82:8a: fb:da:e3:e7:11:94:e1:df:f5:73:07:9d:be:ae:91:f9:ea:b1: 9e:46:27:85:81:c3:8d:b0:35:75:b3:f8:56:b8:d6:0f:04:eb: 59:a9:4c:28:85:a0:b5:bc:17:34:d7:c3:5c:76:1c:2c:86:c9: 78:f2:71:3d:5f:69:88:9b:dc:40:27:0a:53:47:20:6e:74:4b: 48:1c:31:9c:a1:fc:d4:fe:b8:1b:27:5b:23:00:70:eb:1d:24: aa:69:5c:9f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE5E0/QcsjwcbSo5GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyMzE2MzAzMloXDTI4MDkyNTE2MzAzMlowLzEtMCsGA1UEAxMk NDk4YjFmYTYtMTM5ZC00YWM3LThlYzUtYjlhMzg1ZmNmNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn8ZVoS7PufQvkDEnl0X3CuZcQ7ypj8W88uV 6Doe4bb9VAmAlUcsl1iKFQCXtMUHE5WUHLY/r/d7L83BY/xO7jR+0x6aWorvYkZO d/c+gdT5Rz1IJmApMkIUAyLRkMUPIy/JmFUfJxPAfy6s+S8oflAgXNDF72tmcTwG AlK+cTQ2fxPDve6pIJnlpbwGoaz9C4K1+Kx1UgmY41HXEOBBM8Bab/2WdE49uNb0 gCtrwH92P8CVB+hgdeFZXetjxUq2uh5EDPo2UGzXr3JuEfnAZ1f38zP9n6zZMoWh 2pPVBuASm4Th95MTcBHN1nk2XrtfOU1XSI3wgfFO+mGdToKsdwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFC8CIVS717wfeTrxK0TSdZ6vTLU1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 OThiMWZhNi0xMzlkLTRhYzctOGVjNS1iOWEzODVmY2Y1NzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ5OGIxZmE2LTEzOWQtNGFjNy04 ZWM1LWI5YTM4NWZjZjU3OS80OThiMWZhNi0xMzlkLTRhYzctOGVjNS1iOWEzODVm Y2Y1NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXmNgDBAKljBwDBALQTNgwDQQCAAIwBwMFACYG oUAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAugbAxrCNQR0yo3QoqdqHcZUs2qOBQmR1Twkre/D3HS7luNUj 8zBY/Cq5xYQD+lQ5tuxv9s/ywyZqWRqplzkr1cSOQZPTj600Rfg6ZctOsM2QxG5k NPc1GB1Dof01yih4I/rNKLDRsJPnc+rGC9QrcYRKU3jumqQAFJQh38D9Gj4mWihw b0/8lZLf2QSfhA32WZrJGyrlzItirGTfOZKp8oKK+9rj5xGU4d/1cwedvq6R+eqx nkYnhYHDjbA1dbP4VrjWDwTrWalMKIWgtbwXNNfDXHYcLIbJePJxPV9piJvcQCcK U0cgbnRLSBwxnKH81P64GydbIwBw6x0kqmlcnw== -----END CERTIFICATE-----Generated at Fri Jun 26 22:49:27 2026 by rpki-client