$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer File: 4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.cer (raw, json) Hash identifier: TxVcOTqPFA6ybsnI5TA0W4d5eKbtRpdrDZVLKRpWJl8= Subject key identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAEAC0A250DBDDBF25114B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 21:38:52 +0000 Certificate not after: Wed 02 Aug 2028 21:38:52 +0000 Subordinate resources: AS: 53820 IP: 74.114.16.0/21 IP: 165.140.172.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:ac:0a:25:0d:bd:db:f2:51:14:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 30 21:38:52 2026 GMT Not After : Aug 2 21:38:52 2028 GMT Subject: CN=4ab620dc-8a2e-4e97-b3cd-f95f8317bdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:cd:30:db:30:8b:c6:ef:3c:b4:48:b6:20: 52:78:56:06:9b:53:47:74:b5:71:9b:fd:0f:23:ba: d5:39:3e:2d:d8:d1:6f:1c:51:4c:ea:6f:d8:4f:9d: fc:73:2f:35:87:00:ff:35:19:e3:26:76:7a:c1:5a: d3:05:80:78:86:37:43:aa:00:6b:2b:58:67:0c:e8: 1e:b0:38:8c:12:60:b3:f6:77:ec:1f:d3:dc:19:a6: 2f:4a:6f:b8:88:d8:75:27:0a:78:68:fc:8a:dc:bf: f6:74:6a:55:06:d6:2a:55:ad:81:87:4e:13:4d:1c: 02:ce:9e:24:8c:f1:da:07:bb:ea:77:10:f4:d8:7f: 69:ab:80:fd:cb:cf:06:c1:35:7c:13:af:06:61:34: 2a:72:63:3b:3c:55:bf:1f:8c:b4:2d:a7:0b:32:26: 53:4b:cc:c8:8e:0b:21:23:8f:28:38:fe:7b:bc:8d: 29:7b:c5:48:0f:b1:e3:b9:6a:0c:c6:f7:3f:3b:bb: 38:76:25:b5:5c:b7:b3:b4:44:13:e6:81:e9:a8:6c: d1:aa:a1:3d:ce:9c:30:9f:8c:7f:76:b6:aa:c7:b8: d0:68:f9:1b:a2:6d:74:a1:b1:53:17:b7:06:48:c7: 37:32:a1:b0:94:2e:fa:54:ea:17:1d:44:9a:75:c0: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EA:34:E3:0A:39:B4:E9:DA:6C:77:2D:5D:2C:1E:06:68:E6:B0:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef/4ab620dc-8a2e-4e97-b3cd-f95f8317bdef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 74.114.16.0/21 165.140.172.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53820 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:17:44:9a:14:62:98:95:89:3d:96:95:3c:68:ca:27:bb:5b: 14:18:76:92:c3:f6:34:65:9a:e7:a3:4b:9d:cc:8c:c0:da:ae: 0f:e8:6e:3e:29:c5:b3:8d:88:56:15:71:74:7f:54:d8:76:cb: cb:c6:f1:8e:39:5e:d7:f2:ad:09:b2:54:0c:1c:91:72:4b:2e: c1:e4:d3:63:39:63:ba:e5:a3:90:90:fe:a2:69:f3:13:08:dd: 7d:96:68:9e:52:7c:1c:d6:5e:8b:2e:95:2e:47:9b:7d:c2:99: 93:4c:9e:f9:07:90:16:ab:e0:d9:fa:76:25:5a:3f:f4:45:77: b9:ce:c8:ae:7a:fd:14:30:2b:87:2f:aa:c6:41:b9:1c:3a:81: 1e:ef:25:a2:05:3d:81:ed:0d:ec:33:95:84:76:05:a2:ca:fd: 00:76:f7:42:ce:c7:8a:10:40:7b:21:40:6d:c7:c5:e8:f9:d8: 0e:4f:29:9e:6b:c4:30:ad:6e:6d:2f:58:c0:0f:90:81:3b:52: 7d:3c:2a:39:88:b6:f2:d2:02:4d:fb:27:a1:7e:77:9c:db:07: f4:b6:a2:98:ae:ea:e4:e8:6a:1e:8a:08:79:0e:7e:78:e2:46: f2:a8:95:10:13:d3:27:b0:ec:ac:b7:8e:86:bc:84:87:f3:22: 38:9a:1d:e3 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE2urAolDb3b8lEUt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQzMDIxMzg1MloXDTI4MDgwMjIxMzg1MlowLzEtMCsGA1UEAxMk NGFiNjIwZGMtOGEyZS00ZTk3LWIzY2QtZjk1ZjgzMTdiZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9XNMNswi8bvPLRItiBSeFYGm1NHdLVxm/0P I7rVOT4t2NFvHFFM6m/YT538cy81hwD/NRnjJnZ6wVrTBYB4hjdDqgBrK1hnDOge sDiMEmCz9nfsH9PcGaYvSm+4iNh1Jwp4aPyK3L/2dGpVBtYqVa2Bh04TTRwCzp4k jPHaB7vqdxD02H9pq4D9y88GwTV8E68GYTQqcmM7PFW/H4y0LacLMiZTS8zIjgsh I48oOP57vI0pe8VID7HjuWoMxvc/O7s4diW1XLeztEQT5oHpqGzRqqE9zpwwn4x/ draqx7jQaPkbom10obFTF7cGSMc3MqGwlC76VOoXHUSadcDtXwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFOrqNOMKObTp2mx3LV0sHgZo5rD3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 YWI2MjBkYy04YTJlLTRlOTctYjNjZC1mOTVmODMxN2JkZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzRhYjYyMGRjLThhMmUtNGU5Ny1i M2NkLWY5NWY4MzE3YmRlZi80YWI2MjBkYy04YTJlLTRlOTctYjNjZC1mOTVmODMx N2JkZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANKchADBAKljKwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANI8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH4XRJoUYpiViT2WlTxoyie7WxQYdpLD9jRlmuej S53MjMDarg/obj4pxbONiFYVcXR/VNh2y8vG8Y45XtfyrQmyVAwckXJLLsHk02M5 Y7rlo5CQ/qJp8xMI3X2WaJ5SfBzWXosulS5Hm33CmZNMnvkHkBar4Nn6diVaP/RF d7nOyK56/RQwK4cvqsZBuRw6gR7vJaIFPYHtDewzlYR2BaLK/QB290LOx4oQQHsh QG3Hxej52A5PKZ5rxDCtbm0vWMAPkIE7Un08KjmItvLSAk37J6F+d5zbB/S2opiu 6uToah6KCHkOfnjiRvKolRAT0yew7Ky3joa8hIfzIjiaHeM= -----END CERTIFICATE-----Generated at Sun May 10 01:41:57 2026 by rpki-client