$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.cer File: 4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.cer (raw, json) Hash identifier: J1gQSdxR4bhziZ8kkv4+rROtQk/C1eiadM7P0lKFy5I= Subject key identifier: C8:B5:A3:2A:38:F4:E4:57:CD:0F:DA:AE:EF:AC:98:E5:B1:F8:EE:6A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD953F961C0AFA134C3C90540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 May 2026 04:21:11 +0000 Certificate not after: Fri 18 Aug 2028 04:21:11 +0000 Subordinate resources: AS: 1088 IP: 147.185.187.0/24 IP: 167.94.99.0/24 IP: 2606:ea40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d9:53:f9:61:c0:af:a1:34:c3:c9:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 16 04:21:11 2026 GMT Not After : Aug 18 04:21:11 2028 GMT Subject: CN=4ee3b684-d7f1-42f2-a21a-5ab05734bf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:ae:c0:19:47:91:a6:8a:4d:9b:d7:bf:4b: b0:60:19:b9:f3:ea:b1:de:b3:fa:e5:d0:0d:a7:b8: ea:1a:f9:fc:6f:20:ce:0c:41:39:76:d6:fa:6d:31: 71:61:81:23:a9:b2:4c:24:a4:07:8f:cd:f5:83:6e: 76:32:c1:04:68:ce:c3:62:79:1f:55:57:c9:0c:22: 1e:f0:9c:aa:92:23:aa:13:25:c0:82:e8:43:eb:28: 42:1d:11:bc:1f:79:d6:80:e2:62:81:e9:32:56:a4: 7b:ef:56:af:8f:be:e3:ca:96:db:ff:07:0f:90:77: 9d:c6:2c:63:d3:40:7b:b3:7b:f0:8e:49:cf:4b:6d: 49:f9:2a:c3:c8:4d:ba:34:cf:f5:2d:2b:e8:63:21: 84:3d:4c:a3:29:53:5e:40:a3:51:bc:d8:fb:05:25: 0b:c4:b8:65:b0:29:d7:9d:82:d7:b1:b8:4f:2e:13: c8:f6:d2:b5:be:8f:b3:87:0d:99:a8:bb:a2:7f:1b: 2b:c8:1f:8c:19:77:64:1f:b0:94:dc:49:18:91:c0: fc:10:0b:51:c0:2d:d8:ac:2c:32:cd:32:50:f9:ef: cb:36:bd:c6:fb:12:eb:71:bc:b5:17:20:63:a6:e8: d9:97:5e:bf:d0:23:13:e1:d2:42:f0:d5:b5:45:74: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B5:A3:2A:38:F4:E4:57:CD:0F:DA:AE:EF:AC:98:E5:B1:F8:EE:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f/4ee3b684-d7f1-42f2-a21a-5ab05734bf7f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 147.185.187.0/24 167.94.99.0/24 IPv6: 2606:ea40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:90:ce:30:6b:ee:56:cc:0b:58:b7:09:ec:94:8c:f9:91:9c: 1a:b3:30:b8:8d:1c:9a:ff:42:bf:cf:a1:5d:5e:e7:c3:4a:a8: 26:8c:c9:d6:f4:cb:e5:29:fd:d7:2e:11:93:63:cd:35:58:7f: b7:f2:21:cc:06:b3:c5:6f:ef:ca:f9:ff:fd:3d:51:d7:8b:b5: 19:6b:87:f2:f5:c4:6c:bd:3e:55:47:03:62:df:30:bf:6f:7b: 24:49:0e:90:51:06:7e:16:d3:08:13:d5:fd:37:69:ce:6c:19: 38:69:e4:91:68:61:4a:21:d2:d5:e1:4b:43:76:5a:a2:64:65: eb:55:33:6c:f5:88:95:0e:1d:dc:1a:fd:1f:63:1f:f4:75:ce: 9f:54:bd:f7:6e:20:1f:9b:93:5a:d8:6f:e7:7e:26:13:41:ec: 17:50:17:75:ec:84:7f:74:03:fe:30:b9:f3:9a:1a:ce:44:2a: 45:5b:87:35:06:2c:2f:5e:51:e0:c5:36:3d:83:d4:8a:05:7f: 7c:2f:1d:c1:81:f3:0c:9d:8c:53:8b:ae:82:1f:68:0b:8c:81: 27:a0:b7:36:a7:62:54:a7:0d:af:77:81:8c:5e:50:b7:3c:c1: 9b:c8:0e:ad:b1:f8:b0:48:82:91:95:b8:23:96:45:b4:66:34: b7:ea:63:56 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE3ZU/lhwK+hNMPJBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNjA0MjExMVoXDTI4MDgxODA0MjExMVowLzEtMCsGA1UEAxMk NGVlM2I2ODQtZDdmMS00MmYyLWEyMWEtNWFiMDU3MzRiZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjuuwBlHkaaKTZvXv0uwYBm58+qx3rP65dAN p7jqGvn8byDODEE5dtb6bTFxYYEjqbJMJKQHj831g252MsEEaM7DYnkfVVfJDCIe 8JyqkiOqEyXAguhD6yhCHRG8H3nWgOJigekyVqR771avj77jypbb/wcPkHedxixj 00B7s3vwjknPS21J+SrDyE26NM/1LSvoYyGEPUyjKVNeQKNRvNj7BSULxLhlsCnX nYLXsbhPLhPI9tK1vo+zhw2ZqLuifxsryB+MGXdkH7CU3EkYkcD8EAtRwC3YrCwy zTJQ+e/LNr3G+xLrcby1FyBjpujZl16/0CMT4dJC8NW1RXRPywIDAQABo4IELzCC BCswHQYDVR0OBBYEFMi1oyo49ORXzQ/aru+smOWx+O5qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 ZWUzYjY4NC1kN2YxLTQyZjItYTIxYS01YWIwNTczNGJmN2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzRlZTNiNjg0LWQ3ZjEtNDJmMi1h MjFhLTVhYjA1NzM0YmY3Zi80ZWUzYjY4NC1kN2YxLTQyZjItYTIxYS01YWIwNTcz NGJmN2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACTubsDBACnXmMwDQQCAAIwBwMFACYG6kAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICBEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJZDOMGvuVswLWLcJ7JSM +ZGcGrMwuI0cmv9Cv8+hXV7nw0qoJozJ1vTL5Sn91y4Rk2PNNVh/t/IhzAazxW/v yvn//T1R14u1GWuH8vXEbL0+VUcDYt8wv297JEkOkFEGfhbTCBPV/TdpzmwZOGnk kWhhSiHS1eFLQ3ZaomRl61UzbPWIlQ4d3Br9H2Mf9HXOn1S9924gH5uTWthv534m E0HsF1AXdeyEf3QD/jC585oazkQqRVuHNQYsL15R4MU2PYPUigV/fC8dwYHzDJ2M U4uugh9oC4yBJ6C3NqdiVKcNr3eBjF5QtzzBm8gOrbH4sEiCkZW4I5ZFtGY0t+pj Vg== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:30 2026 by rpki-client