$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer File: 53e52220-fa56-4913-b008-c1121580f510.cer (raw, json) Hash identifier: heakoWeaYYn3B38F8Xh+gBEPmELRGtkO/3u3sKIOADo= Subject key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E0C680F6ED2257DEBE7E02800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jun 2026 11:27:53 +0000 Certificate not after: Tue 05 Sep 2028 11:27:53 +0000 Subordinate resources: AS: 10530 AS: 11908 IP: 64.110.51.0 -- 64.110.63.255 IP: 64.110.140.0/22 IP: 64.110.148.0 -- 64.110.152.255 IP: 64.110.154.0 -- 64.110.191.255 IP: 66.133.0.0 -- 66.133.5.255 IP: 66.133.7.0/24 IP: 66.133.9.0 -- 66.133.12.255 IP: 66.133.14.0 -- 66.133.56.255 IP: 66.133.60.0/22 IP: 209.198.216.0 -- 209.198.239.255 IP: 209.198.248.0/21 IP: 216.226.200.0 -- 216.226.255.255 IP: 216.252.128.0/20 IP: 216.252.152.0 -- 216.252.154.255 IP: 216.252.156.0 -- 216.252.160.255 IP: 2604:5700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:68:0f:6e:d2:25:7d:eb:e7:e0:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 3 11:27:53 2026 GMT Not After : Sep 5 11:27:53 2028 GMT Subject: CN=53e52220-fa56-4913-b008-c1121580f510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:92:40:ce:e7:65:b0:70:91:cd:23:92:0e: d7:08:ae:97:99:66:4d:3f:f7:b0:ab:d1:76:30:4f: 99:a1:aa:46:be:72:96:d0:b7:17:8e:a8:b6:6c:5d: 45:07:e8:26:c8:39:96:c4:ab:e2:96:3e:31:a8:f0: 41:20:87:94:75:e0:66:9b:9a:64:05:b7:1f:45:47: cb:61:ca:bf:fa:e7:11:7c:c8:59:88:27:04:b4:77: d7:ec:1d:c5:bb:4b:ee:f6:4c:6b:be:e8:e1:32:6c: 45:4a:ce:07:26:32:99:89:1d:96:57:5d:2d:bf:a2: 2c:61:97:16:8c:09:ba:1c:03:c9:e1:ed:86:d2:98: 03:56:22:f3:25:84:38:fa:f7:07:f3:e2:3a:0e:01: 74:bf:f4:6e:b1:ca:2c:70:95:53:a5:6f:f5:10:b2: 62:e4:e9:03:88:d9:49:90:de:4b:23:c6:46:ef:cc: 32:fd:0b:76:0e:20:cd:70:a2:14:5c:15:fb:d7:5a: 7a:44:58:31:54:c8:d6:08:dd:29:83:5f:09:e4:24: eb:b9:4a:a2:f9:1b:c4:7b:f1:3b:28:46:03:20:5f: 8a:09:68:b0:f2:aa:7d:9c:25:5b:de:ff:d3:ca:34: 3c:39:98:2f:dd:96:e0:d8:47:d3:c3:19:28:a5:80: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.110.51.0-64.110.63.255 64.110.140.0/22 64.110.148.0-64.110.152.255 64.110.154.0-64.110.191.255 66.133.0.0-66.133.5.255 66.133.7.0/24 66.133.9.0-66.133.12.255 66.133.14.0-66.133.56.255 66.133.60.0/22 209.198.216.0-209.198.239.255 209.198.248.0/21 216.226.200.0-216.226.255.255 216.252.128.0/20 216.252.152.0-216.252.154.255 216.252.156.0-216.252.160.255 IPv6: 2604:5700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10530 11908 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:79:0d:00:b7:09:99:da:e3:d5:f6:b0:37:ab:06:d5:66:cb: 83:76:1e:51:64:3f:89:b4:59:dd:c1:51:38:3d:cf:3d:04:15: f9:49:5f:6f:5b:23:18:da:46:a8:6d:61:e8:27:4b:cb:7b:fa: 11:43:56:a7:f9:33:e2:48:70:a4:bb:9d:41:39:4b:92:01:83: de:e5:d3:d8:91:d2:3b:ee:f5:b3:ee:29:aa:34:53:e1:44:2b: 5f:00:52:3c:8c:da:23:54:92:60:8e:e7:53:ab:02:4e:ef:6a: 23:4a:36:13:38:b2:52:1e:b0:21:e6:19:33:0d:39:08:56:bb: 00:1a:0e:b5:9c:d3:d3:aa:1b:9c:b7:22:fa:e2:a1:ec:66:a8: e1:3e:c6:cf:bf:a4:33:b9:2c:cf:7d:37:ba:0f:41:82:de:05: b1:35:06:b3:a1:c2:12:55:1e:54:be:c3:d5:31:b0:b0:73:e5: f7:0b:41:c5:6f:b3:d1:86:3d:32:52:49:49:cc:08:eb:6c:15: a7:bc:c5:6c:aa:a9:7a:0e:6b:cd:e2:3d:cf:21:e7:a0:d7:66: 2a:22:a7:fe:0f:be:4b:bf:03:0d:12:75:c1:ac:d9:8e:da:0f: b4:9e:d7:c5:aa:dd:b9:5f:9f:3f:f3:97:1c:ee:fd:c3:c8:76: 9a:d2:0b:ef -----BEGIN CERTIFICATE----- MIIHwjCCBqqgAwIBAgIUAQ0Mn0MoWE4MaA9u0iV96+fgKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwMzExMjc1M1oXDTI4MDkwNTExMjc1M1owLzEtMCsGA1UEAxMk NTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBmNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDySQM7nZbBwkc0jkg7XCK6XmWZNP/ewq9F2 ME+ZoapGvnKW0LcXjqi2bF1FB+gmyDmWxKvilj4xqPBBIIeUdeBmm5pkBbcfRUfL Ycq/+ucRfMhZiCcEtHfX7B3Fu0vu9kxrvujhMmxFSs4HJjKZiR2WV10tv6IsYZcW jAm6HAPJ4e2G0pgDViLzJYQ4+vcH8+I6DgF0v/RuscoscJVTpW/1ELJi5OkDiNlJ kN5LI8ZG78wy/Qt2DiDNcKIUXBX711p6RFgxVMjWCN0pg18J5CTruUqi+RvEe/E7 KEYDIF+KCWiw8qp9nCVb3v/TyjQ8OZgv3Zbg2EfTwxkopYCbWQIDAQABo4IE1DCC BNAwHQYDVR0OBBYEFLbICGuA9TIAVnoxO3xYcqpEC7g1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzUzZTUyMjIwLWZhNTYtNDkxMy1i MDA4LWMxMTIxNTgwZjUxMC81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4 MGY1MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwgdQGCCsGAQUF BwEHAQH/BIHEMIHBMIGvBAIAATCBqDAMAwQAQG4zAwQGQG4AAwQCQG6MMAwDBAJA bpQDBABAbpgwDAMEAUBumgMEBkBugDALAwMAQoUDBAFChQQDBABChQcwDAMEAEKF CQMEAEKFDDAMAwQBQoUOAwQAQoU4AwQCQoU8MAwDBAPRxtgDBATRxuADBAPRxvgw CwMEA9jiyAMDANjiAwQE2PyAMAwDBAPY/JgDBADY/JowDAMEAtj8nAMEANj8oDAN BAIAAjAHAwUAJgRXADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIpIgICLoQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAenkNALcJmdrj1fawN6sG1WbLg3YeUWQ/ibRZ3cFROD3PPQQV+Ulfb1sj GNpGqG1h6CdLy3v6EUNWp/kz4khwpLudQTlLkgGD3uXT2JHSO+71s+4pqjRT4UQr XwBSPIzaI1SSYI7nU6sCTu9qI0o2EziyUh6wIeYZMw05CFa7ABoOtZzT06obnLci +uKh7Gao4T7Gz7+kM7ksz303ug9Bgt4FsTUGs6HCElUeVL7D1TGwsHPl9wtBxW+z 0YY9MlJJScwI62wVp7zFbKqpeg5rzeI9zyHnoNdmKiKn/g++S78DDRJ1wazZjtoP tJ7XxarduV+fP/OXHO79w8h2mtIL7w== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:25 2026 by rpki-client