$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer File: 53e58d27-0260-41c6-8a7b-df289923ed1e.cer (raw, json) Hash identifier: vV60XeKROs6KAqSmFi43TlrzjM8wXIz/Kt3dibvY5aw= Subject key identifier: 44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2BADCAF2570D5E9C70B3420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 19:37:50 +0000 Certificate not after: Tue 15 Aug 2028 19:37:50 +0000 Subordinate resources: IP: 139.151.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:ba:dc:af:25:70:d5:e9:c7:0b:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 19:37:50 2026 GMT Not After : Aug 15 19:37:50 2028 GMT Subject: CN=53e58d27-0260-41c6-8a7b-df289923ed1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:11:32:66:3a:8f:46:60:f3:70:c7:72:98: b0:1b:5b:9b:02:dd:88:42:90:b6:07:b5:16:bb:33: 3f:26:b8:e0:b0:0b:d9:cc:93:e5:32:65:a0:ae:53: 27:a1:9e:18:d8:1e:14:71:f7:28:bc:0c:19:9d:0e: 35:5d:b4:2b:d8:71:14:31:60:99:0f:82:38:5c:69: 7c:bb:89:3d:07:30:95:bb:5c:a6:94:90:b3:57:17: 0f:22:40:33:61:b2:59:d6:c9:79:82:d2:6e:84:cb: de:26:ba:9d:dc:c7:b8:9c:72:f1:70:10:62:a5:5b: 7d:5d:90:a8:5c:c3:33:91:ee:ed:a4:ac:20:79:de: 3a:0b:6a:83:90:7b:94:4e:84:ad:ad:b6:af:ce:bd: 00:45:b7:8b:45:12:25:06:0c:7e:b5:ca:42:86:d8: 50:d5:c1:08:05:27:59:43:2f:7b:ff:20:fa:bb:6d: 89:8d:bb:78:fe:42:06:10:dc:4d:73:39:eb:db:c6: 9f:21:64:d6:dc:75:0b:d6:a7:2a:97:9f:36:5c:61: ec:49:9e:b0:ef:51:e3:02:d7:bc:87:1e:8f:e3:a5: c6:90:1b:c1:e3:a0:9b:b6:22:ff:5f:fb:fb:bf:4b: 2f:b8:0d:23:01:0a:13:5d:e2:db:47:0c:41:e6:b8: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 139.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:79:76:10:ea:06:66:26:ae:ea:fe:02:e1:21:01:2d:58:15: c5:d4:e3:3d:82:8a:b4:d6:64:c8:22:9e:58:17:e3:32:fb:8f: 90:96:4c:9f:31:97:0c:d9:1f:dd:8e:bc:38:e8:14:50:1e:81: 44:cf:37:de:7c:f8:f1:52:f9:0e:3c:ba:b1:90:c9:3a:50:3b: 31:d8:29:0d:32:ef:90:b8:49:13:e5:82:25:7f:2e:f4:8c:83: 46:b6:59:0f:36:3e:32:88:6b:eb:5a:5e:2f:f6:7f:36:06:0e: 1f:e6:07:79:24:80:68:e7:65:eb:a3:3a:0a:4c:f9:17:ed:df: a5:db:7a:be:8e:d8:37:7b:7e:b2:02:9d:c7:ce:9a:1f:b1:44: ed:ae:f0:c2:c4:f7:a0:e9:a3:37:b0:db:42:d9:69:85:81:4f: 41:6b:dc:eb:95:f4:c6:cc:51:c5:3c:b3:d8:81:3c:aa:b0:dc: c0:a3:7a:b2:18:c9:44:ca:b5:b7:8b:d1:13:ce:d2:01:d8:93: 4d:39:8f:e2:32:08:b7:b1:fa:f4:89:64:d1:2d:44:6f:a8:ff: fb:3a:b3:0b:79:97:f1:1b:88:6c:21:46:18:26:52:e4:fa:91: ee:3c:08:b7:70:74:f9:6b:66:b6:37:f7:7d:5f:30:0b:dc:91: c4:87:2f:6d -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE3SutyvJXDV6ccLNCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzE5Mzc1MFoXDTI4MDgxNTE5Mzc1MFowLzEtMCsGA1UEAxMk NTNlNThkMjctMDI2MC00MWM2LThhN2ItZGYyODk5MjNlZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKwRMmY6j0Zg83DHcpiwG1ubAt2IQpC2B7UW uzM/JrjgsAvZzJPlMmWgrlMnoZ4Y2B4UcfcovAwZnQ41XbQr2HEUMWCZD4I4XGl8 u4k9BzCVu1ymlJCzVxcPIkAzYbJZ1sl5gtJuhMveJrqd3Me4nHLxcBBipVt9XZCo XMMzke7tpKwged46C2qDkHuUToStrbavzr0ARbeLRRIlBgx+tcpChthQ1cEIBSdZ Qy97/yD6u22Jjbt4/kIGENxNcznr28afIWTW3HUL1qcql582XGHsSZ6w71HjAte8 hx6P46XGkBvB46CbtiL/X/v7v0svuA0jAQoTXeLbRwxB5rgQuQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFETKpB/u/FnHHQEoiXWGMsVi279ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 M2U1OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4OTkyM2VkMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzUzZTU4ZDI3LTAyNjAtNDFjNi04 YTdiLWRmMjg5OTIzZWQxZS81M2U1OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4OTky M2VkMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCLlzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCeXYQ6gZmJq7q/gLhIQEt WBXF1OM9goq01mTIIp5YF+My+4+QlkyfMZcM2R/djrw46BRQHoFEzzfefPjxUvkO PLqxkMk6UDsx2CkNMu+QuEkT5YIlfy70jINGtlkPNj4yiGvrWl4v9n82Bg4f5gd5 JIBo52XrozoKTPkX7d+l23q+jtg3e36yAp3HzpofsUTtrvDCxPeg6aM3sNtC2WmF gU9Ba9zrlfTGzFHFPLPYgTyqsNzAo3qyGMlEyrW3i9ETztIB2JNNOY/iMgi3sfr0 iWTRLURvqP/7OrMLeZfxG4hsIUYYJlLk+pHuPAi3cHT5a2a2N/d9XzAL3JHEhy9t -----END CERTIFICATE-----Generated at Tue Jun 2 21:39:27 2026 by rpki-client