$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer File: 5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer (raw, json) Hash identifier: MuOWOsRKRSkZUiBMIr/NDQqozCt9NN8ZwKlFpvjblqA= Subject key identifier: 8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DF92B5F4160281D7E432BDD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 May 2026 14:05:15 +0000 Certificate not after: Tue 29 Aug 2028 14:05:15 +0000 Subordinate resources: AS: 395825 IP: 207.229.85.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:2b:5f:41:60:28:1d:7e:43:2b:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 27 14:05:15 2026 GMT Not After : Aug 29 14:05:15 2028 GMT Subject: CN=5cc1ebaa-d0c9-4588-a688-29d18d2c9af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:47:03:82:40:89:29:98:16:03:2e:94:32: 18:36:a8:1b:e4:7e:7e:6a:2b:9b:3f:47:3d:a4:cc: c6:75:79:8f:04:16:89:3f:da:c1:53:c4:0f:07:40: 35:25:7e:42:48:65:3a:84:5f:46:8b:f9:74:75:82: f7:31:05:b1:a8:88:69:e0:5d:8c:b3:9b:f2:2f:72: fd:97:d4:3e:68:84:f9:97:33:ae:bf:9f:a0:50:c1: 25:ec:05:35:47:b6:c9:24:b5:99:26:dc:0f:53:fb: 58:f7:08:7f:8f:42:41:5f:18:3f:36:85:04:88:22: c7:cd:78:0a:3e:5b:ef:95:54:a6:f0:1a:a2:db:04: 79:55:fe:b0:41:a9:82:49:58:53:08:d8:4a:10:88: 11:74:95:8a:5f:5f:e1:55:a7:0f:94:94:f6:fb:d7: d6:b9:db:53:fb:af:a5:8b:e2:34:59:6f:c1:ec:65: 75:99:66:fb:de:c5:c9:12:4f:99:ed:37:65:c0:24: cf:dd:e2:8e:c7:d0:5e:7a:f1:81:09:7c:28:50:92: 57:91:64:f8:b6:ae:66:42:6c:b9:0c:77:dc:55:59: 8a:f9:36:2f:76:f1:9e:a6:48:a6:b2:b0:a7:08:ba: 04:b3:91:d5:dd:49:21:67:ff:05:a9:85:4b:c5:05: 81:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 207.229.85.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395825 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:f2:04:ea:4f:75:fd:e9:25:cd:7f:8e:48:2e:6b:53:23:55: a7:9c:79:62:13:b8:6e:38:01:de:fb:d9:de:d1:2e:ef:3e:bd: 8c:26:50:4c:46:4f:0f:af:a3:3b:5b:d7:24:77:ef:f2:06:10: cd:17:ff:2b:a2:34:87:82:89:0c:4d:e3:d9:f2:ed:3f:af:65: a8:6c:83:ff:3b:59:14:2a:77:7a:2f:75:bf:17:b5:2a:68:2a: 33:7d:c4:c1:49:aa:3c:74:b6:cd:8f:57:b8:28:4f:d7:a2:41: bd:75:35:03:e8:c6:88:99:d7:50:1f:af:a4:f2:21:03:c3:9b: a6:8a:dd:b9:de:f0:1a:44:7d:86:71:26:3a:cc:6c:1d:c1:ee: fd:40:56:d7:4c:b1:5b:56:cb:f6:cc:9d:76:d7:b8:6e:cb:7a: 82:a3:e8:ba:cc:dc:d6:43:b4:aa:96:ca:8b:4a:36:a4:1d:31: 9e:0f:79:e5:85:b1:96:2a:83:e0:a7:1e:ce:cf:ef:83:83:78: 7b:6c:8c:5d:1c:f5:d4:6b:62:cf:34:4a:f0:0f:b2:f5:cc:72: 4d:7d:7c:3c:f2:d9:3b:16:76:ae:6b:40:cb:89:58:82:93:64: 58:c9:94:25:78:09:bc:6a:a8:5c:70:e0:2d:32:58:40:69:35: af:99:0f:d2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE35K19BYCgdfkMr3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyNzE0MDUxNVoXDTI4MDgyOTE0MDUxNVowLzEtMCsGA1UEAxMk NWNjMWViYWEtZDBjOS00NTg4LWE2ODgtMjlkMThkMmM5YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWZHA4JAiSmYFgMulDIYNqgb5H5+aiubP0c9 pMzGdXmPBBaJP9rBU8QPB0A1JX5CSGU6hF9Gi/l0dYL3MQWxqIhp4F2Ms5vyL3L9 l9Q+aIT5lzOuv5+gUMEl7AU1R7bJJLWZJtwPU/tY9wh/j0JBXxg/NoUEiCLHzXgK PlvvlVSm8Bqi2wR5Vf6wQamCSVhTCNhKEIgRdJWKX1/hVacPlJT2+9fWudtT+6+l i+I0WW/B7GV1mWb73sXJEk+Z7TdlwCTP3eKOx9BeevGBCXwoUJJXkWT4tq5mQmy5 DHfcVVmK+TYvdvGepkimsrCnCLoEs5HV3UkhZ/8FqYVLxQWBXwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIxX81xvgvexaKoTTJI6G0SBUSxGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 Y2MxZWJhYS1kMGM5LTQ1ODgtYTY4OC0yOWQxOGQyYzlhZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVjYzFlYmFhLWQwYzktNDU4OC1h Njg4LTI5ZDE4ZDJjOWFmNi81Y2MxZWJhYS1kMGM5LTQ1ODgtYTY4OC0yOWQxOGQy YzlhZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADP5VUwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgoxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALfyBOpPdf3pJc1/jkgua1MjVaeceWITuG44Ad772d7RLu8+ vYwmUExGTw+voztb1yR37/IGEM0X/yuiNIeCiQxN49ny7T+vZahsg/87WRQqd3ov db8XtSpoKjN9xMFJqjx0ts2PV7goT9eiQb11NQPoxoiZ11Afr6TyIQPDm6aK3bne 8BpEfYZxJjrMbB3B7v1AVtdMsVtWy/bMnXbXuG7LeoKj6LrM3NZDtKqWyotKNqQd MZ4PeeWFsZYqg+CnHs7P74ODeHtsjF0c9dRrYs80SvAPsvXMck19fDzy2TsWdq5r QMuJWIKTZFjJlCV4CbxqqFxw4C0yWEBpNa+ZD9I= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:33 2026 by rpki-client