$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122.cer File: 64849421-205d-4186-ad31-30e1d9a48122.cer (raw, json) Hash identifier: MtVp78vWcafkls/X3RIexGN4ooCOI8cyoVxxjJlZbW4= Subject key identifier: D4:0B:F0:75:62:FF:FD:A9:D3:6F:44:73:C5:42:18:67:AE:C9:ED:F3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE58C3D3027653D67FE1DA3E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/64849421-205d-4186-ad31-30e1d9a48122.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 13:24:15 +0000 Certificate not after: Tue 22 Aug 2028 13:24:15 +0000 Subordinate resources: IP: 159.222.0.0 -- 159.222.95.255 IP: 198.35.64.0 -- 198.35.111.255 IP: 198.36.72.0 -- 198.36.87.255 IP: 198.36.96.0/20 IP: 198.61.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:8c:3d:30:27:65:3d:67:fe:1d:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 20 13:24:15 2026 GMT Not After : Aug 22 13:24:15 2028 GMT Subject: CN=64849421-205d-4186-ad31-30e1d9a48122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:38:24:d5:75:e6:5d:56:38:e0:50:a4:4a:71: 14:98:4d:e7:59:38:af:3b:2c:60:d0:bf:5d:dd:36: c8:59:03:c2:19:fa:62:3e:c3:2c:e9:ec:be:ee:a5: b1:37:5c:52:6f:4e:de:aa:12:a2:19:e5:cf:66:e1: 0a:61:42:3c:e6:a5:cb:91:ca:67:48:6a:46:7c:1e: 1a:da:1d:81:af:76:f5:02:2d:32:1e:d1:7a:fb:ed: 87:0d:45:8c:6b:e4:5c:d1:4e:d3:1f:f9:70:fb:82: 65:dc:7f:cd:fb:07:62:0e:ef:eb:6e:a3:3d:60:ec: 8f:6c:e6:af:35:2c:60:00:70:fb:36:85:dd:c6:be: 49:dc:cf:42:58:01:2c:e6:eb:c0:8b:64:5b:4b:81: 70:8b:5d:70:b1:89:1f:d6:10:83:cc:95:e3:81:4e: 3b:50:7c:e9:ed:e8:33:e8:0f:15:00:fd:94:97:a5: 82:28:0f:d9:28:ff:28:5c:1b:1d:96:89:7d:ff:ef: 4f:d6:50:a5:27:11:c9:d6:4d:ec:de:54:62:98:c2: 61:b0:eb:41:bf:4d:33:c0:11:78:7f:21:0b:c4:3c: 8b:d4:a3:da:0c:b2:be:07:34:d6:c9:95:f4:2d:6e: 1a:06:38:89:d9:0d:af:a3:a9:11:60:d6:d9:18:fb: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0B:F0:75:62:FF:FD:A9:D3:6F:44:73:C5:42:18:67:AE:C9:ED:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64849421-205d-4186-ad31-30e1d9a48122/64849421-205d-4186-ad31-30e1d9a48122.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 159.222.0.0-159.222.95.255 198.35.64.0-198.35.111.255 198.36.72.0-198.36.87.255 198.36.96.0/20 198.61.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d7:52:80:a4:04:cd:7a:e0:d4:1a:d8:83:56:32:2e:09:34: b7:c0:87:e0:14:92:28:cb:f0:b8:05:c1:79:0d:01:cc:4c:ce: 38:92:6f:f7:eb:ab:29:2d:33:cf:2b:e5:8e:91:fe:07:d5:63: 02:86:00:ea:96:3f:67:9d:3e:04:e6:3f:0a:3f:a9:70:87:50: 02:a5:b8:b9:fd:fb:c0:d7:42:41:06:32:13:13:40:11:d7:49: 1c:2d:67:c5:4f:b0:f0:19:9d:19:4c:31:61:57:3e:58:c1:16: ca:3a:46:b7:ca:c1:76:20:8b:de:92:8e:ef:45:ae:19:b4:b8: d3:c1:f8:70:e1:65:f5:d1:4f:8e:62:46:c3:78:e4:fe:a6:34: 94:12:15:4d:16:7a:fa:23:7c:44:17:59:30:ef:05:97:d2:a1: d4:87:43:24:3d:ff:2c:34:59:ec:9c:95:da:b0:58:68:ec:e6: d5:e6:a7:b1:6a:4a:f8:17:c1:17:13:11:8a:e4:16:27:64:7a: 85:d5:ea:3a:82:7d:cb:9d:70:7e:2b:eb:de:cd:71:46:da:e5: 14:78:94:5b:50:dc:2b:38:86:6d:63:bc:b1:8b:2f:2b:7d:d7: 19:27:f2:a5:b5:33:e6:69:bd:27:2b:e6:10:e8:01:a3:4c:d9: 60:4c:32:a0 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWE3ljD0wJ2U9Z/4do+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMDEzMjQxNVoXDTI4MDgyMjEzMjQxNVowLzEtMCsGA1UEAxMk NjQ4NDk0MjEtMjA1ZC00MTg2LWFkMzEtMzBlMWQ5YTQ4MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jgk1XXmXVY44FCkSnEUmE3nWTivOyxg0L9d 3TbIWQPCGfpiPsMs6ey+7qWxN1xSb07eqhKiGeXPZuEKYUI85qXLkcpnSGpGfB4a 2h2Br3b1Ai0yHtF6++2HDUWMa+Rc0U7TH/lw+4Jl3H/N+wdiDu/rbqM9YOyPbOav NSxgAHD7NoXdxr5J3M9CWAEs5uvAi2RbS4Fwi11wsYkf1hCDzJXjgU47UHzp7egz 6A8VAP2Ul6WCKA/ZKP8oXBsdlol9/+9P1lClJxHJ1k3s3lRimMJhsOtBv00zwBF4 fyELxDyL1KPaDLK+BzTWyZX0LW4aBjiJ2Q2vo6kRYNbZGPuf3wIDAQABo4IELjCC BCowHQYDVR0OBBYEFNQL8HVi//2p029Ec8VCGGeuye3zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 NDg0OTQyMS0yMDVkLTQxODYtYWQzMS0zMGUxZDlhNDgxMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY0ODQ5NDIxLTIwNWQtNDE4Ni1h ZDMxLTMwZTFkOWE0ODEyMi82NDg0OTQyMS0yMDVkLTQxODYtYWQzMS0zMGUxZDlh NDgxMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MDsEAgABMDUwCwMDAZ/eAwQFn95AMAwDBAbGI0ADBATGI2AwDAME A8YkSAMEA8YkUAMEBMYkYAMEBMY9IDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd11KApATNeuDUGtiDVjIu CTS3wIfgFJIoy/C4BcF5DQHMTM44km/366spLTPPK+WOkf4H1WMChgDqlj9nnT4E 5j8KP6lwh1ACpbi5/fvA10JBBjITE0AR10kcLWfFT7DwGZ0ZTDFhVz5YwRbKOka3 ysF2IIveko7vRa4ZtLjTwfhw4WX10U+OYkbDeOT+pjSUEhVNFnr6I3xEF1kw7wWX 0qHUh0MkPf8sNFnsnJXasFho7ObV5qexakr4F8EXExGK5BYnZHqF1eo6gn3LnXB+ K+vezXFG2uUUeJRbUNwrOIZtY7yxiy8rfdcZJ/KltTPmab0nK+YQ6AGjTNlgTDKg -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:45 2026 by rpki-client