$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6ca0eb29-30bc-4e7e-b9dd-5cb141f98775.cer File: 6ca0eb29-30bc-4e7e-b9dd-5cb141f98775.cer (raw, json) Hash identifier: e9eTe3cImtAl5HbQZc1KPhlCT0UNa1JUJpygnXaDEX0= Subject key identifier: 96:74:5A:F3:0C:7B:9D:01:BB:4B:B2:D4:6E:1A:BB:48:AC:19:63:6E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2FD97AB87B75F0FC65EA400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6ca0eb29-30bc-4e7e-b9dd-5cb141f98775/6ca0eb29-30bc-4e7e-b9dd-5cb141f98775.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6ca0eb29-30bc-4e7e-b9dd-5cb141f98775/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 21:52:17 +0000 Certificate not after: Tue 15 Aug 2028 21:52:17 +0000 Subordinate resources: AS: 16704 IP: 69.194.154.0/23 IP: 2602:f746::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:fd:97:ab:87:b7:5f:0f:c6:5e:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 21:52:17 2026 GMT Not After : Aug 15 21:52:17 2028 GMT Subject: CN=6ca0eb29-30bc-4e7e-b9dd-5cb141f98775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:7d:4c:09:9f:90:2d:a7:67:37:6e:ea:3c: 35:75:7c:96:d7:80:82:a5:48:2f:6d:e9:57:9b:fa: b6:60:cb:5f:3d:8d:54:bb:03:f4:61:c9:bb:40:49: cd:55:7a:f8:f3:dc:fa:b1:95:fd:27:3f:0a:a8:99: 9b:46:f9:e1:a3:75:e2:85:05:10:21:3c:d7:ba:a2: ad:c9:a0:49:46:cf:a9:05:c3:89:b9:10:b2:8e:ee: 84:c4:a8:e6:28:04:00:54:a1:92:c8:f3:6d:9e:3c: 71:6d:35:8d:ae:91:eb:b4:d0:80:55:db:64:2a:d4: 5a:7e:1b:62:d9:28:f6:56:c3:fa:22:bc:4f:6a:ad: 0c:b6:a7:09:95:cf:65:04:85:66:05:6d:1e:61:22: ac:05:51:05:4b:9b:bc:08:12:99:5f:91:5e:7f:dd: af:41:f5:ca:1b:64:d3:01:44:ac:e1:38:b2:e9:f8: 00:58:20:c2:5f:41:90:17:98:d0:8a:0f:4c:de:e4: 83:6e:a2:13:fb:81:51:cb:97:d6:6f:1d:64:78:c7: 15:cb:44:36:10:22:25:d5:03:36:7c:e6:77:fe:9c: dc:94:c9:99:a7:97:e2:08:c6:74:47:69:7e:71:b4: fc:43:c7:2c:77:a2:c3:91:38:39:53:37:9c:ff:9b: b5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:74:5A:F3:0C:7B:9D:01:BB:4B:B2:D4:6E:1A:BB:48:AC:19:63:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6ca0eb29-30bc-4e7e-b9dd-5cb141f98775/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6ca0eb29-30bc-4e7e-b9dd-5cb141f98775/6ca0eb29-30bc-4e7e-b9dd-5cb141f98775.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 69.194.154.0/23 IPv6: 2602:f746::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16704 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:c5:95:52:8b:10:bb:6f:df:f7:d5:82:0f:05:d6:7e:90:3e: f4:e0:76:a7:3a:5c:3d:d6:15:6b:9d:f5:16:f9:31:dd:c0:0c: 72:19:83:cd:6f:67:e6:7d:f3:4d:f1:7f:a5:e8:6b:86:55:18: c9:b8:43:88:6e:2c:4b:6a:23:82:1e:a5:e6:37:65:75:0e:a4: c4:8a:c8:7a:68:78:c4:4e:10:ed:0f:4a:ba:48:3c:09:b4:d7: 3a:c9:84:82:96:26:1c:2c:3b:ff:e1:84:e3:1f:f6:54:ac:13: c4:4a:9c:cd:52:67:af:c1:83:72:22:a6:22:d1:8a:00:69:3e: 61:9c:90:7f:b1:4d:e7:6b:56:4b:db:84:5e:2c:9e:10:7f:7e: 51:61:26:1e:c9:1b:0e:3d:a4:d7:8d:80:20:f2:f9:3d:f0:18: c0:2a:6f:48:41:23:be:25:80:4a:77:ac:f7:32:78:d9:b2:bd: ee:e8:ca:7e:01:e3:e6:64:47:15:71:31:39:01:3a:2e:84:ae: 74:90:79:f0:c8:db:3c:38:d3:fd:b5:2e:b0:32:65:88:2d:96: 9e:cb:f6:fa:3c:e3:c6:d7:b6:35:24:d6:ed:26:88:6a:f2:45: b8:7f:8c:e6:60:4f:f2:a9:b7:c1:64:71:6a:0f:98:12:13:4c: 19:0b:1d:72 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE3S/Zerh7dfD8ZepAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzIxNTIxN1oXDTI4MDgxNTIxNTIxN1owLzEtMCsGA1UEAxMk NmNhMGViMjktMzBiYy00ZTdlLWI5ZGQtNWNiMTQxZjk4Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cJ9TAmfkC2nZzdu6jw1dXyW14CCpUgvbelX m/q2YMtfPY1UuwP0Ycm7QEnNVXr489z6sZX9Jz8KqJmbRvnho3XihQUQITzXuqKt yaBJRs+pBcOJuRCyju6ExKjmKAQAVKGSyPNtnjxxbTWNrpHrtNCAVdtkKtRafhti 2Sj2VsP6IrxPaq0MtqcJlc9lBIVmBW0eYSKsBVEFS5u8CBKZX5Fef92vQfXKG2TT AUSs4Tiy6fgAWCDCX0GQF5jQig9M3uSDbqIT+4FRy5fWbx1keMcVy0Q2ECIl1QM2 fOZ3/pzclMmZp5fiCMZ0R2l+cbT8Q8csd6LDkTg5Uzec/5u1sQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJZ0WvMMe50Bu0uy1G4au0isGWNuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 Y2EwZWIyOS0zMGJjLTRlN2UtYjlkZC01Y2IxNDFmOTg3NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzZjYTBlYjI5LTMwYmMtNGU3ZS1i OWRkLTVjYjE0MWY5ODc3NS82Y2EwZWIyOS0zMGJjLTRlN2UtYjlkZC01Y2IxNDFm OTg3NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAFFwpowDgQCAAIwCAMGBCYC90YAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMDFlVKLELtv3/fVgg8F1n6QPvTg dqc6XD3WFWud9Rb5Md3ADHIZg81vZ+Z9803xf6Xoa4ZVGMm4Q4huLEtqI4IepeY3 ZXUOpMSKyHpoeMROEO0PSrpIPAm01zrJhIKWJhwsO//hhOMf9lSsE8RKnM1SZ6/B g3IipiLRigBpPmGckH+xTedrVkvbhF4snhB/flFhJh7JGw49pNeNgCDy+T3wGMAq b0hBI74lgEp3rPcyeNmyve7oyn4B4+ZkRxVxMTkBOi6ErnSQefDI2zw40/21LrAy ZYgtlp7L9vo848bXtjUk1u0miGryRbh/jOZgT/Kpt8FkcWoPmBITTBkLHXI= -----END CERTIFICATE-----Generated at Mon May 25 07:54:16 2026 by rpki-client