$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer File: 865141a9-b215-47ce-b5f4-0c09bdeaba89.cer (raw, json) Hash identifier: VT8o8pH8op2PYMC1tETKBHzMCaTf+LBc9nUQR0t8jGM= Subject key identifier: EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2C4FC74615AC0CD4D2D4588 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 19:58:14 +0000 Certificate not after: Tue 15 Aug 2028 19:58:14 +0000 Subordinate resources: IP: 91.103.141.0/24 IP: 2604:28e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:c4:fc:74:61:5a:c0:cd:4d:2d:45:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 19:58:14 2026 GMT Not After : Aug 15 19:58:14 2028 GMT Subject: CN=865141a9-b215-47ce-b5f4-0c09bdeaba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:39:51:0b:7d:88:a2:e7:c3:4e:db:5b:e2: d5:cf:03:fe:89:bf:09:47:c2:be:ee:0e:a6:f4:ee: 9b:82:b2:69:f5:14:45:bc:2d:1c:b0:a0:c5:c3:f9: 9a:ec:93:e8:4b:6d:a9:3b:64:48:b8:2d:02:73:5e: 7f:c4:08:3a:6a:a4:27:2d:6d:fb:e2:e7:08:99:e5: f4:c0:d7:ce:4c:71:40:b2:ab:13:94:5b:59:bf:cd: 1d:c4:33:78:bd:0b:de:31:65:7a:8a:95:c2:00:d7: 58:7d:6d:21:4f:f6:45:6c:cb:ec:17:65:33:d1:99: b4:81:5b:2a:6d:17:d3:af:62:6f:fb:ab:42:1c:79: a9:62:25:21:29:ad:65:84:5c:af:56:f2:2a:83:71: a8:19:e3:6e:3f:a3:d3:81:28:e4:8d:6f:9a:84:7a: e9:05:e8:ab:38:88:f8:b2:fa:24:17:08:a8:31:12: f6:8d:5f:10:93:d2:cc:15:0d:af:45:e1:78:29:10: 3f:c5:7e:e2:f4:d1:38:c7:26:9f:06:b5:52:9a:75: 0a:e6:d9:1f:db:2f:13:d1:42:3e:95:3d:1c:09:c7: 22:1c:95:77:03:b7:df:0a:97:7e:94:ab:44:01:b4: 83:ac:a7:20:f0:d5:4c:59:1c:19:80:bc:88:5f:ec: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 91.103.141.0/24 IPv6: 2604:28e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2d:38:7a:66:99:98:76:03:ab:ad:7f:ce:6d:db:e4:6e:ea: 89:fb:2f:f0:2c:4a:f9:2e:f0:5b:e2:97:49:0e:f7:b7:b9:4c: 5b:f4:de:b8:61:bc:fa:a7:b2:00:de:45:13:c2:48:6d:06:93: 0f:2d:8f:87:09:59:34:77:75:08:f7:a3:e1:0a:48:bf:67:79: a9:9c:d4:97:bb:84:9d:28:97:ca:b5:fd:62:9d:ae:ad:3b:c1: 63:76:3b:43:2c:0a:31:17:32:a9:5e:76:2d:fa:6b:b3:f6:d3: e2:d4:a5:5f:07:a5:f7:8f:f0:5c:cf:e8:8e:d9:48:37:7c:02: 49:46:f5:b1:56:70:7f:57:ad:4f:6e:ae:8b:80:79:b1:36:b2: c6:9d:26:ec:65:d2:ef:c9:87:8b:bf:c2:47:12:11:81:d7:85: f1:6d:2b:74:ef:07:25:35:d3:01:6a:86:a1:9e:cb:33:ce:a9: fd:5c:99:b5:8c:2d:76:16:ed:53:5e:89:ad:d6:dd:4a:02:89: 1d:8f:16:08:e0:a5:4e:0d:a0:94:c4:55:6b:73:5c:b6:83:52: 69:f7:18:f9:04:d4:9e:71:e7:ce:fe:58:6b:33:09:be:92:2b: b4:d6:20:0d:0c:d7:e1:3e:f3:34:59:ed:db:ab:b3:b9:27:82: 4f:e0:b4:d0 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE3SxPx0YVrAzU0tRYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzE5NTgxNFoXDTI4MDgxNTE5NTgxNFowLzEtMCsGA1UEAxMk ODY1MTQxYTktYjIxNS00N2NlLWI1ZjQtMGMwOWJkZWFiYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOs5UQt9iKLnw07bW+LVzwP+ib8JR8K+7g6m 9O6bgrJp9RRFvC0csKDFw/ma7JPoS22pO2RIuC0Cc15/xAg6aqQnLW374ucImeX0 wNfOTHFAsqsTlFtZv80dxDN4vQveMWV6ipXCANdYfW0hT/ZFbMvsF2Uz0Zm0gVsq bRfTr2Jv+6tCHHmpYiUhKa1lhFyvVvIqg3GoGeNuP6PTgSjkjW+ahHrpBeirOIj4 svokFwioMRL2jV8Qk9LMFQ2vReF4KRA/xX7i9NE4xyafBrVSmnUK5tkf2y8T0UI+ lT0cCcciHJV3A7ffCpd+lKtEAbSDrKcg8NVMWRwZgLyIX+zIjwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFOz7npup+P+Ec6IrASZpMqryTWfqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 NjUxNDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5YmRlYWJhODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg2NTE0MWE5LWIyMTUtNDdjZS1i NWY0LTBjMDliZGVhYmE4OS84NjUxNDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5YmRl YWJhODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBABbZ40wDQQCAAIwBwMFACYEKOAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Ny04emaZmHYDq61/zm3b5G7qifsv8CxK+S7wW+KXSQ73t7lMW/TeuGG8+qeyAN5F E8JIbQaTDy2PhwlZNHd1CPej4QpIv2d5qZzUl7uEnSiXyrX9Yp2urTvBY3Y7QywK MRcyqV52Lfprs/bT4tSlXwel94/wXM/ojtlIN3wCSUb1sVZwf1etT26ui4B5sTay xp0m7GXS78mHi7/CRxIRgdeF8W0rdO8HJTXTAWqGoZ7LM86p/VyZtYwtdhbtU16J rdbdSgKJHY8WCOClTg2glMRVa3NctoNSafcY+QTUnnHnzv5YazMJvpIrtNYgDQzX 4T7zNFnt26uzuSeCT+C00A== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:32 2026 by rpki-client