$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/890ca8f1-0558-4090-8de1-813324c7c445.cer File: 890ca8f1-0558-4090-8de1-813324c7c445.cer (raw, json) Hash identifier: qEZDXbvaXe7eKh8jI3dc9qQd3NuRIGwyHfhE0G10JgM= Subject key identifier: D5:8B:6B:C8:A8:7E:F4:95:91:E1:22:02:1F:FE:DA:DB:DA:AB:66:BC Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DDC96EC46B7D1739D1DEE4B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/890ca8f1-0558-4090-8de1-813324c7c445/890ca8f1-0558-4090-8de1-813324c7c445.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/890ca8f1-0558-4090-8de1-813324c7c445/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 May 2026 08:23:30 +0000 Certificate not after: Sat 19 Aug 2028 08:23:30 +0000 Subordinate resources: AS: 17088 AS: 62477 IP: 204.16.180.0/22 IP: 208.89.232.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dc:96:ec:46:b7:d1:73:9d:1d:ee:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 17 08:23:30 2026 GMT Not After : Aug 19 08:23:30 2028 GMT Subject: CN=890ca8f1-0558-4090-8de1-813324c7c445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:1f:18:cb:08:df:8b:83:e3:4e:95:bb:35: 0b:a0:d8:e5:c9:a1:54:0d:5c:8e:de:44:d5:f3:ab: 14:b1:e4:84:e7:15:c9:4a:0a:2a:c1:72:89:ac:7c: 55:0b:ae:22:91:c7:76:e1:45:11:04:9b:40:13:d7: 8a:7b:6b:53:0d:01:c5:8d:e8:b4:5a:34:56:8e:d9: 60:80:04:26:cb:1a:c4:f0:21:5f:77:56:36:64:89: cf:7c:6d:11:db:a0:e5:40:57:6e:94:74:2a:a4:94: e4:67:ad:8f:43:0e:a1:f2:2d:cf:d7:36:cd:2c:1f: 30:99:78:b3:b3:78:9f:74:ab:c1:d8:42:83:d6:36: 44:73:99:49:92:2d:cd:c4:03:27:ad:70:73:c6:ac: c4:6f:f2:c2:d0:f3:6e:d4:0e:cf:4d:88:a4:78:3e: ce:2d:fb:ed:ef:dd:e2:64:8d:cd:99:91:06:7e:c4: f0:55:f5:07:15:83:9e:82:41:e0:a0:bc:c6:7f:47: 7f:d8:0b:6e:00:1e:2b:a9:88:1d:9a:66:4b:99:cf: f2:37:da:80:6c:73:07:06:5b:ba:56:4c:74:b0:c7: e2:9b:44:d7:21:bd:f5:11:c3:5d:25:4c:1b:48:78: 04:e8:33:30:31:6e:cf:09:eb:78:4d:01:8d:42:9c: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8B:6B:C8:A8:7E:F4:95:91:E1:22:02:1F:FE:DA:DB:DA:AB:66:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/890ca8f1-0558-4090-8de1-813324c7c445/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/890ca8f1-0558-4090-8de1-813324c7c445/890ca8f1-0558-4090-8de1-813324c7c445.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 204.16.180.0/22 208.89.232.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17088 62477 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f2:a4:93:71:6f:f6:8c:6e:9a:20:2b:e6:7c:2c:85:88:a6: 01:68:c5:b9:6c:ba:4f:84:18:83:04:86:70:5e:28:9c:41:9a: 2f:18:e0:1f:ca:3a:6d:73:fc:26:6f:a1:f8:94:73:24:ec:c1: c4:0b:72:f9:68:5c:67:bd:03:7e:d0:8e:75:f4:f6:3c:2b:08: c7:45:7d:90:70:a2:8b:38:51:a6:70:ef:e3:ea:56:ff:09:5a: 41:a9:37:10:f2:c9:43:2b:36:4d:bf:18:12:e1:1d:52:82:91: d7:b8:0a:ea:c2:8e:0e:62:4b:b4:6c:4b:1f:4e:93:83:e6:f1: cc:23:54:5f:7d:2f:53:f5:4c:47:d5:62:ae:1f:49:5a:f5:d8: ab:d7:bc:87:8c:5e:d0:f8:bb:78:be:6d:22:6a:aa:6c:04:31: 1c:de:aa:18:70:1f:79:e7:fc:17:bf:f5:d1:e7:54:57:dc:76: d9:40:d4:3f:e5:ad:b9:a7:da:a0:48:bb:4a:cf:1c:ee:b0:cb: ac:6d:00:9e:3a:1a:57:90:29:dd:c2:ab:69:8a:0d:a3:11:a4: 6a:10:e6:8d:0e:23:02:9b:21:9a:99:86:69:cf:0f:f4:75:7a: 58:05:9a:4f:60:f2:8d:ca:23:92:c7:a1:33:9d:3e:f6:eb:18: 7a:63:b9:70 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWE3cluxGt9FznR3uS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNzA4MjMzMFoXDTI4MDgxOTA4MjMzMFowLzEtMCsGA1UEAxMk ODkwY2E4ZjEtMDU1OC00MDkwLThkZTEtODEzMzI0YzdjNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9UfGMsI34uD406VuzULoNjlyaFUDVyO3kTV 86sUseSE5xXJSgoqwXKJrHxVC64ikcd24UURBJtAE9eKe2tTDQHFjei0WjRWjtlg gAQmyxrE8CFfd1Y2ZInPfG0R26DlQFdulHQqpJTkZ62PQw6h8i3P1zbNLB8wmXiz s3ifdKvB2EKD1jZEc5lJki3NxAMnrXBzxqzEb/LC0PNu1A7PTYikeD7OLfvt793i ZI3NmZEGfsTwVfUHFYOegkHgoLzGf0d/2AtuAB4rqYgdmmZLmc/yN9qAbHMHBlu6 Vkx0sMfim0TXIb31EcNdJUwbSHgE6DMwMW7PCet4TQGNQpzhVQIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFNWLa8iofvSVkeEiAh/+2tvaq2a8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 OTBjYThmMS0wNTU4LTQwOTAtOGRlMS04MTMzMjRjN2M0NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg5MGNhOGYxLTA1NTgtNDA5MC04 ZGUxLTgxMzMyNGM3YzQ0NS84OTBjYThmMS0wNTU4LTQwOTAtOGRlMS04MTMzMjRj N2M0NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALMELQDBAPQWegwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICQsACAwD0DTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAM8qSTcW/2jG6aICvmfCyFiKYBaMW5bLpP hBiDBIZwXiicQZovGOAfyjptc/wmb6H4lHMk7MHEC3L5aFxnvQN+0I519PY8KwjH RX2QcKKLOFGmcO/j6lb/CVpBqTcQ8slDKzZNvxgS4R1SgpHXuArqwo4OYku0bEsf TpOD5vHMI1RffS9T9UxH1WKuH0la9dir17yHjF7Q+Lt4vm0iaqpsBDEc3qoYcB95 5/wXv/XR51RX3HbZQNQ/5a25p9qgSLtKzxzusMusbQCeOhpXkCndwqtpig2jEaRq EOaNDiMCmyGamYZpzw/0dXpYBZpPYPKNyiOSx6EznT726xh6Y7lw -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:24 2026 by rpki-client