$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.cer File: 8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.cer (raw, json) Hash identifier: jSLjCXTWxYmQQVrbcpeDX67rrqaDJM6/Zi9IbATsOCM= Subject key identifier: 27:D5:08:3E:BB:84:D7:A7:23:04:D8:C0:74:4F:4A:81:FD:E8:B2:5E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2EF092AF08F160BCDF98140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 21:22:57 +0000 Certificate not after: Tue 15 Aug 2028 21:22:57 +0000 Subordinate resources: AS: 393733 IP: 74.188.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:ef:09:2a:f0:8f:16:0b:cd:f9:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 21:22:57 2026 GMT Not After : Aug 15 21:22:57 2028 GMT Subject: CN=8aa8bb0d-aace-4f1d-a134-6ef66d6188bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:01:bc:2f:54:44:90:9b:69:3b:39:83:d4: ad:41:be:6f:96:e9:a5:4a:59:6a:20:33:e4:c0:3d: c8:df:72:28:2c:83:8a:61:ba:3d:d3:f5:33:2a:61: b8:26:10:82:b1:f8:1a:7e:b1:18:ee:e2:3b:06:ce: 1f:80:60:f9:72:40:2e:24:5e:0f:a8:77:a6:87:34: 24:0c:91:47:d1:d7:7a:56:27:98:ff:78:27:29:e1: 61:d5:52:58:36:93:b1:08:8d:15:3c:49:30:4e:50: 71:16:4f:19:1d:69:0b:47:ae:15:6f:fc:be:c0:8f: 0b:14:52:14:e3:4b:df:68:7d:09:bb:e4:ab:5e:b0: 49:a9:da:7e:ad:d7:c1:2b:32:b0:a3:a0:f9:3d:70: dc:c8:41:d4:29:e2:b9:7c:5f:2c:11:1e:8a:ce:9b: e4:06:55:87:f2:50:c5:01:22:55:37:87:36:4e:c1: c6:5a:53:f2:97:97:18:aa:f5:79:13:e3:89:c0:d7: dc:8e:ab:b1:d6:b7:cd:ee:d3:4c:7c:fe:e0:79:bf: 14:83:25:29:75:7b:13:da:9c:29:3e:14:0f:b9:de: 0e:71:27:05:43:bb:d3:da:00:cf:12:f0:98:18:d7: f0:d4:bc:d4:79:6f:4e:7b:1b:58:2f:d0:cd:74:41: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D5:08:3E:BB:84:D7:A7:23:04:D8:C0:74:4F:4A:81:FD:E8:B2:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb/8aa8bb0d-aace-4f1d-a134-6ef66d6188bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 74.188.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393733 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7e:bc:28:1c:a4:66:de:25:8a:6d:6c:5a:16:5b:e6:04:4c: 9a:8d:41:d6:95:41:87:9b:76:d6:88:f5:2e:4d:88:81:73:12: c3:9f:bc:37:43:0f:3c:7a:6d:1d:cc:aa:52:7d:6e:ba:93:d4: 31:76:ff:f5:ce:36:de:06:e3:c4:59:9f:fa:d3:9b:6d:21:cd: 7e:90:46:53:40:6f:cf:ce:e6:8c:b8:e7:97:e1:92:8a:23:7b: 46:a7:10:2f:c4:68:f7:96:9d:35:18:bc:0a:40:3b:41:2c:86: 50:f8:c0:c6:39:02:ec:5d:61:e4:a8:b4:0b:53:9a:bb:29:0d: d5:bd:c7:84:6b:53:10:6f:71:8a:61:a2:39:fb:57:6f:2b:18: b4:58:06:a5:16:41:5f:13:97:2c:d4:1a:f2:d5:e1:71:34:da: a4:5a:06:14:6e:a5:ca:c3:8e:d8:81:aa:fd:a7:2d:11:d2:a0: 84:23:41:e5:b7:76:a8:97:32:66:ce:81:0f:91:3f:22:e6:ed: aa:79:49:b6:a7:ae:0f:15:9e:2b:07:b5:28:6e:84:6b:10:4d: 4a:bd:97:98:c2:03:36:20:88:3e:f3:f9:99:b5:cd:85:70:17: 20:e9:cf:ba:2f:68:70:a4:a9:dc:ca:d1:e1:c6:07:4b:00:0b: e8:f7:dc:4a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3S7wkq8I8WC835gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzIxMjI1N1oXDTI4MDgxNTIxMjI1N1owLzEtMCsGA1UEAxMk OGFhOGJiMGQtYWFjZS00ZjFkLWExMzQtNmVmNjZkNjE4OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvssBvC9URJCbaTs5g9StQb5vlumlSllqIDPk wD3I33IoLIOKYbo90/UzKmG4JhCCsfgafrEY7uI7Bs4fgGD5ckAuJF4PqHemhzQk DJFH0dd6VieY/3gnKeFh1VJYNpOxCI0VPEkwTlBxFk8ZHWkLR64Vb/y+wI8LFFIU 40vfaH0Ju+SrXrBJqdp+rdfBKzKwo6D5PXDcyEHUKeK5fF8sER6KzpvkBlWH8lDF ASJVN4c2TsHGWlPyl5cYqvV5E+OJwNfcjqux1rfN7tNMfP7geb8UgyUpdXsT2pwp PhQPud4OcScFQ7vT2gDPEvCYGNfw1LzUeW9OextYL9DNdEH5BwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCfVCD67hNenIwTYwHRPSoH96LJeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 YWE4YmIwZC1hYWNlLTRmMWQtYTEzNC02ZWY2NmQ2MTg4YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzhhYThiYjBkLWFhY2UtNGYxZC1h MTM0LTZlZjY2ZDYxODhiYi84YWE4YmIwZC1hYWNlLTRmMWQtYTEzNC02ZWY2NmQ2 MTg4YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVKvMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgIFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACx+vCgcpGbeJYptbFoWW+YETJqNQdaVQYebdtaI9S5NiIFz EsOfvDdDDzx6bR3MqlJ9brqT1DF2//XONt4G48RZn/rTm20hzX6QRlNAb8/O5oy4 55fhkooje0anEC/EaPeWnTUYvApAO0EshlD4wMY5AuxdYeSotAtTmrspDdW9x4Rr UxBvcYphojn7V28rGLRYBqUWQV8TlyzUGvLV4XE02qRaBhRupcrDjtiBqv2nLRHS oIQjQeW3dqiXMmbOgQ+RPyLm7ap5Sbanrg8VnisHtShuhGsQTUq9l5jCAzYgiD7z +Zm1zYVwFyDpz7ovaHCkqdzK0eHGB0sAC+j33Eo= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:37 2026 by rpki-client