$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer File: 8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer (raw, json) Hash identifier: sJY6Yt5IlNbwr8LvDvSFJsuTvVmEA7AmWWPGxOtL7FI= Subject key identifier: EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD26F69137F1C743115124DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 17:05:48 +0000 Certificate not after: Tue 15 Aug 2028 17:05:48 +0000 Subordinate resources: AS: 11623 IP: 65.75.224.0/20 IP: 67.43.192.0/20 IP: 2607:8540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:6f:69:13:7f:1c:74:31:15:12:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 17:05:48 2026 GMT Not After : Aug 15 17:05:48 2028 GMT Subject: CN=8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a9:03:48:7a:21:46:4f:d1:a4:ab:4d:bd:f4: 06:05:af:08:68:2c:4b:0d:ef:49:94:85:a3:92:f4: c2:33:65:1f:fd:d1:83:75:8b:e4:78:9e:d7:df:ab: 13:95:05:0d:a2:91:b3:f2:77:48:cb:0b:fa:2b:f0: 50:d2:bd:94:50:0d:6a:39:c7:f2:3a:1a:7e:f8:a9: 37:e5:24:f9:24:ae:38:91:f8:ed:ce:f6:50:41:b2: 73:40:bf:63:7c:60:d6:0a:8f:55:28:9a:2f:75:ff: c9:91:cc:1d:7d:c1:5d:d5:10:b5:3e:63:d4:c0:aa: fa:10:43:8b:e0:46:8d:cb:a8:ca:99:e2:1a:8e:34: 50:33:1d:ed:a5:cc:3f:56:12:b0:af:e8:4d:d4:43: f0:8d:8e:91:63:d1:a2:f4:e3:51:c0:da:85:65:96: 33:fc:31:8b:9e:4a:13:6a:a1:88:f8:dd:93:a6:e5: a9:e7:30:d9:b0:11:4b:52:ce:a4:2a:aa:c5:34:6e: a3:ed:11:44:fa:36:d8:d5:bf:71:17:50:97:d9:2f: 68:f0:de:f6:33:d2:15:87:9e:30:67:0f:15:3a:11: 30:d3:30:5d:8a:de:54:ce:3e:0f:e8:9b:e7:4d:35: b3:b6:1f:e1:90:57:06:8f:48:9b:a1:0c:e6:41:4c: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 65.75.224.0/20 67.43.192.0/20 IPv6: 2607:8540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11623 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:88:54:76:30:9b:71:ce:f4:d2:e6:e5:e0:df:ac:8a:e5:ae: 6e:f2:ce:a6:22:7c:b2:b6:9d:70:71:5c:34:e3:09:d8:83:6c: a3:c3:64:19:c9:a7:50:fd:5c:b7:bb:d0:c4:e1:79:69:e4:5e: bc:cc:dd:3c:8e:2c:52:8f:1b:52:d9:ec:50:67:8f:a3:ce:5c: ea:31:7d:08:3a:a2:07:0a:1c:6f:0e:57:75:c6:dc:6d:77:e5: 95:e9:7e:f7:1e:0a:e8:2d:e9:de:e6:36:67:79:72:75:8b:d1: 4c:f8:4e:9b:9c:52:46:3b:70:dd:e4:03:b2:ae:71:de:be:8d: db:09:60:66:b9:31:32:77:2c:e1:4c:cd:77:3a:b1:75:13:53: 25:3d:e9:49:5f:4b:20:a3:63:f7:e3:be:9f:6f:9a:bf:fb:f3: f6:59:3f:ca:75:84:c6:d3:85:f7:ef:ed:2d:1c:25:cc:11:79: 37:7c:17:16:bb:ec:69:b8:a2:b5:59:66:42:63:b8:f5:88:52: 6d:c7:21:60:20:d3:26:fd:6c:79:33:7b:ac:d9:96:00:ea:58: 65:22:a2:73:29:3b:46:6a:b6:b9:69:a5:9e:8f:e4:a9:9a:09: 79:11:53:a1:f3:dd:ea:31:b9:a8:71:42:9c:41:56:47:28:79: 94:4f:f9:0e -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE3Sb2kTfxx0MRUSTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzE3MDU0OFoXDTI4MDgxNTE3MDU0OFowLzEtMCsGA1UEAxMk OGMxZGJkOGItYWRmNi00OWZiLWI2NTAtNmVhY2ViMWUyOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqkDSHohRk/RpKtNvfQGBa8IaCxLDe9JlIWj kvTCM2Uf/dGDdYvkeJ7X36sTlQUNopGz8ndIywv6K/BQ0r2UUA1qOcfyOhp++Kk3 5ST5JK44kfjtzvZQQbJzQL9jfGDWCo9VKJovdf/JkcwdfcFd1RC1PmPUwKr6EEOL 4EaNy6jKmeIajjRQMx3tpcw/VhKwr+hN1EPwjY6RY9Gi9ONRwNqFZZYz/DGLnkoT aqGI+N2TpuWp5zDZsBFLUs6kKqrFNG6j7RFE+jbY1b9xF1CX2S9o8N72M9IVh54w Zw8VOhEw0zBdit5Uzj4P6JvnTTWzth/hkFcGj0iboQzmQUxBdwIDAQABo4IELzCC BCswHQYDVR0OBBYEFO6oUdnXRtz15KkJ9f0JVYCeg0CGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 YzFkYmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFjZWIxZTI5YjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzhjMWRiZDhiLWFkZjYtNDlmYi1i NjUwLTZlYWNlYjFlMjliMi84YzFkYmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFjZWIx ZTI5YjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARBS+ADBARDK8AwDQQCAAIwBwMFACYHhUAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICLWcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoIhUdjCbcc700ubl4N+s iuWubvLOpiJ8sradcHFcNOMJ2INso8NkGcmnUP1ct7vQxOF5aeRevMzdPI4sUo8b UtnsUGePo85c6jF9CDqiBwocbw5XdcbcbXfllel+9x4K6C3p3uY2Z3lydYvRTPhO m5xSRjtw3eQDsq5x3r6N2wlgZrkxMncs4UzNdzqxdRNTJT3pSV9LIKNj9+O+n2+a v/vz9lk/ynWExtOF9+/tLRwlzBF5N3wXFrvsabiitVlmQmO49YhSbcchYCDTJv1s eTN7rNmWAOpYZSKicyk7Rmq2uWmlno/kqZoJeRFTofPd6jG5qHFCnEFWRyh5lE/5 Dg== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:38 2026 by rpki-client