$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c.cer File: 8e711fc1-b683-48ae-99bf-67908f9c491c.cer (raw, json) Hash identifier: njgMH+rZ4a5DNcR9PBDpmc892OYQohtbzHAdSYPZkfc= Subject key identifier: 36:01:80:33:6E:07:3F:17:4F:1B:68:B6:19:A5:ED:7D:08:27:2B:4E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D92C4A474CB8F0A4C9B8C8880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/8e711fc1-b683-48ae-99bf-67908f9c491c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Apr 2026 21:45:48 +0000 Certificate not after: Sun 23 Jul 2028 21:45:48 +0000 Subordinate resources: AS: 395565 IP: 192.159.170.0 -- 192.159.173.255 IP: 199.48.225.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:c4:a4:74:cb:8f:0a:4c:9b:8c:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 20 21:45:48 2026 GMT Not After : Jul 23 21:45:48 2028 GMT Subject: CN=8e711fc1-b683-48ae-99bf-67908f9c491c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:2b:ff:da:fa:ad:66:b7:52:72:47:24:72: ee:c0:8a:16:1c:be:b6:39:91:d6:78:ed:45:64:66: 7c:03:c1:b0:01:a2:8e:96:2a:f6:d6:d4:34:f6:b7: c8:f0:fa:9e:64:0c:6e:1d:5b:ab:7b:60:50:9e:a7: 87:20:bd:f6:53:00:fa:b1:4a:9a:3d:62:5f:28:a1: a9:d3:56:0e:85:52:e9:5b:ce:25:c4:b0:4d:7a:b8: 96:67:a3:c8:a4:a1:5b:07:d8:cb:fd:53:b7:2a:a5: 55:3d:cf:4b:7c:0e:a8:7f:bf:54:a9:44:b9:b5:aa: aa:9c:47:2a:17:55:95:50:23:b2:c7:ee:35:07:6b: f9:c2:76:a3:0c:c3:cb:8a:2f:e7:c9:c8:2f:f9:3a: e5:c0:63:1b:d4:59:85:66:ff:a5:28:07:2b:64:c8: 10:c4:04:b5:3a:1a:ce:97:8e:6a:72:0b:ed:89:78: b3:17:ca:a1:da:fe:83:24:49:b9:bd:5e:99:51:44: e9:b9:5e:55:ef:f0:6b:04:2a:45:eb:ce:8d:93:e4: 91:08:2c:f0:76:64:20:c0:54:a8:02:02:30:2a:78: 6f:64:25:dc:0c:a7:68:0c:d0:d6:f3:d5:e7:f0:98: 47:42:07:1b:41:6f:8b:ed:97:f2:f9:73:10:2c:72: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:01:80:33:6E:07:3F:17:4F:1B:68:B6:19:A5:ED:7D:08:27:2B:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8e711fc1-b683-48ae-99bf-67908f9c491c/8e711fc1-b683-48ae-99bf-67908f9c491c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.159.170.0-192.159.173.255 199.48.225.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395565 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:73:b2:0e:36:39:77:21:c4:8a:b2:a4:91:d9:2a:d8:60:0f: a2:b0:df:9b:96:51:05:29:d8:1d:ad:bc:dd:d3:e3:ba:06:46: e8:96:73:75:8f:69:e2:bb:46:9e:cb:a3:74:8a:1c:57:d4:c5: 2e:4b:30:34:d2:92:1a:7d:f9:fb:3c:2c:3d:53:ff:9f:48:90: fb:f7:6e:f6:19:52:68:4a:b4:b6:f0:32:97:1d:26:c8:6b:5c: 2a:b8:81:e4:4e:ff:f6:37:81:57:7c:e1:e3:14:d5:55:96:5e: 7c:95:ea:cb:1a:ee:f9:18:2a:a7:97:95:de:a6:59:ef:ec:09: a3:9f:c2:b4:5f:94:e2:ec:99:b9:6d:b8:fa:6f:4f:62:ad:f1: 8b:7f:79:bd:71:f3:86:56:78:70:85:a0:45:7b:8f:32:97:b3: 34:10:26:00:4c:8b:7e:e8:3b:1a:2a:11:83:08:bd:02:9a:a4: c2:6e:1d:fc:5c:7b:43:e5:af:19:34:b6:42:5d:7b:be:62:98: 94:90:63:ae:9b:98:32:60:6f:10:e9:02:82:d5:1b:0d:1c:e4: d8:f0:93:e8:24:04:9f:c2:03:ad:a2:67:bb:d2:6d:fc:01:13: e9:30:3f:25:df:69:69:ce:0a:8b:2e:5b:9b:75:94:89:8b:0a: a9:79:2d:ff -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE2SxKR0y48KTJuMiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMDIxNDU0OFoXDTI4MDcyMzIxNDU0OFowLzEtMCsGA1UEAxMk OGU3MTFmYzEtYjY4My00OGFlLTk5YmYtNjc5MDhmOWM0OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnsr/9r6rWa3UnJHJHLuwIoWHL62OZHWeO1F ZGZ8A8GwAaKOlir21tQ09rfI8PqeZAxuHVure2BQnqeHIL32UwD6sUqaPWJfKKGp 01YOhVLpW84lxLBNeriWZ6PIpKFbB9jL/VO3KqVVPc9LfA6of79UqUS5taqqnEcq F1WVUCOyx+41B2v5wnajDMPLii/nycgv+TrlwGMb1FmFZv+lKAcrZMgQxAS1OhrO l45qcgvtiXizF8qh2v6DJEm5vV6ZUUTpuV5V7/BrBCpF686Nk+SRCCzwdmQgwFSo AgIwKnhvZCXcDKdoDNDW89Xn8JhHQgcbQW+L7Zfy+XMQLHJWQwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDYBgDNuBz8XTxtothml7X0IJytOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 ZTcxMWZjMS1iNjgzLTQ4YWUtOTliZi02NzkwOGY5YzQ5MWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzhlNzExZmMxLWI2ODMtNDhhZS05 OWJmLTY3OTA4ZjljNDkxYy84ZTcxMWZjMS1iNjgzLTQ4YWUtOTliZi02NzkwOGY5 YzQ5MWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAcCfqgMEAcCfrAMEAMcw4TAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMGCS0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATHOyDjY5dyHEirKkkdkq2GAPorDf m5ZRBSnYHa283dPjugZG6JZzdY9p4rtGnsujdIocV9TFLkswNNKSGn35+zwsPVP/ n0iQ+/du9hlSaEq0tvAylx0myGtcKriB5E7/9jeBV3zh4xTVVZZefJXqyxru+Rgq p5eV3qZZ7+wJo5/CtF+U4uyZuW24+m9PYq3xi395vXHzhlZ4cIWgRXuPMpezNBAm AEyLfug7GioRgwi9Apqkwm4d/Fx7Q+WvGTS2Ql17vmKYlJBjrpuYMmBvEOkCgtUb DRzk2PCT6CQEn8IDraJnu9Jt/AET6TA/Jd9pac4Kiy5bm3WUiYsKqXkt/w== -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:56 2026 by rpki-client