$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609.cer File: 9d31cc8a-85b8-417c-94eb-9137b7864609.cer (raw, json) Hash identifier: DdZfm1bZ7caMLEetScz49olHv1zOAOPr6LWGt+yLpuY= Subject key identifier: 6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D982D6A3390CAE468F8AEC580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 20:15:57 +0000 Certificate not after: Tue 25 Jul 2028 20:15:57 +0000 Subordinate resources: IP: 141.193.251.0/24 IP: 161.210.188.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:2d:6a:33:90:ca:e4:68:f8:ae:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 22 20:15:57 2026 GMT Not After : Jul 25 20:15:57 2028 GMT Subject: CN=9d31cc8a-85b8-417c-94eb-9137b7864609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:4a:88:2c:a8:70:08:36:86:e6:e0:b1:f3: 66:6f:51:85:2c:f5:38:8f:ae:e9:ff:80:f8:f8:7f: cd:17:89:ef:ff:26:b1:0d:19:a8:3c:e8:16:b4:7d: f0:c6:f9:f6:ba:d8:8b:0d:67:0f:e7:4e:ff:32:de: ed:a9:8b:6b:32:4b:61:cf:16:dd:b8:67:fe:18:ab: b8:cc:c9:00:79:6f:1f:3e:f8:58:1d:dc:14:3d:43: c1:52:6d:f3:a3:9d:ce:8c:d0:64:f6:27:d4:4d:a7: af:84:bc:ac:5e:f8:21:5c:48:08:df:a5:32:bc:00: 7f:46:97:1f:51:9d:65:bc:15:43:a9:c4:48:cb:fc: d2:ff:76:92:72:ca:8e:e0:4b:35:bf:6c:f5:ca:bd: 9b:44:a6:fa:78:02:5f:38:f0:7e:ee:ba:d9:16:cb: 79:31:7d:40:67:0c:86:f6:80:ae:96:79:c2:b1:6a: f4:fa:1e:ed:20:32:80:24:04:b0:2f:5c:47:51:72: 50:fb:c6:7e:41:82:f5:1a:a8:23:1f:75:da:b1:88: b4:ff:ed:d8:57:89:08:54:a2:08:46:71:0b:5e:3b: 5a:45:52:4f:bc:dd:23:41:6e:ac:0a:9a:ca:5f:c4: a2:38:c0:3f:bb:94:90:fc:c1:f0:92:56:78:18:34: f5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C3:20:C6:42:CF:45:99:B7:72:4A:9E:73:60:0C:B2:39:45:2F:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9d31cc8a-85b8-417c-94eb-9137b7864609/9d31cc8a-85b8-417c-94eb-9137b7864609.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 141.193.251.0/24 161.210.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:f2:44:f5:6a:f3:05:30:fc:66:9a:f9:b1:32:7f:34:23:fe: 6f:1c:77:d0:3a:fe:97:5f:c7:2d:c4:6b:96:78:9d:a4:30:e9: d5:be:16:31:a6:fd:ad:0f:d7:36:6a:cb:17:e0:f1:10:6e:e5: 37:87:46:f1:4d:9c:51:bf:69:11:a5:d2:1d:dc:15:66:d9:ea: 11:6d:f3:f0:b9:d1:ee:3b:d2:b2:e5:f7:e1:ea:d0:21:fb:3e: 1c:23:bb:19:5a:64:9d:94:13:5f:54:28:fa:b2:68:6a:75:85: c7:5d:04:80:65:5c:a6:5d:e3:27:f8:e9:6b:8d:9e:74:f9:07: 34:14:68:fd:71:b7:09:3a:ad:bb:b4:a4:61:32:48:e6:65:01: 4c:d4:8b:32:58:36:d8:36:61:45:c2:b8:cb:8c:dd:8f:f0:7f: f8:9b:4d:9b:76:1c:07:e3:22:87:c0:72:c4:87:55:8b:dc:cf: 6e:c5:fd:74:43:85:6f:75:26:8c:8a:77:2b:b9:58:53:60:d4: ba:fe:67:0e:5f:78:a5:98:9f:58:a5:db:61:b4:48:c1:77:90: fe:7b:d5:dd:7c:45:2b:59:2f:93:54:48:81:01:e1:18:3e:d6: 55:01:5f:b7:d9:1e:ee:d5:c9:65:6d:70:20:da:f9:5b:f1:58: 7d:5f:67:04 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE2YLWozkMrkaPiuxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMjIwMTU1N1oXDTI4MDcyNTIwMTU1N1owLzEtMCsGA1UEAxMk OWQzMWNjOGEtODViOC00MTdjLTk0ZWItOTEzN2I3ODY0NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp5KiCyocAg2hubgsfNmb1GFLPU4j67p/4D4 +H/NF4nv/yaxDRmoPOgWtH3wxvn2utiLDWcP507/Mt7tqYtrMkthzxbduGf+GKu4 zMkAeW8fPvhYHdwUPUPBUm3zo53OjNBk9ifUTaevhLysXvghXEgI36UyvAB/Rpcf UZ1lvBVDqcRIy/zS/3aScsqO4Es1v2z1yr2bRKb6eAJfOPB+7rrZFst5MX1AZwyG 9oCulnnCsWr0+h7tIDKAJASwL1xHUXJQ+8Z+QYL1GqgjH3XasYi0/+3YV4kIVKII RnELXjtaRVJPvN0jQW6sCprKX8SiOMA/u5SQ/MHwklZ4GDT1VQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFGrDIMZCz0WZt3JKnnNgDLI5RS/cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 ZDMxY2M4YS04NWI4LTQxN2MtOTRlYi05MTM3Yjc4NjQ2MDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzlkMzFjYzhhLTg1YjgtNDE3Yy05 NGViLTkxMzdiNzg2NDYwOS85ZDMxY2M4YS04NWI4LTQxN2MtOTRlYi05MTM3Yjc4 NjQ2MDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACNwfsDBACh0rwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAx/JE9WrzBTD8 Zpr5sTJ/NCP+bxx30Dr+l1/HLcRrlnidpDDp1b4WMab9rQ/XNmrLF+DxEG7lN4dG 8U2cUb9pEaXSHdwVZtnqEW3z8LnR7jvSsuX34erQIfs+HCO7GVpknZQTX1Qo+rJo anWFx10EgGVcpl3jJ/jpa42edPkHNBRo/XG3CTqtu7SkYTJI5mUBTNSLMlg22DZh RcK4y4zdj/B/+JtNm3YcB+Mih8ByxIdVi9zPbsX9dEOFb3UmjIp3K7lYU2DUuv5n Dl94pZifWKXbYbRIwXeQ/nvV3XxFK1kvk1RIgQHhGD7WVQFft9ke7tXJZW1wINr5 W/FYfV9nBA== -----END CERTIFICATE-----Generated at Sun May 3 15:28:44 2026 by rpki-client