$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/af9ebfcb-9242-406c-bdda-de1e8017db64.cer File: af9ebfcb-9242-406c-bdda-de1e8017db64.cer (raw, json) Hash identifier: PHYyw3GXuHvApfRx9xE/aZ256+ujBM1byjXx0EuX7kk= Subject key identifier: 83:78:DA:9C:7F:1C:10:AA:BE:F2:C9:D8:54:95:5C:9E:3F:96:63:C6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E0A80E0844176A3AA43964100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/af9ebfcb-9242-406c-bdda-de1e8017db64/af9ebfcb-9242-406c-bdda-de1e8017db64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/af9ebfcb-9242-406c-bdda-de1e8017db64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Jun 2026 19:06:16 +0000 Certificate not after: Sun 03 Sep 2028 17:04:23 +0000 Subordinate resources: AS: 399970 IP: 149.112.152.0/22 IP: 2602:fc3b:: -- 2602:fc3b:dfff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:80:e0:84:41:76:a3:aa:43:96:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 2 19:06:16 2026 GMT Not After : Sep 3 17:04:23 2028 GMT Subject: CN=af9ebfcb-9242-406c-bdda-de1e8017db64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9a:12:c5:4a:30:77:ce:dd:30:73:f4:78:3a: 3b:43:eb:96:8a:8c:14:a4:fd:f5:d0:7e:f8:66:e1: ea:ac:3f:4a:9e:95:bc:54:a5:3b:23:e0:d5:65:10: 02:b1:c8:59:c2:5e:5d:77:1a:12:99:74:b2:0f:74: f5:bc:d5:ff:fa:84:06:4a:15:a4:7d:69:de:ca:6a: 78:01:12:e5:ed:d7:ee:40:cf:04:7e:fe:ad:62:92: 99:5c:b0:86:70:b3:f2:22:39:19:fc:85:4d:59:f3: 8e:c1:5d:bd:4f:e9:0b:dd:c6:ec:a7:50:15:b1:e1: 98:c1:20:fe:83:41:b6:81:b5:94:3a:a9:e6:bb:68: 06:7b:43:0b:d3:b3:ae:4d:83:80:e3:0b:71:d4:68: 70:3f:ab:17:87:6a:42:0b:9f:0a:06:ba:0c:47:5e: 8d:43:03:f4:89:48:61:e9:44:97:41:07:66:04:fd: 11:a7:26:8c:ab:3d:07:72:74:1b:d7:06:48:0b:d2: 2c:be:dc:2d:f5:34:32:93:93:1f:08:ed:75:ae:6d: 52:76:9c:db:2b:71:e4:92:4f:35:c4:30:70:6c:29: 72:33:65:08:8f:3a:8c:3b:8c:1e:f2:4d:fd:f5:0a: 2e:d3:04:77:75:11:da:98:3c:f7:6b:d4:cb:0f:7f: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:78:DA:9C:7F:1C:10:AA:BE:F2:C9:D8:54:95:5C:9E:3F:96:63:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/af9ebfcb-9242-406c-bdda-de1e8017db64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/af9ebfcb-9242-406c-bdda-de1e8017db64/af9ebfcb-9242-406c-bdda-de1e8017db64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 149.112.152.0/22 IPv6: 2602:fc3b::-2602:fc3b:dfff:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 399970 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c6:46:c2:14:2d:c2:cf:c6:de:99:61:a5:06:04:db:45:96: b8:45:35:6e:e8:75:e2:c2:3a:ad:df:03:02:62:42:c2:83:15: d7:2f:7f:69:03:5e:1d:64:d7:5e:9c:ce:8c:67:8a:c3:b1:8c: 02:2b:92:f1:12:05:d1:74:27:89:d6:9f:83:e5:01:05:72:b4: b1:44:72:63:38:26:10:d0:19:03:5f:41:42:c6:58:4b:74:b2: 52:76:89:ff:f8:c4:a1:2c:1c:8f:f1:ad:7d:1f:6e:85:62:51: a5:d6:fa:46:41:f1:d2:9f:7d:1e:9c:23:56:2f:c0:a5:64:67: 54:dc:1a:6c:68:1e:81:ae:d0:fe:07:63:2e:43:1b:fd:58:10: 0f:9e:63:5a:4f:97:9b:80:1b:cb:ba:4c:23:6a:a2:7f:16:e1: 03:75:23:c3:6f:37:ad:4d:fa:dd:43:81:bc:9b:2f:63:ec:50: b3:11:97:00:4b:f0:73:7f:fa:8b:84:7f:a4:06:f2:d2:15:5f: f7:ee:8e:db:4f:91:82:a3:e4:af:22:78:06:34:2a:4c:c2:b9: 22:d4:4d:04:a7:59:33:f6:da:28:5c:a9:b4:bf:eb:74:41:b5: db:33:7d:5b:07:b3:f6:23:09:ec:b3:fa:35:7d:ab:2c:32:47: d7:13:b1:6d -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE4KgOCEQXajqkOWQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwMjE5MDYxNloXDTI4MDkwMzE3MDQyM1owLzEtMCsGA1UEAxMk YWY5ZWJmY2ItOTI0Mi00MDZjLWJkZGEtZGUxZTgwMTdkYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJoSxUowd87dMHP0eDo7Q+uWiowUpP310H74 ZuHqrD9KnpW8VKU7I+DVZRACschZwl5ddxoSmXSyD3T1vNX/+oQGShWkfWneymp4 ARLl7dfuQM8Efv6tYpKZXLCGcLPyIjkZ/IVNWfOOwV29T+kL3cbsp1AVseGYwSD+ g0G2gbWUOqnmu2gGe0ML07OuTYOA4wtx1GhwP6sXh2pCC58KBroMR16NQwP0iUhh 6USXQQdmBP0RpyaMqz0HcnQb1wZIC9Isvtwt9TQyk5MfCO11rm1SdpzbK3Hkkk81 xDBwbClyM2UIjzqMO4we8k399Qou0wR3dRHamDz3a9TLD394DwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFIN42px/HBCqvvLJ2FSVXJ4/lmPGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h ZjllYmZjYi05MjQyLTQwNmMtYmRkYS1kZTFlODAxN2RiNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2FmOWViZmNiLTkyNDItNDA2Yy1i ZGRhLWRlMWU4MDE3ZGI2NC9hZjllYmZjYi05MjQyLTQwNmMtYmRkYS1kZTFlODAx N2RiNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMAwEAgABMAYDBAKVcJgwFwQCAAIwETAPAwUAJgL8OwMGBSYC/DvA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYaYjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1xkbCFC3Cz8be mWGlBgTbRZa4RTVu6HXiwjqt3wMCYkLCgxXXL39pA14dZNdenM6MZ4rDsYwCK5Lx EgXRdCeJ1p+D5QEFcrSxRHJjOCYQ0BkDX0FCxlhLdLJSdon/+MShLByP8a19H26F YlGl1vpGQfHSn30enCNWL8ClZGdU3BpsaB6BrtD+B2MuQxv9WBAPnmNaT5ebgBvL ukwjaqJ/FuEDdSPDbzetTfrdQ4G8my9j7FCzEZcAS/Bzf/qLhH+kBvLSFV/37o7b T5GCo+SvIngGNCpMwrki1E0Ep1kz9tooXKm0v+t0QbXbM31bB7P2Iwnss/o1fass MkfXE7Ft -----END CERTIFICATE-----Generated at Fri Jun 5 00:44:12 2026 by rpki-client