$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer File: b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer (raw, json) Hash identifier: p9UaWcxIu9IfQOGfkfqPfm+zAz1ZwVnigwdJevREzI0= Subject key identifier: 52:DB:90:8E:EB:21:09:42:F9:7C:04:42:FD:EA:70:E4:6F:52:F2:D6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E1041A551AA3528DD4DAA5280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jun 2026 20:33:43 +0000 Certificate not after: Wed 06 Sep 2028 20:33:43 +0000 Subordinate resources: AS: 396866 IP: 67.218.7.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:41:a5:51:aa:35:28:dd:4d:aa:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 4 20:33:43 2026 GMT Not After : Sep 6 20:33:43 2028 GMT Subject: CN=b3f4c5ee-0e47-48c9-8976-165a2de083f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:06:a1:3d:58:14:d2:8d:37:aa:2b:6c:2a: 29:d3:0b:b8:c0:9e:ed:2c:20:6f:49:62:74:3a:e4: c6:c2:97:91:6f:8a:25:e9:43:95:68:c1:e4:e0:4d: b9:7c:63:ed:92:4c:4c:ed:e4:3b:69:ff:4d:5f:d9: 46:5a:b7:9c:b8:05:0e:e8:81:ad:ae:ca:58:d2:18: fe:c4:70:57:f5:ec:97:54:1b:2c:0b:d7:9b:2d:b1: 71:41:36:28:b3:1f:d2:0e:e0:4c:f8:36:b0:e0:72: 1d:ae:79:ba:45:4f:c9:b4:eb:67:cd:8b:f2:1c:2e: ce:1c:57:e6:21:e6:a2:2f:ed:40:70:1b:8d:4d:39: ea:c9:d1:87:cc:62:53:02:40:0b:96:64:a8:59:a4: f1:f8:a5:19:c1:ab:10:09:24:42:a1:76:28:ff:cd: 24:d9:07:d2:87:26:a9:2a:11:5e:f1:6a:07:2a:a7: fa:ab:a9:4a:f3:df:d8:a3:5f:04:d5:a2:df:fb:3b: 51:b5:d9:7e:46:cd:f5:39:22:5a:f8:12:9a:d6:7b: 9c:1a:1c:f4:c6:7f:32:ce:ba:65:bf:47:46:4b:ba: 8a:0a:97:7e:7a:7a:40:a7:c7:22:f8:49:b9:59:08: 3c:fe:fe:57:dd:38:38:d1:da:b5:7e:7f:94:45:2f: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DB:90:8E:EB:21:09:42:F9:7C:04:42:FD:EA:70:E4:6F:52:F2:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 67.218.7.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396866 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:96:dd:30:92:c5:b7:39:03:10:72:71:a4:85:77:ec:66:0e: 22:3e:07:9f:3b:f6:fb:73:c5:26:16:41:9a:0f:de:e5:6c:ce: 79:6a:90:ba:d5:e1:c3:56:d9:66:af:38:e0:13:90:92:67:0f: ff:da:79:9e:f3:be:9e:d5:5b:86:a7:8a:e8:71:43:d1:91:46: b0:35:37:a7:af:a6:1f:d4:7c:3a:99:08:0d:d9:f2:bf:58:77: c7:43:72:dd:da:e2:c4:2d:ec:c8:c7:b1:07:52:53:4d:dc:bb: 95:e2:8b:c5:75:5a:59:09:81:c4:9c:3d:d9:96:eb:c8:1e:5d: 79:36:c2:0b:36:c5:dc:9e:04:d9:73:40:37:f9:23:87:b3:54: 7e:19:cb:90:64:09:d2:04:1f:f1:82:fc:5e:19:54:ea:08:64: ad:11:96:e9:58:03:83:e8:ff:34:03:52:83:03:44:bf:54:b0: 62:bb:d3:9b:a3:b2:d1:a2:06:b5:2f:dc:4d:8c:14:a5:96:91: e1:8a:6a:b7:56:7c:af:7e:d7:a2:a2:3c:cf:bf:e9:49:b7:aa: fb:aa:f2:5d:31:f0:f2:f8:b8:0b:a2:27:6e:54:9b:37:34:cf: 0e:71:33:ae:19:b2:92:4b:26:fd:42:88:f9:cf:f4:de:f0:6f: be:98:03:d8 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE4QQaVRqjUo3U2qUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwNDIwMzM0M1oXDTI4MDkwNjIwMzM0M1owLzEtMCsGA1UEAxMk YjNmNGM1ZWUtMGU0Ny00OGM5LTg5NzYtMTY1YTJkZTA4M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicIGoT1YFNKNN6orbCop0wu4wJ7tLCBvSWJ0 OuTGwpeRb4ol6UOVaMHk4E25fGPtkkxM7eQ7af9NX9lGWrecuAUO6IGtrspY0hj+ xHBX9eyXVBssC9ebLbFxQTYosx/SDuBM+Daw4HIdrnm6RU/JtOtnzYvyHC7OHFfm IeaiL+1AcBuNTTnqydGHzGJTAkALlmSoWaTx+KUZwasQCSRCoXYo/80k2QfShyap KhFe8WoHKqf6q6lK89/Yo18E1aLf+ztRtdl+Rs31OSJa+BKa1nucGhz0xn8yzrpl v0dGS7qKCpd+enpAp8ci+Em5WQg8/v5X3Tg40dq1fn+URS+U5QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFLbkI7rIQlC+XwEQv3qcORvUvLWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i M2Y0YzVlZS0wZTQ3LTQ4YzktODk3Ni0xNjVhMmRlMDgzZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2IzZjRjNWVlLTBlNDctNDhjOS04 OTc2LTE2NWEyZGUwODNmNC9iM2Y0YzVlZS0wZTQ3LTQ4YzktODk3Ni0xNjVhMmRl MDgzZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABD2gcwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bg5CMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIOW3TCSxbc5AxBycaSFd+xmDiI+B5879vtzxSYWQZoP3uVs znlqkLrV4cNW2WavOOATkJJnD//aeZ7zvp7VW4aniuhxQ9GRRrA1N6evph/UfDqZ CA3Z8r9Yd8dDct3a4sQt7MjHsQdSU03cu5Xii8V1WlkJgcScPdmW68geXXk2wgs2 xdyeBNlzQDf5I4ezVH4Zy5BkCdIEH/GC/F4ZVOoIZK0RlulYA4Po/zQDUoMDRL9U sGK705ujstGiBrUv3E2MFKWWkeGKardWfK9+16KiPM+/6Um3qvuq8l0x8PL4uAui J25Umzc0zw5xM64ZspJLJv1CiPnP9N7wb76YA9g= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:37 2026 by rpki-client