$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b85f9d52-e393-4e14-b366-ead7bb84187a.cer File: b85f9d52-e393-4e14-b366-ead7bb84187a.cer (raw, json) Hash identifier: 3I0E8DMdwx5X3XTg/e6oE4q9fnsm610HrAwk1g8p76k= Subject key identifier: 9C:DA:C7:6A:C2:CD:BC:D3:EE:4F:3B:CC:FC:96:9A:47:33:C0:E3:F0 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE3990FDEDC41527F624C4420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b85f9d52-e393-4e14-b366-ead7bb84187a/b85f9d52-e393-4e14-b366-ead7bb84187a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b85f9d52-e393-4e14-b366-ead7bb84187a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 May 2026 20:38:28 +0000 Certificate not after: Mon 21 Aug 2028 20:38:28 +0000 Subordinate resources: AS: 19 AS: 398920 IP: 140.162.0.0/16 IP: 149.8.0.0/16 IP: 192.5.8.0/24 IP: 192.12.25.0/24 IP: 192.12.141.0/24 IP: 192.33.134.0/24 IP: 192.131.125.0/24 IP: 192.132.104.0/24 IP: 198.212.203.0/24 IP: 204.115.176.0/21 IP: 205.153.240.0/22 IP: 2620:11c:8000::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e3:99:0f:de:dc:41:52:7f:62:4c:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 19 20:38:28 2026 GMT Not After : Aug 21 20:38:28 2028 GMT Subject: CN=b85f9d52-e393-4e14-b366-ead7bb84187a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:51:1f:71:c8:43:0b:50:06:94:9b:79:50: b5:0c:bd:f1:02:fb:b5:8d:b5:d6:84:8d:3c:a8:01: 3a:36:31:f4:4a:cc:e6:09:88:df:5d:0b:8f:ef:f2: e1:6a:32:71:22:81:02:a2:60:14:54:0f:e3:c4:4a: cf:c2:b3:0f:77:ce:0d:7b:6b:96:2e:69:47:e5:bb: ec:cd:d2:91:ef:fd:56:36:f1:e7:fb:96:f4:8f:14: 57:d5:e8:c1:fb:3f:ce:11:7c:97:80:ad:c4:d8:2c: c4:dd:af:82:eb:3d:17:4d:c3:73:80:f0:ef:27:4c: cb:15:83:7f:f9:2b:0c:b8:62:d6:eb:c8:87:29:8b: c3:42:c7:22:a4:6d:39:72:3d:d9:2b:2f:03:b2:ed: 09:6c:81:e5:15:ef:f8:04:77:a6:69:e3:c7:4f:cc: fd:82:3d:ce:8f:b3:01:b6:2f:ea:e5:d5:da:9c:08: ce:a1:a1:42:3c:49:58:c0:22:95:85:2c:7b:16:3d: 2a:57:01:10:39:46:4f:7d:04:b8:99:ba:b7:2a:47: 55:4c:cb:69:4a:6c:f6:27:cc:7c:8e:80:76:b2:ee: d6:06:e1:c3:e8:58:fb:92:18:35:f3:1f:73:5a:18: f3:00:28:91:a5:cf:8d:88:23:7a:c6:0d:e1:1f:56: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DA:C7:6A:C2:CD:BC:D3:EE:4F:3B:CC:FC:96:9A:47:33:C0:E3:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b85f9d52-e393-4e14-b366-ead7bb84187a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b85f9d52-e393-4e14-b366-ead7bb84187a/b85f9d52-e393-4e14-b366-ead7bb84187a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 140.162.0.0/16 149.8.0.0/16 192.5.8.0/24 192.12.25.0/24 192.12.141.0/24 192.33.134.0/24 192.131.125.0/24 192.132.104.0/24 198.212.203.0/24 204.115.176.0/21 205.153.240.0/22 IPv6: 2620:11c:8000::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19 398920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:20:e6:75:e4:77:68:bc:c9:85:40:95:30:a7:8f:89:7a:04: f1:42:aa:f2:63:62:1c:2b:9e:ad:4f:37:c2:4b:6d:e8:2e:82: 37:25:75:d1:4c:53:d5:61:43:0e:31:af:89:46:10:58:83:14: ae:51:d9:86:e7:61:1f:6b:c3:4b:a9:df:eb:13:a4:dc:c8:34: a4:25:d3:05:34:ae:11:88:3f:3b:39:a7:dd:eb:c0:b6:32:0d: 75:93:ba:21:d7:50:2f:c9:09:ce:fe:0c:8b:61:b7:65:36:0c: e0:e3:e1:22:25:9a:c6:5e:29:17:3c:32:8b:ba:6f:bf:22:85: 1e:25:29:81:ae:54:aa:13:67:3b:22:01:17:70:23:5d:e9:5e: 2a:ae:b1:bc:69:9b:82:b0:07:6e:ba:fd:08:23:12:1e:20:a5: ed:b0:79:cc:6e:f1:2c:91:57:b4:02:cd:c2:1c:89:2b:78:7e: 4c:d7:5b:72:ea:4b:3f:ce:42:3b:24:05:b3:39:90:5d:80:c3: 9b:4e:69:f0:d6:6d:11:7c:42:8b:f8:19:2d:a3:05:2e:de:d5: 9e:f2:b2:23:29:5d:77:61:91:3d:7c:3b:3a:7b:93:22:5a:9f: ae:db:f6:dc:3e:c7:b8:d8:a4:10:79:67:77:93:1f:72:14:29: f1:2d:39:de -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWE3jmQ/e3EFSf2JMRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxOTIwMzgyOFoXDTI4MDgyMTIwMzgyOFowLzEtMCsGA1UEAxMk Yjg1ZjlkNTItZTM5My00ZTE0LWIzNjYtZWFkN2JiODQxODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7lRH3HIQwtQBpSbeVC1DL3xAvu1jbXWhI08 qAE6NjH0SszmCYjfXQuP7/LhajJxIoEComAUVA/jxErPwrMPd84Ne2uWLmlH5bvs zdKR7/1WNvHn+5b0jxRX1ejB+z/OEXyXgK3E2CzE3a+C6z0XTcNzgPDvJ0zLFYN/ +SsMuGLW68iHKYvDQscipG05cj3ZKy8Dsu0JbIHlFe/4BHemaePHT8z9gj3Oj7MB ti/q5dXanAjOoaFCPElYwCKVhSx7Fj0qVwEQOUZPfQS4mbq3KkdVTMtpSmz2J8x8 joB2su7WBuHD6Fj7khg18x9zWhjzACiRpc+NiCN6xg3hH1aHzQIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFJzax2rCzbzT7k87zPyWmkczwOPwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i ODVmOWQ1Mi1lMzkzLTRlMTQtYjM2Ni1lYWQ3YmI4NDE4N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I4NWY5ZDUyLWUzOTMtNGUxNC1i MzY2LWVhZDdiYjg0MTg3YS9iODVmOWQ1Mi1lMzkzLTRlMTQtYjM2Ni1lYWQ3YmI4 NDE4N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwaQYIKwYBBQUH AQcBAf8EWjBYMEYEAgABMEADAwCMogMDAJUIAwQAwAUIAwQAwAwZAwQAwAyNAwQA wCGGAwQAwIN9AwQAwIRoAwQAxtTLAwQDzHOwAwQCzZnwMA4EAgACMAgDBgQmIAEc gDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgETAgMGFkgwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABCDmdeR3 aLzJhUCVMKePiXoE8UKq8mNiHCuerU83wktt6C6CNyV10UxT1WFDDjGviUYQWIMU rlHZhudhH2vDS6nf6xOk3Mg0pCXTBTSuEYg/Ozmn3evAtjINdZO6IddQL8kJzv4M i2G3ZTYM4OPhIiWaxl4pFzwyi7pvvyKFHiUpga5UqhNnOyIBF3AjXeleKq6xvGmb grAHbrr9CCMSHiCl7bB5zG7xLJFXtALNwhyJK3h+TNdbcupLP85COyQFszmQXYDD m05p8NZtEXxCi/gZLaMFLt7VnvKyIyldd2GRPXw7OnuTIlqfrtv23D7HuNikEHln d5MfchQp8S053g== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:43 2026 by rpki-client