$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer File: b8e4e496-994f-4877-8328-aec6386bbc01.cer (raw, json) Hash identifier: mk41uV3uV3e7sIklDMgskmCQijXLiK3ftUe36sCeavo= Subject key identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E427FF0DB60FA8B58EF8EAE70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Jun 2026 20:29:39 +0000 Certificate not after: Sun 24 Sep 2028 20:29:39 +0000 Subordinate resources: AS: 16684 AS: 46893 IP: 198.62.0.0/21 IP: 2620:d5:8000::/48 IP: 2620:112:1000::/41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:7f:f0:db:60:fa:8b:58:ef:8e:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 22 20:29:39 2026 GMT Not After : Sep 24 20:29:39 2028 GMT Subject: CN=b8e4e496-994f-4877-8328-aec6386bbc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:81:26:d0:25:46:52:95:b9:4d:17:0b:95: 9d:02:bf:42:40:07:80:6b:a1:9d:d8:8f:c3:27:71: a0:93:b2:89:8b:e9:5d:5d:54:5f:56:ff:b9:d5:d0: c7:4c:9a:d6:73:68:da:30:75:d4:5c:07:2e:c1:03: 10:7d:0d:6f:54:13:49:9b:43:f1:07:79:9f:91:df: 4e:b7:9f:d6:43:70:7c:6f:48:8d:43:92:7e:a0:ee: 4c:0e:d7:63:a8:95:0c:e4:d8:ed:37:62:f3:13:58: f5:4a:e8:1e:4e:1d:14:3c:af:dc:8e:b9:84:31:06: 93:3b:29:b9:2c:90:b0:d3:ae:25:35:65:51:48:0d: 17:af:2f:85:6d:0d:80:23:6b:1f:55:a7:86:57:5b: 84:19:c1:5f:b6:f2:58:4a:95:25:ee:61:f9:9d:36: 31:8f:42:6a:2d:18:76:be:fe:e5:b2:dc:05:c9:72: 71:e4:69:bc:57:c2:85:d5:79:4d:e4:b2:2b:18:f4: 5b:0c:07:e6:d3:38:7a:53:10:a6:84:2a:1f:83:eb: d5:73:b6:b0:56:4c:ec:15:81:d9:50:ad:49:63:9b: 84:26:99:1a:96:67:fa:c2:2c:71:00:7f:88:6f:84: 56:e0:3b:d5:65:bd:b8:b3:65:2c:7a:c5:37:1c:b7: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.62.0.0/21 IPv6: 2620:d5:8000::/48 2620:112:1000::/41 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16684 46893 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5b:be:51:9d:16:8f:76:77:62:0c:e4:49:d3:84:44:54:2d: af:a2:fb:35:49:b8:38:4a:9e:17:88:aa:bc:b1:18:fa:e9:3d: 40:2a:d2:0f:fd:53:e6:16:18:72:2f:32:62:f8:7d:86:a9:87: f4:5b:f7:1b:38:0c:a6:d3:8b:97:58:ca:83:ec:b2:53:7c:41: ea:d6:7d:b9:1d:28:f0:78:5b:e4:01:f4:59:e4:68:60:cb:57: f4:d4:b6:e1:8d:cc:22:f4:04:87:3f:b0:4b:da:a0:a7:b7:7c: 37:fd:a5:c9:4f:eb:a9:91:af:23:21:87:70:fb:df:0b:d5:93: e4:26:33:93:86:74:67:28:52:63:09:62:2d:e9:e5:0f:c4:b7: 0c:1a:b2:57:3a:40:6a:82:84:61:45:05:c8:32:95:d2:a5:f4: 27:c8:fe:94:ec:65:3e:11:03:8b:ae:27:c0:83:f0:d9:15:a3: 2d:35:7f:77:c2:16:3b:00:b4:6f:8a:85:7e:09:cc:0f:45:74: 1f:bc:5d:4b:78:71:be:9a:2c:29:5f:15:43:aa:3c:47:72:35: 4c:3f:2c:4f:57:a6:67:35:97:1d:23:b7:be:9d:c9:0c:dc:bf: e4:8b:6b:05:98:f7:47:9b:f0:8f:af:94:81:61:84:08:04:b9: 46:c1:4d:05 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE5Cf/DbYPqLWO+OrnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyMjIwMjkzOVoXDTI4MDkyNDIwMjkzOVowLzEtMCsGA1UEAxMk YjhlNGU0OTYtOTk0Zi00ODc3LTgzMjgtYWVjNjM4NmJiYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfGBJtAlRlKVuU0XC5WdAr9CQAeAa6Gd2I/D J3Ggk7KJi+ldXVRfVv+51dDHTJrWc2jaMHXUXAcuwQMQfQ1vVBNJm0PxB3mfkd9O t5/WQ3B8b0iNQ5J+oO5MDtdjqJUM5NjtN2LzE1j1SugeTh0UPK/cjrmEMQaTOym5 LJCw064lNWVRSA0Xry+FbQ2AI2sfVaeGV1uEGcFftvJYSpUl7mH5nTYxj0JqLRh2 vv7lstwFyXJx5Gm8V8KF1XlN5LIrGPRbDAfm0zh6UxCmhCofg+vVc7awVkzsFYHZ UK1JY5uEJpkalmf6wixxAH+Ib4RW4DvVZb24s2UsesU3HLeIdwIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFE+Vmxyp/V73YCaHC766IHx681ptMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i OGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2YmJjMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I4ZTRlNDk2LTk5NGYtNDg3Ny04 MzI4LWFlYzYzODZiYmMwMS9iOGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2 YmJjMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMAwEAgABMAYDBAPGPgAwGAQCAAIwEgMHACYgANWAAAMHByYgARIQ ADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJBLAIDALctMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD5bvlGd Fo92d2IM5EnThERULa+i+zVJuDhKnheIqryxGPrpPUAq0g/9U+YWGHIvMmL4fYap h/Rb9xs4DKbTi5dYyoPsslN8QerWfbkdKPB4W+QB9FnkaGDLV/TUtuGNzCL0BIc/ sEvaoKe3fDf9pclP66mRryMhh3D73wvVk+QmM5OGdGcoUmMJYi3p5Q/Etwwaslc6 QGqChGFFBcgyldKl9CfI/pTsZT4RA4uuJ8CD8NkVoy01f3fCFjsAtG+KhX4JzA9F dB+8XUt4cb6aLClfFUOqPEdyNUw/LE9Xpmc1lx0jt76dyQzcv+SLawWY90eb8I+v lIFhhAgEuUbBTQU= -----END CERTIFICATE-----Generated at Mon Jun 29 10:35:35 2026 by rpki-client