$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35.cer File: b9227650-f65a-47df-b36e-587872f9eb35.cer (raw, json) Hash identifier: zQb/DH1QXe50hPsVsMb81bNlcOj+1otuSz+dvkY1B2M= Subject key identifier: 24:95:F0:A3:A0:F8:75:BB:4C:98:BF:21:E0:60:F3:F0:5C:8E:53:9E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E0D66E976B767355F5BC9EE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jun 2026 20:01:23 +0000 Certificate not after: Tue 05 Sep 2028 20:01:23 +0000 Subordinate resources: AS: 402128 IP: 167.254.192.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:66:e9:76:b7:67:35:5f:5b:c9:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 3 20:01:23 2026 GMT Not After : Sep 5 20:01:23 2028 GMT Subject: CN=b9227650-f65a-47df-b36e-587872f9eb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:10:23:3b:22:05:56:41:99:d8:b7:92:8c: 65:7b:d4:b9:80:8a:74:ba:a0:7f:05:d3:17:11:4e: 04:56:aa:bb:6a:1d:ad:b3:e6:86:af:17:df:5c:fd: 18:d3:92:a6:c8:cc:61:e5:1d:52:a5:ef:41:19:67: 99:94:34:8d:b3:cd:d8:4c:72:85:a3:d1:67:57:81: dd:f0:98:a8:1d:ed:b6:79:35:2a:39:d4:7e:af:ed: b8:3f:ab:6d:a0:83:d3:6e:5f:4e:51:a5:41:3e:54: b9:6d:ee:ee:ec:df:e8:e2:ea:92:a1:b5:59:6c:ab: 4c:c2:c8:1c:f8:1f:6a:b9:49:d0:58:e8:2a:3e:76: 15:a6:00:50:cf:2a:75:5d:7f:f3:be:9d:5b:d7:7f: a7:89:cc:b3:a3:93:29:1b:93:f4:aa:10:9d:5d:59: e0:da:b7:f1:45:2a:be:e7:5a:b6:13:5e:bd:ca:46: ae:c2:27:99:be:fd:44:63:97:b1:ec:e6:d7:d5:5e: ef:89:df:ce:37:68:96:09:f6:9d:76:28:c7:db:96: 43:71:c9:a3:64:5f:2f:84:50:83:b0:ae:f3:62:50: 46:fd:a9:7e:23:2d:c9:ae:f2:62:c9:e7:d4:35:d2: 6f:9e:dd:49:74:58:a4:12:28:a7:c8:d6:32:c5:72: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:95:F0:A3:A0:F8:75:BB:4C:98:BF:21:E0:60:F3:F0:5C:8E:53:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 167.254.192.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c1:13:cf:24:8f:77:c4:4d:3a:e6:20:4a:e7:68:df:5c:b0: 6a:2e:6b:05:2c:8a:58:8e:04:b8:b7:89:0e:6f:1d:50:71:a6: 0a:84:c6:42:3b:13:ae:7e:f7:7c:54:81:de:aa:f7:ad:4a:49: 66:52:1b:ce:42:a9:2e:e7:6c:c4:de:a9:0b:bb:be:75:2d:f2: 9b:24:ad:b5:b2:93:0f:bb:f4:e6:d5:a2:c1:1f:73:4d:6f:8f: 00:b5:3b:f0:65:fa:ec:73:81:35:6c:fa:82:32:d7:f9:f7:f6: c4:7a:81:0f:0a:75:86:15:4f:1b:e8:64:f5:b2:b1:9c:ce:91: bd:c5:b4:96:26:06:ce:23:2a:8b:95:6a:2c:bf:ff:ff:72:cd: 04:55:17:f5:22:19:9b:c3:c5:80:f3:9f:4e:d1:b1:42:4c:33: 5b:84:0b:80:a8:7f:c8:b3:27:6c:87:52:f1:6a:4d:a9:de:b7: e8:1b:9f:1b:cd:e8:73:24:d6:5d:89:a7:0e:24:db:83:cf:f7: a2:1a:7c:ad:45:89:a8:95:8b:2b:78:e8:39:cc:8a:30:7a:4c: 54:18:ee:09:28:86:18:74:61:09:7c:b9:d7:b2:5c:29:11:01: 3d:da:26:dc:a7:c5:9a:67:85:00:8d:8f:df:78:98:0f:3c:33: 30:29:bb:41 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE4NZul2t2c1X1vJ7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwMzIwMDEyM1oXDTI4MDkwNTIwMDEyM1owLzEtMCsGA1UEAxMk YjkyMjc2NTAtZjY1YS00N2RmLWIzNmUtNTg3ODcyZjllYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyQQIzsiBVZBmdi3koxle9S5gIp0uqB/BdMX EU4EVqq7ah2ts+aGrxffXP0Y05KmyMxh5R1Spe9BGWeZlDSNs83YTHKFo9FnV4Hd 8JioHe22eTUqOdR+r+24P6ttoIPTbl9OUaVBPlS5be7u7N/o4uqSobVZbKtMwsgc +B9quUnQWOgqPnYVpgBQzyp1XX/zvp1b13+nicyzo5MpG5P0qhCdXVng2rfxRSq+ 51q2E169ykauwieZvv1EY5ex7ObX1V7vid/ON2iWCfaddijH25ZDccmjZF8vhFCD sK7zYlBG/al+Iy3JrvJiyefUNdJvnt1JdFikEiinyNYyxXISRQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCSV8KOg+HW7TJi/IeBg8/BcjlOeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i OTIyNzY1MC1mNjVhLTQ3ZGYtYjM2ZS01ODc4NzJmOWViMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I5MjI3NjUwLWY2NWEtNDdkZi1i MzZlLTU4Nzg3MmY5ZWIzNS9iOTIyNzY1MC1mNjVhLTQ3ZGYtYjM2ZS01ODc4NzJm OWViMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOn/sAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiLQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABzBE88kj3fETTrmIErnaN9csGouawUsiliOBLi3iQ5vHVBx pgqExkI7E65+93xUgd6q961KSWZSG85CqS7nbMTeqQu7vnUt8pskrbWykw+79ObV osEfc01vjwC1O/Bl+uxzgTVs+oIy1/n39sR6gQ8KdYYVTxvoZPWysZzOkb3FtJYm Bs4jKouVaiy///9yzQRVF/UiGZvDxYDzn07RsUJMM1uEC4Cof8izJ2yHUvFqTane t+gbnxvN6HMk1l2Jpw4k24PP96IafK1FiaiViyt46DnMijB6TFQY7gkohhh0YQl8 udeyXCkRAT3aJtynxZpnhQCNj994mA88MzApu0E= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:24 2026 by rpki-client