$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787.cer File: bc7849f1-d089-4d74-8be1-86f1735f6787.cer (raw, json) Hash identifier: kA3e9ZcEKpKioPXeAeEOh7Jh/joOcE0OZdEily1C3ng= Subject key identifier: 01:5D:34:DC:5F:D3:AF:AB:19:2B:81:6F:1C:B0:3A:A2:C6:DB:AE:23 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DFE132B8D788ED0E882116C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/bc7849f1-d089-4d74-8be1-86f1735f6787.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 May 2026 08:15:31 +0000 Certificate not after: Thu 31 Aug 2028 08:15:31 +0000 Subordinate resources: AS: 398487 IP: 64.190.191.0/24 IP: 104.204.250.0/23 IP: 162.213.70.0/23 IP: 172.86.158.0/24 IP: 204.124.168.0/23 IP: 205.174.159.0/24 IP: 216.245.134.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:13:2b:8d:78:8e:d0:e8:82:11:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 29 08:15:31 2026 GMT Not After : Aug 31 08:15:31 2028 GMT Subject: CN=bc7849f1-d089-4d74-8be1-86f1735f6787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:79:4b:5a:53:0e:4b:05:86:a6:ff:12:cb:1c: 25:7b:c5:3b:d8:80:89:c2:c6:92:89:00:ed:e6:02: 5b:ea:75:8a:55:5f:e3:0c:90:1a:2b:1c:9e:41:59: 00:45:aa:e9:48:30:e2:63:94:5a:26:8a:87:86:01: 7a:37:33:22:e2:e4:f0:8a:2e:7e:b8:1f:ec:54:28: d2:10:ee:99:55:e1:7d:00:6f:7a:4c:57:1b:2e:8f: 19:ab:df:8f:2d:60:05:1e:04:59:44:86:cd:64:9d: d8:4e:26:bb:15:b3:da:bd:8e:97:f5:e8:3d:1f:44: d7:07:92:7d:3e:28:2e:df:5a:4e:2d:ab:11:5a:2b: 4e:12:c9:08:bc:10:0e:3b:c0:09:bb:c7:04:1e:fb: a1:f3:2f:d3:2b:dc:d6:a2:65:b0:d6:fe:c5:52:6c: 9a:fb:26:2a:b0:3b:b8:29:3d:18:cb:71:9a:aa:9c: ec:7c:6b:69:92:50:e9:db:dc:2b:d9:4e:a4:7e:50: 2f:64:95:dd:24:59:cc:12:c3:17:50:e4:68:7d:2c: 8f:a0:d5:d2:68:a3:40:5a:f8:23:6a:ef:e3:4c:b9: 9c:c0:6d:21:c5:ab:05:49:2c:7e:97:60:b4:38:d2: 1b:8f:7c:c4:1c:ee:9b:18:7d:8d:c2:1e:64:50:82: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:34:DC:5F:D3:AF:AB:19:2B:81:6F:1C:B0:3A:A2:C6:DB:AE:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/bc7849f1-d089-4d74-8be1-86f1735f6787.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.190.191.0/24 104.204.250.0/23 162.213.70.0/23 172.86.158.0/24 204.124.168.0/23 205.174.159.0/24 216.245.134.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398487 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:49:26:1b:78:0b:d1:a8:3e:31:e2:61:f6:19:4a:4a:61:44: a4:cd:31:ae:e8:70:94:dc:33:81:a2:b6:aa:a3:c7:3e:8d:e5: ae:b7:db:db:72:e7:8b:66:73:c9:17:c6:9c:12:20:db:05:0c: 72:b6:81:a6:50:7f:ff:6d:07:ad:07:a1:eb:23:8a:a3:70:93: 4b:62:07:e8:17:59:5f:08:fe:0f:ce:a4:57:3f:5e:a8:b4:e1: d3:6b:0b:cc:f7:63:2d:3e:60:66:71:d7:e0:69:05:5b:ea:06: 3d:9c:3c:e7:49:18:04:2d:b0:42:66:6f:58:67:05:a4:ab:f2: ee:51:7d:65:83:54:a1:b8:0c:22:ec:4d:5d:95:e5:27:67:d5: e3:e9:34:da:0a:f0:bc:e9:c4:93:f9:fb:34:b2:c5:95:66:52: 2d:e6:76:f7:81:bd:fc:16:f5:f1:97:eb:a5:5f:48:3b:0f:f6: 96:80:53:80:df:23:d2:1f:bd:70:90:29:3d:d4:d9:ff:a7:b0: 3e:17:9a:40:cc:de:c5:fe:2d:41:43:c7:b7:f0:e6:89:a7:8d: 8f:fe:85:8f:54:d7:33:01:9a:72:29:9c:fd:74:33:d3:73:77: f0:9c:5f:d5:9e:40:62:e0:49:85:c7:35:31:45:e8:ae:6e:1a: 4b:ed:c4:de -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWE3+EyuNeI7Q6IIRbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyOTA4MTUzMVoXDTI4MDgzMTA4MTUzMVowLzEtMCsGA1UEAxMk YmM3ODQ5ZjEtZDA4OS00ZDc0LThiZTEtODZmMTczNWY2Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnlLWlMOSwWGpv8Syxwle8U72ICJwsaSiQDt 5gJb6nWKVV/jDJAaKxyeQVkARarpSDDiY5RaJoqHhgF6NzMi4uTwii5+uB/sVCjS EO6ZVeF9AG96TFcbLo8Zq9+PLWAFHgRZRIbNZJ3YTia7FbPavY6X9eg9H0TXB5J9 Pigu31pOLasRWitOEskIvBAOO8AJu8cEHvuh8y/TK9zWomWw1v7FUmya+yYqsDu4 KT0Yy3GaqpzsfGtpklDp29wr2U6kflAvZJXdJFnMEsMXUORofSyPoNXSaKNAWvgj au/jTLmcwG0hxasFSSx+l2C0ONIbj3zEHO6bGH2Nwh5kUILmUwIDAQABo4IEPzCC BDswHQYDVR0OBBYEFAFdNNxf06+rGSuBbxywOqLG264jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i Yzc4NDlmMS1kMDg5LTRkNzQtOGJlMS04NmYxNzM1ZjY3ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2JjNzg0OWYxLWQwODktNGQ3NC04 YmUxLTg2ZjE3MzVmNjc4Ny9iYzc4NDlmMS1kMDg5LTRkNzQtOGJlMS04NmYxNzM1 ZjY3ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBABAvr8DBAFozPoDBAGi1UYDBACsVp4DBAHMfKgD BADNrp8DBAHY9YYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhSXMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFNJJht4C9GoPjHiYfYZSkphRKTNMa7ocJTcM4Gitqqjxz6N5a6329ty54tmc8kX xpwSINsFDHK2gaZQf/9tB60HoesjiqNwk0tiB+gXWV8I/g/OpFc/Xqi04dNrC8z3 Yy0+YGZx1+BpBVvqBj2cPOdJGAQtsEJmb1hnBaSr8u5RfWWDVKG4DCLsTV2V5Sdn 1ePpNNoK8LzpxJP5+zSyxZVmUi3mdveBvfwW9fGX66VfSDsP9paAU4DfI9IfvXCQ KT3U2f+nsD4XmkDM3sX+LUFDx7fw5omnjY/+hY9U1zMBmnIpnP10M9Nzd/CcX9We QGLgSYXHNTFF6K5uGkvtxN4= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:31 2026 by rpki-client