$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer File: cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer (raw, json) Hash identifier: 01E2d0XiuYJrxtOPCAdJM1p5FKTGyyVaaP2HMtY/VNI= Subject key identifier: D7:E9:89:F4:FE:1A:A3:D4:77:5D:72:A2:D3:6B:F3:6F:09:AF:79:F6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E0F86D5AE15D9F68CEED0E8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jun 2026 14:17:19 +0000 Certificate not after: Wed 06 Sep 2028 14:17:19 +0000 Subordinate resources: AS: 402522 IP: 209.135.130.0/24 IP: 2602:f3ab::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0f:86:d5:ae:15:d9:f6:8c:ee:d0:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 4 14:17:19 2026 GMT Not After : Sep 6 14:17:19 2028 GMT Subject: CN=cc8e57f5-c971-4f28-a6f5-b3c62be56cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:1d:0d:cf:14:c7:71:d8:fc:50:89:ac:37: 6b:58:b8:c3:9d:3c:6e:4f:0f:37:1c:f9:dc:72:b0: 11:05:80:cd:65:cf:51:60:8a:3f:2f:04:04:50:3b: 78:38:4d:ec:bc:56:6c:68:17:ce:b0:37:ea:6c:39: 1e:65:26:73:4e:0b:2c:e9:a5:71:43:46:1e:0f:0a: 97:fd:14:9e:b0:51:98:37:8d:1a:66:65:e9:4b:2a: ab:bb:5d:cd:bc:a2:d5:31:10:8e:d8:42:9e:d4:79: 57:df:19:7f:22:ee:c8:dc:a5:8d:0f:b1:a5:0e:fe: 28:c8:0c:b7:40:19:aa:a3:c7:00:e9:73:3e:6c:ee: 23:b2:1b:30:fa:8b:4e:55:1c:9d:b9:56:18:67:11: 3a:10:d1:38:6f:9c:29:a1:39:66:6a:94:77:be:0e: dd:3c:56:af:8f:75:4b:f8:f1:d3:d7:3f:97:71:2a: 62:36:d5:57:59:06:91:48:a5:5f:04:b5:3b:74:68: 9d:68:0e:94:7c:3b:6e:60:b6:67:84:59:a0:ce:66: d1:b3:eb:61:a2:dc:40:0b:cf:8c:85:40:1e:50:fc: 66:49:60:b7:d1:56:72:ab:22:9e:55:70:e0:02:9d: e5:09:d0:ce:3d:86:c0:0e:0e:bb:7f:6e:30:51:65: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E9:89:F4:FE:1A:A3:D4:77:5D:72:A2:D3:6B:F3:6F:09:AF:79:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 209.135.130.0/24 IPv6: 2602:f3ab::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402522 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2e:91:e7:dd:e0:8a:1d:ae:64:61:2c:53:ed:68:08:99:23: b1:3a:58:cf:14:65:ca:76:d2:56:63:87:6b:86:09:7f:87:11: 65:23:e2:00:39:9f:20:1c:cd:ee:fe:a3:1f:75:39:4d:fd:29: b9:87:1b:9b:31:2a:8a:cc:6a:24:00:95:bb:49:15:d7:50:a0: 83:a2:de:a0:f8:02:5d:48:4d:d8:bc:71:02:2e:8e:a2:69:a1: 51:84:e4:25:ee:cf:f6:92:77:65:b5:a2:5e:0f:bc:61:6d:96: 09:36:da:50:57:7e:d9:ba:23:fc:06:19:7e:4b:30:43:2f:72: c0:f5:49:cd:29:ef:92:d6:5d:03:5a:3e:41:31:24:00:66:c2: 60:f8:41:7c:cb:64:85:76:90:3e:b1:da:aa:46:e3:d1:98:47: b9:ad:3b:64:70:01:dd:10:ce:af:e5:a5:2f:0b:19:95:de:80: 33:87:37:68:16:70:f7:c3:9c:e9:a2:5f:1a:c7:19:a5:31:35: 19:b7:09:ec:2c:20:e0:30:7e:9d:d2:df:d8:f6:23:51:ee:4a: 06:92:6b:12:27:87:4a:12:65:75:90:13:f5:90:04:9b:a2:49: b3:07:2a:46:22:3e:e7:34:82:54:18:d8:aa:8f:51:72:83:d8: 5f:e1:b9:33 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE4PhtWuFdn2jO7Q6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwNDE0MTcxOVoXDTI4MDkwNjE0MTcxOVowLzEtMCsGA1UEAxMk Y2M4ZTU3ZjUtYzk3MS00ZjI4LWE2ZjUtYjNjNjJiZTU2Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2EdDc8Ux3HY/FCJrDdrWLjDnTxuTw83HPnc crARBYDNZc9RYIo/LwQEUDt4OE3svFZsaBfOsDfqbDkeZSZzTgss6aVxQ0YeDwqX /RSesFGYN40aZmXpSyqru13NvKLVMRCO2EKe1HlX3xl/Iu7I3KWND7GlDv4oyAy3 QBmqo8cA6XM+bO4jshsw+otOVRyduVYYZxE6ENE4b5wpoTlmapR3vg7dPFavj3VL +PHT1z+XcSpiNtVXWQaRSKVfBLU7dGidaA6UfDtuYLZnhFmgzmbRs+thotxAC8+M hUAeUPxmSWC30VZyqyKeVXDgAp3lCdDOPYbADg67f24wUWVDHQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNfpifT+GqPUd11yotNr828Jr3n2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j YzhlNTdmNS1jOTcxLTRmMjgtYTZmNS1iM2M2MmJlNTZjZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NjOGU1N2Y1LWM5NzEtNGYyOC1h NmY1LWIzYzYyYmU1NmNlYS9jYzhlNTdmNS1jOTcxLTRmMjgtYTZmNS1iM2M2MmJl NTZjZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADRh4IwDgQCAAIwCAMGACYC86sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkWjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKLpHn3eCKHa5kYSxT7WgImSOx OljPFGXKdtJWY4drhgl/hxFlI+IAOZ8gHM3u/qMfdTlN/Sm5hxubMSqKzGokAJW7 SRXXUKCDot6g+AJdSE3YvHECLo6iaaFRhOQl7s/2kndltaJeD7xhbZYJNtpQV37Z uiP8Bhl+SzBDL3LA9UnNKe+S1l0DWj5BMSQAZsJg+EF8y2SFdpA+sdqqRuPRmEe5 rTtkcAHdEM6v5aUvCxmV3oAzhzdoFnD3w5zpol8axxmlMTUZtwnsLCDgMH6d0t/Y 9iNR7koGkmsSJ4dKEmV1kBP1kASbokmzBypGIj7nNIJUGNiqj1Fyg9hf4bkz -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:36 2026 by rpki-client