$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cca97b7c-ae3c-4e7f-8b03-70cf525b484f.cer File: cca97b7c-ae3c-4e7f-8b03-70cf525b484f.cer (raw, json) Hash identifier: fzU3BEfYL4cchRxo8FiJWBalAYSALOiLONniPoId5io= Subject key identifier: 7E:AD:77:3E:CD:E5:6C:18:B9:66:2B:7F:7F:44:4B:12:EA:CE:33:75 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD25607F81F8C459002DDB400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cca97b7c-ae3c-4e7f-8b03-70cf525b484f/cca97b7c-ae3c-4e7f-8b03-70cf525b484f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cca97b7c-ae3c-4e7f-8b03-70cf525b484f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 16:14:40 +0000 Certificate not after: Tue 15 Aug 2028 16:14:40 +0000 Subordinate resources: AS: 36609 IP: 192.70.243.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:56:07:f8:1f:8c:45:90:02:dd:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 16:14:40 2026 GMT Not After : Aug 15 16:14:40 2028 GMT Subject: CN=cca97b7c-ae3c-4e7f-8b03-70cf525b484f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:58:e7:a6:e8:3c:77:f1:be:f3:1e:52:b1: aa:4f:f8:f8:64:86:28:4b:f3:cf:ae:45:35:4f:0d: 7c:e6:9f:44:95:a2:44:a8:d2:ef:0f:30:f5:51:11: 59:72:da:2a:aa:22:06:dd:3f:6d:91:f8:88:3f:9f: 7d:81:f8:9e:df:25:42:f6:bd:00:74:37:50:57:81: cd:92:59:5e:48:41:08:0e:b8:3d:42:23:20:88:c7: 6e:53:39:e1:88:8b:99:9a:cf:13:f3:a8:a4:a7:34: 4c:bc:30:fd:cb:56:0d:b0:f9:b7:a4:a0:48:e5:fc: 58:3e:2b:a4:ae:c0:0d:a5:39:43:0f:09:8c:e6:77: 47:af:2d:42:2d:3a:21:8c:d0:66:75:cd:24:cc:0d: 40:6d:d5:28:45:6f:86:87:b1:e8:fe:ca:03:d3:b4: 10:80:ce:d3:15:0a:26:34:74:17:93:5b:ba:82:ec: ec:cd:28:2e:23:c8:c6:91:e0:77:52:f6:d7:99:6d: 2f:4d:05:9f:ab:9e:21:ee:28:92:1c:15:5d:a5:03: 41:29:10:f9:92:18:80:a0:36:d9:9b:40:02:73:ed: a4:77:35:07:d2:3c:3a:68:25:46:c2:5e:02:e5:73: a4:9f:5b:12:8b:70:6c:be:38:c5:1f:98:7c:de:0e: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AD:77:3E:CD:E5:6C:18:B9:66:2B:7F:7F:44:4B:12:EA:CE:33:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cca97b7c-ae3c-4e7f-8b03-70cf525b484f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cca97b7c-ae3c-4e7f-8b03-70cf525b484f/cca97b7c-ae3c-4e7f-8b03-70cf525b484f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.70.243.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36609 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:92:84:1c:3e:12:04:f2:02:28:fb:83:c1:9a:44:df:6a:e1: 5d:f8:e1:81:b3:01:e0:be:47:b5:a4:38:ab:77:0d:e7:7d:8f: 7a:04:88:c0:fe:87:4c:26:49:97:6e:b3:98:6a:1e:18:89:e1: 66:be:a9:15:76:f7:d7:b6:f7:e1:ec:cd:65:1a:10:33:cf:0b: b2:d0:42:47:e9:97:0d:a9:c7:a9:9f:b1:cb:17:2d:d9:03:26: 2d:a0:2c:79:01:a1:44:30:2c:ce:4c:65:09:8e:91:e6:5b:e3: 08:c3:ca:1e:76:e9:c8:93:a7:f5:01:19:7d:44:51:42:d2:b1: b9:7c:97:6b:40:3a:02:68:06:0e:5c:df:05:86:3c:7e:88:42: 99:9e:9b:6d:e1:8f:21:2e:3f:0d:0e:50:21:db:d5:4b:bb:87: a6:59:5c:cd:8c:4f:a7:b0:17:53:25:a2:85:4c:8a:6c:2e:29: 81:f8:55:bb:36:ec:94:33:f2:86:da:3b:a9:02:ea:1b:34:98: d4:83:16:82:f7:9b:14:48:2b:e1:e0:dd:59:c5:71:db:de:47: 1d:36:77:4d:f9:f2:08:64:b2:37:d5:27:e5:6c:96:cf:84:6d: 4a:f0:4e:ab:9c:27:2b:cb:88:1d:7c:f2:bb:e3:d9:3a:36:53: 78:be:2d:6f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3SVgf4H4xFkALdtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzE2MTQ0MFoXDTI4MDgxNTE2MTQ0MFowLzEtMCsGA1UEAxMk Y2NhOTdiN2MtYWUzYy00ZTdmLThiMDMtNzBjZjUyNWI0ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvpY56boPHfxvvMeUrGqT/j4ZIYoS/PPrkU1 Tw185p9ElaJEqNLvDzD1URFZctoqqiIG3T9tkfiIP599gfie3yVC9r0AdDdQV4HN klleSEEIDrg9QiMgiMduUznhiIuZms8T86ikpzRMvDD9y1YNsPm3pKBI5fxYPiuk rsANpTlDDwmM5ndHry1CLTohjNBmdc0kzA1AbdUoRW+Gh7Ho/soD07QQgM7TFQom NHQXk1u6guzszSguI8jGkeB3UvbXmW0vTQWfq54h7iiSHBVdpQNBKRD5khiAoDbZ m0ACc+2kdzUH0jw6aCVGwl4C5XOkn1sSi3BsvjjFH5h83g5HlQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFH6tdz7N5WwYuWYrf39ESxLqzjN1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j Y2E5N2I3Yy1hZTNjLTRlN2YtOGIwMy03MGNmNTI1YjQ4NGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NjYTk3YjdjLWFlM2MtNGU3Zi04 YjAzLTcwY2Y1MjViNDg0Zi9jY2E5N2I3Yy1hZTNjLTRlN2YtOGIwMy03MGNmNTI1 YjQ4NGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADARvMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI8BMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF2ShBw+EgTyAij7g8GaRN9q4V344YGzAeC+R7WkOKt3Ded9 j3oEiMD+h0wmSZdus5hqHhiJ4Wa+qRV299e29+HszWUaEDPPC7LQQkfplw2px6mf scsXLdkDJi2gLHkBoUQwLM5MZQmOkeZb4wjDyh526ciTp/UBGX1EUULSsbl8l2tA OgJoBg5c3wWGPH6IQpmem23hjyEuPw0OUCHb1Uu7h6ZZXM2MT6ewF1MlooVMimwu KYH4Vbs27JQz8obaO6kC6hs0mNSDFoL3mxRIK+Hg3VnFcdveRx02d0358ghksjfV J+Vsls+EbUrwTqucJyvLiB188rvj2To2U3i+LW8= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:43 2026 by rpki-client