$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f.cer File: cdd2a959-79e8-4909-9586-6fe85194182f.cer (raw, json) Hash identifier: REVg8oFzUOJ1TAdMzgO+JCRfPx69cj1sj1ZeC6hcoiU= Subject key identifier: C9:B4:1A:82:3F:22:73:D2:BB:BD:21:8C:DF:6A:D8:E9:EC:08:D9:CF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2071CCEF564256DE1B06500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 13:35:40 +0000 Certificate not after: Tue 15 Aug 2028 13:35:40 +0000 Subordinate resources: IP: 208.71.248.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:07:1c:ce:f5:64:25:6d:e1:b0:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 13:35:40 2026 GMT Not After : Aug 15 13:35:40 2028 GMT Subject: CN=cdd2a959-79e8-4909-9586-6fe85194182f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:d8:2e:fd:03:6c:dc:99:3d:e5:ff:84:0e: 44:5a:16:d3:f9:ed:3f:b0:ed:13:f6:6a:df:d2:33: 35:6c:15:c1:95:fc:02:7c:c6:94:e6:b6:15:2b:71: b0:5f:70:41:5f:26:c6:64:11:48:16:0e:44:0f:1c: 06:4d:e4:e8:ab:90:c1:84:a7:e9:40:bb:e9:2b:45: d0:93:4c:29:1a:8c:ba:d9:5d:7f:15:c7:6a:b3:fb: 53:3a:c4:eb:57:d0:35:3b:67:d9:a0:41:16:46:14: 81:e9:03:4a:85:30:1c:21:62:38:8d:b9:d7:1c:bf: 5c:86:7e:72:f8:d2:99:a3:13:c2:0a:00:7e:24:9d: 00:0f:c3:2d:ef:0b:c3:4e:19:3e:46:2f:8f:73:98: 47:b5:a7:45:2d:dd:a0:b8:0d:1c:58:b2:63:0d:df: c5:8c:76:c2:18:0f:df:b5:a5:cb:36:6b:1b:7d:36: 9f:1b:6e:d3:af:30:ce:3b:7f:fc:35:bf:ae:83:66: 29:5f:3b:08:86:84:cf:17:33:ce:18:97:a9:cb:c5: 3b:4a:8a:c5:5c:e2:ae:06:d6:5c:48:91:f1:2e:a6: 8b:c7:1d:79:e0:de:72:0d:ef:a5:08:b9:54:44:ba: 93:5d:a2:fd:92:07:79:07:87:c8:fc:8e:c9:4e:75: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B4:1A:82:3F:22:73:D2:BB:BD:21:8C:DF:6A:D8:E9:EC:08:D9:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.71.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ba:34:cd:fd:8b:af:f0:da:4e:9b:bc:40:13:11:6d:a2:0c: 4e:3e:f7:3a:d2:8a:07:5c:bf:f4:4b:3a:63:81:77:08:c0:ce: 53:26:fc:3c:d4:97:10:6f:bb:bc:06:9a:db:32:a7:c9:80:99: d7:84:c9:67:b9:96:a5:57:83:30:1e:12:10:89:fd:7c:95:e6: f5:81:41:12:03:48:10:81:75:02:85:c1:c5:17:20:9b:49:9f: 1d:b8:ec:da:48:fa:fe:43:79:c8:00:49:20:43:6c:a6:c2:8c: 30:cb:5b:fa:86:8c:aa:e8:c8:38:5c:e0:32:49:f0:a1:8d:12: 50:0b:5f:ca:d5:bc:75:bd:e8:d5:07:44:3d:91:2f:8c:e7:18: 42:28:fb:0d:e9:f2:ae:38:bb:de:e0:bf:a5:ea:96:b4:5e:1a: 27:6c:d1:0a:aa:e3:06:ce:84:4d:a3:3f:f0:a0:e2:43:07:4b: ab:0a:c8:c4:26:48:25:ce:ae:14:b0:4a:26:15:5e:ba:02:65: 91:d3:e6:4f:dc:32:0e:55:77:f1:d7:99:57:6d:01:15:d1:51: 9b:db:7c:32:96:55:44:f1:49:b3:cd:45:70:93:f1:cd:15:0c: fe:b9:6c:71:7f:92:ec:7b:c0:c9:2c:08:33:2a:76:d9:dd:4f: 55:74:36:21 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3SBxzO9WQlbeGwZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzEzMzU0MFoXDTI4MDgxNTEzMzU0MFowLzEtMCsGA1UEAxMk Y2RkMmE5NTktNzllOC00OTA5LTk1ODYtNmZlODUxOTQxODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ojYLv0DbNyZPeX/hA5EWhbT+e0/sO0T9mrf 0jM1bBXBlfwCfMaU5rYVK3GwX3BBXybGZBFIFg5EDxwGTeToq5DBhKfpQLvpK0XQ k0wpGoy62V1/Fcdqs/tTOsTrV9A1O2fZoEEWRhSB6QNKhTAcIWI4jbnXHL9chn5y +NKZoxPCCgB+JJ0AD8Mt7wvDThk+Ri+Pc5hHtadFLd2guA0cWLJjDd/FjHbCGA/f taXLNmsbfTafG27TrzDOO3/8Nb+ug2YpXzsIhoTPFzPOGJepy8U7SorFXOKuBtZc SJHxLqaLxx154N5yDe+lCLlURLqTXaL9kgd5B4fI/I7JTnXyzQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMm0GoI/InPSu70hjN9q2OnsCNnPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j ZGQyYTk1OS03OWU4LTQ5MDktOTU4Ni02ZmU4NTE5NDE4MmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NkZDJhOTU5LTc5ZTgtNDkwOS05 NTg2LTZmZTg1MTk0MTgyZi9jZGQyYTk1OS03OWU4LTQ5MDktOTU4Ni02ZmU4NTE5 NDE4MmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHQR/gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJbo0zf2Lr/DaTpu8QBMR baIMTj73OtKKB1y/9Es6Y4F3CMDOUyb8PNSXEG+7vAaa2zKnyYCZ14TJZ7mWpVeD MB4SEIn9fJXm9YFBEgNIEIF1AoXBxRcgm0mfHbjs2kj6/kN5yABJIENspsKMMMtb +oaMqujIOFzgMknwoY0SUAtfytW8db3o1QdEPZEvjOcYQij7Denyrji73uC/peqW tF4aJ2zRCqrjBs6ETaM/8KDiQwdLqwrIxCZIJc6uFLBKJhVeugJlkdPmT9wyDlV3 8deZV20BFdFRm9t8MpZVRPFJs81FcJPxzRUM/rlscX+S7HvAySwIMyp22d1PVXQ2 IQ== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:28 2026 by rpki-client