$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer File: ce13cd65-cc2f-4c94-9d69-2a6db846736d.cer (raw, json) Hash identifier: QZTJWoZItIJ76gTw13rxwDR2+326G7rY1kBXqHFoTCg= Subject key identifier: 09:3F:74:3A:18:E7:71:42:8E:0B:0F:83:23:7E:63:24:97:34:A0:33 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE2381C4491B385F12817F900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 May 2026 08:47:19 +0000 Certificate not after: Mon 21 Aug 2028 08:47:19 +0000 Subordinate resources: AS: 14598 IP: 192.245.87.0/24 IP: 2602:f907::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:38:1c:44:91:b3:85:f1:28:17:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 19 08:47:19 2026 GMT Not After : Aug 21 08:47:19 2028 GMT Subject: CN=ce13cd65-cc2f-4c94-9d69-2a6db846736d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:03:fb:08:4b:ed:eb:a2:6d:c4:36:d0:6a:a5: 37:91:13:2d:cc:87:b9:e7:7f:41:78:c8:92:34:ff: 4e:e8:1e:2d:c8:b2:c5:e5:89:d2:57:8e:26:13:1f: 8c:30:a8:73:5a:8d:3c:10:78:b4:89:13:67:d1:e8: eb:f7:32:27:86:bb:7e:28:35:ee:0a:e0:aa:91:29: dd:e2:77:d8:4b:0b:81:14:a1:3d:70:8f:5f:c2:1b: 76:bd:aa:65:98:c6:1c:e6:85:bc:d2:ab:7f:e6:eb: ba:52:ff:b0:2e:e4:a1:b7:24:30:79:fe:f0:96:0f: d5:60:70:93:fb:a1:3c:ac:bf:e3:14:bd:79:63:ab: 6f:0e:d3:8d:6d:55:70:b5:d0:f3:51:93:58:fa:4b: b4:c8:4c:0d:ff:d7:ab:73:7c:48:88:18:24:d8:47: 1a:b4:3e:b7:d4:3e:d0:b8:5e:97:db:7a:03:98:ed: 3d:f1:c8:15:d0:ce:53:85:1e:6c:2c:ec:6b:e5:c3: 56:9d:dd:85:6d:92:4d:78:bb:27:36:3e:73:ed:ae: 8d:bd:d6:e6:fa:7c:1a:0e:f2:ab:0e:88:a9:e1:26: d0:20:c7:67:b3:d8:1b:78:76:f2:2a:ab:e9:75:41: 30:7e:af:e2:bf:69:ea:d9:08:7f:32:4c:6f:b5:67: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3F:74:3A:18:E7:71:42:8E:0B:0F:83:23:7E:63:24:97:34:A0:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce13cd65-cc2f-4c94-9d69-2a6db846736d/ce13cd65-cc2f-4c94-9d69-2a6db846736d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.245.87.0/24 IPv6: 2602:f907::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14598 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3a:44:1f:4b:a7:af:65:1f:6c:83:81:14:10:8c:9e:f0:76: 4a:20:30:e6:e8:5d:36:46:d7:62:ee:4f:77:dc:ce:1a:61:01: 85:3c:91:e5:85:bb:b8:46:9c:85:a3:da:c3:89:d6:42:7d:32: 24:63:3d:0e:c2:df:75:45:90:c7:96:7d:c8:d1:02:16:b9:e8: 1d:9c:ea:ef:7c:43:fc:6b:29:7a:ed:ad:1c:f1:a3:82:b5:f5: 61:5c:93:b4:e3:b1:bf:ee:72:19:c1:a4:fa:51:e2:b7:7e:3e: 63:5b:e1:d9:db:b1:99:34:17:c1:4a:dc:dd:b9:6d:eb:bb:0a: e3:0d:62:2b:4c:b3:b9:d5:ab:13:7a:a2:5b:bd:14:4d:3b:06: 0f:f3:1f:3e:13:5b:a1:4b:c1:24:d2:ce:16:cf:96:4c:fb:ef: 31:03:17:cc:cc:44:4a:ba:1e:aa:a2:ab:6c:d7:ba:b1:fd:27: 3a:cb:29:5c:25:e9:0c:6f:bf:a1:b5:b4:80:c0:54:bb:b2:43: a3:72:26:1b:1f:cb:e0:ad:5c:e9:a1:bb:e7:a0:c6:d2:56:68: b6:d8:2a:b4:17:5e:14:cd:7d:fc:f8:4e:e7:95:3a:b8:64:bc: 70:39:1a:f8:46:25:8d:a4:8f:94:4c:f8:fb:36:dc:c6:36:27: f2:cf:14:7b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE3iOBxEkbOF8SgX+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxOTA4NDcxOVoXDTI4MDgyMTA4NDcxOVowLzEtMCsGA1UEAxMk Y2UxM2NkNjUtY2MyZi00Yzk0LTlkNjktMmE2ZGI4NDY3MzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwP7CEvt66JtxDbQaqU3kRMtzIe5539BeMiS NP9O6B4tyLLF5YnSV44mEx+MMKhzWo08EHi0iRNn0ejr9zInhrt+KDXuCuCqkSnd 4nfYSwuBFKE9cI9fwht2vaplmMYc5oW80qt/5uu6Uv+wLuShtyQwef7wlg/VYHCT +6E8rL/jFL15Y6tvDtONbVVwtdDzUZNY+ku0yEwN/9erc3xIiBgk2EcatD631D7Q uF6X23oDmO098cgV0M5ThR5sLOxr5cNWnd2FbZJNeLsnNj5z7a6Nvdbm+nwaDvKr Doip4SbQIMdns9gbeHbyKqvpdUEwfq/iv2nq2Qh/MkxvtWcm6wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAk/dDoY53FCjgsPgyN+YySXNKAzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j ZTEzY2Q2NS1jYzJmLTRjOTQtOWQ2OS0yYTZkYjg0NjczNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NlMTNjZDY1LWNjMmYtNGM5NC05 ZDY5LTJhNmRiODQ2NzM2ZC9jZTEzY2Q2NS1jYzJmLTRjOTQtOWQ2OS0yYTZkYjg0 NjczNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADA9VcwDgQCAAIwCAMGBCYC+QcAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjkGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD06RB9Lp69lH2yDgRQQjJ7wdkog MOboXTZG12LuT3fczhphAYU8keWFu7hGnIWj2sOJ1kJ9MiRjPQ7C33VFkMeWfcjR Aha56B2c6u98Q/xrKXrtrRzxo4K19WFck7Tjsb/uchnBpPpR4rd+PmNb4dnbsZk0 F8FK3N25beu7CuMNYitMs7nVqxN6olu9FE07Bg/zHz4TW6FLwSTSzhbPlkz77zED F8zMREq6Hqqiq2zXurH9JzrLKVwl6Qxvv6G1tIDAVLuyQ6NyJhsfy+CtXOmhu+eg xtJWaLbYKrQXXhTNffz4TueVOrhkvHA5GvhGJY2kj5RM+Ps23MY2J/LPFHs= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:39 2026 by rpki-client