$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301.cer File: ce873e69-2136-49b1-9533-e478f41d2301.cer (raw, json) Hash identifier: ZcxCsHzRRqqGkM40TQ1c1xLWiPVnZW2UAXpmHgtPql0= Subject key identifier: CD:58:0A:52:DA:E2:D1:72:D1:6E:D6:1D:12:E5:69:BD:F3:97:A7:B0 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE36B4B9E268DDCBE21B4D400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 May 2026 19:06:15 +0000 Certificate not after: Tue 01 Aug 2028 21:01:07 +0000 Subordinate resources: AS: 33503 IP: 141.106.0.0/16 IP: 2620:10d::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e3:6b:4b:9e:26:8d:dc:be:21:b4:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 19 19:06:15 2026 GMT Not After : Aug 1 21:01:07 2028 GMT Subject: CN=ce873e69-2136-49b1-9533-e478f41d2301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:a4:74:98:08:bb:5f:a9:7a:ca:2b:a7:fc: bf:2a:e9:29:16:46:ef:f1:46:19:c7:b8:14:90:77: 8a:22:55:2a:e8:89:0b:89:0e:e2:9c:ef:9e:8d:8e: 32:46:fe:fb:1d:be:75:ac:67:1b:a2:6e:34:44:57: 20:6c:ab:44:ce:c8:96:4c:25:35:00:58:ab:93:b8: 05:b4:4f:ea:17:41:f9:a2:90:9f:c6:57:34:a6:bb: 77:b6:d6:95:1c:01:b0:b9:b2:8c:d3:ff:d8:38:0a: e2:e5:cc:43:fb:ca:16:3a:16:07:42:22:7e:dd:5f: 49:93:84:db:30:ea:a5:94:fa:8b:1c:6a:c3:ab:ea: f8:36:49:a1:9c:de:a8:d1:60:4b:a9:9b:3f:ad:24: 12:9f:b6:80:86:ee:92:14:78:11:b5:ff:39:8b:98: a3:ef:f5:b2:16:78:90:6e:ee:7a:11:37:ff:0f:d4: 34:32:b7:88:45:15:03:1c:a3:a9:60:72:93:11:59: c5:d0:ad:6a:54:97:32:b5:1c:de:49:d8:56:61:f4: ca:9a:d0:d5:32:9c:4b:a5:7a:4c:f9:7f:0e:4b:25: 23:9b:c5:97:a9:6c:b4:b3:64:9f:c0:58:da:d1:e6: 2b:5e:cc:dd:88:47:98:f4:c5:39:db:56:4e:e5:31: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:0A:52:DA:E2:D1:72:D1:6E:D6:1D:12:E5:69:BD:F3:97:A7:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 141.106.0.0/16 IPv6: 2620:10d::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33503 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f8:d0:19:0c:7c:37:94:df:62:dc:5c:af:5f:69:5a:f9:b8: 32:4f:a1:58:ae:6a:84:55:ab:0a:c2:ea:ba:cb:be:b5:de:c3: ee:b6:79:6e:f2:f6:a7:59:78:32:15:b3:39:f0:bd:69:45:4b: 02:7c:5a:1e:d6:fb:0d:5b:87:c3:46:44:67:2a:92:6a:a5:a5: bb:28:e5:0b:f1:e6:2c:d7:9d:15:99:79:66:09:a4:e5:5e:b6: ec:0e:2d:65:b7:f3:00:93:72:89:2b:a3:60:d4:bb:0e:92:1e: d4:8a:be:bb:22:dc:1d:7f:46:81:47:c8:6c:ba:95:a9:4b:c7: dd:a8:03:66:39:06:f6:e0:18:bb:56:a1:f9:08:07:57:f8:80: 6e:a6:01:0d:f7:8d:03:2a:11:66:9f:d7:66:45:e2:49:8f:83: d1:28:3b:68:1b:15:d8:2c:1d:36:40:bc:49:83:91:46:dd:93: 6a:74:99:b3:49:ec:55:fb:a7:14:a1:f4:5f:21:73:12:b2:ef: ad:1b:11:24:8c:2d:8f:b2:c9:0f:e6:07:a4:a9:93:c3:73:8c: 9f:58:9e:16:3b:55:24:bc:f8:c1:eb:b0:eb:8f:7b:12:ca:8f: d5:13:a1:26:4a:49:ba:72:22:3f:87:a8:28:cc:d3:5d:dd:30: 9d:e0:aa:43 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3ja0ueJo3cviG01AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxOTE5MDYxNVoXDTI4MDgwMTIxMDEwN1owLzEtMCsGA1UEAxMk Y2U4NzNlNjktMjEzNi00OWIxLTk1MzMtZTQ3OGY0MWQyMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/akdJgIu1+pesorp/y/KukpFkbv8UYZx7gU kHeKIlUq6IkLiQ7inO+ejY4yRv77Hb51rGcbom40RFcgbKtEzsiWTCU1AFirk7gF tE/qF0H5opCfxlc0prt3ttaVHAGwubKM0//YOAri5cxD+8oWOhYHQiJ+3V9Jk4Tb MOqllPqLHGrDq+r4NkmhnN6o0WBLqZs/rSQSn7aAhu6SFHgRtf85i5ij7/WyFniQ bu56ETf/D9Q0MreIRRUDHKOpYHKTEVnF0K1qVJcytRzeSdhWYfTKmtDVMpxLpXpM +X8OSyUjm8WXqWy0s2SfwFja0eYrXszdiEeY9MU521ZO5THJ7QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFM1YClLa4tFy0W7WHRLlab3zl6ewMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j ZTg3M2U2OS0yMTM2LTQ5YjEtOTUzMy1lNDc4ZjQxZDIzMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NlODczZTY5LTIxMzYtNDliMS05 NTMzLWU0NzhmNDFkMjMwMS9jZTg3M2U2OS0yMTM2LTQ5YjEtOTUzMy1lNDc4ZjQx ZDIzMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCNajAPBAIAAjAJAwcEJiABDQAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCC3zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV+NAZDHw3lN9i3FyvX2la+bgy T6FYrmqEVasKwuq6y7613sPutnlu8vanWXgyFbM58L1pRUsCfFoe1vsNW4fDRkRn KpJqpaW7KOUL8eYs150VmXlmCaTlXrbsDi1lt/MAk3KJK6Ng1LsOkh7Uir67Itwd f0aBR8hsupWpS8fdqANmOQb24Bi7VqH5CAdX+IBupgEN940DKhFmn9dmReJJj4PR KDtoGxXYLB02QLxJg5FG3ZNqdJmzSexV+6cUofRfIXMSsu+tGxEkjC2PsskP5gek qZPDc4yfWJ4WO1UkvPjB67Drj3sSyo/VE6EmSkm6ciI/h6gozNNd3TCd4KpD -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:38 2026 by rpki-client