$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d.cer File: d0468ae1-e635-48f2-8764-2794b700581d.cer (raw, json) Hash identifier: pzHhxKtibFIdZ/hw7HAaH7Fx8W9r5HZn+pGqzheGVO0= Subject key identifier: F1:9D:78:F7:AD:49:5B:B8:F2:36:00:BB:B4:45:54:4F:43:26:7E:D3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAB730BEF27185FFDFFBD0080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Apr 2026 17:56:36 +0000 Certificate not after: Tue 01 Aug 2028 17:56:36 +0000 Subordinate resources: AS: 18685 IP: 208.69.150.0/24 IP: 2620:df:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:73:0b:ef:27:18:5f:fd:ff:bd:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 29 17:56:36 2026 GMT Not After : Aug 1 17:56:36 2028 GMT Subject: CN=d0468ae1-e635-48f2-8764-2794b700581d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:99:5e:47:7c:09:0e:11:de:98:3d:24:e0: 82:45:12:8c:77:ed:5a:02:6a:d4:02:9b:1b:89:3e: 4f:3a:06:32:05:73:3a:ed:55:5b:4c:82:b4:75:20: 71:5e:a9:e2:60:92:e1:90:31:3e:9a:5c:c4:75:02: e8:07:a2:f8:19:20:07:a8:81:e9:06:12:9d:92:e9: e2:ab:51:1d:db:d3:73:32:35:e7:3d:45:a5:8d:ac: 97:7d:b4:5e:0f:9b:7a:d3:e6:83:e9:5e:65:db:54: 88:88:64:cf:f6:00:57:77:ba:9a:b6:4f:3a:e4:1f: 30:40:8a:2b:50:9a:ed:f2:ff:52:a4:3d:60:30:e0: 97:ee:fc:1d:83:d2:d6:25:84:90:ff:f9:29:84:87: 17:6e:d7:46:4a:6d:e4:1f:c1:56:18:1c:bf:2b:5b: 7b:4b:0d:09:0f:6a:7a:70:24:ed:79:16:5a:7c:d4: 1e:61:e9:f1:bd:e5:c8:45:e4:f5:af:9b:2c:4e:e1: ff:43:98:95:3f:f8:82:2c:85:a3:3b:a1:6e:79:ea: 8e:d2:0d:47:4e:e1:6c:71:c5:6a:22:be:d0:81:d7: d3:88:ee:b5:73:0f:32:5e:22:46:53:4f:04:86:87: 00:8f:0c:ef:55:fc:90:95:51:7e:45:a6:5d:d1:58: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9D:78:F7:AD:49:5B:B8:F2:36:00:BB:B4:45:54:4F:43:26:7E:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.69.150.0/24 IPv6: 2620:df:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18685 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:90:e3:18:df:af:23:e7:16:d4:9b:4f:1b:be:e4:98:18:9c: 56:25:48:86:2d:31:9b:69:a6:db:72:95:f7:ee:58:92:ab:57: 00:d1:da:e4:dc:62:89:bb:85:3f:b1:de:f7:c3:e2:c8:2c:5f: de:53:9a:90:57:a6:d9:c7:7e:df:e1:0f:8c:19:4a:b2:59:ad: 32:0e:af:7f:a8:3e:94:c4:4b:05:51:72:81:27:2d:43:0f:df: 1a:37:57:52:91:5b:31:ca:0f:67:67:b9:05:85:56:80:9e:07: c5:de:6a:7d:d8:f8:6b:03:4e:28:c0:8f:ce:5c:e8:2a:dd:9d: 70:95:be:6b:27:33:47:c4:02:78:82:9d:14:64:1b:24:c9:41: ab:42:25:93:33:6e:e5:21:e9:b2:35:0f:6b:51:a3:4d:c6:42: 73:65:f2:78:03:4e:07:00:62:de:e6:4e:b4:ff:f6:62:4b:b2: 9e:7c:c8:58:4c:69:79:77:e0:55:a2:ca:fa:e6:0c:b3:54:19: 95:9f:e9:df:52:92:da:58:72:13:54:dd:87:5b:c3:60:ae:5b: 2c:d5:ce:29:8b:14:c6:33:67:e6:ba:f0:3b:d7:47:6a:b1:88: fd:57:f2:1e:0c:42:e9:61:f7:d8:f5:43:c5:e5:45:e6:c2:a3: 42:c2:f8:50 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2rcwvvJxhf/f+9AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyOTE3NTYzNloXDTI4MDgwMTE3NTYzNlowLzEtMCsGA1UEAxMk ZDA0NjhhZTEtZTYzNS00OGYyLTg3NjQtMjc5NGI3MDA1ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02CZXkd8CQ4R3pg9JOCCRRKMd+1aAmrUApsb iT5POgYyBXM67VVbTIK0dSBxXqniYJLhkDE+mlzEdQLoB6L4GSAHqIHpBhKdkuni q1Ed29NzMjXnPUWljayXfbReD5t60+aD6V5l21SIiGTP9gBXd7qatk865B8wQIor UJrt8v9SpD1gMOCX7vwdg9LWJYSQ//kphIcXbtdGSm3kH8FWGBy/K1t7Sw0JD2p6 cCTteRZafNQeYenxveXIReT1r5ssTuH/Q5iVP/iCLIWjO6FueeqO0g1HTuFsccVq Ir7QgdfTiO61cw8yXiJGU08EhocAjwzvVfyQlVF+RaZd0ViGjwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPGdePetSVu48jYAu7RFVE9DJn7TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k MDQ2OGFlMS1lNjM1LTQ4ZjItODc2NC0yNzk0YjcwMDU4MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2QwNDY4YWUxLWU2MzUtNDhmMi04 NzY0LTI3OTRiNzAwNTgxZC9kMDQ2OGFlMS1lNjM1LTQ4ZjItODc2NC0yNzk0Yjcw MDU4MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADQRZYwDwQCAAIwCQMHACYgAN/gADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJI/TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5kOMY368j5xbUm08bvuSYGJxW JUiGLTGbaabbcpX37liSq1cA0drk3GKJu4U/sd73w+LILF/eU5qQV6bZx37f4Q+M GUqyWa0yDq9/qD6UxEsFUXKBJy1DD98aN1dSkVsxyg9nZ7kFhVaAngfF3mp92Phr A04owI/OXOgq3Z1wlb5rJzNHxAJ4gp0UZBskyUGrQiWTM27lIemyNQ9rUaNNxkJz ZfJ4A04HAGLe5k60//ZiS7KefMhYTGl5d+BVosr65gyzVBmVn+nfUpLaWHITVN2H W8Ngrlss1c4pixTGM2fmuvA710dqsYj9V/IeDELpYffY9UPF5UXmwqNCwvhQ -----END CERTIFICATE-----Generated at Thu Apr 30 12:46:19 2026 by rpki-client