$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e.cer File: d82d4750-e662-4d1e-b294-2c61d570b23e.cer (raw, json) Hash identifier: FRuQiM2hRg2ZaIaHrKKn+awy+gVZCkSNM0+v4l3xTO4= Subject key identifier: 1E:04:A2:0C:F8:BE:12:0E:F0:68:DC:A0:99:5A:E8:C0:1A:75:DF:27 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DF69E0DC43F43EFE381133580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 16:08:53 +0000 Certificate not after: Mon 28 Aug 2028 16:08:53 +0000 Subordinate resources: AS: 402159 IP: 104.167.204.0/22 IP: 142.202.132.0/22 IP: 170.101.32.0/19 IP: 199.96.68.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:9e:0d:c4:3f:43:ef:e3:81:13:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 26 16:08:53 2026 GMT Not After : Aug 28 16:08:53 2028 GMT Subject: CN=d82d4750-e662-4d1e-b294-2c61d570b23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4f:5d:39:ab:4d:c2:80:db:6a:d5:a3:cc:bf: b8:ad:ff:25:32:c0:2d:7b:f9:82:e3:3a:7c:89:e4: 8d:17:65:2e:e1:84:d9:f2:6b:52:dc:72:38:61:f7: 99:50:f0:a1:ef:08:61:fe:fb:82:05:ef:39:d3:b8: 40:86:ec:58:21:bc:0f:38:b2:44:42:63:01:ad:56: 3c:37:0b:53:57:53:05:68:53:51:d2:72:2e:47:05: 83:1b:bf:67:48:38:7d:5b:cd:b2:41:48:97:0c:02: 9f:c4:cd:41:a2:05:d5:a3:d3:39:c1:d1:a7:b6:80: 8f:56:79:56:ab:66:2f:83:d2:1d:bc:4d:0c:58:fb: c1:41:3f:89:b7:0a:13:aa:43:75:20:d4:9d:b0:bc: be:7f:80:a5:e2:70:88:b7:25:ad:b0:1a:60:b8:69: 0b:72:4d:8a:fb:64:3d:09:0c:f1:70:70:13:8a:71: 0e:d2:3f:b2:7e:1a:7d:95:bd:49:ea:4f:87:96:c8: 9d:3e:f9:6a:87:08:32:b7:cf:4b:56:d5:d3:e0:c6: a1:a0:b4:ae:d3:1a:73:ce:73:33:02:a9:b6:77:12: 98:de:c8:31:e5:cc:d7:34:85:f3:46:58:41:6c:e1: 61:9b:64:b7:77:ef:ad:d3:2f:c5:bc:c2:51:cf:3d: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:04:A2:0C:F8:BE:12:0E:F0:68:DC:A0:99:5A:E8:C0:1A:75:DF:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d82d4750-e662-4d1e-b294-2c61d570b23e/d82d4750-e662-4d1e-b294-2c61d570b23e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 104.167.204.0/22 142.202.132.0/22 170.101.32.0/19 199.96.68.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402159 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b5:24:9c:4a:ce:04:19:0e:a1:ca:74:69:dd:32:bb:9d:a9: 9a:6d:c9:24:38:fb:8c:75:14:f1:36:82:29:92:6e:11:19:39: d4:77:37:10:6d:e9:17:86:f8:67:64:9a:ad:07:8f:b3:46:a9: 90:b7:06:9d:82:6d:40:fd:a3:05:e0:a7:9e:aa:28:2f:c2:2c: 8c:00:bf:4c:ab:98:ba:db:c6:be:c1:9f:d2:99:bb:23:e6:43: 20:59:3d:4b:5e:9a:10:ea:63:ee:13:83:80:96:8c:42:75:c5: 29:36:81:96:0e:78:ca:d1:f3:20:fc:18:78:20:23:39:25:bf: 8a:3f:d0:42:c4:c7:4c:1b:4f:31:27:8f:04:d6:d9:b2:71:63: 94:83:0c:8e:c6:59:40:37:73:e2:e7:36:da:f0:bd:fa:80:68: 37:fb:f6:c6:ea:7f:93:17:c8:44:2a:b4:8e:5e:27:05:f4:c7: ac:15:75:bf:7b:cb:62:45:11:11:9c:b8:cb:8a:e2:58:ba:7d: 6b:4c:e3:df:58:50:ee:e1:03:c8:3a:ab:66:4e:19:d8:f1:dc: ff:78:0b:a8:f9:3b:b9:c9:a7:72:c5:32:24:6c:d7:72:46:51: 53:a8:f3:d4:6e:4e:1a:b9:09:a2:b6:01:02:eb:82:0d:80:28: 60:f4:b8:58 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWE32ng3EP0Pv44ETNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyNjE2MDg1M1oXDTI4MDgyODE2MDg1M1owLzEtMCsGA1UEAxMk ZDgyZDQ3NTAtZTY2Mi00ZDFlLWIyOTQtMmM2MWQ1NzBiMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U9dOatNwoDbatWjzL+4rf8lMsAte/mC4zp8 ieSNF2Uu4YTZ8mtS3HI4YfeZUPCh7whh/vuCBe8507hAhuxYIbwPOLJEQmMBrVY8 NwtTV1MFaFNR0nIuRwWDG79nSDh9W82yQUiXDAKfxM1BogXVo9M5wdGntoCPVnlW q2Yvg9IdvE0MWPvBQT+JtwoTqkN1INSdsLy+f4Cl4nCItyWtsBpguGkLck2K+2Q9 CQzxcHATinEO0j+yfhp9lb1J6k+HlsidPvlqhwgyt89LVtXT4MahoLSu0xpzznMz Aqm2dxKY3sgx5czXNIXzRlhBbOFhm2S3d++t0y/FvMJRzz0BfwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFB4Eogz4vhIO8GjcoJla6MAadd8nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ODJkNDc1MC1lNjYyLTRkMWUtYjI5NC0yYzYxZDU3MGIyM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Q4MmQ0NzUwLWU2NjItNGQxZS1i Mjk0LTJjNjFkNTcwYjIzZS9kODJkNDc1MC1lNjYyLTRkMWUtYjI5NC0yYzYxZDU3 MGIyM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAJop8wDBAKOyoQDBAWqZSADBALHYEQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBiLvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAq1JJxKzgQZDqHKdGndMrud qZptySQ4+4x1FPE2gimSbhEZOdR3NxBt6ReG+Gdkmq0Hj7NGqZC3Bp2CbUD9owXg p56qKC/CLIwAv0yrmLrbxr7Bn9KZuyPmQyBZPUtemhDqY+4Tg4CWjEJ1xSk2gZYO eMrR8yD8GHggIzklv4o/0ELEx0wbTzEnjwTW2bJxY5SDDI7GWUA3c+LnNtrwvfqA aDf79sbqf5MXyEQqtI5eJwX0x6wVdb97y2JFERGcuMuK4li6fWtM499YUO7hA8g6 q2ZOGdjx3P94C6j5O7nJp3LFMiRs13JGUVOo89RuThq5CaK2AQLrgg2AKGD0uFg= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:43 2026 by rpki-client