$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer File: e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.cer (raw, json) Hash identifier: E+EUQrMIrAfE/wEWT8I5UOIDV6WBp2urDyl0GxW0Xsc= Subject key identifier: DF:61:4B:9D:96:BD:BC:A7:9B:12:0B:5B:C9:6C:47:36:36:58:0A:C4 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DFCBAE1779D3DCDF553C689B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 May 2026 20:41:49 +0000 Certificate not after: Wed 30 Aug 2028 20:41:49 +0000 Subordinate resources: IP: 198.147.226.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fc:ba:e1:77:9d:3d:cd:f5:53:c6:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 28 20:41:49 2026 GMT Not After : Aug 30 20:41:49 2028 GMT Subject: CN=e1484d3a-68b3-4aa9-928a-6ddb7e638ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:af:12:c4:3c:36:d5:b8:27:a2:d7:13:0d:8f: 61:24:60:1a:b2:73:b4:1c:ec:86:4c:24:f8:03:0d: cb:b3:48:6e:b7:8d:76:7e:c1:87:d5:ca:9c:6a:01: 26:55:21:2e:1e:b3:48:83:96:69:82:7c:a7:c9:27: 03:af:21:50:61:78:a8:b9:20:67:30:c7:f1:42:ac: e9:63:08:f5:80:51:0a:c7:72:50:8b:83:28:91:4a: bc:5e:52:57:28:11:58:9f:38:45:2f:00:2c:37:2e: 03:31:64:fc:7f:2d:fd:22:8e:9b:cc:18:29:23:ad: 64:62:dd:e4:5c:88:44:0f:4c:6b:85:27:13:c6:f3: c0:b1:eb:62:24:c2:b8:c1:79:94:0c:29:f9:94:0f: 5b:c5:85:d1:c5:44:6f:28:2b:0f:08:0b:82:6d:ba: dd:4c:3e:75:d0:98:54:0b:e6:95:e4:d8:46:dd:41: 58:fb:ad:1f:3f:f4:e9:64:5c:69:e2:64:a8:52:f3: 6a:59:99:f2:29:97:ea:82:e9:31:23:72:95:ac:f4: 70:3d:6e:37:c8:a2:71:5f:a7:1a:4e:71:29:9e:66: 65:31:be:5d:d1:6b:80:66:6d:8d:83:23:ec:6f:cb: fc:8a:7b:24:39:50:9b:14:71:f5:e3:21:a5:55:e4: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:4B:9D:96:BD:BC:A7:9B:12:0B:5B:C9:6C:47:36:36:58:0A:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1/e1484d3a-68b3-4aa9-928a-6ddb7e638ce1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.147.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d5:85:ef:29:7e:7a:7f:33:0c:ca:df:f5:17:ed:b4:4d:de: 45:7b:13:69:04:08:1d:62:fa:62:c9:91:7a:c2:0f:5d:59:cc: 0c:bf:a6:47:7b:f5:01:2c:1e:c8:ed:2a:e4:6c:b8:b5:7f:55: e8:60:36:9f:b4:0f:81:9c:aa:3f:3a:73:91:35:b1:6c:b1:13: 6d:c4:15:7d:46:14:ba:63:e3:b1:82:af:65:b3:90:cd:ba:82: 5e:6d:80:73:39:1b:d0:01:cf:9a:52:5b:60:72:44:36:4d:1e: ce:0e:93:bd:4d:78:eb:dc:c8:9a:3f:a8:72:fb:50:95:e8:c9: 7b:c7:13:86:0b:b4:b3:35:e7:3e:15:3d:54:2c:69:a3:1f:6f: ce:a9:c9:fc:69:7c:1e:9f:0e:ca:21:0b:48:00:55:91:54:8c: 32:f4:39:d5:27:e7:87:db:37:28:23:15:96:76:16:74:55:3d: 3c:5e:47:6e:67:13:2d:44:93:44:41:00:55:c4:de:75:c5:46: 1b:1a:85:04:47:83:8f:a9:89:b8:d3:43:70:a8:6b:83:73:29: 2e:96:86:6b:f8:5b:77:9c:64:ff:ef:2d:48:d4:38:c7:b4:35: 3b:28:56:95:60:55:e8:b3:83:69:46:14:98:37:ef:b9:07:30: eb:b1:57:5d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE38uuF3nT3N9VPGibAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyODIwNDE0OVoXDTI4MDgzMDIwNDE0OVowLzEtMCsGA1UEAxMk ZTE0ODRkM2EtNjhiMy00YWE5LTkyOGEtNmRkYjdlNjM4Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK8SxDw21bgnotcTDY9hJGAasnO0HOyGTCT4 Aw3Ls0hut412fsGH1cqcagEmVSEuHrNIg5ZpgnynyScDryFQYXiouSBnMMfxQqzp Ywj1gFEKx3JQi4MokUq8XlJXKBFYnzhFLwAsNy4DMWT8fy39Io6bzBgpI61kYt3k XIhED0xrhScTxvPAsetiJMK4wXmUDCn5lA9bxYXRxURvKCsPCAuCbbrdTD510JhU C+aV5NhG3UFY+60fP/TpZFxp4mSoUvNqWZnyKZfqgukxI3KVrPRwPW43yKJxX6ca TnEpnmZlMb5d0WuAZm2NgyPsb8v8inskOVCbFHH14yGlVeTDsQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFN9hS52WvbynmxILW8lsRzY2WArEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l MTQ4NGQzYS02OGIzLTRhYTktOTI4YS02ZGRiN2U2MzhjZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2UxNDg0ZDNhLTY4YjMtNGFhOS05 MjhhLTZkZGI3ZTYzOGNlMS9lMTQ4NGQzYS02OGIzLTRhYTktOTI4YS02ZGRiN2U2 MzhjZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGk+IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcNWF7yl+en8zDMrf9Rft tE3eRXsTaQQIHWL6YsmResIPXVnMDL+mR3v1ASweyO0q5Gy4tX9V6GA2n7QPgZyq PzpzkTWxbLETbcQVfUYUumPjsYKvZbOQzbqCXm2Aczkb0AHPmlJbYHJENk0ezg6T vU1469zImj+ocvtQlejJe8cThgu0szXnPhU9VCxpox9vzqnJ/Gl8Hp8OyiELSABV kVSMMvQ51Sfnh9s3KCMVlnYWdFU9PF5HbmcTLUSTREEAVcTedcVGGxqFBEeDj6mJ uNNDcKhrg3MpLpaGa/hbd5xk/+8tSNQ4x7Q1OyhWlWBV6LODaUYUmDfvuQcw67FX XQ== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:37 2026 by rpki-client