$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer File: f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.cer (raw, json) Hash identifier: pDPw/M1R8iGOwAJdOUbc1Gb6zSekA+MdwWmNMEG3tQE= Subject key identifier: D0:AE:FD:1D:67:3B:48:B2:D2:BD:E7:B8:46:55:2A:BA:7C:58:68:E7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DECA753EE0AD9E303B7612700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 23 May 2026 02:29:29 +0000 Certificate not after: Fri 25 Aug 2028 02:29:29 +0000 Subordinate resources: IP: 198.29.254.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:a7:53:ee:0a:d9:e3:03:b7:61:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 23 02:29:29 2026 GMT Not After : Aug 25 02:29:29 2028 GMT Subject: CN=f4e57a96-f0bd-4437-a5a1-fec9991b7c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:55:24:32:1d:4e:50:58:eb:46:88:3f:46: d8:ac:c5:73:6a:54:05:c0:0f:f5:29:5f:8a:4b:ec: 06:eb:28:9c:9e:95:fa:e0:aa:1e:15:b8:f7:41:5e: e9:68:3b:85:f3:f0:8f:b8:3d:61:cd:0e:eb:0b:62: cc:eb:60:1e:5a:ac:72:1e:80:8f:7a:e1:72:13:7a: b0:41:00:6d:d2:05:9b:b7:c5:44:66:97:6e:44:13: 98:b8:6d:93:eb:3c:e9:1f:7f:66:56:fa:3a:f2:1c: fc:bd:ea:fa:5d:ac:33:d2:8e:b8:01:13:4a:ce:dc: 69:0f:f7:1f:c1:17:37:b4:89:2f:12:93:a1:09:9d: 25:0f:17:de:c0:ad:4f:85:dd:8f:f3:0d:f4:a9:98: 70:36:95:33:43:ee:4d:b6:4b:8d:ba:95:6f:31:c6: e8:c1:a5:03:3c:fa:fb:d7:9b:d8:0a:c3:a1:31:a3: 88:2c:b8:69:b5:16:4e:1e:1b:fe:34:6a:8d:64:76: 51:df:7f:20:65:74:8e:c6:ad:45:da:d1:13:1b:5c: 7b:48:fc:84:6a:f1:21:39:94:f7:42:13:e2:4b:70: 47:bd:de:0a:51:87:02:e5:07:dc:cb:3b:11:8c:57: 5c:2d:29:89:72:7d:68:a8:83:2a:2f:21:65:f8:c9: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AE:FD:1D:67:3B:48:B2:D2:BD:E7:B8:46:55:2A:BA:7C:58:68:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d/f4e57a96-f0bd-4437-a5a1-fec9991b7c6d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.29.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:79:b3:0f:25:9c:fd:a9:3b:bc:54:47:a1:5c:0f:2e:7c:80: 42:c3:70:d0:82:0b:6e:11:22:98:c1:9e:90:60:24:fe:7d:d9: 93:31:e6:ea:47:af:1a:ae:40:0d:15:8f:35:2b:fc:62:e2:06: 6b:4d:e4:1c:41:cb:52:58:a6:2d:8f:6b:df:85:f3:37:65:62: 70:44:7f:05:b3:ce:e0:1b:19:1e:ca:c9:45:30:70:63:a0:98: fb:c1:f2:21:64:af:ba:df:03:94:4e:64:58:4f:3b:b8:9c:53: f2:65:9b:29:b1:26:cc:84:33:1f:67:23:e6:c8:7d:61:3c:b1: 94:84:bd:7f:53:9c:6d:ea:66:aa:36:20:cd:c5:d2:6c:68:c3: 11:2d:9b:5a:b0:ff:2f:c0:2f:f3:4c:96:eb:1c:f0:a4:6a:0e: 89:8f:2c:ca:15:0f:7c:23:11:32:e9:34:ec:e8:02:f6:11:35: 47:0f:fb:15:ff:b8:48:a2:88:9f:5a:5c:2f:08:22:7d:8e:79: cc:e0:86:b3:72:f5:44:bb:1a:45:a1:eb:8f:fd:67:59:c3:4e: b8:2e:3e:55:f7:5c:73:66:c0:54:fb:59:a7:5f:9d:07:61:40: 23:a1:1f:fa:42:39:1a:7a:04:bc:d8:b5:6c:2f:74:32:9b:4e: 09:73:4e:60 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3sp1PuCtnjA7dhJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMzAyMjkyOVoXDTI4MDgyNTAyMjkyOVowLzEtMCsGA1UEAxMk ZjRlNTdhOTYtZjBiZC00NDM3LWE1YTEtZmVjOTk5MWI3YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmodVJDIdTlBY60aIP0bYrMVzalQFwA/1KV+K S+wG6yicnpX64KoeFbj3QV7paDuF8/CPuD1hzQ7rC2LM62AeWqxyHoCPeuFyE3qw QQBt0gWbt8VEZpduRBOYuG2T6zzpH39mVvo68hz8ver6Xawz0o64ARNKztxpD/cf wRc3tIkvEpOhCZ0lDxfewK1Phd2P8w30qZhwNpUzQ+5NtkuNupVvMcbowaUDPPr7 15vYCsOhMaOILLhptRZOHhv+NGqNZHZR338gZXSOxq1F2tETG1x7SPyEavEhOZT3 QhPiS3BHvd4KUYcC5QfcyzsRjFdcLSmJcn1oqIMqLyFl+MkBNQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNCu/R1nO0iy0r3nuEZVKrp8WGjnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m NGU1N2E5Ni1mMGJkLTQ0MzctYTVhMS1mZWM5OTkxYjdjNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y0ZTU3YTk2LWYwYmQtNDQzNy1h NWExLWZlYzk5OTFiN2M2ZC9mNGU1N2E5Ni1mMGJkLTQ0MzctYTVhMS1mZWM5OTkx YjdjNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGHf4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVXmzDyWc/ak7vFRHoVwP LnyAQsNw0IILbhEimMGekGAk/n3ZkzHm6kevGq5ADRWPNSv8YuIGa03kHEHLUlim LY9r34XzN2VicER/BbPO4BsZHsrJRTBwY6CY+8HyIWSvut8DlE5kWE87uJxT8mWb KbEmzIQzH2cj5sh9YTyxlIS9f1OcbepmqjYgzcXSbGjDES2bWrD/L8Av80yW6xzw pGoOiY8syhUPfCMRMuk07OgC9hE1Rw/7Ff+4SKKIn1pcLwgifY55zOCGs3L1RLsa RaHrj/1nWcNOuC4+Vfdcc2bAVPtZp1+dB2FAI6Ef+kI5GnoEvNi1bC90MptOCXNO YA== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:24 2026 by rpki-client