$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15.cer File: f52ac19a-88a9-43fa-af2a-598053745c15.cer (raw, json) Hash identifier: 0hJwDjRfdFjzsnKnJ0mTQVpJWTZUSe2n4lNUXCbkHBU= Subject key identifier: D3:E2:11:32:5D:DB:A0:E7:9B:69:96:23:C6:6E:90:72:74:B0:0F:58 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAE307CE8CFD9B8D67F595828 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 17:29:55 +0000 Certificate not after: Wed 02 Aug 2028 17:29:55 +0000 Subordinate resources: AS: 402375 IP: 64.251.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:30:7c:e8:cf:d9:b8:d6:7f:59:58:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 30 17:29:55 2026 GMT Not After : Aug 2 17:29:55 2028 GMT Subject: CN=f52ac19a-88a9-43fa-af2a-598053745c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:96:96:50:d5:d4:27:47:7b:c7:9d:99:a6: 59:3c:6b:b3:15:9b:c9:bc:86:fb:4e:ba:19:e6:79: 9c:63:27:10:c6:1a:c1:06:fb:6d:ad:05:d6:49:92: b6:7f:dd:c5:79:ca:c7:62:0d:a5:e3:fb:67:7d:ac: 8a:40:1b:5b:17:8a:8c:78:99:d6:4b:e4:1e:29:9c: 01:d6:6f:22:bd:ad:d2:8e:09:65:10:cf:51:5f:17: d7:9c:91:61:d7:f7:13:d9:e1:fc:73:b1:4f:3f:75: 4a:a3:98:79:30:52:27:56:8c:fc:46:07:2c:76:4d: 11:c4:31:f8:5a:b4:46:67:03:cb:44:c5:9c:49:9e: ac:86:c7:06:a7:fd:02:76:3d:fe:88:e0:f0:34:e4: 40:b7:43:4f:bc:8e:4e:09:e3:ce:28:15:12:13:75: 65:ab:66:9d:1b:e4:51:cc:32:a9:42:72:fa:f9:44: 6f:e9:30:58:f5:f4:90:ae:3a:69:2f:00:31:de:64: 8f:d5:a4:7f:06:ee:9c:7e:f4:dc:05:27:e5:ef:97: 26:45:05:fb:b7:af:53:2d:9e:8f:f3:89:21:c4:c0: 4c:67:65:7d:58:5a:de:ec:08:d9:31:90:3b:d7:4b: 55:35:38:4a:ee:31:0b:18:83:74:2b:c9:1e:7c:ce: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:11:32:5D:DB:A0:E7:9B:69:96:23:C6:6E:90:72:74:B0:0F:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.251.224.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402375 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:17:48:2d:2e:b1:2a:b6:0b:20:f8:19:fa:c5:c8:04:10:4e: d9:af:93:2a:3e:6d:04:87:f0:d9:e5:40:73:d8:01:c6:10:d7: 6d:38:3a:37:23:93:66:98:a6:fb:14:2c:d6:e8:cf:9a:cf:60: a3:9e:50:e2:d2:74:ac:88:c7:f4:c6:11:10:94:4b:0d:95:ed: 34:12:e8:8e:7c:72:59:51:44:79:e8:1e:55:7a:e5:87:06:6d: 77:2b:ca:79:8d:dd:b2:98:23:5b:9b:61:ae:74:be:39:dd:8b: 07:6f:e3:09:ac:20:02:04:a5:55:6c:2f:c6:81:60:56:0f:1a: 46:6a:c7:e7:70:ec:38:f5:27:59:71:7e:e9:7b:be:11:eb:f0: 93:ed:0f:cd:43:ab:c7:14:96:be:07:d8:ee:6b:0d:19:ec:cc: 70:d4:68:65:79:5f:95:19:e0:a7:2a:0e:fe:52:d8:94:18:b7: 25:ff:ed:0f:66:73:c7:47:87:92:1f:24:9f:6b:08:da:0f:66: 82:91:a7:9f:47:9a:f9:4d:92:af:3e:11:d9:b6:db:57:6f:24: 9c:22:82:31:0a:03:d2:41:09:7d:3b:d2:c9:09:f2:4c:f2:fa: c6:b7:c4:e1:fc:11:5a:79:b5:a7:7f:94:48:71:f2:b1:53:8f: f3:e1:fc:d1 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2uMHzoz9m41n9ZWCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQzMDE3Mjk1NVoXDTI4MDgwMjE3Mjk1NVowLzEtMCsGA1UEAxMk ZjUyYWMxOWEtODhhOS00M2ZhLWFmMmEtNTk4MDUzNzQ1YzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/mWllDV1CdHe8edmaZZPGuzFZvJvIb7TroZ 5nmcYycQxhrBBvttrQXWSZK2f93FecrHYg2l4/tnfayKQBtbF4qMeJnWS+QeKZwB 1m8iva3SjgllEM9RXxfXnJFh1/cT2eH8c7FPP3VKo5h5MFInVoz8Rgcsdk0RxDH4 WrRGZwPLRMWcSZ6shscGp/0Cdj3+iODwNORAt0NPvI5OCePOKBUSE3Vlq2adG+RR zDKpQnL6+URv6TBY9fSQrjppLwAx3mSP1aR/Bu6cfvTcBSfl75cmRQX7t69TLZ6P 84khxMBMZ2V9WFre7AjZMZA710tVNThK7jELGIN0K8kefM6WMwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNPiETJd26Dnm2mWI8ZukHJ0sA9YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m NTJhYzE5YS04OGE5LTQzZmEtYWYyYS01OTgwNTM3NDVjMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y1MmFjMTlhLTg4YTktNDNmYS1h ZjJhLTU5ODA1Mzc0NWMxNS9mNTJhYzE5YS04OGE5LTQzZmEtYWYyYS01OTgwNTM3 NDVjMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARA++AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiPHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALgXSC0usSq2CyD4GfrFyAQQTtmvkyo+bQSH8NnlQHPYAcYQ 1204Ojcjk2aYpvsULNboz5rPYKOeUOLSdKyIx/TGERCUSw2V7TQS6I58cllRRHno HlV65YcGbXcrynmN3bKYI1ubYa50vjndiwdv4wmsIAIEpVVsL8aBYFYPGkZqx+dw 7Dj1J1lxful7vhHr8JPtD81Dq8cUlr4H2O5rDRnszHDUaGV5X5UZ4KcqDv5S2JQY tyX/7Q9mc8dHh5IfJJ9rCNoPZoKRp59HmvlNkq8+Edm221dvJJwigjEKA9JBCX07 0skJ8kzy+sa3xOH8EVp5tad/lEhx8rFTj/Ph/NE= -----END CERTIFICATE-----Generated at Mon May 11 19:21:05 2026 by rpki-client