$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer File: f5543cab-492c-47b2-869b-a727d610adf7.cer (raw, json) Hash identifier: 0+nCi1Qn5P5aFGHPWpQ2IecQHALvFM2oalS9pbB0Ko0= Subject key identifier: F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE88406DB55FD5298F0971580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 May 2026 14:55:08 +0000 Certificate not after: Wed 23 Aug 2028 14:55:08 +0000 Subordinate resources: AS: 402472 IP: 140.232.88.0/24 IP: 2602:f3d0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:84:06:db:55:fd:52:98:f0:97:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 21 14:55:08 2026 GMT Not After : Aug 23 14:55:08 2028 GMT Subject: CN=f5543cab-492c-47b2-869b-a727d610adf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:63:a6:b3:b0:e4:a3:d7:1e:aa:01:30:e7: 65:50:3e:79:64:51:43:a7:b1:6f:01:4e:50:9d:03: 76:e7:38:09:18:fd:6f:55:a4:68:89:59:e2:de:05: dd:fc:92:0f:5e:0d:9e:b2:48:b3:e2:a8:cc:a2:0d: 54:28:3f:ad:bd:c2:bf:62:10:38:0a:1e:c6:41:72: 51:0f:a3:b2:13:09:af:c6:63:62:34:c6:c2:d4:61: 36:e2:ad:0f:66:68:7b:c9:a0:93:66:53:e4:ce:87: f3:05:79:3b:54:f5:1e:19:3d:71:15:a5:a9:e9:ee: 71:4b:50:26:77:e0:cd:bb:7b:dc:a2:03:36:5a:09: 59:d5:69:5e:54:05:82:4a:32:9e:94:ed:fc:aa:46: 85:3c:1a:91:82:34:2d:78:18:fa:a4:23:5e:21:c6: 6d:bd:c4:6b:a9:a4:99:78:a7:35:a5:b9:1b:bf:73: da:ff:c2:8c:49:64:13:07:cc:88:74:9f:28:cb:90: c4:88:4e:e0:7d:49:04:ec:37:92:49:c4:55:5b:77: 94:31:a4:4d:cf:b6:cb:c4:26:52:a8:25:b0:ac:f2: 32:9d:d0:03:06:21:df:7f:c3:ee:9b:8d:d6:11:a9: d0:c0:7d:e9:13:dc:df:42:b0:e2:ed:67:b0:00:10: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 140.232.88.0/24 IPv6: 2602:f3d0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402472 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c9:b9:12:89:67:e7:38:1f:12:b0:05:19:75:fa:cf:c4:d6: f0:ea:a6:7d:d9:ab:b2:43:f5:73:37:98:28:5e:52:db:91:c1: a3:6e:0f:7f:6c:a9:7d:99:f8:d7:cb:d2:a5:e9:2f:91:27:b0: a0:36:73:34:19:c8:78:79:a4:7e:72:5b:d8:7a:e7:cc:d7:36: 6e:79:cb:51:fb:40:23:13:66:d9:36:13:10:3d:00:74:d5:ec: e8:1a:2a:f1:4b:f6:0c:44:64:f7:2a:31:7f:e0:64:19:8c:cc: aa:15:0c:f0:29:92:bb:af:ef:3f:57:f0:06:16:55:71:f7:e9: 40:09:74:4c:6e:f5:1f:63:50:ed:43:3a:0f:8d:17:75:95:d9: 51:2d:39:dc:cb:eb:c6:c1:42:a4:2a:86:51:de:18:f3:0e:61: 36:20:0d:8b:79:af:5d:98:fc:c5:0f:71:67:0c:6e:ec:a4:1b: 36:f9:f6:af:2c:d1:61:7a:b3:57:ef:6b:e7:71:b8:c6:75:e0: e2:5a:33:07:f9:8b:c0:21:48:7f:2d:af:54:ad:33:fa:2d:1b: 74:88:87:34:fa:4c:dd:74:34:fa:ed:5c:f2:cb:d0:a7:d6:d5: 3d:7a:79:81:98:f2:82:e4:02:a6:89:64:cf:fb:b1:67:a3:52: a8:4a:3c:8e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3ohAbbVf1SmPCXFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMTE0NTUwOFoXDTI4MDgyMzE0NTUwOFowLzEtMCsGA1UEAxMk ZjU1NDNjYWItNDkyYy00N2IyLTg2OWItYTcyN2Q2MTBhZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwBjprOw5KPXHqoBMOdlUD55ZFFDp7FvAU5Q nQN25zgJGP1vVaRoiVni3gXd/JIPXg2eskiz4qjMog1UKD+tvcK/YhA4Ch7GQXJR D6OyEwmvxmNiNMbC1GE24q0PZmh7yaCTZlPkzofzBXk7VPUeGT1xFaWp6e5xS1Am d+DNu3vcogM2WglZ1WleVAWCSjKelO38qkaFPBqRgjQteBj6pCNeIcZtvcRrqaSZ eKc1pbkbv3Pa/8KMSWQTB8yIdJ8oy5DEiE7gfUkE7DeSScRVW3eUMaRNz7bLxCZS qCWwrPIyndADBiHff8Pum43WEanQwH3pE9zfQrDi7WewABBubQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPYKgba2eLvtHqUGo4WbM7WLEgPSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m NTU0M2NhYi00OTJjLTQ3YjItODY5Yi1hNzI3ZDYxMGFkZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y1NTQzY2FiLTQ5MmMtNDdiMi04 NjliLWE3MjdkNjEwYWRmNy9mNTU0M2NhYi00OTJjLTQ3YjItODY5Yi1hNzI3ZDYx MGFkZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACM6FgwDgQCAAIwCAMGACYC89AAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4ybkSiWfnOB8SsAUZdfrPxNbw 6qZ92auyQ/VzN5goXlLbkcGjbg9/bKl9mfjXy9Kl6S+RJ7CgNnM0Gch4eaR+clvY eufM1zZuectR+0AjE2bZNhMQPQB01ezoGirxS/YMRGT3KjF/4GQZjMyqFQzwKZK7 r+8/V/AGFlVx9+lACXRMbvUfY1DtQzoPjRd1ldlRLTncy+vGwUKkKoZR3hjzDmE2 IA2Lea9dmPzFD3FnDG7spBs2+favLNFherNX72vncbjGdeDiWjMH+YvAIUh/La9U rTP6LRt0iIc0+kzddDT67Vzyy9Cn1tU9enmBmPKC5AKmiWTP+7Fno1KoSjyO -----END CERTIFICATE-----Generated at Fri May 22 15:06:08 2026 by rpki-client