$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8.cer File: 35a0be33-3824-4039-8e56-d16e5d2199a8.cer (raw, json) Hash identifier: rce6G3ZtAj/L+9ukNCIJWBarAPn/hDIoc7Xow05gnMA= Subject key identifier: 0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584D2E9D2242B795E418E4C70180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 00:45:21 +0000 Certificate not after: Sun 18 Jun 2028 00:45:21 +0000 Subordinate resources: IP: 174.128.185.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2e:9d:22:42:b7:95:e4:18:e4:c7:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 16 00:45:21 2026 GMT Not After : Jun 18 00:45:21 2028 GMT Subject: CN=35a0be33-3824-4039-8e56-d16e5d2199a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:f9:c2:c4:19:ed:ea:9d:51:66:53:2a:4a: ff:10:2f:df:2b:3c:bd:3a:bd:dc:e4:c6:a9:fc:ab: 65:7e:ba:ce:dc:1e:75:45:c8:69:31:23:fc:55:96: a7:8d:34:01:49:a6:05:e6:07:31:4e:70:90:f9:e3: b5:3d:78:16:c1:04:9b:37:4d:c9:95:3c:be:aa:92: aa:c4:be:c8:86:86:dd:45:f2:01:8c:c9:95:66:94: 34:ea:db:08:04:77:13:c6:ad:44:f8:f5:eb:e0:7b: 4d:97:93:bb:5b:63:fc:e5:a6:23:48:38:d9:17:45: 32:2d:3a:11:d3:88:da:28:46:1e:dc:71:64:ec:b4: 18:9d:c0:c5:39:a0:fa:2b:dd:0a:20:46:06:33:4b: 95:d3:db:a6:6f:96:99:44:68:a4:b3:d0:ce:43:e5: b1:2e:2d:d6:24:ae:e2:1b:99:7d:90:f6:b4:c3:f5: 00:3b:16:79:43:e3:2f:9e:d2:85:5c:2b:c9:24:db: 76:af:d9:09:07:3e:6e:96:03:7d:66:0d:75:a7:de: e4:fd:2d:cd:f7:64:4e:d9:61:b2:d2:0a:4b:cb:48: ce:75:e1:e3:60:68:f6:be:80:29:03:a3:e8:3b:53: d8:ca:04:6a:88:32:4a:2d:1e:97:68:11:ff:6d:f0: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 174.128.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:93:92:26:02:22:8e:be:ca:d8:f8:27:70:99:21:41:d8:84: 62:01:cd:bd:a2:9c:01:92:7c:6f:c8:9a:d4:88:4a:1e:e2:92: 9f:6b:ba:8b:65:82:c4:e0:60:33:22:b9:7a:9b:9a:f6:00:0f: f4:e6:ed:f7:21:ba:98:cb:3e:bf:09:61:90:ab:6f:ac:e3:07: f7:73:93:a9:3b:e7:61:72:22:9e:7a:81:35:52:b1:44:35:6d: a5:20:01:63:4a:b6:15:ca:98:43:f3:29:9f:37:c2:91:1f:a0: e9:4f:49:55:23:04:cf:2d:53:73:3a:43:b7:d2:fd:67:65:68: 41:a2:fb:89:5c:08:bc:39:b4:7b:ef:01:a5:23:82:54:62:2e: 0f:d7:52:39:fe:2a:af:63:21:0f:82:9d:3d:f4:95:f5:75:6a: 02:8d:a9:65:dd:d2:48:26:4d:45:3e:52:c4:2d:68:8c:0d:de: 99:42:0b:6d:cf:4e:53:d4:96:db:f7:45:a4:fa:eb:61:25:dc: 5f:93:c2:e4:45:c6:cc:8b:1c:57:d7:aa:65:a3:d1:0e:6f:0f: 92:0f:7e:52:9f:9e:cc:97:60:22:25:06:76:56:00:31:dc:c0: 04:e1:ce:89:3b:f5:78:b5:92:c0:11:43:8e:e5:16:7b:2a:10: 69:a5:6f:fc -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0unSJCt5XkGOTHAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDMxNjAwNDUyMVoXDTI4MDYxODAwNDUyMVowLzEtMCsGA1UEAxMk MzVhMGJlMzMtMzgyNC00MDM5LThlNTYtZDE2ZTVkMjE5OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07L5wsQZ7eqdUWZTKkr/EC/fKzy9Or3c5Map /KtlfrrO3B51RchpMSP8VZanjTQBSaYF5gcxTnCQ+eO1PXgWwQSbN03JlTy+qpKq xL7IhobdRfIBjMmVZpQ06tsIBHcTxq1E+PXr4HtNl5O7W2P85aYjSDjZF0UyLToR 04jaKEYe3HFk7LQYncDFOaD6K90KIEYGM0uV09umb5aZRGiks9DOQ+WxLi3WJK7i G5l9kPa0w/UAOxZ5Q+MvntKFXCvJJNt2r9kJBz5ulgN9Zg11p97k/S3N92RO2WGy 0gpLy0jOdeHjYGj2voApA6PoO1PYygRqiDJKLR6XaBH/bfD3kQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAzXTwyBIJsfrwLkd2Tzd8BQDyrbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z NWEwYmUzMy0zODI0LTQwMzktOGU1Ni1kMTZlNWQyMTk5YTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM1YTBiZTMzLTM4MjQtNDAzOS04 ZTU2LWQxNmU1ZDIxOTlhOC8zNWEwYmUzMy0zODI0LTQwMzktOGU1Ni1kMTZlNWQy MTk5YTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACugLkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFZOSJgIijr7K2PgncJkh QdiEYgHNvaKcAZJ8b8ia1IhKHuKSn2u6i2WCxOBgMyK5epua9gAP9Obt9yG6mMs+ vwlhkKtvrOMH93OTqTvnYXIinnqBNVKxRDVtpSABY0q2FcqYQ/MpnzfCkR+g6U9J VSMEzy1TczpDt9L9Z2VoQaL7iVwIvDm0e+8BpSOCVGIuD9dSOf4qr2MhD4KdPfSV 9XVqAo2pZd3SSCZNRT5SxC1ojA3emUILbc9OU9SW2/dFpPrrYSXcX5PC5EXGzIsc V9eqZaPRDm8Pkg9+Up+ezJdgIiUGdlYAMdzABOHOiTv1eLWSwBFDjuUWeyoQaaVv /A== -----END CERTIFICATE-----Generated at Mon Mar 16 21:55:15 2026 by rpki-client