$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7.cer File: 35da68f2-165e-4898-bf59-8aa1e523eba7.cer (raw, json) Hash identifier: vNYsv1KXNr/NLkUm2Ox5yrSSINtiBu4PDlS1KUNhzl0= Subject key identifier: 3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D72CD3B4F63DD0D73618FBB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Apr 2026 10:57:15 +0000 Certificate not after: Mon 10 Jul 2028 08:37:49 +0000 Subordinate resources: IP: 74.113.201.0/24 IP: 167.254.172.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:72:cd:3b:4f:63:dd:0d:73:61:8f:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 9 10:57:15 2026 GMT Not After : Jul 10 08:37:49 2028 GMT Subject: CN=35da68f2-165e-4898-bf59-8aa1e523eba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:25:eb:1a:ee:be:ff:2d:2e:a3:ce:de:8e: 1b:cf:1e:06:cb:fb:4c:15:f5:40:ac:27:e2:66:17: 21:5c:04:ac:15:d9:12:f2:72:67:be:3c:35:f5:37: fa:3e:94:9c:49:ae:80:27:ee:9d:f2:24:7f:13:bb: ae:af:a8:f7:a8:5b:46:ce:5e:57:b8:3d:ed:4f:c5: c7:0b:e5:42:69:3a:ef:9c:e5:c3:af:0e:0f:7c:f5: 7e:66:7d:56:a4:78:6c:09:c3:77:7f:b3:26:38:99: 76:94:c9:62:d3:df:51:3f:62:a0:25:ec:db:75:74: 8d:1a:65:45:8a:b2:ac:f0:30:74:73:12:e3:17:fa: 9f:48:48:a4:d3:a1:3b:0c:3d:ec:31:1f:93:a6:41: 0a:f5:f7:b2:4a:df:11:ef:98:59:e3:52:c5:8c:f2: 5b:cf:84:d7:11:10:68:c3:76:98:32:91:d4:45:5b: a0:38:b6:59:ad:52:4f:e9:9d:89:2f:13:0f:af:cc: f8:ed:fc:1b:c5:75:4d:df:c8:05:07:7a:a6:92:34: db:1f:9a:5a:9c:c7:f4:12:12:66:d1:84:7b:44:d8: 83:a8:2c:c4:de:f6:3e:3f:c5:de:83:9c:b4:b8:56: 29:f1:6c:d2:95:72:b9:50:cf:a6:f1:74:39:2d:85: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:5F:7D:C6:6A:66:03:06:06:37:08:8B:9E:AE:53:F7:D9:72:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/35da68f2-165e-4898-bf59-8aa1e523eba7/35da68f2-165e-4898-bf59-8aa1e523eba7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 74.113.201.0/24 167.254.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3e:84:6c:b3:d0:b4:c6:bb:03:16:51:26:40:22:a3:c7:af: 37:67:6b:8d:5c:6b:c5:12:ce:e4:5d:ed:69:f0:13:58:dd:a3: f1:1d:f5:d2:25:21:90:69:32:6b:e5:5a:26:3b:5d:2e:70:98: 34:3e:5b:27:c2:29:fa:3f:50:15:f2:b8:95:0c:2b:21:fc:7a: 07:d3:a6:a9:e5:d1:2a:f6:11:1d:dd:af:be:69:b1:8e:80:9a: cb:40:93:e2:c5:0b:97:6b:43:c4:db:30:28:4e:a2:cf:38:ed: 30:9f:ca:f1:cd:e0:19:e4:71:d6:0c:e7:34:b9:1c:e4:54:1c: 0e:48:f5:ea:5d:b2:6e:fe:a3:55:a8:0a:9c:c6:48:e4:55:73: 24:52:75:2a:40:f4:0b:88:4e:fa:38:3d:6a:ec:53:f7:6b:bb: fe:1e:85:bb:bf:44:c4:16:cb:bb:38:c6:44:28:fb:11:47:ff: 61:c4:05:2a:4d:7a:a3:43:7f:31:01:21:24:c3:55:a0:fd:c6: 5f:31:a7:9d:0a:ea:7b:08:5e:7d:ea:3c:e4:41:d6:35:b9:ed: c8:33:51:5c:c4:0f:0a:e7:58:d8:1a:e4:d2:1a:34:1c:b6:89: 04:c1:92:de:19:50:1f:93:67:1d:3c:a5:b2:8a:67:05:29:00: 8b:bf:60:f8 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE1yzTtPY90Nc2GPu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwOTEwNTcxNVoXDTI4MDcxMDA4Mzc0OVowLzEtMCsGA1UEAxMk MzVkYTY4ZjItMTY1ZS00ODk4LWJmNTktOGFhMWU1MjNlYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNQl6xruvv8tLqPO3o4bzx4Gy/tMFfVArCfi ZhchXASsFdkS8nJnvjw19Tf6PpScSa6AJ+6d8iR/E7uur6j3qFtGzl5XuD3tT8XH C+VCaTrvnOXDrw4PfPV+Zn1WpHhsCcN3f7MmOJl2lMli099RP2KgJezbdXSNGmVF irKs8DB0cxLjF/qfSEik06E7DD3sMR+TpkEK9feySt8R75hZ41LFjPJbz4TXERBo w3aYMpHURVugOLZZrVJP6Z2JLxMPr8z47fwbxXVN38gFB3qmkjTbH5panMf0EhJm 0YR7RNiDqCzE3vY+P8Xeg5y0uFYp8WzSlXK5UM+m8XQ5LYUcTQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFD+JX33GamYDBgY3CIuerlP32XIZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z NWRhNjhmMi0xNjVlLTQ4OTgtYmY1OS04YWExZTUyM2ViYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzM1ZGE2OGYyLTE2NWUtNDg5OC1i ZjU5LThhYTFlNTIzZWJhNy8zNWRhNjhmMi0xNjVlLTQ4OTgtYmY1OS04YWExZTUy M2ViYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABKcckDBAKn/qwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASz6EbLPQtMa7 AxZRJkAio8evN2drjVxrxRLO5F3tafATWN2j8R310iUhkGkya+VaJjtdLnCYND5b J8Ip+j9QFfK4lQwrIfx6B9OmqeXRKvYRHd2vvmmxjoCay0CT4sULl2tDxNswKE6i zzjtMJ/K8c3gGeRx1gznNLkc5FQcDkj16l2ybv6jVagKnMZI5FVzJFJ1KkD0C4hO +jg9auxT92u7/h6Fu79ExBbLuzjGRCj7EUf/YcQFKk16o0N/MQEhJMNVoP3GXzGn nQrqewhefeo85EHWNbntyDNRXMQPCudY2Brk0ho0HLaJBMGS3hlQH5NnHTylsopn BSkAi79g+A== -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:47 2026 by rpki-client