$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer File: 0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer (raw, json) Hash identifier: Yv75js3s/4sj2thn5NUINRjOpyjL/f4wOsy7ejNzMNs= Subject key identifier: 58:ED:26:50:5E:5A:09:2B:64:E7:DC:6D:EA:03:3E:74:A6:C1:EE:8E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA8830DF6DEE0A24291DF6B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 16:41:26 +0000 Certificate not after: Mon 31 Jul 2028 16:41:26 +0000 Subordinate resources: AS: 22505 IP: 142.239.0.0/16 IP: 2620:10d:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:83:0d:f6:de:e0:a2:42:91:df:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 28 16:41:26 2026 GMT Not After : Jul 31 16:41:26 2028 GMT Subject: CN=0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:42:20:18:fa:d7:9c:4b:dc:c9:7e:42:47:f2: 02:a7:26:a6:3d:de:d7:10:dc:0e:6a:b7:79:c4:8b: da:e5:2d:31:74:82:99:25:bd:a6:76:b3:b4:a0:1e: 96:c8:31:26:b2:45:97:b0:db:c5:23:75:7c:33:8f: a4:88:70:1b:97:86:f1:cf:de:45:e1:08:a9:94:5e: 4d:9e:3c:ba:54:52:f5:f8:84:dc:d8:c3:ab:71:80: ce:9a:0d:03:66:56:94:e7:41:2e:e4:03:85:9e:a2: 16:37:9c:c9:0a:bb:51:12:b6:66:43:3e:5c:10:10: c1:02:c4:10:02:b3:46:a4:b2:4c:51:4a:28:35:7c: f0:94:b5:23:ba:6e:65:1e:06:54:e5:d2:a1:c2:6d: c3:02:e5:e9:c0:7e:03:e3:05:f8:96:ad:89:09:66: 62:7f:86:82:3e:2e:22:74:37:bd:bf:9f:07:1c:3b: fa:91:64:c6:b8:61:0b:bc:95:78:ef:1a:90:6f:ba: ad:b8:89:d2:0e:e5:27:de:25:bd:ea:a5:3a:87:93: 90:f2:4f:15:52:4d:dc:c4:66:32:7d:56:bf:78:cf: 78:bb:85:07:ea:82:bb:fa:54:cd:d3:40:62:92:5f: 84:c1:5c:82:f1:f9:04:98:e4:1b:aa:2b:1d:fe:9c: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:ED:26:50:5E:5A:09:2B:64:E7:DC:6D:EA:03:3E:74:A6:C1:EE:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 142.239.0.0/16 IPv6: 2620:10d:e000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22505 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c8:a1:7a:fa:cb:6f:8b:d7:b9:75:ff:13:fc:f2:74:ad:89: 54:60:6a:db:ab:3f:a3:8d:57:56:f0:16:02:cb:17:7f:94:f3: 22:34:63:b7:c6:bd:79:98:b0:c2:b5:38:ad:ac:c8:a6:87:fd: 6d:62:c6:13:7f:42:7b:e3:12:11:40:26:24:d2:6f:d2:9b:42: 26:2b:c8:d9:82:57:22:db:f9:2f:0a:50:96:45:5f:f9:8c:7c: e4:ab:c6:18:97:06:12:c3:c4:61:31:36:53:db:b3:9d:32:07: 2c:31:dc:d5:c0:9f:4a:d2:03:71:b0:5e:af:f0:cd:b3:5a:f8: 85:63:6a:e6:56:ea:df:2d:ae:5d:7f:b6:29:fa:16:ac:f1:ee: ae:de:17:c3:e4:8e:17:db:5f:51:70:58:b3:af:04:6b:eb:60: 2d:a9:7e:0e:05:c0:ea:1e:a1:82:04:2e:55:32:1c:a3:37:2c: 3e:96:4b:34:93:80:6e:ee:f7:45:c0:83:4f:c5:27:72:35:51: 7a:05:fc:c6:60:23:1f:69:cc:b5:3c:bf:50:6c:ed:b2:78:cc: 27:7e:ad:40:39:b8:95:48:91:24:04:a8:a2:09:a0:29:d3:4e: 57:8d:5f:c4:fa:a7:c1:3b:21:74:27:ab:5d:e7:ce:01:d0:d7: e0:55:19:9d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2ogw323uCiQpHfawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyODE2NDEyNloXDTI4MDczMTE2NDEyNlowLzEtMCsGA1UEAxMk MGI4OTA1YTUtYzc4Zi00ZTdjLThlNmItOGQzY2Q1YjgwNWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUIgGPrXnEvcyX5CR/ICpyamPd7XENwOard5 xIva5S0xdIKZJb2mdrO0oB6WyDEmskWXsNvFI3V8M4+kiHAbl4bxz95F4QiplF5N njy6VFL1+ITc2MOrcYDOmg0DZlaU50Eu5AOFnqIWN5zJCrtRErZmQz5cEBDBAsQQ ArNGpLJMUUooNXzwlLUjum5lHgZU5dKhwm3DAuXpwH4D4wX4lq2JCWZif4aCPi4i dDe9v58HHDv6kWTGuGELvJV47xqQb7qtuInSDuUn3iW96qU6h5OQ8k8VUk3cxGYy fVa/eM94u4UH6oK7+lTN00Bikl+EwVyC8fkEmOQbqisd/pyZWwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFjtJlBeWgkrZOfcbeoDPnSmwe6OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w Yjg5MDVhNS1jNzhmLTRlN2MtOGU2Yi04ZDNjZDViODA1ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBiODkwNWE1LWM3OGYtNGU3Yy04 ZTZiLThkM2NkNWI4MDVmZC8wYjg5MDVhNS1jNzhmLTRlN2MtOGU2Yi04ZDNjZDVi ODA1ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCO7zAPBAIAAjAJAwcEJiABDeAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlfpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF/IoXr6y2+L17l1/xP88nStiVRg aturP6ONV1bwFgLLF3+U8yI0Y7fGvXmYsMK1OK2syKaH/W1ixhN/QnvjEhFAJiTS b9KbQiYryNmCVyLb+S8KUJZFX/mMfOSrxhiXBhLDxGExNlPbs50yBywx3NXAn0rS A3GwXq/wzbNa+IVjauZW6t8trl1/tin6Fqzx7q7eF8PkjhfbX1FwWLOvBGvrYC2p fg4FwOoeoYIELlUyHKM3LD6WSzSTgG7u90XAg0/FJ3I1UXoF/MZgIx9pzLU8v1Bs 7bJ4zCd+rUA5uJVIkSQEqKIJoCnTTleNX8T6p8E7IXQnq13nzgHQ1+BVGZ0= -----END CERTIFICATE-----Generated at Wed May 13 02:48:36 2026 by rpki-client