$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.cer File: 3aef4e29-3cec-4bbe-bc1e-61dd513499e1.cer (raw, json) Hash identifier: oZcJ95+eOZrFqzTjoY79oqzk3iIp+GlWyWWkzLwHyQA= Subject key identifier: 84:D1:3A:6F:C7:FF:9B:91:B2:1A:DE:1B:46:D0:78:90:0F:7E:0E:A1 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9B5541F3BE3F086A9DBF3680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Apr 2026 23:23:39 +0000 Certificate not after: Wed 26 Jul 2028 23:23:39 +0000 Subordinate resources: AS: 19709 IP: 208.81.224.0/21 IP: 2604:3bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:55:41:f3:be:3f:08:6a:9d:bf:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 23 23:23:39 2026 GMT Not After : Jul 26 23:23:39 2028 GMT Subject: CN=3aef4e29-3cec-4bbe-bc1e-61dd513499e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:45:b4:7b:84:15:fb:50:39:ad:5a:a4:b3: a7:8d:11:c9:79:b5:05:7f:c3:53:8a:9b:58:3a:16: ff:20:99:84:bc:96:32:1c:fa:61:65:76:9d:0e:66: a8:38:03:c8:df:f3:5d:49:3a:bf:9b:e9:1d:ef:23: 60:4a:53:f0:8e:e6:e1:a6:00:65:f3:2f:3b:b8:67: 1b:1b:56:43:e3:f2:33:71:ce:d9:56:b2:8c:10:c6: f7:29:40:6f:e7:1e:62:ec:44:32:88:b4:e1:19:ae: 2b:08:42:ad:47:1c:ac:08:4b:95:53:cb:1c:db:ac: e2:93:44:9d:7b:3c:a9:ac:ef:9b:9c:8d:f2:b6:f7: da:2e:c8:f2:a9:6a:e6:4a:53:53:22:75:73:d7:3a: c1:bc:31:c9:3f:47:8e:52:36:55:6d:16:70:76:85: 04:cf:29:71:39:9f:ac:23:04:5c:8e:03:56:37:e4: 84:a5:7f:13:2e:8e:f1:28:d7:9c:9b:9b:53:61:c2: 6f:f5:be:3f:64:57:5a:88:84:2c:0e:d7:d8:8f:d2: 86:93:96:6f:cd:99:00:87:8c:07:27:d9:1d:1c:92: 41:e8:a8:e5:2d:11:48:7c:48:f1:28:32:59:1b:e1: 0d:1d:d5:1c:a0:43:47:02:ca:af:65:59:8d:7e:2c: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D1:3A:6F:C7:FF:9B:91:B2:1A:DE:1B:46:D0:78:90:0F:7E:0E:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.81.224.0/21 IPv6: 2604:3bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19709 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:30:41:b0:45:3b:4f:f9:d9:2e:ee:6e:f6:9a:ca:aa:c7:cd: 55:49:25:97:21:89:61:54:fc:45:f8:7e:33:31:0a:46:57:5e: 7d:ac:fb:11:5a:82:d7:13:91:43:70:3f:a7:11:6e:86:41:d2: ff:4c:0d:f6:61:4f:d3:d3:68:8a:02:a7:c6:f0:7a:cf:e2:37: 2f:5a:c3:71:55:40:52:da:4d:a6:0c:67:0e:2a:51:5f:f7:e3: 86:e7:72:5f:0d:36:23:fb:7d:fd:71:ef:1a:54:03:9e:a6:2a: e3:66:e3:31:a5:3f:03:5b:6c:f8:ff:04:e0:ab:31:1a:da:2c: 6b:80:ab:a2:a2:1b:70:a2:2b:ba:f1:2d:5a:54:c0:c8:20:b7: b4:a4:db:88:65:ff:92:41:39:2f:a4:5e:c6:3e:4f:8a:09:8c: 23:6e:ad:92:e9:fe:7d:32:28:71:5b:6a:b9:1d:01:3f:35:b4: ff:f7:ba:01:ed:f8:7d:0b:3d:0e:bb:16:8d:c5:48:76:d0:66: db:8c:f1:f5:48:69:12:6f:1e:d6:75:37:c4:98:b5:72:42:b2: 9e:61:07:78:c8:45:c4:57:06:b0:35:60:cf:b3:45:8f:f6:91: 76:5e:6c:59:90:af:76:01:3e:9e:54:e8:b7:59:b9:40:bb:67: cf:c8:7b:31 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE2bVUHzvj8Iap2/NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMzIzMjMzOVoXDTI4MDcyNjIzMjMzOVowLzEtMCsGA1UEAxMk M2FlZjRlMjktM2NlYy00YmJlLWJjMWUtNjFkZDUxMzQ5OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUxFtHuEFftQOa1apLOnjRHJebUFf8NTiptY Ohb/IJmEvJYyHPphZXadDmaoOAPI3/NdSTq/m+kd7yNgSlPwjubhpgBl8y87uGcb G1ZD4/Izcc7ZVrKMEMb3KUBv5x5i7EQyiLThGa4rCEKtRxysCEuVU8sc26zik0Sd ezyprO+bnI3ytvfaLsjyqWrmSlNTInVz1zrBvDHJP0eOUjZVbRZwdoUEzylxOZ+s IwRcjgNWN+SEpX8TLo7xKNecm5tTYcJv9b4/ZFdaiIQsDtfYj9KGk5ZvzZkAh4wH J9kdHJJB6KjlLRFIfEjxKDJZG+ENHdUcoENHAsqvZVmNfixqCQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFITROm/H/5uRshreG0bQeJAPfg6hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z YWVmNGUyOS0zY2VjLTRiYmUtYmMxZS02MWRkNTEzNDk5ZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzNhZWY0ZTI5LTNjZWMtNGJiZS1i YzFlLTYxZGQ1MTM0OTllMS8zYWVmNGUyOS0zY2VjLTRiYmUtYmMxZS02MWRkNTEz NDk5ZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPQUeAwDQQCAAIwBwMFACYEO8AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICTP0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUTBBsEU7T/nZLu5u9prKqsfNVUkl lyGJYVT8Rfh+MzEKRldefaz7EVqC1xORQ3A/pxFuhkHS/0wN9mFP09NoigKnxvB6 z+I3L1rDcVVAUtpNpgxnDipRX/fjhudyXw02I/t9/XHvGlQDnqYq42bjMaU/A1ts +P8E4KsxGtosa4CroqIbcKIruvEtWlTAyCC3tKTbiGX/kkE5L6Rexj5PigmMI26t kun+fTIocVtquR0BPzW0//e6Ae34fQs9DrsWjcVIdtBm24zx9UhpEm8e1nU3xJi1 ckKynmEHeMhFxFcGsDVgz7NFj/aRdl5sWZCvdgE+nlTot1m5QLtnz8h7MQ== -----END CERTIFICATE-----Generated at Wed May 13 02:48:37 2026 by rpki-client