$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50faedc4-0a6b-404e-9429-bc44ff8db83f.cer File: 50faedc4-0a6b-404e-9429-bc44ff8db83f.cer (raw, json) Hash identifier: K8ARLGN7yuXiAy6Cf5p9uhrVxh5kGrD5G5vZu2Wh7S0= Subject key identifier: 11:F9:FC:27:C1:7D:CE:28:89:F6:70:FB:B1:B9:E0:AC:A1:8F:0F:C1 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DCD25C8086269C584511C2AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50faedc4-0a6b-404e-9429-bc44ff8db83f/50faedc4-0a6b-404e-9429-bc44ff8db83f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50faedc4-0a6b-404e-9429-bc44ff8db83f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 19:38:25 +0000 Certificate not after: Sun 13 Aug 2028 19:38:25 +0000 Subordinate resources: IP: 206.183.157.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:25:c8:08:62:69:c5:84:51:1c:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 11 19:38:25 2026 GMT Not After : Aug 13 19:38:25 2028 GMT Subject: CN=50faedc4-0a6b-404e-9429-bc44ff8db83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:50:da:95:e2:83:1f:25:f5:24:43:a7:1b: 9f:fc:46:62:73:97:16:83:6b:53:ce:a8:b5:02:c4: bd:11:c9:e7:32:8b:0b:20:14:c6:3b:b8:04:20:d3: 49:80:46:8b:4f:1b:22:1a:be:58:3c:89:11:fc:06: 2c:86:d3:4f:a7:78:48:e3:ed:01:7b:a7:44:10:6f: 0e:5c:ee:84:95:e3:75:79:a3:98:c2:a3:21:f9:fb: 7a:75:56:ff:b6:c2:e2:b1:9e:fb:14:ec:20:57:3c: f9:7a:a7:cf:b1:0b:f2:a2:76:82:93:87:92:12:8b: 2f:b9:a6:c3:07:58:66:34:7e:e9:fd:8c:9d:b4:22: f8:b1:c5:5c:aa:c5:3e:6c:00:92:da:2e:03:28:48: 58:ae:76:57:32:09:6b:5f:41:4e:1a:50:fc:44:a7: dc:e1:cf:04:71:b1:c5:c4:3a:65:52:ac:52:f8:62: e2:a8:6a:31:9c:2f:7b:cc:b7:34:48:3c:39:12:65: 2a:af:05:50:b2:d1:7c:49:ff:f2:59:f2:fb:83:1b: 80:af:89:d2:4a:d9:ad:bf:80:21:6c:1f:d5:05:4b: a2:59:a9:81:d3:7f:92:b9:1b:b8:49:fc:0d:82:02: 14:46:5f:f3:76:52:db:1f:fb:02:ec:c3:45:1b:fd: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:FC:27:C1:7D:CE:28:89:F6:70:FB:B1:B9:E0:AC:A1:8F:0F:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50faedc4-0a6b-404e-9429-bc44ff8db83f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/50faedc4-0a6b-404e-9429-bc44ff8db83f/50faedc4-0a6b-404e-9429-bc44ff8db83f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 206.183.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4d:d1:28:fc:a2:6a:f3:fd:99:1c:9f:b1:63:5e:50:de:b6: 77:a1:b5:e7:f6:a2:ae:cf:0b:e7:fa:74:a3:ca:27:ef:55:b4: cc:5c:77:c9:3a:15:08:fd:79:fd:fe:76:22:38:53:f4:08:9f: 60:9b:5f:04:ca:aa:26:81:f1:62:d0:47:3b:41:5e:55:29:3d: 79:b3:d6:0a:60:cc:01:9c:43:b7:3b:1a:77:38:8c:02:06:b3: be:16:5b:e6:f5:7d:1d:6b:47:81:28:85:7e:86:df:a5:41:57: 3e:03:d3:e5:a5:09:73:03:11:11:97:d1:99:d6:54:a9:a7:5d: 1f:55:89:85:4b:89:47:23:e4:92:74:b9:90:f1:95:c1:1e:a2: 4d:21:cc:1b:27:84:7a:57:76:49:ec:f4:d3:e6:ec:f7:5f:15: 2c:c2:60:be:d9:ee:3e:b4:c5:c1:03:01:21:22:d3:79:c7:41: cb:d5:15:37:11:7b:cd:d4:36:6e:f7:8d:a1:b0:8f:85:be:c7: 36:ee:6b:0c:8f:f4:84:3f:bb:79:7a:11:75:23:de:29:0c:5c: a1:c4:4b:15:e4:d1:14:ad:56:16:7d:d7:d0:41:87:62:11:cb: 8c:ab:a7:63:a9:09:b4:5e:a0:8e:3a:19:59:f4:87:7e:9e:82: f1:56:f5:3a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3NJcgIYmnFhFEcKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMTE5MzgyNVoXDTI4MDgxMzE5MzgyNVowLzEtMCsGA1UEAxMk NTBmYWVkYzQtMGE2Yi00MDRlLTk0MjktYmM0NGZmOGRiODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2lQ2pXigx8l9SRDpxuf/EZic5cWg2tTzqi1 AsS9EcnnMosLIBTGO7gEINNJgEaLTxsiGr5YPIkR/AYshtNPp3hI4+0Be6dEEG8O XO6EleN1eaOYwqMh+ft6dVb/tsLisZ77FOwgVzz5eqfPsQvyonaCk4eSEosvuabD B1hmNH7p/YydtCL4scVcqsU+bACS2i4DKEhYrnZXMglrX0FOGlD8RKfc4c8EcbHF xDplUqxS+GLiqGoxnC97zLc0SDw5EmUqrwVQstF8Sf/yWfL7gxuAr4nSStmtv4Ah bB/VBUuiWamB03+SuRu4SfwNggIURl/zdlLbH/sC7MNFG/0+jwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBH5/CfBfc4oifZw+7G54Kyhjw/BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 MGZhZWRjNC0wYTZiLTQwNGUtOTQyOS1iYzQ0ZmY4ZGI4M2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzUwZmFlZGM0LTBhNmItNDA0ZS05 NDI5LWJjNDRmZjhkYjgzZi81MGZhZWRjNC0wYTZiLTQwNGUtOTQyOS1iYzQ0ZmY4 ZGI4M2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADOt50wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXk3RKPyiavP9mRyfsWNe UN62d6G15/airs8L5/p0o8on71W0zFx3yToVCP15/f52IjhT9AifYJtfBMqqJoHx YtBHO0FeVSk9ebPWCmDMAZxDtzsadziMAgazvhZb5vV9HWtHgSiFfobfpUFXPgPT 5aUJcwMREZfRmdZUqaddH1WJhUuJRyPkknS5kPGVwR6iTSHMGyeEeld2Sez00+bs 918VLMJgvtnuPrTFwQMBISLTecdBy9UVNxF7zdQ2bveNobCPhb7HNu5rDI/0hD+7 eXoRdSPeKQxcocRLFeTRFK1WFn3X0EGHYhHLjKunY6kJtF6gjjoZWfSHfp6C8Vb1 Og== -----END CERTIFICATE-----Generated at Wed May 13 02:48:22 2026 by rpki-client