$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab.cer File: 570595b1-8680-4be0-ba0e-5d08aa118fab.cer (raw, json) Hash identifier: TlqJV8btKZ2vXXBSBEofvEm5ncA231wcnBmxbeXvICA= Subject key identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DC217967CD73C8591AD125200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 May 2026 20:35:55 +0000 Certificate not after: Wed 09 Aug 2028 20:35:55 +0000 Subordinate resources: IP: 130.20.0.0/16 IP: 192.35.193.0/24 IP: 192.101.100.0 -- 192.101.109.255 IP: 198.232.172.0/22 IP: 198.252.143.0/24 IP: 199.89.243.0 -- 199.89.246.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:17:96:7c:d7:3c:85:91:ad:12:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 7 20:35:55 2026 GMT Not After : Aug 9 20:35:55 2028 GMT Subject: CN=570595b1-8680-4be0-ba0e-5d08aa118fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:75:15:15:32:91:3f:21:2c:8e:44:6f:d1: 09:8c:7e:b6:52:97:61:3e:d1:6f:35:23:4f:cb:61: 2e:da:bd:2d:0a:5b:8a:8f:52:8e:4a:59:44:bf:42: 24:f9:65:7a:8d:cd:04:96:fa:9f:58:92:8a:6e:69: e2:2b:26:75:02:35:b2:59:d2:ac:87:c6:74:7a:ad: d1:0d:1c:5b:43:6b:9e:fb:6c:80:68:fc:5a:0a:37: 68:55:ec:62:be:de:73:55:2b:52:a8:d4:80:5a:e5: a6:42:c2:2f:f1:80:3a:e1:05:cb:14:4b:07:eb:b6: 6b:31:7f:32:6e:37:c3:61:db:fa:f0:7b:53:75:27: 6d:45:63:0b:ae:7a:68:b4:fd:2a:c9:8b:04:dd:97: 0a:e1:97:84:5e:3f:34:a9:d7:a6:2f:9d:16:72:c2: ed:19:4e:bb:db:ce:ed:65:f2:b8:76:ce:ca:02:1d: 5b:8d:75:c5:70:48:25:e6:d9:cc:58:e5:72:82:b2: e8:b9:24:fb:fa:ea:39:95:e6:2a:27:86:91:c2:e1: 3a:02:6e:d7:21:13:40:1f:fa:c2:84:38:fc:19:3d: 8c:55:94:f3:5a:d7:e9:c9:a8:11:d5:30:8e:9d:5c: fb:c4:d2:24:eb:d0:67:94:3a:92:25:58:95:b7:a3: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:09:09:32:99:88:D4:8A:73:6D:0F:7F:1D:C8:55:6C:B1:30:BD:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/570595b1-8680-4be0-ba0e-5d08aa118fab/570595b1-8680-4be0-ba0e-5d08aa118fab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 130.20.0.0/16 192.35.193.0/24 192.101.100.0-192.101.109.255 198.232.172.0/22 198.252.143.0/24 199.89.243.0-199.89.246.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:c4:7d:ad:d1:37:ab:dc:2b:27:b2:b8:07:b3:f4:f3:e6:89: 16:3a:41:52:4c:2b:59:8a:8a:50:8a:e7:3c:40:3b:80:33:9c: d3:f2:25:39:7f:3c:c7:db:43:0e:1a:a4:30:19:f7:ae:84:b8: 08:7f:90:05:9a:36:a8:1f:fd:c7:5b:4a:9f:5f:43:6f:2e:96: 00:a6:24:de:fc:2c:ac:b7:ce:74:91:d7:53:8d:b0:a5:1c:91: b3:df:35:19:e2:67:65:0f:f8:9d:3f:24:35:bd:d6:9d:ab:f7: 46:e0:6e:e5:de:d5:d7:69:e6:c0:33:6c:de:85:60:ec:29:93: 75:15:8e:f6:a7:db:68:2a:a5:9d:da:d8:b8:8b:9b:23:7b:cc: 30:f6:93:22:48:9d:39:4f:a7:33:a5:e4:4c:cc:6a:95:4e:e8: 18:34:2c:2f:05:f8:03:bc:85:26:8b:68:94:c8:12:85:d3:02: a8:3a:10:79:2b:4c:39:ff:5d:5c:08:0b:0c:86:99:dc:d1:2a: 14:36:09:46:9a:2b:b7:23:1f:7d:7b:f2:5a:b2:bc:4d:8f:7e: d0:04:50:30:53:44:cd:1f:ef:00:f2:63:ba:12:17:19:b5:eb: 74:54:e3:53:d4:03:11:9f:82:11:8e:4e:90:5a:2f:44:59:8e: ae:4a:ee:93 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE3CF5Z81zyFka0SUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNzIwMzU1NVoXDTI4MDgwOTIwMzU1NVowLzEtMCsGA1UEAxMk NTcwNTk1YjEtODY4MC00YmUwLWJhMGUtNWQwOGFhMTE4ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm11FRUykT8hLI5Eb9EJjH62UpdhPtFvNSNP y2Eu2r0tCluKj1KOSllEv0Ik+WV6jc0ElvqfWJKKbmniKyZ1AjWyWdKsh8Z0eq3R DRxbQ2ue+2yAaPxaCjdoVexivt5zVStSqNSAWuWmQsIv8YA64QXLFEsH67ZrMX8y bjfDYdv68HtTdSdtRWMLrnpotP0qyYsE3ZcK4ZeEXj80qdemL50WcsLtGU67287t ZfK4ds7KAh1bjXXFcEgl5tnMWOVygrLouST7+uo5leYqJ4aRwuE6Am7XIRNAH/rC hDj8GT2MVZTzWtfpyagR1TCOnVz7xNIk69BnlDqSJViVt6NSbQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFP0JCTKZiNSKc20Pfx3IVWyxML3QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NzA1OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4YWExMThmYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU3MDU5NWIxLTg2ODAtNGJlMC1i YTBlLTVkMDhhYTExOGZhYi81NzA1OTViMS04NjgwLTRiZTAtYmEwZS01ZDA4YWEx MThmYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MDkEAgABMDMDAwCCFAMEAMAjwTAMAwQCwGVkAwQBwGVsAwQCxuis AwQAxvyPMAwDBADHWfMDBADHWfYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvsR9rdE3q9wrJ7K4B7P08+aJ FjpBUkwrWYqKUIrnPEA7gDOc0/IlOX88x9tDDhqkMBn3roS4CH+QBZo2qB/9x1tK n19Dby6WAKYk3vwsrLfOdJHXU42wpRyRs981GeJnZQ/4nT8kNb3Wnav3RuBu5d7V 12nmwDNs3oVg7CmTdRWO9qfbaCqlndrYuIubI3vMMPaTIkidOU+nM6XkTMxqlU7o GDQsLwX4A7yFJotolMgShdMCqDoQeStMOf9dXAgLDIaZ3NEqFDYJRportyMffXvy WrK8TY9+0ARQMFNEzR/vAPJjuhIXGbXrdFTjU9QDEZ+CEY5OkFovRFmOrkrukw== -----END CERTIFICATE-----Generated at Wed May 13 04:02:19 2026 by rpki-client