$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer File: 5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer (raw, json) Hash identifier: MBPRJ3qedptZZGI9XNxBp3Ak4w/bYhCQdFG8fDL/fls= Subject key identifier: 00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAE412B51369A1A2185FA7000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 18:03:32 +0000 Certificate not after: Wed 02 Aug 2028 18:03:32 +0000 Subordinate resources: IP: 208.88.16.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:41:2b:51:36:9a:1a:21:85:fa:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 30 18:03:32 2026 GMT Not After : Aug 2 18:03:32 2028 GMT Subject: CN=5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:a0:09:b2:f3:0e:1c:2f:bd:2a:54:93:4e: 12:e2:60:27:0b:cb:9e:1e:80:1d:2f:cb:af:54:0b: ad:bb:49:e9:9a:79:fa:2d:0d:a8:10:d0:7f:32:f9: a3:6f:01:3f:f9:7f:ad:b1:2d:34:7b:36:4b:fe:5f: af:ce:12:ab:2a:ef:43:e3:55:77:97:bb:90:71:c7: b4:74:ae:cb:20:cf:fa:8f:e4:bb:5c:ef:42:5f:cd: c2:98:82:56:98:5c:01:c4:bb:45:c8:df:c5:9f:98: a3:59:4f:0b:da:49:a3:01:8b:2c:5b:89:33:46:72: 45:1b:d6:a0:89:3b:c5:36:ff:20:16:46:1b:cf:6f: a5:e4:0b:cc:cf:6d:d6:a1:de:e0:5d:91:89:f7:44: 6a:3a:5f:bf:2d:10:0d:32:a7:da:fd:92:37:28:e8: a0:c6:fb:2b:e6:30:ec:96:60:5e:18:35:f0:d4:ce: 1c:48:ea:fe:b9:60:42:e2:55:88:90:cd:e6:80:f4: e9:f7:55:bb:18:be:59:1b:2f:0f:e6:4f:f8:3d:4a: b4:73:ad:c4:3d:7f:96:12:2c:51:53:9e:e4:44:e3: e6:f9:5b:3e:22:0b:8e:4f:59:55:17:d5:e9:1a:2d: 88:3c:52:6a:46:3f:6b:89:80:92:34:62:d4:ba:6b: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.88.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:f9:e3:6e:d1:1e:3b:b6:f0:53:27:31:9b:c8:0b:08:e1:3c: 5c:a7:2c:bf:96:92:a3:d8:ac:79:65:52:2c:dd:04:6a:bb:4a: 3b:3a:ce:74:cd:06:2a:3a:7f:96:23:3f:89:d3:38:a6:1c:fd: 22:cd:bb:7f:eb:e9:2c:2d:a6:9a:ca:31:b3:88:53:2f:17:9f: ab:3e:2f:c2:53:56:11:3d:dc:5e:0a:56:b3:84:50:af:50:97: 85:6e:6d:a3:01:a2:84:ff:ac:ae:11:e1:67:54:68:86:89:bb: 76:38:51:ca:4c:4b:d8:46:67:28:5d:ad:13:12:a4:8d:a8:8e: 82:da:3b:2c:bd:8e:47:1f:cf:6b:22:47:a3:da:d7:5d:61:36: 5d:ec:6e:5b:03:41:e2:4c:7b:aa:8f:22:70:72:65:39:0b:42: d0:8b:7c:22:87:00:e5:9e:21:73:77:b0:26:cb:7c:da:88:5c: 96:ce:6e:6a:4a:be:a1:6c:cd:db:6c:34:10:ac:97:f2:70:e7: 8c:79:20:3d:b7:01:cc:41:41:2e:d8:1b:35:7e:ce:68:94:e3: e3:35:b4:45:7b:9e:61:76:b7:53:1f:7b:b4:ee:ce:e1:1c:23: 56:e5:d9:67:bc:b1:a9:99:a0:43:4a:2c:12:36:f3:33:1f:e3: 9e:ce:e0:78 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2uQStRNpoaIYX6cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQzMDE4MDMzMloXDTI4MDgwMjE4MDMzMlowLzEtMCsGA1UEAxMk NWQ0ZjcwYzgtOWVhNS00ZGM0LTllOWEtZWQ2ZTI1NjRlN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl26gCbLzDhwvvSpUk04S4mAnC8ueHoAdL8uv VAutu0npmnn6LQ2oENB/MvmjbwE/+X+tsS00ezZL/l+vzhKrKu9D41V3l7uQcce0 dK7LIM/6j+S7XO9CX83CmIJWmFwBxLtFyN/Fn5ijWU8L2kmjAYssW4kzRnJFG9ag iTvFNv8gFkYbz2+l5AvMz23Wod7gXZGJ90RqOl+/LRANMqfa/ZI3KOigxvsr5jDs lmBeGDXw1M4cSOr+uWBC4lWIkM3mgPTp91W7GL5ZGy8P5k/4PUq0c63EPX+WEixR U57kROPm+Vs+IguOT1lVF9XpGi2IPFJqRj9riYCSNGLUumuuPwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAAh3LlfCzUMJsBfHgF2Td5RKTsJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 ZDRmNzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZlMjU2NGU3YzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVkNGY3MGM4LTllYTUtNGRjNC05 ZTlhLWVkNmUyNTY0ZTdjMC81ZDRmNzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZlMjU2 NGU3YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQWBAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAv/njbtEeO7bwUycxm8gL COE8XKcsv5aSo9iseWVSLN0EartKOzrOdM0GKjp/liM/idM4phz9Is27f+vpLC2m msoxs4hTLxefqz4vwlNWET3cXgpWs4RQr1CXhW5towGihP+srhHhZ1Rohom7djhR ykxL2EZnKF2tExKkjaiOgto7LL2ORx/PayJHo9rXXWE2XexuWwNB4kx7qo8icHJl OQtC0It8IocA5Z4hc3ewJst82ohcls5uakq+oWzN22w0EKyX8nDnjHkgPbcBzEFB LtgbNX7OaJTj4zW0RXueYXa3Ux97tO7O4RwjVuXZZ7yxqZmgQ0osEjbzMx/jns7g eA== -----END CERTIFICATE-----Generated at Tue May 12 21:45:15 2026 by rpki-client