$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6164a64f-7143-41f2-a0fd-f273d440e43b.cer File: 6164a64f-7143-41f2-a0fd-f273d440e43b.cer (raw, json) Hash identifier: MmTKKM0Xwex0pHxtKgUhwl2U5BwlktaMTLcVJeVhscU= Subject key identifier: 9D:8E:E0:D7:F6:BB:FA:DF:9B:95:07:08:B0:90:82:AC:47:1E:24:F8 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DB9849C517926358C0E20B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6164a64f-7143-41f2-a0fd-f273d440e43b/6164a64f-7143-41f2-a0fd-f273d440e43b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6164a64f-7143-41f2-a0fd-f273d440e43b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 May 2026 18:53:19 +0000 Certificate not after: Sun 06 Aug 2028 18:53:19 +0000 Subordinate resources: AS: 394259 IP: 192.135.123.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b9:84:9c:51:79:26:35:8c:0e:20:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 4 18:53:19 2026 GMT Not After : Aug 6 18:53:19 2028 GMT Subject: CN=6164a64f-7143-41f2-a0fd-f273d440e43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:48:ea:14:c1:45:d6:a1:91:25:9b:19:04: 07:03:fd:a4:bc:33:76:ec:ef:ad:ae:39:fe:bc:79: 88:a7:6b:51:20:13:a3:d7:da:cf:43:8b:e3:16:3b: a0:33:c4:a5:44:6d:4b:03:97:bb:b8:bb:bf:35:2f: 6c:de:8b:2a:4d:b2:94:0f:2c:bf:14:28:61:bd:a7: eb:dd:4d:82:63:56:78:13:3a:c0:8b:3d:19:53:23: 29:78:a0:5f:72:61:2f:b9:44:74:3d:b4:fe:f9:77: eb:ba:cc:ca:ee:30:91:2f:c5:98:18:e8:b3:91:36: e8:ed:0c:df:5f:fe:a6:2d:b8:ce:35:89:ff:2a:e5: f8:4e:41:68:51:31:a1:62:a2:fc:5f:a6:84:da:6c: 78:d0:ea:8e:43:25:bb:4e:29:9d:19:18:4c:27:76: af:1b:46:33:f9:43:3e:08:45:32:46:81:5d:70:92: 7d:9f:d5:b2:a2:16:0e:47:cc:f7:df:37:dd:fc:af: 61:15:ad:98:94:c0:68:26:32:7b:6b:00:0a:80:76: fe:03:3a:5f:fd:ff:d6:1d:cf:68:5f:1f:40:47:21: 2a:be:ba:e4:62:33:20:b3:59:e1:18:af:7a:3b:4b: 30:c7:a8:5a:88:2a:25:15:77:d4:3c:78:1c:df:1f: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8E:E0:D7:F6:BB:FA:DF:9B:95:07:08:B0:90:82:AC:47:1E:24:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6164a64f-7143-41f2-a0fd-f273d440e43b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6164a64f-7143-41f2-a0fd-f273d440e43b/6164a64f-7143-41f2-a0fd-f273d440e43b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.135.123.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394259 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:79:bb:cb:87:69:e9:ca:52:35:72:44:bd:53:e5:af:b9:2c: ff:cd:c4:30:20:62:c1:21:d3:07:8d:64:b4:ec:2b:35:0b:20: 11:f8:23:03:f2:4b:37:e9:08:00:af:87:17:7b:12:2a:c0:ab: c6:c1:72:c4:80:b8:d4:ca:01:0b:45:17:27:ba:da:bd:91:83: 56:c6:4d:90:54:1e:2d:2f:90:6d:d9:1b:28:6e:c3:22:69:77: ae:f8:81:57:97:69:a7:69:cf:e7:20:31:38:ba:ed:42:5b:cb: 20:b3:48:1b:d0:4b:ee:c1:ee:b2:92:75:18:43:d8:1f:9f:4a: 94:bf:c7:ff:55:f9:f8:d4:c8:27:f0:57:28:3f:ca:55:ca:e8: 2e:a6:1b:41:57:dc:fb:a4:da:9d:8d:f5:0f:88:87:54:52:7d: ff:1d:90:67:54:af:5e:23:27:ba:8c:56:bd:5f:36:f2:09:39: 9a:13:b7:f8:4d:dd:cc:05:fe:2b:3d:b0:d4:a3:8e:6c:21:72: 25:32:d1:73:4c:3e:2d:39:d0:c1:b7:19:7a:a5:70:b1:03:1d: d2:e4:40:fd:b8:5b:a4:d2:79:a8:bf:15:35:79:b4:59:f2:83: dc:e8:25:9f:2c:ee:ad:24:15:b6:01:03:5f:19:2b:07:03:be: 28:05:60:ca -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE25hJxReSY1jA4gt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNDE4NTMxOVoXDTI4MDgwNjE4NTMxOVowLzEtMCsGA1UEAxMk NjE2NGE2NGYtNzE0My00MWYyLWEwZmQtZjI3M2Q0NDBlNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N1I6hTBRdahkSWbGQQHA/2kvDN27O+trjn+ vHmIp2tRIBOj19rPQ4vjFjugM8SlRG1LA5e7uLu/NS9s3osqTbKUDyy/FChhvafr 3U2CY1Z4EzrAiz0ZUyMpeKBfcmEvuUR0PbT++XfruszK7jCRL8WYGOizkTbo7Qzf X/6mLbjONYn/KuX4TkFoUTGhYqL8X6aE2mx40OqOQyW7TimdGRhMJ3avG0Yz+UM+ CEUyRoFdcJJ9n9WyohYOR8z33zfd/K9hFa2YlMBoJjJ7awAKgHb+Azpf/f/WHc9o Xx9ARyEqvrrkYjMgs1nhGK96O0swx6haiColFXfUPHgc3x8Q7QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJ2O4Nf2u/rfm5UHCLCQgqxHHiT4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 MTY0YTY0Zi03MTQzLTQxZjItYTBmZC1mMjczZDQ0MGU0M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzYxNjRhNjRmLTcxNDMtNDFmMi1h MGZkLWYyNzNkNDQwZTQzYi82MTY0YTY0Zi03MTQzLTQxZjItYTBmZC1mMjczZDQ0 MGU0M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAh3swGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgQTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACN5u8uHaenKUjVyRL1T5a+5LP/NxDAgYsEh0weNZLTsKzUL IBH4IwPySzfpCACvhxd7EirAq8bBcsSAuNTKAQtFFye62r2Rg1bGTZBUHi0vkG3Z GyhuwyJpd674gVeXaadpz+cgMTi67UJbyyCzSBvQS+7B7rKSdRhD2B+fSpS/x/9V +fjUyCfwVyg/ylXK6C6mG0FX3Puk2p2N9Q+Ih1RSff8dkGdUr14jJ7qMVr1fNvIJ OZoTt/hN3cwF/is9sNSjjmwhciUy0XNMPi050MG3GXqlcLEDHdLkQP24W6TSeai/ FTV5tFnyg9zoJZ8s7q0kFbYBA18ZKwcDvigFYMo= -----END CERTIFICATE-----Generated at Wed May 13 06:58:02 2026 by rpki-client