$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca.cer File: 69859de6-ef56-44d3-8f0e-07916c5ce9ca.cer (raw, json) Hash identifier: J/KfIQl45HVuUqE8g1n95PAE/wQgr4O4HhQjMc3x9Ao= Subject key identifier: 41:9B:EC:BE:34:FF:FA:E0:2C:30:3B:BD:17:B3:BF:E7:46:E6:72:6A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DCC745BDD5871939ABB089380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/69859de6-ef56-44d3-8f0e-07916c5ce9ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 13:40:56 +0000 Certificate not after: Sun 13 Aug 2028 13:40:56 +0000 Subordinate resources: AS: 396224 IP: 170.76.195.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:74:5b:dd:58:71:93:9a:bb:08:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 11 13:40:56 2026 GMT Not After : Aug 13 13:40:56 2028 GMT Subject: CN=69859de6-ef56-44d3-8f0e-07916c5ce9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:1d:e2:b2:ea:65:13:d2:71:ba:29:8b:4d: 62:be:8b:ad:7e:ea:5b:f4:43:80:44:4e:78:0f:8b: 97:2d:a5:fd:0d:74:b0:88:30:2e:3a:ba:c1:ca:87: ed:81:00:67:ab:a1:cd:ac:67:77:6b:d1:6b:3b:ae: 5e:ec:25:56:d9:7d:0a:fd:38:e0:3f:41:ab:eb:6d: 13:3c:1f:3d:e7:f4:84:fc:87:3f:78:65:05:b5:fa: 6d:80:9e:0c:96:31:cb:8c:c0:fe:8a:60:20:c5:c4: 4a:77:b9:c1:54:dd:ff:91:80:7f:86:3a:18:65:34: b8:55:4f:e8:9c:3d:c6:78:98:d2:8f:53:b1:06:7c: da:98:af:bf:c6:b9:4b:31:98:46:9f:f4:83:44:94: 4b:90:ba:a8:06:15:85:2e:e4:b7:df:11:e0:8f:24: b4:ea:a9:eb:08:ba:a3:48:82:f9:63:00:51:a7:65: 13:1f:fb:85:5d:08:b8:57:df:4b:c6:38:ad:8b:30: 13:f3:77:2b:ed:a1:dc:9a:61:29:e4:ba:d4:42:dc: 31:8b:cb:94:0e:74:78:90:7b:9d:05:ce:17:22:51: eb:f8:3e:81:20:66:f5:82:8f:84:09:07:95:b0:03: cd:09:b3:6d:56:34:5b:38:ff:69:67:37:d1:1b:a5: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:EC:BE:34:FF:FA:E0:2C:30:3B:BD:17:B3:BF:E7:46:E6:72:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/69859de6-ef56-44d3-8f0e-07916c5ce9ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 170.76.195.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396224 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b5:51:1c:7c:d9:47:da:27:bd:38:2d:b7:13:bc:d2:24:ea: eb:ec:ad:bd:6c:d4:46:ae:8d:71:7f:86:66:96:36:8c:20:73: 2a:45:9c:6c:0d:7f:f3:3f:f7:12:98:41:96:89:c4:58:b5:26: 9d:84:1e:d2:e9:50:94:75:18:68:d5:2d:dd:a7:4e:2a:cd:ad: 84:d6:c2:91:0b:72:e0:eb:13:26:da:78:d2:c7:5d:4f:de:ea: 95:89:1c:f5:d0:23:cd:b7:bc:9d:8f:13:8c:d3:c6:19:19:90: 7a:fd:0e:57:62:d3:a6:8b:e1:95:f0:44:51:36:51:09:48:34: 27:f4:9f:cc:b3:71:39:b9:89:41:94:57:84:f2:26:76:58:a5: 92:28:47:d2:b7:fa:0c:d9:9d:da:56:d6:a5:7c:91:ef:4e:a5: cc:65:7e:85:7e:c2:54:0f:85:40:5a:21:4f:80:eb:79:03:45: 99:2a:e5:93:92:96:ed:21:02:13:58:ba:bc:ec:a9:2c:a8:74: 83:e3:04:da:8f:a5:6a:b3:08:e0:40:e0:c2:59:4e:3c:83:3b: a1:ff:bc:2d:f2:f1:7c:2b:c8:c7:0a:de:d6:c3:ae:56:c6:05: da:c4:f8:bf:89:4c:2a:55:51:07:2d:ad:00:3d:bc:98:fc:02: 4c:1f:24:51 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE3MdFvdWHGTmrsIk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMTEzNDA1NloXDTI4MDgxMzEzNDA1NlowLzEtMCsGA1UEAxMk Njk4NTlkZTYtZWY1Ni00NGQzLThmMGUtMDc5MTZjNWNlOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu8d4rLqZRPScbopi01ivoutfupb9EOARE54 D4uXLaX9DXSwiDAuOrrByoftgQBnq6HNrGd3a9FrO65e7CVW2X0K/TjgP0Gr620T PB895/SE/Ic/eGUFtfptgJ4MljHLjMD+imAgxcRKd7nBVN3/kYB/hjoYZTS4VU/o nD3GeJjSj1OxBnzamK+/xrlLMZhGn/SDRJRLkLqoBhWFLuS33xHgjyS06qnrCLqj SIL5YwBRp2UTH/uFXQi4V99LxjitizAT83cr7aHcmmEp5LrUQtwxi8uUDnR4kHud Bc4XIlHr+D6BIGb1go+ECQeVsAPNCbNtVjRbOP9pZzfRG6W7zwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEGb7L40//rgLDA7vRezv+dG5nJqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 OTg1OWRlNi1lZjU2LTQ0ZDMtOGYwZS0wNzkxNmM1Y2U5Y2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY5ODU5ZGU2LWVmNTYtNDRkMy04 ZjBlLTA3OTE2YzVjZTljYS82OTg1OWRlNi1lZjU2LTQ0ZDMtOGYwZS0wNzkxNmM1 Y2U5Y2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACqTMMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgvAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGe1URx82UfaJ704LbcTvNIk6uvsrb1s1EaujXF/hmaWNowg cypFnGwNf/M/9xKYQZaJxFi1Jp2EHtLpUJR1GGjVLd2nTirNrYTWwpELcuDrEyba eNLHXU/e6pWJHPXQI823vJ2PE4zTxhkZkHr9Dldi06aL4ZXwRFE2UQlINCf0n8yz cTm5iUGUV4TyJnZYpZIoR9K3+gzZndpW1qV8ke9OpcxlfoV+wlQPhUBaIU+A63kD RZkq5ZOSlu0hAhNYurzsqSyodIPjBNqPpWqzCOBA4MJZTjyDO6H/vC3y8XwryMcK 3tbDrlbGBdrE+L+JTCpVUQctrQA9vJj8AkwfJFE= -----END CERTIFICATE-----Generated at Wed May 13 02:47:34 2026 by rpki-client