$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e.cer File: 722b521c-3ba6-4414-a082-89d05e3db36e.cer (raw, json) Hash identifier: vmQzcoBqaTkF1KbMnWOQi7oxYlsO+LWUFQIIU3u/gJQ= Subject key identifier: A1:5B:07:0F:8C:55:44:FF:83:E9:98:63:01:4F:6C:FD:A2:AE:E4:8F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA5AC8C4140C30F1794892680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/722b521c-3ba6-4414-a082-89d05e3db36e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 16:17:37 +0000 Certificate not after: Sun 30 Jul 2028 16:17:37 +0000 Subordinate resources: IP: 198.133.160.0/24 IP: 2606:bdc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:ac:8c:41:40:c3:0f:17:94:89:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 27 16:17:37 2026 GMT Not After : Jul 30 16:17:37 2028 GMT Subject: CN=722b521c-3ba6-4414-a082-89d05e3db36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:3a:bd:7f:77:01:1d:90:d7:36:24:62:5f: 26:64:ac:35:07:6f:49:90:70:9a:bf:5a:ea:51:0f: ec:91:ba:7e:3a:6d:c9:94:ca:db:7b:7f:6f:a1:a0: e7:27:00:63:69:db:c6:c6:b6:a6:be:61:da:51:93: d6:4e:98:ff:81:fc:13:e3:96:b0:b7:6a:c7:4e:ea: 52:70:59:a4:83:7b:6e:4b:59:bb:47:c1:9e:23:94: e6:dc:61:18:2d:d6:8a:c0:99:6c:bf:31:5e:bc:b5: 34:27:c0:db:61:6d:91:42:4c:c4:8b:a6:3a:d6:db: 5c:64:ab:e2:f3:56:8b:19:cb:b1:bc:2a:68:4d:24: a9:5a:cc:d3:69:00:5a:e7:33:ad:57:cf:fc:50:f3: bc:40:98:17:6e:14:60:85:3f:60:e9:f2:15:a3:10: 5b:0e:5d:78:2a:37:01:89:ce:65:9d:1d:77:f8:bf: fd:b4:c7:ab:2c:03:36:5b:d8:ae:89:87:16:36:8b: 74:a0:98:7b:81:f2:28:b2:53:29:e0:dd:b1:ca:23: ef:65:20:3f:df:0e:40:dc:e8:c2:7a:02:d0:13:9e: d3:cb:31:e7:e7:62:83:e1:ab:90:4a:00:21:33:19: 77:04:4b:54:0c:b3:a4:d7:4b:14:83:0f:63:47:b4: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5B:07:0F:8C:55:44:FF:83:E9:98:63:01:4F:6C:FD:A2:AE:E4:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/722b521c-3ba6-4414-a082-89d05e3db36e/722b521c-3ba6-4414-a082-89d05e3db36e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.133.160.0/24 IPv6: 2606:bdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ba:b2:61:ea:55:b8:0e:50:64:ad:46:a1:30:99:4c:20:a0: 2e:22:ad:05:2c:b6:1a:7b:27:a1:df:56:be:4a:86:6a:ba:3d: 19:2c:57:f5:0d:c2:1f:2f:31:8c:4c:b5:45:bd:32:78:bf:98: ff:b0:a8:46:89:fc:ee:43:2d:e5:15:c8:69:40:6e:d1:fb:e4: 75:53:ad:f3:8f:f6:cf:6d:81:8b:5b:c1:b0:d9:72:42:35:44: bb:ab:a5:0c:68:5a:8a:76:98:2f:da:0c:fe:9c:79:29:bc:a2: 16:fb:59:c2:a3:72:5f:36:5f:40:8d:86:28:fe:62:d1:e9:50: 5a:8b:72:2e:08:11:e4:8f:72:89:62:26:91:44:20:20:99:ac: 2e:fe:55:32:2a:ce:72:46:b5:cb:dc:24:9b:dc:91:bc:25:a7: eb:2d:76:e3:08:d5:fc:f3:3a:2d:29:f4:5b:e7:a6:c6:d0:a3: 45:7e:1e:53:fa:10:d0:5c:32:8f:36:ee:af:02:5d:c2:42:4a: 3a:d1:ba:a0:cd:16:42:66:02:0f:a8:9e:9a:67:94:73:b4:0f: c4:26:25:b2:32:48:e3:a5:2e:8d:e0:da:db:95:99:ea:1b:f8: f8:ec:1a:74:4b:08:bc:ed:7b:0c:44:5c:bc:6d:02:c7:e9:3a: eb:95:19:74 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE2lrIxBQMMPF5SJJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNzE2MTczN1oXDTI4MDczMDE2MTczN1owLzEtMCsGA1UEAxMk NzIyYjUyMWMtM2JhNi00NDE0LWEwODItODlkMDVlM2RiMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCc6vX93AR2Q1zYkYl8mZKw1B29JkHCav1rq UQ/skbp+Om3JlMrbe39voaDnJwBjadvGxramvmHaUZPWTpj/gfwT45awt2rHTupS cFmkg3tuS1m7R8GeI5Tm3GEYLdaKwJlsvzFevLU0J8DbYW2RQkzEi6Y61ttcZKvi 81aLGcuxvCpoTSSpWszTaQBa5zOtV8/8UPO8QJgXbhRghT9g6fIVoxBbDl14KjcB ic5lnR13+L/9tMerLAM2W9iuiYcWNot0oJh7gfIoslMp4N2xyiPvZSA/3w5A3OjC egLQE57TyzHn52KD4auQSgAhMxl3BEtUDLOk10sUgw9jR7Rh2wIDAQABo4IEDjCC BAowHQYDVR0OBBYEFKFbBw+MVUT/g+mYYwFPbP2iruSPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MjJiNTIxYy0zYmE2LTQ0MTQtYTA4Mi04OWQwNWUzZGIzNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzcyMmI1MjFjLTNiYTYtNDQxNC1h MDgyLTg5ZDA1ZTNkYjM2ZS83MjJiNTIxYy0zYmE2LTQ0MTQtYTA4Mi04OWQwNWUz ZGIzNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADGhaAwDQQCAAIwBwMFACYGvcAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA OLqyYepVuA5QZK1GoTCZTCCgLiKtBSy2Gnsnod9WvkqGaro9GSxX9Q3CHy8xjEy1 Rb0yeL+Y/7CoRon87kMt5RXIaUBu0fvkdVOt84/2z22Bi1vBsNlyQjVEu6ulDGha inaYL9oM/px5KbyiFvtZwqNyXzZfQI2GKP5i0elQWotyLggR5I9yiWImkUQgIJms Lv5VMirOcka1y9wkm9yRvCWn6y124wjV/PM6LSn0W+emxtCjRX4eU/oQ0Fwyjzbu rwJdwkJKOtG6oM0WQmYCD6iemmeUc7QPxCYlsjJI46UujeDa25WZ6hv4+OwadEsI vO17DERcvG0Cx+k665UZdA== -----END CERTIFICATE-----Generated at Wed May 13 02:47:47 2026 by rpki-client