$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad.cer File: 84bb86db-bd3c-43da-9277-f7557545f5ad.cer (raw, json) Hash identifier: 3JoFDqHngzocOwpWr0i2LMk1j5M5/wCJJ/oEqDC0Jxw= Subject key identifier: 1A:1A:2D:12:7D:21:DA:06:01:60:C7:C8:28:67:59:A2:77:D8:A5:A5 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9ED2D5629909EE8A80085C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Apr 2026 05:24:06 +0000 Certificate not after: Fri 28 Jul 2028 05:24:06 +0000 Subordinate resources: AS: 14209 IP: 192.30.208.0/24 IP: 2620:ed:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:d2:d5:62:99:09:ee:8a:80:08:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 25 05:24:06 2026 GMT Not After : Jul 28 05:24:06 2028 GMT Subject: CN=84bb86db-bd3c-43da-9277-f7557545f5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0a:ba:52:86:35:c9:0e:6f:08:27:13:43:25: ff:f7:d0:ad:32:23:36:00:b9:14:15:75:26:d2:64: 78:52:cf:c8:3e:8e:ec:5f:ba:38:ec:03:cd:ab:3c: cd:c3:54:fd:1a:17:29:bf:87:af:61:55:b4:48:cc: 1d:bf:5a:93:a5:33:db:dc:11:0e:79:12:4a:cc:ec: eb:cf:cb:b5:d8:e9:ab:9a:34:71:2d:dd:b3:80:7d: 69:29:45:eb:9f:aa:36:65:77:f5:db:ff:a8:4c:b1: 11:f1:af:7d:8b:e7:e0:a6:dc:c8:d7:74:8d:a4:b7: 8c:c5:e8:0f:38:0e:ab:7b:de:64:07:c5:14:a3:07: df:e6:b8:46:91:78:11:c5:cf:35:a8:b6:96:c4:fd: 53:7f:5a:3a:be:7c:37:f7:4b:4e:16:96:e2:35:58: ea:a2:bc:16:5f:c5:1e:20:7d:a1:2e:8f:ed:c5:82: ff:a5:c5:84:23:a8:e6:71:47:20:a7:cd:87:45:e4: 5d:23:79:a3:17:a5:41:b5:2f:8a:3e:18:00:13:7f: 4a:d5:de:fa:7a:29:bd:72:c7:63:05:7a:32:70:0d: 00:ab:e3:10:86:6d:9c:40:88:86:72:43:44:8a:e4: ca:bd:99:de:aa:2c:eb:b3:d7:eb:f6:7f:43:95:32: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1A:2D:12:7D:21:DA:06:01:60:C7:C8:28:67:59:A2:77:D8:A5:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/84bb86db-bd3c-43da-9277-f7557545f5ad/84bb86db-bd3c-43da-9277-f7557545f5ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.30.208.0/24 IPv6: 2620:ed:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14209 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e4:27:c0:24:4f:75:bb:31:fa:fa:34:eb:11:da:02:c5:8c: a1:ee:74:6e:68:00:c4:e8:c4:0f:9e:96:62:7c:92:0d:cc:2e: 81:cd:d7:b4:ed:fa:e4:25:eb:d9:14:cd:eb:22:0f:0c:85:5c: a7:2c:40:1e:be:70:00:51:06:3e:18:c5:6a:17:b5:54:b4:c3: 27:dc:d4:fe:6d:16:68:d8:80:02:27:94:35:91:54:49:b0:08: f8:b9:cf:f9:ac:c0:67:78:cb:2d:7c:be:24:6d:18:cd:25:a9: 4b:f9:bf:5b:6d:22:61:91:1d:99:d3:a4:8d:fe:56:f0:af:90: c4:ad:2f:c9:a1:41:6f:89:a1:6e:a8:88:3a:71:5b:7e:fc:18: 3a:fe:10:68:f7:52:d2:5b:f3:f5:44:5a:d9:f1:b1:3f:6c:a4: 1d:d9:cc:93:b4:43:74:92:f9:6c:2c:7e:e8:d5:f7:46:a1:3c: a8:bb:4c:66:b8:34:c0:6d:4d:a4:6c:65:00:5a:be:83:07:c4: 29:1d:91:7d:7b:f3:38:da:8d:d7:40:9b:4e:58:8c:ad:59:3d: 2a:29:53:56:68:10:2e:43:9d:75:c3:b9:6a:dd:b9:b9:a9:25: fc:b6:06:d9:dc:d0:17:6b:a3:c7:75:a1:d7:20:09:c1:43:03: cf:f9:5f:de -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2e0tVimQnuioAIXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNTA1MjQwNloXDTI4MDcyODA1MjQwNlowLzEtMCsGA1UEAxMk ODRiYjg2ZGItYmQzYy00M2RhLTkyNzctZjc1NTc1NDVmNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAq6UoY1yQ5vCCcTQyX/99CtMiM2ALkUFXUm 0mR4Us/IPo7sX7o47APNqzzNw1T9Ghcpv4evYVW0SMwdv1qTpTPb3BEOeRJKzOzr z8u12OmrmjRxLd2zgH1pKUXrn6o2ZXf12/+oTLER8a99i+fgptzI13SNpLeMxegP OA6re95kB8UUowff5rhGkXgRxc81qLaWxP1Tf1o6vnw390tOFpbiNVjqorwWX8Ue IH2hLo/txYL/pcWEI6jmcUcgp82HReRdI3mjF6VBtS+KPhgAE39K1d76eim9csdj BXoycA0Aq+MQhm2cQIiGckNEiuTKvZneqizrs9fr9n9DlTIXgQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBoaLRJ9IdoGAWDHyChnWaJ32KWlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 NGJiODZkYi1iZDNjLTQzZGEtOTI3Ny1mNzU1NzU0NWY1YWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg0YmI4NmRiLWJkM2MtNDNkYS05 Mjc3LWY3NTU3NTQ1ZjVhZC84NGJiODZkYi1iZDNjLTQzZGEtOTI3Ny1mNzU1NzU0 NWY1YWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAHtAwDwQCAAIwCQMHACYgAO3AADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI3gTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+5CfAJE91uzH6+jTrEdoCxYyh 7nRuaADE6MQPnpZifJINzC6Bzde07frkJevZFM3rIg8MhVynLEAevnAAUQY+GMVq F7VUtMMn3NT+bRZo2IACJ5Q1kVRJsAj4uc/5rMBneMstfL4kbRjNJalL+b9bbSJh kR2Z06SN/lbwr5DErS/JoUFviaFuqIg6cVt+/Bg6/hBo91LSW/P1RFrZ8bE/bKQd 2cyTtEN0kvlsLH7o1fdGoTyou0xmuDTAbU2kbGUAWr6DB8QpHZF9e/M42o3XQJtO WIytWT0qKVNWaBAuQ511w7lq3bm5qSX8tgbZ3NAXa6PHdaHXIAnBQwPP+V/e -----END CERTIFICATE-----Generated at Wed May 13 10:16:34 2026 by rpki-client