$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer File: 8847881a-ccc0-4631-8384-a7d78db5864d.cer (raw, json) Hash identifier: 28b0JWW/yiNDqj9KUSX2P8EUANtg+u/BMg+OYrNix18= Subject key identifier: 65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DCD244CAC0DD7D544678DBA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 19:35:26 +0000 Certificate not after: Sun 13 Aug 2028 19:35:26 +0000 Subordinate resources: AS: 402488 IP: 208.78.120.0/21 IP: 2602:fe1c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:24:4c:ac:0d:d7:d5:44:67:8d:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 11 19:35:26 2026 GMT Not After : Aug 13 19:35:26 2028 GMT Subject: CN=8847881a-ccc0-4631-8384-a7d78db5864d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:64:6c:15:fe:d8:2d:6e:86:fa:06:4c:93: 28:2e:e9:41:97:d9:1d:f2:59:0b:79:31:58:ed:c4: 7a:a3:10:42:0b:89:5b:9f:05:e4:2c:84:ce:9c:1b: f5:90:04:c2:76:36:b7:91:d7:66:39:a3:5a:fa:9d: 4f:0d:86:fa:2b:52:e7:02:a4:eb:ca:f9:72:23:5b: 16:25:c6:32:30:77:ad:1d:d1:cd:28:e4:61:b3:f2: 66:03:af:10:0c:41:d2:d7:33:de:a7:2d:ad:1a:38: 69:eb:1b:6d:1c:4c:69:b4:68:92:65:1c:72:0c:ef: 9f:12:c4:56:1b:19:a7:79:11:3e:1a:15:13:12:ea: ab:47:d6:7c:74:ca:d6:24:43:b0:fd:12:03:1d:8f: 3c:01:a6:c2:31:f7:f9:99:fe:5e:92:0a:86:dc:1a: f8:25:97:44:d5:36:5c:ee:53:85:62:61:77:be:c3: 52:19:aa:ed:7e:b3:57:24:1c:03:bc:d2:f3:71:46: f3:55:f0:eb:66:0a:0d:a9:a1:1d:a3:11:04:e3:1d: 1b:12:bf:fb:7c:fa:87:98:eb:e7:de:31:11:03:cf: ee:20:bb:3f:a8:9e:ad:a8:8a:da:cf:7b:6d:33:4b: 8f:38:6c:1e:1b:de:e3:d9:52:b1:c2:70:31:49:5b: 85:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.78.120.0/21 IPv6: 2602:fe1c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402488 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:01:de:ca:fa:47:46:04:0f:df:fe:98:d6:41:d8:d6:60:c8: 4e:82:60:2f:8b:cc:eb:61:54:7b:8a:d8:65:ae:32:5a:06:dc: a2:81:d1:77:4f:a5:7c:86:d8:82:5e:16:6d:11:4d:ea:5e:0f: 21:bd:a8:5c:7e:95:e2:66:21:36:5c:28:d0:7b:90:29:13:eb: c0:63:6d:1f:29:3b:c2:39:a2:4f:4f:f6:aa:05:55:9c:96:13: c7:d6:5d:85:41:5e:c3:d4:66:21:ec:5e:d1:f7:9e:ee:d2:d5: 7b:5e:a1:73:5b:b7:44:67:39:fb:e4:c9:0a:c2:11:04:31:53: 8f:50:ab:4d:cb:23:d2:d2:31:74:7a:dd:b4:32:c8:b9:0f:b2: 3b:75:bb:8d:0f:c3:37:f1:a9:41:66:77:a9:a1:c9:ac:7d:f7: 54:46:4c:4d:66:64:cc:22:01:10:66:48:d3:aa:0c:54:b2:10: cf:1f:fc:36:fc:eb:59:3f:e9:ce:ed:db:9a:21:2e:3a:ea:b7: 89:d4:ce:e9:aa:f5:43:b8:5c:44:65:02:14:81:ea:0a:71:3a: 38:5c:62:4b:b8:41:9b:50:99:46:a4:89:03:7e:0f:c7:ca:6e: 05:97:90:46:14:0f:cb:c3:42:e4:de:cc:3c:8e:db:8f:d9:34: 83:85:40:7a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE3NJEysDdfVRGeNugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMTE5MzUyNloXDTI4MDgxMzE5MzUyNlowLzEtMCsGA1UEAxMk ODg0Nzg4MWEtY2NjMC00NjMxLTgzODQtYTdkNzhkYjU4NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWpkbBX+2C1uhvoGTJMoLulBl9kd8lkLeTFY 7cR6oxBCC4lbnwXkLITOnBv1kATCdja3kddmOaNa+p1PDYb6K1LnAqTryvlyI1sW JcYyMHetHdHNKORhs/JmA68QDEHS1zPepy2tGjhp6xttHExptGiSZRxyDO+fEsRW GxmneRE+GhUTEuqrR9Z8dMrWJEOw/RIDHY88AabCMff5mf5ekgqG3Br4JZdE1TZc 7lOFYmF3vsNSGartfrNXJBwDvNLzcUbzVfDrZgoNqaEdoxEE4x0bEr/7fPqHmOvn 3jERA8/uILs/qJ6tqIraz3ttM0uPOGweG97j2VKxwnAxSVuFYwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGUM3dN0BU1Xqm4wqOASsrSnRDkDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 ODQ3ODgxYS1jY2MwLTQ2MzEtODM4NC1hN2Q3OGRiNTg2NGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg4NDc4ODFhLWNjYzAtNDYzMS04 Mzg0LWE3ZDc4ZGI1ODY0ZC84ODQ3ODgxYS1jY2MwLTQ2MzEtODM4NC1hN2Q3OGRi NTg2NGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAPQTngwDgQCAAIwCAMGBCYC/hwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkODBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyAd7K+kdGBA/f/pjWQdjWYMhO gmAvi8zrYVR7ithlrjJaBtyigdF3T6V8htiCXhZtEU3qXg8hvahcfpXiZiE2XCjQ e5ApE+vAY20fKTvCOaJPT/aqBVWclhPH1l2FQV7D1GYh7F7R957u0tV7XqFzW7dE Zzn75MkKwhEEMVOPUKtNyyPS0jF0et20Msi5D7I7dbuND8M38alBZnepocmsffdU RkxNZmTMIgEQZkjTqgxUshDPH/w2/OtZP+nO7duaIS466reJ1M7pqvVDuFxEZQIU geoKcTo4XGJLuEGbUJlGpIkDfg/Hym4Fl5BGFA/Lw0Lk3sw8jtuP2TSDhUB6 -----END CERTIFICATE-----Generated at Wed May 13 05:14:41 2026 by rpki-client