$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c.cer File: 9f5524fb-427a-4258-864d-80d99ebf694c.cer (raw, json) Hash identifier: mR6if+fzklrDEn6xkxYHnAbGE3g031EtV948BaM7704= Subject key identifier: C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DB09FDB6EDBD29B8F5CF83680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 May 2026 14:25:56 +0000 Certificate not after: Thu 03 Aug 2028 14:25:56 +0000 Subordinate resources: AS: 19435 IP: 64.85.176.0/20 IP: 184.171.128.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:9f:db:6e:db:d2:9b:8f:5c:f8:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 1 14:25:56 2026 GMT Not After : Aug 3 14:25:56 2028 GMT Subject: CN=9f5524fb-427a-4258-864d-80d99ebf694c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ab:94:46:59:28:c8:0f:cb:dd:a8:f6:55:b9: 3b:88:9b:e7:4e:ec:3a:28:3d:92:f5:6f:ac:6a:38: d1:23:a6:34:21:d1:08:e0:68:67:9f:22:76:b2:04: 5d:0d:97:30:f4:32:18:9c:8a:88:42:47:e9:b4:fb: 69:eb:64:c5:24:74:34:6f:d1:68:89:9f:cd:a3:ef: 17:fb:93:fe:9d:3f:1a:1f:e7:8b:0b:71:4a:e9:28: de:8f:57:67:50:2b:ae:59:b6:38:73:60:c7:7f:df: 06:88:ad:73:b1:8e:87:e0:62:6a:a7:26:d0:48:ed: ea:a1:6c:04:4b:83:8f:49:58:32:71:28:a5:30:d9: 5a:63:12:82:a9:6d:60:d9:7c:84:fc:4f:28:22:03: 02:d7:b6:9a:b0:5e:3f:0e:57:d6:c4:cd:e7:7f:3f: d0:41:83:6a:7f:c7:2a:ed:c4:36:b9:1b:84:6f:43: 00:25:0d:82:1e:ff:1b:b4:89:fd:89:98:ff:e5:51: ea:2e:b1:43:8d:e5:bf:54:77:5c:0d:68:b2:b7:4f: 2e:46:7c:77:76:13:1b:19:c1:f4:88:24:a5:ed:a4: 34:66:af:55:b9:31:7f:18:95:97:b1:4f:72:f8:82: 8c:da:70:2b:b0:d3:50:ab:c5:47:45:6e:2e:c0:2b: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AB:39:ED:07:87:F0:26:DB:C6:59:90:B3:93:77:B7:25:E6:F5:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f5524fb-427a-4258-864d-80d99ebf694c/9f5524fb-427a-4258-864d-80d99ebf694c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.85.176.0/20 184.171.128.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19435 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ef:6c:27:80:63:ad:c1:64:b5:01:d8:4b:7c:6b:85:e1:d1: 32:c8:3e:d1:ec:e3:bf:8e:b8:be:8e:ed:e5:29:25:f4:2c:8a: 2d:bb:67:bb:73:d5:90:c4:8d:bc:b1:9c:22:4f:f0:12:f2:35: bd:ba:e6:13:56:b5:a2:db:e9:f3:e6:82:74:97:26:8b:a2:6d: 7a:73:fb:e2:4c:28:41:7d:1d:85:20:70:a1:f6:b8:fe:61:90: 9c:2a:e1:e6:4f:d0:71:ad:81:3f:a2:cf:5c:0d:3a:e7:55:ee: a1:bb:5f:d6:4f:b5:9c:ce:ef:b8:c8:9b:28:69:9c:e4:c3:6b: 2e:55:d3:4c:12:f3:ea:4d:94:6b:cf:04:38:02:6c:9a:1a:58: b1:d1:dd:85:b7:37:fa:98:51:2a:ac:f5:41:42:4b:fa:3a:bb: 8a:6e:7d:4d:ea:67:67:aa:3d:87:73:a3:57:a0:dd:17:bc:ad: a3:99:a7:a2:af:7b:f9:3a:a6:96:3d:64:27:43:77:2f:0e:bb: 30:e9:5e:e9:d3:79:bb:b6:15:a5:de:76:f9:a6:8d:6c:71:6e: 12:c8:fd:e3:3b:e6:ab:a4:21:04:fe:9a:74:18:d7:d2:26:43: cc:0b:a2:07:b9:52:26:4e:34:c7:4c:7a:2a:84:00:68:79:6a: c8:b2:bf:2a -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE2wn9tu29Kbj1z4NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwMTE0MjU1NloXDTI4MDgwMzE0MjU1NlowLzEtMCsGA1UEAxMk OWY1NTI0ZmItNDI3YS00MjU4LTg2NGQtODBkOTllYmY2OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqauURlkoyA/L3aj2Vbk7iJvnTuw6KD2S9W+s ajjRI6Y0IdEI4GhnnyJ2sgRdDZcw9DIYnIqIQkfptPtp62TFJHQ0b9FoiZ/No+8X +5P+nT8aH+eLC3FK6Sjej1dnUCuuWbY4c2DHf98GiK1zsY6H4GJqpybQSO3qoWwE S4OPSVgycSilMNlaYxKCqW1g2XyE/E8oIgMC17aasF4/DlfWxM3nfz/QQYNqf8cq 7cQ2uRuEb0MAJQ2CHv8btIn9iZj/5VHqLrFDjeW/VHdcDWiyt08uRnx3dhMbGcH0 iCSl7aQ0Zq9VuTF/GJWXsU9y+IKM2nArsNNQq8VHRW4uwCv/UwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFMGrOe0Hh/Am28ZZkLOTd7cl5vVLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 ZjU1MjRmYi00MjdhLTQyNTgtODY0ZC04MGQ5OWViZjY5NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzlmNTUyNGZiLTQyN2EtNDI1OC04 NjRkLTgwZDk5ZWJmNjk0Yy85ZjU1MjRmYi00MjdhLTQyNTgtODY0ZC04MGQ5OWVi ZjY5NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARAVbADBAS4q4AwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICS+swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAmO9sJ4BjrcFktQHYS3xrheHRMsg+0ezjv464vo7t 5Skl9CyKLbtnu3PVkMSNvLGcIk/wEvI1vbrmE1a1otvp8+aCdJcmi6JtenP74kwo QX0dhSBwofa4/mGQnCrh5k/Qca2BP6LPXA0651Xuobtf1k+1nM7vuMibKGmc5MNr LlXTTBLz6k2Ua88EOAJsmhpYsdHdhbc3+phRKqz1QUJL+jq7im59TepnZ6o9h3Oj V6DdF7yto5mnoq97+Tqmlj1kJ0N3Lw67MOle6dN5u7YVpd52+aaNbHFuEsj94zvm q6QhBP6adBjX0iZDzAuiB7lSJk40x0x6KoQAaHlqyLK/Kg== -----END CERTIFICATE-----Generated at Wed May 13 03:48:26 2026 by rpki-client