$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbeb92f7-0e5f-4267-870a-083fd73ba15f.cer File: bbeb92f7-0e5f-4267-870a-083fd73ba15f.cer (raw, json) Hash identifier: EW2NEj3p7VyrEc6bZuDGbQ2IWnHxavW9azTL8nQNbMk= Subject key identifier: 90:21:1C:A5:6C:B9:77:1F:F2:D4:6F:EC:2B:79:20:38:A5:BB:D4:05 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DBEA5870D96671F66AD8F9B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbeb92f7-0e5f-4267-870a-083fd73ba15f/bbeb92f7-0e5f-4267-870a-083fd73ba15f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbeb92f7-0e5f-4267-870a-083fd73ba15f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 14:58:41 +0000 Certificate not after: Tue 08 Aug 2028 14:58:41 +0000 Subordinate resources: IP: 216.40.88.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:a5:87:0d:96:67:1f:66:ad:8f:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 6 14:58:41 2026 GMT Not After : Aug 8 14:58:41 2028 GMT Subject: CN=bbeb92f7-0e5f-4267-870a-083fd73ba15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:2e:a5:ad:4f:a4:2e:1e:5d:19:9d:90:77: 2f:60:91:53:29:fb:43:7c:f8:80:2e:73:e7:d6:74: 47:05:99:62:12:f3:b0:7d:b5:0c:6b:46:88:dc:c5: b1:fb:a0:1e:ae:28:16:a8:9e:3c:32:75:b6:da:34: c1:a9:d9:53:b5:7a:07:36:a6:a7:4f:c7:b2:a8:6a: cc:db:e4:59:51:a3:a8:ef:88:54:4b:0c:f7:87:ae: f1:6c:e8:bd:56:d3:6c:ee:98:5a:62:60:7e:90:d7: 46:80:00:dd:46:9f:e2:05:5d:b8:0b:a0:d2:4a:3b: 77:bc:f1:a0:ca:6f:0f:8a:f1:d6:0d:92:d6:ac:40: b7:fa:82:56:e1:43:f8:b6:f8:65:6c:9c:9a:40:c9: 48:00:a6:3d:4f:6e:da:02:b2:e9:b0:32:f4:6c:f9: 87:cf:0f:f3:c3:8b:30:39:50:bb:82:1d:be:34:a8: 80:0c:64:a0:87:11:a9:40:de:d4:9d:59:9d:41:51: 50:18:17:26:af:21:5e:ec:65:cc:6e:57:e8:ef:33: f7:35:54:ee:85:ea:cd:bc:ef:02:6e:63:1a:73:2e: 94:a7:a0:39:b9:83:93:c6:7c:73:4f:21:27:28:f9: be:9d:9f:b3:65:99:8e:3b:1c:09:f9:5a:e2:a8:1d: 50:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:21:1C:A5:6C:B9:77:1F:F2:D4:6F:EC:2B:79:20:38:A5:BB:D4:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbeb92f7-0e5f-4267-870a-083fd73ba15f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bbeb92f7-0e5f-4267-870a-083fd73ba15f/bbeb92f7-0e5f-4267-870a-083fd73ba15f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 216.40.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:57:ca:53:e8:1a:74:b8:e2:76:b1:af:2a:19:b7:7c:22:e1: 0f:58:d9:16:63:7b:ec:ba:2e:5e:2d:cc:6d:19:46:0c:63:22: f7:14:6b:b1:86:66:89:d8:6a:8a:19:e2:54:fb:d4:00:7e:53: 24:10:2d:7f:0a:9e:8b:45:67:d2:91:27:e6:7e:1b:b1:41:8a: d4:bb:32:07:05:b2:06:58:47:72:d3:a7:c3:c6:8e:b3:2a:43: 1f:b5:04:aa:a5:29:26:ea:4a:b0:9b:df:34:ed:32:5e:b9:e7: 08:af:3c:63:33:90:b4:32:c6:65:a1:ed:33:5a:c6:78:5d:9e: 4c:62:f8:e0:c7:e0:3a:20:f9:57:e0:21:0c:17:29:ca:dd:55: 56:8b:84:d9:3f:54:c9:9f:69:0f:d1:83:4e:32:3b:f5:bb:78: 3f:07:56:35:d9:da:17:8e:80:09:ff:77:4c:a1:27:76:7e:c7: 21:79:ce:ad:47:77:c1:af:f6:4d:b1:41:31:35:8a:d4:05:ed: b9:28:02:e0:12:4c:82:00:03:5d:b8:05:78:2f:78:86:0c:9b: f1:76:6b:30:05:8d:be:df:2c:d6:5d:4e:0d:60:44:60:46:6d: 28:52:dd:58:c5:8b:c3:c9:c3:e8:b2:09:47:92:71:e0:77:be: d2:c2:76:54 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2+pYcNlmcfZq2Pm2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNjE0NTg0MVoXDTI4MDgwODE0NTg0MVowLzEtMCsGA1UEAxMk YmJlYjkyZjctMGU1Zi00MjY3LTg3MGEtMDgzZmQ3M2JhMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr8upa1PpC4eXRmdkHcvYJFTKftDfPiALnPn 1nRHBZliEvOwfbUMa0aI3MWx+6AerigWqJ48MnW22jTBqdlTtXoHNqanT8eyqGrM 2+RZUaOo74hUSwz3h67xbOi9VtNs7phaYmB+kNdGgADdRp/iBV24C6DSSjt3vPGg ym8PivHWDZLWrEC3+oJW4UP4tvhlbJyaQMlIAKY9T27aArLpsDL0bPmHzw/zw4sw OVC7gh2+NKiADGSghxGpQN7UnVmdQVFQGBcmryFe7GXMblfo7zP3NVTuherNvO8C bmMacy6Up6A5uYOTxnxzTyEnKPm+nZ+zZZmOOxwJ+VriqB1QVQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJAhHKVsuXcf8tRv7Ct5IDilu9QFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i YmViOTJmNy0wZTVmLTQyNjctODcwYS0wODNmZDczYmExNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2JiZWI5MmY3LTBlNWYtNDI2Ny04 NzBhLTA4M2ZkNzNiYTE1Zi9iYmViOTJmNy0wZTVmLTQyNjctODcwYS0wODNmZDcz YmExNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALYKFgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZVfKU+gadLjidrGvKhm3 fCLhD1jZFmN77LouXi3MbRlGDGMi9xRrsYZmidhqihniVPvUAH5TJBAtfwqei0Vn 0pEn5n4bsUGK1LsyBwWyBlhHctOnw8aOsypDH7UEqqUpJupKsJvfNO0yXrnnCK88 YzOQtDLGZaHtM1rGeF2eTGL44MfgOiD5V+AhDBcpyt1VVouE2T9UyZ9pD9GDTjI7 9bt4PwdWNdnaF46ACf93TKEndn7HIXnOrUd3wa/2TbFBMTWK1AXtuSgC4BJMggAD XbgFeC94hgyb8XZrMAWNvt8s1l1ODWBEYEZtKFLdWMWLw8nD6LIJR5Jx4He+0sJ2 VA== -----END CERTIFICATE-----Generated at Wed May 13 02:49:22 2026 by rpki-client