$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.cer File: cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.cer (raw, json) Hash identifier: 5JgheLX7XNM/zwrIfapO5UnanbsSOPEO1Go2iYvtgC8= Subject key identifier: 00:66:91:EE:39:EC:89:0B:B6:6C:BE:39:1D:87:30:3C:D8:37:F7:92 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DCD0C4B95EF7BF1DFE0822300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 18:47:04 +0000 Certificate not after: Sun 13 Aug 2028 18:47:04 +0000 Subordinate resources: IP: 69.46.38.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:0c:4b:95:ef:7b:f1:df:e0:82:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 11 18:47:04 2026 GMT Not After : Aug 13 18:47:04 2028 GMT Subject: CN=cffcc184-95e8-40b1-9a9e-e4445e3b9bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:fe:79:eb:db:3b:2a:97:ca:4e:dd:fa:ad: b7:10:c0:b3:61:34:1a:6c:5a:2c:8b:85:88:76:11: d2:2e:e9:5b:ef:8e:6b:74:70:54:0f:dd:a5:7f:ca: 59:17:cd:35:19:fa:67:34:fa:1a:d0:67:83:c7:be: ba:d1:70:50:6c:fc:a8:59:ef:56:8f:b0:d6:b6:31: 2e:a4:b2:12:57:49:47:41:f3:6a:bd:4d:6d:94:5a: 27:65:9a:6e:fa:eb:2a:6b:1e:e6:36:8d:16:80:3b: 25:18:27:3c:de:27:0a:88:dc:4b:48:9a:b4:4f:6b: c5:d8:28:30:9d:b8:ad:3e:e6:14:6c:ff:2e:d5:7c: f7:5f:7d:43:7d:4e:55:05:e8:15:65:ea:c0:05:34: fd:38:59:3a:b8:21:cf:20:73:01:3c:1d:14:88:ac: c7:18:90:31:a1:0f:03:39:cf:e2:45:32:66:3c:e7: bd:c4:36:12:e5:ec:83:c8:f4:a5:57:b0:cc:1c:8c: fc:61:3c:2c:97:da:a5:ff:ba:a4:48:93:b4:bd:f4: ca:b8:b2:95:f4:b6:0d:51:51:ed:a8:bf:1b:07:a4: 00:cb:43:c7:48:9c:74:eb:8a:51:f1:84:5f:e3:e1: 28:88:9c:d2:41:d8:06:4c:8b:d3:22:13:8a:60:3c: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:91:EE:39:EC:89:0B:B6:6C:BE:39:1D:87:30:3C:D8:37:F7:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 69.46.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:6e:f9:76:bf:85:a4:cd:79:aa:cb:46:97:cb:dc:64:89:ca: f4:11:ab:87:35:7f:84:7b:bc:47:a6:23:ed:8c:c1:a1:9a:dd: 4f:23:3a:e6:26:e0:14:44:21:9d:ab:4a:68:a4:b1:98:f0:a1: eb:e2:fe:5d:b9:14:e0:09:32:1e:33:c9:44:06:f1:67:92:01: dc:6b:bd:25:cd:66:42:36:8c:d9:a3:27:a2:ba:7a:05:f0:97: 2e:57:2b:ab:8d:22:46:b3:fe:6d:66:e2:5a:3e:14:0b:27:0a: 1c:47:61:d4:dc:31:c9:6b:b3:b3:39:f8:f1:e4:ad:7b:48:c3: 53:af:4a:75:a5:1c:3f:ca:24:32:90:ff:a9:b4:04:ab:5b:4e: f9:90:30:0e:2f:63:cb:8c:84:54:21:bf:86:91:20:0c:19:69: 77:65:ce:82:0b:20:6e:e5:ca:f2:18:60:ab:fe:21:c8:ef:c4: 52:07:8c:f4:18:b6:9c:be:05:41:1f:35:0d:6d:5a:b6:c8:76: 63:5a:73:bc:79:cd:4c:b5:c9:0b:a6:6a:66:98:b3:9f:c9:d2: 52:19:5f:c5:c5:0b:4e:6d:07:52:d5:95:00:93:78:fa:c5:a1: 92:56:a5:f2:30:19:d3:7d:00:a9:cb:f5:1a:b8:7f:85:29:90: eb:c3:9c:43 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3NDEuV73vx3+CCIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMTE4NDcwNFoXDTI4MDgxMzE4NDcwNFowLzEtMCsGA1UEAxMk Y2ZmY2MxODQtOTVlOC00MGIxLTlhOWUtZTQ0NDVlM2I5YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApur+eevbOyqXyk7d+q23EMCzYTQabFosi4WI dhHSLulb745rdHBUD92lf8pZF801GfpnNPoa0GeDx7660XBQbPyoWe9Wj7DWtjEu pLISV0lHQfNqvU1tlFonZZpu+usqax7mNo0WgDslGCc83icKiNxLSJq0T2vF2Cgw nbitPuYUbP8u1Xz3X31DfU5VBegVZerABTT9OFk6uCHPIHMBPB0UiKzHGJAxoQ8D Oc/iRTJmPOe9xDYS5eyDyPSlV7DMHIz8YTwsl9ql/7qkSJO0vfTKuLKV9LYNUVHt qL8bB6QAy0PHSJx064pR8YRf4+EoiJzSQdgGTIvTIhOKYDykGQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFABmke457IkLtmy+OR2HMDzYN/eSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j ZmZjYzE4NC05NWU4LTQwYjEtOWE5ZS1lNDQ0NWUzYjliZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NmZmNjMTg0LTk1ZTgtNDBiMS05 YTllLWU0NDQ1ZTNiOWJkNC9jZmZjYzE4NC05NWU4LTQwYjEtOWE5ZS1lNDQ0NWUz YjliZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABFLiYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAtG75dr+FpM15qstGl8vc ZInK9BGrhzV/hHu8R6Yj7YzBoZrdTyM65ibgFEQhnatKaKSxmPCh6+L+XbkU4Aky HjPJRAbxZ5IB3Gu9Jc1mQjaM2aMnorp6BfCXLlcrq40iRrP+bWbiWj4UCycKHEdh 1NwxyWuzszn48eSte0jDU69KdaUcP8okMpD/qbQEq1tO+ZAwDi9jy4yEVCG/hpEg DBlpd2XOggsgbuXK8hhgq/4hyO/EUgeM9Bi2nL4FQR81DW1atsh2Y1pzvHnNTLXJ C6ZqZpizn8nSUhlfxcULTm0HUtWVAJN4+sWhklal8jAZ030Aqcv1Grh/hSmQ68Oc Qw== -----END CERTIFICATE-----Generated at Wed May 13 02:48:36 2026 by rpki-client