$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer File: dc2ecd40-9d55-4ab1-8df6-7395a80279a8.cer (raw, json) Hash identifier: u1LdzLu5DOZjSS70ld6x/7PzqwVbSU8iFd0rBb66AA0= Subject key identifier: 9C:EE:7A:9D:DD:DA:BB:C8:7D:F0:32:84:F3:0E:33:EE:93:42:31:50 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAE0A6E5400CBD6BBBE6AA280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 16:13:15 +0000 Certificate not after: Wed 02 Aug 2028 16:13:15 +0000 Subordinate resources: AS: 27560 IP: 66.242.56.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:0a:6e:54:00:cb:d6:bb:be:6a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 30 16:13:15 2026 GMT Not After : Aug 2 16:13:15 2028 GMT Subject: CN=dc2ecd40-9d55-4ab1-8df6-7395a80279a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:98:15:40:ae:a2:86:82:fb:b3:f5:f7:3f: 36:2e:56:71:51:3f:da:c4:e3:16:4d:b5:f1:5c:1d: e9:5f:35:65:8d:e8:4f:e8:f1:7d:8a:56:cd:31:51: 2b:29:b8:af:d4:f3:3c:1e:5d:c4:41:6c:d3:db:de: 5a:66:69:e7:ad:b7:40:0b:50:6b:ae:e9:4c:17:2d: 91:25:66:5b:dc:2c:3b:9d:f6:13:6a:55:2f:9b:c6: e0:37:99:ca:fb:15:78:27:69:df:38:f4:89:82:78: 01:dd:04:26:7b:66:d7:6c:97:4a:9f:c1:8f:5a:05: f1:f3:93:ce:af:29:0d:fe:2f:d2:db:33:1b:c1:23: 0f:ca:64:8f:7d:18:5e:9f:c3:2e:a9:85:5a:c6:bb: 84:da:e0:d4:61:1c:70:52:c6:40:99:90:21:00:72: ed:8e:08:ee:6f:d5:d5:5e:ab:bb:e6:71:5c:36:68: 37:86:b7:37:57:05:5c:98:e2:36:11:cf:72:db:59: ff:7a:dc:49:75:f5:b9:93:93:16:40:77:e9:23:78: 98:58:95:e6:e9:10:f3:8b:2d:da:94:06:64:c1:25: e5:22:42:d1:b8:2c:3c:82:53:d0:db:cc:e3:f8:05: b6:41:9f:9d:7d:11:1f:0d:75:86:a0:5c:00:6f:37: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EE:7A:9D:DD:DA:BB:C8:7D:F0:32:84:F3:0E:33:EE:93:42:31:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc2ecd40-9d55-4ab1-8df6-7395a80279a8/dc2ecd40-9d55-4ab1-8df6-7395a80279a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.242.56.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27560 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:2d:a1:83:8d:ca:ab:92:81:76:25:af:54:97:ed:b6:88:99: 3b:6c:ca:d6:24:7c:9f:8e:87:cd:86:c7:3f:80:7e:46:fd:ae: 20:e9:4e:44:c6:d6:3e:bf:c7:3f:8a:ec:94:6a:67:5e:e8:b7: e1:33:20:b3:fe:a3:6a:a2:05:6d:55:83:92:89:ba:69:ac:5a: e8:1c:35:77:d1:78:b1:0a:3b:ba:17:47:18:b3:8e:ee:d4:b9: 75:69:b6:6f:d9:28:5a:c6:e5:68:d1:dc:ac:9b:2e:2a:03:56: e7:c5:d7:f6:40:94:c6:77:83:3e:ae:73:e7:4c:6c:f2:4b:50: 48:03:ff:65:3c:cd:bb:56:a2:68:c1:ba:50:b0:b1:96:bf:34: 11:77:e9:7c:51:b1:e7:eb:02:e8:1b:0b:e4:e0:51:0b:72:77: 70:31:db:bc:08:ec:97:a0:e0:74:aa:2e:37:07:a9:73:7a:c7: 4c:95:06:56:8d:0b:18:97:c4:ea:f4:61:64:d1:f4:ea:d6:82: 44:3b:37:99:51:45:34:d9:ce:15:d6:77:16:24:e0:4b:2b:87: 46:93:35:eb:d8:15:49:51:2b:ac:da:56:5e:f9:ce:f0:51:5e: f5:c8:0b:a0:40:d1:36:e0:30:5f:95:6d:70:dd:50:0c:81:39: 0c:77:64:81 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE2uCm5UAMvWu75qooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQzMDE2MTMxNVoXDTI4MDgwMjE2MTMxNVowLzEtMCsGA1UEAxMk ZGMyZWNkNDAtOWQ1NS00YWIxLThkZjYtNzM5NWE4MDI3OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosGYFUCuooaC+7P19z82LlZxUT/axOMWTbXx XB3pXzVljehP6PF9ilbNMVErKbiv1PM8Hl3EQWzT295aZmnnrbdAC1BrrulMFy2R JWZb3Cw7nfYTalUvm8bgN5nK+xV4J2nfOPSJgngB3QQme2bXbJdKn8GPWgXx85PO rykN/i/S2zMbwSMPymSPfRhen8MuqYVaxruE2uDUYRxwUsZAmZAhAHLtjgjub9XV Xqu75nFcNmg3hrc3VwVcmOI2Ec9y21n/etxJdfW5k5MWQHfpI3iYWJXm6RDziy3a lAZkwSXlIkLRuCw8glPQ28zj+AW2QZ+dfREfDXWGoFwAbzfagwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJzuep3d2rvIffAyhPMOM+6TQjFQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k YzJlY2Q0MC05ZDU1LTRhYjEtOGRmNi03Mzk1YTgwMjc5YTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RjMmVjZDQwLTlkNTUtNGFiMS04 ZGY2LTczOTVhODAyNzlhOC9kYzJlY2Q0MC05ZDU1LTRhYjEtOGRmNi03Mzk1YTgw Mjc5YTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFC8jgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC a6gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAmC2hg43Kq5KBdiWvVJfttoiZO2zK1iR8n46HzYbHP4B+Rv2u IOlORMbWPr/HP4rslGpnXui34TMgs/6jaqIFbVWDkom6aaxa6Bw1d9F4sQo7uhdH GLOO7tS5dWm2b9koWsblaNHcrJsuKgNW58XX9kCUxneDPq5z50xs8ktQSAP/ZTzN u1aiaMG6ULCxlr80EXfpfFGx5+sC6BsL5OBRC3J3cDHbvAjsl6DgdKouNwepc3rH TJUGVo0LGJfE6vRhZNH06taCRDs3mVFFNNnOFdZ3FiTgSyuHRpM169gVSVErrNpW XvnO8FFe9cgLoEDRNuAwX5VtcN1QDIE5DHdkgQ== -----END CERTIFICATE-----Generated at Wed May 13 02:49:57 2026 by rpki-client