$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e7df0db4-17d8-4e61-80c6-57fb5bde2ade.cer File: e7df0db4-17d8-4e61-80c6-57fb5bde2ade.cer (raw, json) Hash identifier: 9mADOL1TwDxMEtP6GnsLaTY+469fsF3RTD5Ca/89OgQ= Subject key identifier: DB:1A:B1:77:A2:1F:FC:F7:62:DE:E2:42:19:5F:67:F2:12:23:A2:46 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA57D38FF20AED7B241728F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e7df0db4-17d8-4e61-80c6-57fb5bde2ade/e7df0db4-17d8-4e61-80c6-57fb5bde2ade.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e7df0db4-17d8-4e61-80c6-57fb5bde2ade/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 14:42:16 +0000 Certificate not after: Sun 30 Jul 2028 14:42:16 +0000 Subordinate resources: AS: 19733 IP: 174.34.230.0/24 IP: 204.144.135.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:7d:38:ff:20:ae:d7:b2:41:72:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 27 14:42:16 2026 GMT Not After : Jul 30 14:42:16 2028 GMT Subject: CN=e7df0db4-17d8-4e61-80c6-57fb5bde2ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:9f:ec:ce:8a:e5:0c:f0:92:cf:51:c2:90: fe:e4:21:48:0d:b7:30:16:9a:13:1e:48:67:b1:d2: 78:49:68:87:4b:0a:74:d3:d8:48:ec:95:c5:46:57: e7:78:7f:e1:d9:f6:8c:cc:be:47:52:0d:b4:49:57: 12:58:88:bc:c3:f1:9d:cb:2b:2f:bb:f0:0d:72:6f: 42:b5:da:3b:f8:d7:09:b2:63:e3:6b:08:3b:75:2f: a1:c9:4d:75:57:ce:d3:30:b3:04:41:e8:18:c6:51: ac:f7:f9:c0:2d:a8:00:8b:1b:b4:77:5c:bb:3d:6e: 3d:dd:3e:60:cd:40:58:c6:ea:7b:7e:25:eb:11:a9: 2e:89:3a:d4:2e:2d:90:4f:02:2a:29:75:37:13:ad: 2d:f4:da:5c:6d:d3:e0:a7:24:6c:7c:03:81:51:aa: 05:90:55:d0:f9:73:45:e9:b7:b9:09:f5:76:b9:58: 0e:7c:4b:af:4b:81:a0:31:26:80:43:e7:22:61:cf: 4b:33:88:2a:ac:a7:f2:2a:76:6a:58:11:74:ed:b5: fb:90:d4:b4:13:0b:0c:83:46:7b:ed:c9:2c:84:6a: 55:70:e2:1a:96:4e:92:29:44:f7:22:a1:cd:0f:83: a7:c1:32:c4:f5:1f:aa:46:73:f6:64:11:f7:09:ba: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1A:B1:77:A2:1F:FC:F7:62:DE:E2:42:19:5F:67:F2:12:23:A2:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e7df0db4-17d8-4e61-80c6-57fb5bde2ade/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e7df0db4-17d8-4e61-80c6-57fb5bde2ade/e7df0db4-17d8-4e61-80c6-57fb5bde2ade.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 174.34.230.0/24 204.144.135.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19733 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0d:fc:20:37:f4:b2:89:b2:b2:19:4c:f6:46:4a:20:3e:51: 20:16:7a:18:ad:b2:40:59:50:40:f3:cf:8b:c1:65:4f:02:72: f2:14:d8:2b:d1:a4:7d:9f:d5:95:03:c6:36:23:4a:51:50:4b: 65:d6:b9:62:4f:60:d0:65:bf:ca:48:c5:cb:cc:7c:0c:c7:a7: 48:15:dc:14:2a:f4:c3:43:00:26:dc:21:0f:a6:2f:f7:62:7c: 13:c3:9d:8c:b7:ef:1a:cb:72:24:e9:26:52:28:b8:c3:36:41: 3c:ab:0a:da:5f:d3:eb:92:e5:de:29:43:d6:8c:0f:9c:44:8f: c6:43:fa:df:87:52:ad:bf:b1:09:3a:b2:e1:42:a5:d5:3d:fd: e8:82:8c:3c:2b:73:5c:1f:6b:0e:c2:70:4a:26:e1:84:c1:99: 19:3e:f2:32:11:01:8f:e2:97:cf:e6:b3:81:13:68:de:c8:20: 3d:53:47:51:e0:e6:ea:79:fc:fb:13:fa:97:25:5b:47:92:fc: c7:2d:c5:03:f9:05:de:04:c3:9b:7a:c6:00:ed:8c:f5:9d:3f: f7:4c:5b:28:4b:38:f6:c0:82:91:c1:f9:c4:76:9c:b5:43:46: cb:fa:6c:df:41:0b:df:e6:68:d3:6c:26:6f:3d:35:b0:26:44: ac:ce:6b:2f -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE2lfTj/IK7XskFyjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNzE0NDIxNloXDTI4MDczMDE0NDIxNlowLzEtMCsGA1UEAxMk ZTdkZjBkYjQtMTdkOC00ZTYxLTgwYzYtNTdmYjViZGUyYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunSf7M6K5Qzwks9RwpD+5CFIDbcwFpoTHkhn sdJ4SWiHSwp009hI7JXFRlfneH/h2faMzL5HUg20SVcSWIi8w/Gdyysvu/ANcm9C tdo7+NcJsmPjawg7dS+hyU11V87TMLMEQegYxlGs9/nALagAixu0d1y7PW493T5g zUBYxup7fiXrEakuiTrULi2QTwIqKXU3E60t9NpcbdPgpyRsfAOBUaoFkFXQ+XNF 6be5CfV2uVgOfEuvS4GgMSaAQ+ciYc9LM4gqrKfyKnZqWBF07bX7kNS0EwsMg0Z7 7ckshGpVcOIalk6SKUT3IqHND4OnwTLE9R+qRnP2ZBH3Cbp2swIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNsasXeiH/z3Yt7iQhlfZ/ISI6JGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l N2RmMGRiNC0xN2Q4LTRlNjEtODBjNi01N2ZiNWJkZTJhZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U3ZGYwZGI0LTE3ZDgtNGU2MS04 MGM2LTU3ZmI1YmRlMmFkZS9lN2RmMGRiNC0xN2Q4LTRlNjEtODBjNi01N2ZiNWJk ZTJhZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACuIuYDBADMkIcwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICTRUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAHw38IDf0somyshlM9kZKID5RIBZ6GK2yQFlQQPPP i8FlTwJy8hTYK9GkfZ/VlQPGNiNKUVBLZda5Yk9g0GW/ykjFy8x8DMenSBXcFCr0 w0MAJtwhD6Yv92J8E8OdjLfvGstyJOkmUii4wzZBPKsK2l/T65Ll3ilD1owPnESP xkP634dSrb+xCTqy4UKl1T396IKMPCtzXB9rDsJwSibhhMGZGT7yMhEBj+KXz+az gRNo3sggPVNHUeDm6nn8+xP6lyVbR5L8xy3FA/kF3gTDm3rGAO2M9Z0/90xbKEs4 9sCCkcH5xHactUNGy/ps30EL3+Zo02wmbz01sCZErM5rLw== -----END CERTIFICATE-----Generated at Wed May 13 02:48:38 2026 by rpki-client