$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36.cer File: 9059d3f8-5b82-4dd8-954c-fa17db590d36.cer (raw, json) Hash identifier: /MdsVWdRks546JaGDgfQLGazTzZk13P+6EmaiJ6gJaU= Subject key identifier: FE:3B:4A:0E:A0:6D:47:C5:7D:7D:07:AD:49:2C:9D:9B:D2:4A:9C:0B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E3138EF8A3995CC60812E4940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/9059d3f8-5b82-4dd8-954c-fa17db590d36.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jun 2026 15:57:50 +0000 Certificate not after: Mon 18 Sep 2028 15:57:50 +0000 Subordinate resources: IP: 192.152.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:38:ef:8a:39:95:cc:60:81:2e:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 16 15:57:50 2026 GMT Not After : Sep 18 15:57:50 2028 GMT Subject: CN=9059d3f8-5b82-4dd8-954c-fa17db590d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:37:06:03:df:07:45:7e:6b:ee:4d:b6:f9: e6:9c:0e:37:3c:e2:80:75:49:95:06:63:16:19:f5: 8f:ec:6b:23:e1:7b:6f:cd:04:6a:96:ac:b8:fe:03: 49:15:d3:f7:9d:d5:66:82:d5:2a:20:c6:0e:79:c6: ca:14:9e:34:ff:19:32:88:e4:68:72:22:af:d9:28: 93:92:7f:9d:48:56:d1:dd:51:31:4e:21:ee:20:20: 48:9a:64:f2:a4:72:3b:1a:48:a1:01:6f:53:27:0a: 66:4a:9d:79:5f:fc:81:a1:a6:34:8f:e1:c1:54:3f: 94:25:fe:4b:14:29:a1:2d:61:ab:ed:d3:92:cf:e9: d0:08:3b:79:ff:3d:cd:5d:d0:70:1c:57:45:18:9c: 93:fd:e2:e0:3b:4a:15:f0:10:f7:f3:9e:a7:c0:c9: 10:f3:17:2d:80:a8:40:ce:53:75:90:b5:84:b6:11: 2b:a1:f9:20:f7:53:50:3c:a8:e6:14:71:9b:49:67: 9f:43:ae:50:cf:d0:12:5d:1f:5f:5a:c0:95:4f:bf: 51:b0:14:5f:71:ff:b7:44:fa:59:fe:7a:5f:7d:2f: 8d:09:91:3c:94:fa:83:25:f0:e5:50:e2:ee:fb:85: cd:8a:c2:36:c8:f5:8c:e3:23:9c:ea:52:92:b5:43: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3B:4A:0E:A0:6D:47:C5:7D:7D:07:AD:49:2C:9D:9B:D2:4A:9C:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9059d3f8-5b82-4dd8-954c-fa17db590d36/9059d3f8-5b82-4dd8-954c-fa17db590d36.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.152.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:27:b1:b1:23:f3:f7:42:3a:aa:2d:68:b3:a0:a9:d7:4c:0b: a2:fe:ea:25:da:17:90:33:4b:54:78:fb:3a:74:24:6c:5c:d4: 14:f9:f5:24:2e:38:d1:1c:06:aa:48:51:e0:70:37:74:6a:51: 4d:6e:ef:bb:78:d6:17:2b:eb:2c:96:52:bb:95:ba:21:87:4a: bf:17:12:13:3e:f5:96:28:b1:e5:84:c7:39:d7:bd:1a:d8:77: db:92:db:8c:a8:f1:15:2c:2f:d6:f0:55:14:bd:bf:a8:73:35: 93:09:d1:2a:57:34:47:72:c7:3d:50:f0:33:b3:7d:8d:6a:f0: 7e:e3:e9:4c:52:d0:f1:ae:6b:ce:33:05:96:e4:80:5e:12:ae: 5c:ae:01:9d:58:0a:c2:43:dd:94:bc:72:d2:ea:59:97:53:6c: 9f:1e:9b:83:75:59:4e:f6:2d:e5:53:63:18:02:d1:ce:2b:91: 0a:d4:f0:aa:59:d1:25:7b:9b:97:53:09:f2:9a:23:70:68:1b: 58:01:78:a7:04:25:1f:22:57:5f:f4:30:fa:37:c9:bd:c9:09: c9:10:3b:c1:b3:e4:55:20:cd:30:f8:59:01:90:fe:83:9e:ff: e5:63:d5:73:7a:83:f0:77:51:14:02:72:a2:4b:b6:ab:86:71: 60:9b:9a:31 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4xOO+KOZXMYIEuSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxNjE1NTc1MFoXDTI4MDkxODE1NTc1MFowLzEtMCsGA1UEAxMk OTA1OWQzZjgtNWI4Mi00ZGQ4LTk1NGMtZmExN2RiNTkwZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvg3BgPfB0V+a+5NtvnmnA43POKAdUmVBmMW GfWP7Gsj4XtvzQRqlqy4/gNJFdP3ndVmgtUqIMYOecbKFJ40/xkyiORociKv2SiT kn+dSFbR3VExTiHuICBImmTypHI7GkihAW9TJwpmSp15X/yBoaY0j+HBVD+UJf5L FCmhLWGr7dOSz+nQCDt5/z3NXdBwHFdFGJyT/eLgO0oV8BD3856nwMkQ8xctgKhA zlN1kLWEthErofkg91NQPKjmFHGbSWefQ65Qz9ASXR9fWsCVT79RsBRfcf+3RPpZ /npffS+NCZE8lPqDJfDlUOLu+4XNisI2yPWM4yOc6lKStUPE1QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFP47Sg6gbUfFfX0HrUksnZvSSpwLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 MDU5ZDNmOC01YjgyLTRkZDgtOTU0Yy1mYTE3ZGI1OTBkMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzkwNTlkM2Y4LTViODItNGRkOC05 NTRjLWZhMTdkYjU5MGQzNi85MDU5ZDNmOC01YjgyLTRkZDgtOTU0Yy1mYTE3ZGI1 OTBkMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAmGEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAciexsSPz90I6qi1os6Cp 10wLov7qJdoXkDNLVHj7OnQkbFzUFPn1JC440RwGqkhR4HA3dGpRTW7vu3jWFyvr LJZSu5W6IYdKvxcSEz71liix5YTHOde9Gth325LbjKjxFSwv1vBVFL2/qHM1kwnR Klc0R3LHPVDwM7N9jWrwfuPpTFLQ8a5rzjMFluSAXhKuXK4BnVgKwkPdlLxy0upZ l1Nsnx6bg3VZTvYt5VNjGALRziuRCtTwqlnRJXubl1MJ8pojcGgbWAF4pwQlHyJX X/Qw+jfJvckJyRA7wbPkVSDNMPhZAZD+g57/5WPVc3qD8HdRFAJyoku2q4ZxYJua MQ== -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:35 2026 by rpki-client