$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2390662-ceb2-4445-bf3e-8551f4da9179.cer File: d2390662-ceb2-4445-bf3e-8551f4da9179.cer (raw, json) Hash identifier: KcntWXcLckLhe+SFy9C1rCCJ+fsY4o6m+foIZ9S1esk= Subject key identifier: 42:18:79:DF:49:69:34:CC:BB:BF:9B:54:9C:D7:66:AF:6E:63:6D:4E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584FAA2FF7B6B6398F466C8BBAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2390662-ceb2-4445-bf3e-8551f4da9179/d2390662-ceb2-4445-bf3e-8551f4da9179.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2390662-ceb2-4445-bf3e-8551f4da9179/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 16:39:31 +0000 Certificate not after: Wed 31 Jan 2029 17:39:31 +0000 Subordinate resources: IP: 149.252.0.0/16 IP: 192.100.51.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:2f:f7:b6:b6:39:8f:46:6c:8b:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 29 16:39:31 2026 GMT Not After : Jan 31 17:39:31 2029 GMT Subject: CN=d2390662-ceb2-4445-bf3e-8551f4da9179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bb:9a:73:e3:3b:e8:e3:42:94:2b:5f:e7:ec: e4:bd:a8:98:f6:92:c2:7a:cd:90:f5:dc:09:3e:75: 33:e3:5a:fa:e6:15:e2:07:93:61:12:16:95:69:90: 38:aa:d3:03:a0:c1:5f:0e:69:26:79:40:64:6d:57: 41:10:e9:88:f0:a5:9e:ee:b3:64:4b:c0:18:9e:eb: 44:53:b4:d1:a7:81:bd:40:81:8d:5f:b2:66:de:af: ca:e1:f9:a0:2b:69:83:01:36:dd:3b:35:ec:3f:46: bc:0b:5b:f2:79:0c:f7:8f:bd:24:53:e9:93:01:dc: 07:d4:d8:28:94:2b:7d:3e:4d:ce:24:c8:b2:8d:c4: aa:f0:03:94:81:83:f9:6d:ef:d9:43:65:4c:2f:31: 7c:62:ee:dc:ca:0d:e5:ff:93:94:74:b0:54:4f:f8: ee:87:24:75:88:d8:bc:fe:99:21:99:be:84:d0:4d: 7e:70:d4:99:5b:47:77:2c:a1:c0:f5:2f:28:21:c3: 89:27:d6:0e:5b:92:f2:87:62:3f:c9:38:97:bc:6f: f3:a1:37:d4:42:ee:eb:ba:ae:33:c9:a3:5e:b7:02: 2d:27:0c:58:d6:c4:8c:dc:5d:48:40:79:18:6e:9c: 0a:66:43:16:18:d2:e8:4a:97:2a:85:4c:84:7f:07: 51:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:18:79:DF:49:69:34:CC:BB:BF:9B:54:9C:D7:66:AF:6E:63:6D:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2390662-ceb2-4445-bf3e-8551f4da9179/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2390662-ceb2-4445-bf3e-8551f4da9179/d2390662-ceb2-4445-bf3e-8551f4da9179.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 149.252.0.0/16 192.100.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bb:f6:15:f5:1e:33:26:28:4f:f7:52:ca:79:45:a9:ef:18: 90:58:a5:ff:fd:4f:62:b8:34:41:28:22:19:2a:75:64:48:d7: 7d:f3:0d:1f:68:e1:1d:65:2a:e2:73:4c:a2:f3:91:46:e9:64: c7:08:de:f5:14:52:62:f4:e0:30:b3:96:0f:34:b3:8e:98:e1: dd:c4:09:4a:c5:f4:d1:43:76:56:66:ae:8a:c3:42:a6:cc:48: a2:4a:c8:ce:26:77:f7:0d:ad:83:06:80:20:d7:92:b3:ae:9f: 28:bc:70:d6:dd:ce:fd:5a:dc:3e:d5:d2:2c:6e:39:35:1a:1b: ed:65:8e:a6:99:29:8c:e0:a8:51:10:ae:f4:cc:87:27:86:46: 5a:e4:8a:47:91:ba:83:cd:d2:9d:68:c7:f9:1d:e2:f4:b9:90: 77:aa:22:6d:9a:db:9f:18:36:f3:2e:fc:90:0c:6d:04:55:2e: 47:79:5f:98:25:e1:cc:4b:a1:f3:f4:d0:56:bc:ed:c8:4b:81: 03:1a:7c:cd:da:cc:53:b8:3a:cf:68:02:2c:af:08:cb:fb:d4: f6:3c:b7:55:b4:ef:e7:8d:ae:15:89:a2:da:bf:1e:f2:a5:dc: b6:14:6d:58:e0:e5:72:b7:ef:97:72:b9:e5:c1:50:a4:eb:15: 0d:55:9c:43 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWE+qL/e2tjmPRmyLusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAyOTE2MzkzMVoXDTI5MDEzMTE3MzkzMVowLzEtMCsGA1UEAxMk ZDIzOTA2NjItY2ViMi00NDQ1LWJmM2UtODU1MWY0ZGE5MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4buac+M76ONClCtf5+zkvaiY9pLCes2Q9dwJ PnUz41r65hXiB5NhEhaVaZA4qtMDoMFfDmkmeUBkbVdBEOmI8KWe7rNkS8AYnutE U7TRp4G9QIGNX7Jm3q/K4fmgK2mDATbdOzXsP0a8C1vyeQz3j70kU+mTAdwH1Ngo lCt9Pk3OJMiyjcSq8AOUgYP5be/ZQ2VMLzF8Yu7cyg3l/5OUdLBUT/juhyR1iNi8 /pkhmb6E0E1+cNSZW0d3LKHA9S8oIcOJJ9YOW5Lyh2I/yTiXvG/zoTfUQu7ruq4z yaNetwItJwxY1sSM3F1IQHkYbpwKZkMWGNLoSpcqhUyEfwdRAQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFEIYed9JaTTMu7+bVJzXZq9uY21OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k MjM5MDY2Mi1jZWIyLTQ0NDUtYmYzZS04NTUxZjRkYTkxNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2QyMzkwNjYyLWNlYjItNDQ0NS1i ZjNlLTg1NTFmNGRhOTE3OS9kMjM5MDY2Mi1jZWIyLTQ0NDUtYmYzZS04NTUxZjRk YTkxNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCV/AMEAMBkMzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMu/YV9R4zJihP 91LKeUWp7xiQWKX//U9iuDRBKCIZKnVkSNd98w0faOEdZSric0yi85FG6WTHCN71 FFJi9OAws5YPNLOOmOHdxAlKxfTRQ3ZWZq6Kw0KmzEiiSsjOJnf3Da2DBoAg15Kz rp8ovHDW3c79Wtw+1dIsbjk1GhvtZY6mmSmM4KhREK70zIcnhkZa5IpHkbqDzdKd aMf5HeL0uZB3qiJtmtufGDbzLvyQDG0EVS5HeV+YJeHMS6Hz9NBWvO3IS4EDGnzN 2sxTuDrPaAIsrwjL+9T2PLdVtO/nja4ViaLavx7ypdy2FG1Y4OVyt++XcrnlwVCk 6xUNVZxD -----END CERTIFICATE-----Generated at Thu Nov 5 14:12:54 2026 by rpki-client