$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674.cer File: e90a5d5f-94f4-480a-8d34-3368d2841674.cer (raw, json) Hash identifier: wf4w/MpbuVC/uq1dgHhpDoivr3Rv3jN6Y5Zg2C6vx1g= Subject key identifier: A0:D6:BD:62:A6:0A:E0:25:9C:89:14:8F:BD:71:D6:88:50:4C:C9:63 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E1B491BDB78A39B35888D8980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/e90a5d5f-94f4-480a-8d34-3368d2841674.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Jun 2026 19:22:39 +0000 Certificate not after: Sun 10 Sep 2028 19:22:39 +0000 Subordinate resources: IP: 140.212.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1b:49:1b:db:78:a3:9b:35:88:8d:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 8 19:22:39 2026 GMT Not After : Sep 10 19:22:39 2028 GMT Subject: CN=e90a5d5f-94f4-480a-8d34-3368d2841674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:a2:b8:8d:64:dd:6c:ec:5c:a1:e0:ec:0d: a3:c7:03:33:3a:58:d3:d3:bb:79:d9:f6:59:36:be: 59:e4:54:9a:c8:b6:c6:d1:da:33:f2:66:8d:fb:6e: 3c:2d:f1:54:94:de:9a:af:b9:14:2b:83:95:ab:93: 17:a2:20:37:c5:3a:fa:00:2a:d7:95:03:7b:dd:5e: 85:3f:6e:e7:d6:33:9b:ad:32:76:3c:86:76:39:b1: b1:e1:3c:2d:79:8a:94:91:b7:17:43:18:67:a2:98: da:78:6a:68:fb:55:c3:88:6e:a2:00:26:b0:db:25: 62:34:fe:0c:35:fc:83:f7:ea:5a:73:01:9b:57:45: 3f:10:43:37:38:12:e8:3c:05:c1:9c:fe:ab:ab:07: 89:96:f8:3f:a5:03:dc:f4:c0:b6:22:7a:59:98:14: 05:1d:ff:fa:be:66:e4:ba:8a:c5:fa:7b:fb:4e:8d: e3:9b:7f:db:31:39:f3:46:3e:22:a4:a8:9f:31:b1: e9:bc:cc:bb:86:fe:ef:b7:8c:f7:01:20:15:fc:e7: b1:78:f3:66:1a:30:38:5e:c1:36:fc:c2:7b:67:c7: c2:f8:d9:59:40:09:7e:69:1b:55:6b:1c:62:dc:46: 26:44:1d:3d:6f:7f:ef:f7:e4:2e:7e:9f:a5:ca:e2: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D6:BD:62:A6:0A:E0:25:9C:89:14:8F:BD:71:D6:88:50:4C:C9:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e90a5d5f-94f4-480a-8d34-3368d2841674/e90a5d5f-94f4-480a-8d34-3368d2841674.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 140.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f0:cd:6f:7a:21:fd:9f:63:94:9c:02:cb:92:b8:f2:fa:ad: 5e:3f:fd:7a:00:eb:f5:f0:09:6f:47:3c:01:31:60:79:de:78: 3f:9b:34:6b:0b:6c:67:c5:29:50:92:ae:64:f5:f0:3f:62:94: 33:85:06:cb:d2:b1:23:08:44:93:4f:a4:47:f4:f0:8a:08:9f: 41:02:80:d2:a6:ba:5b:06:6a:6f:e4:48:57:9e:4a:57:e6:de: 17:b4:eb:05:dc:7e:2b:95:57:30:fe:0f:1f:7b:ed:d5:39:e4: 08:9c:93:4b:4f:77:b4:40:cb:eb:4d:ba:94:a4:5f:a0:06:0b: 04:87:af:53:bc:76:9a:31:15:6e:ac:a4:45:ff:16:04:d3:55: 05:2f:d8:c2:ab:21:c7:88:0c:32:a9:9d:0d:eb:dd:93:b0:e0: 4d:b4:fb:76:8c:e1:0d:78:de:e5:86:c8:69:b9:d3:21:a3:1d: 95:c9:5f:4d:cd:82:11:c2:68:d1:1d:0a:00:f4:fa:66:b9:aa: 0a:8d:d2:32:21:17:63:1d:18:33:1d:f4:5f:84:c8:7f:67:06: 31:aa:09:55:cc:fe:a4:83:c3:aa:88:83:6a:7c:15:1e:9f:63: 41:44:e7:08:30:a5:c5:7e:90:ab:da:62:a3:3b:87:91:d0:de: 81:b1:b6:4d -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE4bSRvbeKObNYiNiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwODE5MjIzOVoXDTI4MDkxMDE5MjIzOVowLzEtMCsGA1UEAxMk ZTkwYTVkNWYtOTRmNC00ODBhLThkMzQtMzM2OGQyODQxNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue6iuI1k3WzsXKHg7A2jxwMzOljT07t52fZZ Nr5Z5FSayLbG0doz8maN+248LfFUlN6ar7kUK4OVq5MXoiA3xTr6ACrXlQN73V6F P27n1jObrTJ2PIZ2ObGx4TwteYqUkbcXQxhnopjaeGpo+1XDiG6iACaw2yViNP4M NfyD9+pacwGbV0U/EEM3OBLoPAXBnP6rqweJlvg/pQPc9MC2InpZmBQFHf/6vmbk uorF+nv7To3jm3/bMTnzRj4ipKifMbHpvMy7hv7vt4z3ASAV/OexePNmGjA4XsE2 /MJ7Z8fC+NlZQAl+aRtVaxxi3EYmRB09b3/v9+Qufp+lyuLsowIDAQABo4ID/jCC A/owHQYDVR0OBBYEFKDWvWKmCuAlnIkUj71x1ohQTMljMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l OTBhNWQ1Zi05NGY0LTQ4MGEtOGQzNC0zMzY4ZDI4NDE2NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U5MGE1ZDVmLTk0ZjQtNDgwYS04 ZDM0LTMzNjhkMjg0MTY3NC9lOTBhNWQ1Zi05NGY0LTQ4MGEtOGQzNC0zMzY4ZDI4 NDE2NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCM1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAF8M1veiH9n2OUnALLkrjy +q1eP/16AOv18AlvRzwBMWB53ng/mzRrC2xnxSlQkq5k9fA/YpQzhQbL0rEjCEST T6RH9PCKCJ9BAoDSprpbBmpv5EhXnkpX5t4XtOsF3H4rlVcw/g8fe+3VOeQInJNL T3e0QMvrTbqUpF+gBgsEh69TvHaaMRVurKRF/xYE01UFL9jCqyHHiAwyqZ0N692T sOBNtPt2jOENeN7lhshpudMhox2VyV9NzYIRwmjRHQoA9PpmuaoKjdIyIRdjHRgz HfRfhMh/ZwYxqglVzP6kg8OqiINqfBUen2NBROcIMKXFfpCr2mKjO4eR0N6BsbZN -----END CERTIFICATE-----Generated at Sat Jun 13 10:18:47 2026 by rpki-client