$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7.cer File: f5543cab-492c-47b2-869b-a727d610adf7.cer (raw, json) Hash identifier: kIYJTZy2YhQ+Wni3PaYCouxkRCXqT7cwi/JJS1A82+g= Subject key identifier: F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E12C79CE3925763C91541A6B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jun 2026 18:15:15 +0000 Certificate not after: Wed 23 Aug 2028 14:55:08 +0000 Subordinate resources: AS: 402472 IP: 140.232.88.0/24 IP: 206.109.116.0/22 IP: 2602:f3d0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:12:c7:9c:e3:92:57:63:c9:15:41:a6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 5 18:15:15 2026 GMT Not After : Aug 23 14:55:08 2028 GMT Subject: CN=f5543cab-492c-47b2-869b-a727d610adf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:63:a6:b3:b0:e4:a3:d7:1e:aa:01:30:e7: 65:50:3e:79:64:51:43:a7:b1:6f:01:4e:50:9d:03: 76:e7:38:09:18:fd:6f:55:a4:68:89:59:e2:de:05: dd:fc:92:0f:5e:0d:9e:b2:48:b3:e2:a8:cc:a2:0d: 54:28:3f:ad:bd:c2:bf:62:10:38:0a:1e:c6:41:72: 51:0f:a3:b2:13:09:af:c6:63:62:34:c6:c2:d4:61: 36:e2:ad:0f:66:68:7b:c9:a0:93:66:53:e4:ce:87: f3:05:79:3b:54:f5:1e:19:3d:71:15:a5:a9:e9:ee: 71:4b:50:26:77:e0:cd:bb:7b:dc:a2:03:36:5a:09: 59:d5:69:5e:54:05:82:4a:32:9e:94:ed:fc:aa:46: 85:3c:1a:91:82:34:2d:78:18:fa:a4:23:5e:21:c6: 6d:bd:c4:6b:a9:a4:99:78:a7:35:a5:b9:1b:bf:73: da:ff:c2:8c:49:64:13:07:cc:88:74:9f:28:cb:90: c4:88:4e:e0:7d:49:04:ec:37:92:49:c4:55:5b:77: 94:31:a4:4d:cf:b6:cb:c4:26:52:a8:25:b0:ac:f2: 32:9d:d0:03:06:21:df:7f:c3:ee:9b:8d:d6:11:a9: d0:c0:7d:e9:13:dc:df:42:b0:e2:ed:67:b0:00:10: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0A:81:B6:B6:78:BB:ED:1E:A5:06:A3:85:9B:33:B5:8B:12:03:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f5543cab-492c-47b2-869b-a727d610adf7/f5543cab-492c-47b2-869b-a727d610adf7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 140.232.88.0/24 206.109.116.0/22 IPv6: 2602:f3d0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402472 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:17:78:3b:01:14:ce:b0:a8:89:e9:1b:90:69:56:db:3e:1d: 3d:e5:89:5b:cc:44:e3:e3:cd:cd:8e:60:60:fb:2f:c1:b0:2a: 7a:2d:e6:8e:5a:0c:b3:58:0d:32:99:4a:cc:65:86:15:9a:5c: ee:4c:65:ff:12:8d:0c:d4:69:e9:99:8c:87:ab:07:44:b1:10: 4f:b3:84:d9:5b:96:dc:08:55:e9:ed:f4:8c:80:97:dc:c9:76: a1:fb:ea:75:f8:71:ae:df:09:30:0e:27:6f:bb:6d:88:0d:97: a5:2a:4e:34:5c:30:4d:22:88:5a:34:a2:0e:15:02:18:4b:bf: 66:bb:47:85:54:ee:ec:7f:8b:9c:bb:c2:a8:19:37:e5:90:2d: 47:23:1f:f3:c3:57:7a:4d:cc:04:e2:89:7c:42:d6:b0:48:00: a6:c1:d0:8c:dc:fa:9d:6a:1e:7d:e5:a4:38:4e:04:3b:f4:3b: e8:6f:e2:71:ae:c6:df:05:ee:56:e5:1b:51:22:9d:2e:0e:11: c7:d4:fc:5a:d7:ab:31:06:7c:b6:85:26:94:c3:7d:83:02:69: d4:4f:26:3c:7e:94:18:ae:07:72:7e:c7:c8:b9:89:ba:b9:f0: 03:b6:a9:83:78:9b:af:da:cb:50:ba:3d:cf:c8:82:d3:e8:9c: d6:39:15:ea -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE4Sx5zjkldjyRVBprAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwNTE4MTUxNVoXDTI4MDgyMzE0NTUwOFowLzEtMCsGA1UEAxMk ZjU1NDNjYWItNDkyYy00N2IyLTg2OWItYTcyN2Q2MTBhZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwBjprOw5KPXHqoBMOdlUD55ZFFDp7FvAU5Q nQN25zgJGP1vVaRoiVni3gXd/JIPXg2eskiz4qjMog1UKD+tvcK/YhA4Ch7GQXJR D6OyEwmvxmNiNMbC1GE24q0PZmh7yaCTZlPkzofzBXk7VPUeGT1xFaWp6e5xS1Am d+DNu3vcogM2WglZ1WleVAWCSjKelO38qkaFPBqRgjQteBj6pCNeIcZtvcRrqaSZ eKc1pbkbv3Pa/8KMSWQTB8yIdJ8oy5DEiE7gfUkE7DeSScRVW3eUMaRNz7bLxCZS qCWwrPIyndADBiHff8Pum43WEanQwH3pE9zfQrDi7WewABBubQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPYKgba2eLvtHqUGo4WbM7WLEgPSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m NTU0M2NhYi00OTJjLTQ3YjItODY5Yi1hNzI3ZDYxMGFkZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y1NTQzY2FiLTQ5MmMtNDdiMi04 NjliLWE3MjdkNjEwYWRmNy9mNTU0M2NhYi00OTJjLTQ3YjItODY5Yi1hNzI3ZDYx MGFkZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBACM6FgDBALObXQwDgQCAAIwCAMGACYC89AAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYkKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuF3g7ARTOsKiJ6RuQ aVbbPh095YlbzETj483NjmBg+y/BsCp6LeaOWgyzWA0ymUrMZYYVmlzuTGX/Eo0M 1GnpmYyHqwdEsRBPs4TZW5bcCFXp7fSMgJfcyXah++p1+HGu3wkwDidvu22IDZel Kk40XDBNIohaNKIOFQIYS79mu0eFVO7sf4ucu8KoGTflkC1HIx/zw1d6TcwE4ol8 QtawSACmwdCM3Pqdah595aQ4TgQ79Dvob+JxrsbfBe5W5RtRIp0uDhHH1Pxa16sx Bny2hSaUw32DAmnUTyY8fpQYrgdyfsfIuYm6ufADtqmDeJuv2stQuj3PyILT6JzW ORXq -----END CERTIFICATE-----Generated at Sat Jun 13 08:04:41 2026 by rpki-client