$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer File: f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer (raw, json) Hash identifier: VhOSghuoScpZikZGDp0YFIXlMBwQsaxTDT/2YNDAeKs= Subject key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E22688D4B50D22EB7384687E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jun 2026 08:36:39 +0000 Certificate not after: Wed 13 Sep 2028 08:36:39 +0000 Subordinate resources: AS: 11308 IP: 144.250.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:22:68:8d:4b:50:d2:2e:b7:38:46:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 11 08:36:39 2026 GMT Not After : Sep 13 08:36:39 2028 GMT Subject: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:4a:2b:96:20:09:a9:65:fc:cc:85:69:d2: 29:f7:9b:4d:3e:07:35:83:a7:46:00:7c:c6:6d:c8: 83:32:80:8d:20:4d:c9:cd:15:60:c8:99:26:b1:c0: 34:d0:e7:b9:5c:4b:25:90:c2:11:d6:3a:3c:23:c3: f9:f2:62:82:9a:38:ba:49:b2:7e:27:d0:07:8f:0b: 1c:95:0c:62:76:3a:2e:64:75:14:ca:8f:85:ff:8e: 24:55:8a:9b:8e:a9:03:f6:54:19:68:8f:cd:a7:42: 78:f7:ac:8c:cc:91:4d:94:f9:14:21:1d:84:c6:23: 1e:95:b5:37:2c:a1:90:e7:7d:4b:67:5c:0a:62:8c: 0a:3e:3b:16:71:97:b1:4c:b9:80:10:71:4f:ae:3f: df:d6:13:01:e0:d1:4d:25:3f:ea:3c:2f:fd:be:ab: 11:c8:1c:ad:af:3c:14:22:9f:72:7e:68:1f:b7:d7: 49:d7:26:5b:60:9f:82:94:12:a6:82:3e:76:a1:e6: cd:d5:13:a3:be:50:26:c2:12:34:16:80:83:57:74: 8b:a5:91:85:b3:07:f5:2e:75:de:f5:f3:bd:41:e6: 20:34:a8:20:1c:33:e8:91:f2:3d:8f:92:64:ff:31: 19:62:2a:51:86:c5:a9:c8:3e:e6:b0:92:f8:9c:0f: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 144.250.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11308 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:81:2c:b5:f4:48:66:e8:62:83:e7:e5:4b:dd:bf:4b:dd:29: 08:49:1f:f0:a4:a2:7f:d3:98:b6:71:4d:e7:4c:33:0a:1b:37: d0:6f:de:3c:fa:19:12:0b:75:7a:9f:1b:0b:55:c2:2a:3d:56: 4f:05:ff:21:a5:fd:61:99:9a:fa:35:65:2a:47:85:d5:3a:48: a4:a5:ca:ab:7c:c5:e7:7a:da:16:f1:33:45:3e:c5:4b:8c:11: 8f:8b:ba:06:34:10:10:80:df:f3:4c:94:4b:33:ab:73:77:75: e1:fc:ae:15:1d:14:5b:e5:13:32:81:50:49:18:de:20:68:41: 25:c5:1b:35:0e:ae:80:0c:18:24:23:99:82:47:e5:2c:50:71: 90:d8:db:e1:3d:95:69:9a:e6:60:06:bb:85:31:2c:61:7c:df: 34:d1:61:03:e1:1c:c4:0d:9a:40:13:3a:75:38:fc:74:7a:47: dd:24:08:17:59:fe:1d:21:cb:7c:9e:f5:75:33:f8:e3:ba:b3: 06:4d:64:89:3b:6f:c6:53:3e:43:8c:bd:90:2c:cc:06:ae:43: fc:74:d4:93:d6:af:12:5c:d5:31:a1:fd:4e:0a:0c:3e:91:0e: 3a:d7:7d:b0:53:a9:28:c7:5c:ae:e1:ae:c8:48:dd:50:ea:d1: b5:b7:73:e4 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE4iaI1LUNIutzhGh+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxMTA4MzYzOVoXDTI4MDkxMzA4MzYzOVowLzEtMCsGA1UEAxMk ZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBlNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsetKK5YgCall/MyFadIp95tNPgc1g6dGAHzG bciDMoCNIE3JzRVgyJkmscA00Oe5XEslkMIR1jo8I8P58mKCmji6SbJ+J9AHjwsc lQxidjouZHUUyo+F/44kVYqbjqkD9lQZaI/Np0J496yMzJFNlPkUIR2ExiMelbU3 LKGQ531LZ1wKYowKPjsWcZexTLmAEHFPrj/f1hMB4NFNJT/qPC/9vqsRyBytrzwU Ip9yfmgft9dJ1yZbYJ+ClBKmgj52oebN1ROjvlAmwhI0FoCDV3SLpZGFswf1LnXe 9fO9QeYgNKggHDPokfI9j5Jk/zEZYipRhsWpyD7msJL4nA/4lQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFEBA9IrOgDgOJSi7Wo8kQ7KEapI7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m NjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y2OGM0Mzg3LWRjMTMtNDNjOC1i YzAxLTVjNTllM2QwZTU1Ny9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNk MGU1NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCQ+jAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIs LDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCkgSy19Ehm6GKD5+VL3b9L3SkISR/wpKJ/05i2cU3nTDMKGzfQ b948+hkSC3V6nxsLVcIqPVZPBf8hpf1hmZr6NWUqR4XVOkikpcqrfMXnetoW8TNF PsVLjBGPi7oGNBAQgN/zTJRLM6tzd3Xh/K4VHRRb5RMygVBJGN4gaEElxRs1Dq6A DBgkI5mCR+UsUHGQ2NvhPZVpmuZgBruFMSxhfN800WED4RzEDZpAEzp1OPx0ekfd JAgXWf4dIct8nvV1M/jjurMGTWSJO2/GUz5DjL2QLMwGrkP8dNST1q8SXNUxof1O Cgw+kQ46132wU6kox1yu4a7ISN1Q6tG1t3Pk -----END CERTIFICATE-----Generated at Sat Jun 13 09:06:49 2026 by rpki-client