$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer File: 97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer (raw, json) Hash identifier: 8oyi99PMk6/zUX3v4TSpaO0sSqS8EKHB0gvBeUg18W4= Subject key identifier: 03:6C:35:28:AA:4A:1E:91:4E:B7:98:BE:E3:C0:48:55:29:67:FF:C6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E70BB44EFCD09271374A78280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jul 2026 09:56:22 +0000 Certificate not after: Wed 11 Oct 2028 09:56:22 +0000 Subordinate resources: IP: 162.246.232.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:bb:44:ef:cd:09:27:13:74:a7:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 9 09:56:22 2026 GMT Not After : Oct 11 09:56:22 2028 GMT Subject: CN=97cfe007-0ab6-43e1-9c67-fb4446b0abf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:99:8e:0b:38:63:e4:52:79:70:29:0b:e3: 30:bc:75:ef:6f:3e:4f:0c:c3:6e:f3:f2:82:bb:ea: 86:8f:27:b0:f2:7f:49:56:57:07:23:5f:63:3b:b6: 62:db:32:95:a5:27:9d:b6:58:88:2e:e9:24:a1:0f: 0e:89:89:57:dc:5f:c0:8d:10:e8:3d:82:0a:46:04: 13:99:d8:6e:6d:59:fb:13:a4:a8:94:8e:e5:12:c9: 6c:3f:82:4f:e8:05:c5:eb:73:69:3d:63:04:1e:27: 1c:3b:b2:c3:75:7d:22:08:69:d3:0a:f8:fc:5a:e0: e4:ad:8c:47:8c:0b:1d:3c:f9:6c:26:44:eb:45:85: db:23:0b:54:b6:fd:24:c2:b5:86:00:12:a6:dc:6b: 39:4f:48:a7:ef:2f:83:c4:12:ca:65:ba:e5:8a:59: b5:24:5f:f8:3f:79:c2:97:3b:cf:87:8b:e2:df:b3: 64:64:3f:a8:b4:b8:8d:55:f5:42:bd:cb:99:b7:40: b1:55:a2:ea:af:c2:b9:31:68:89:60:0f:08:fa:f2: 7c:aa:3f:c4:03:47:a1:fc:d8:cc:ac:41:b7:c1:f2: bc:1d:4a:90:57:ec:40:4f:d1:4d:e7:c4:a7:ae:b6: 9a:2a:52:9a:5e:4c:e2:96:f4:a6:8c:4a:57:e2:c5: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6C:35:28:AA:4A:1E:91:4E:B7:98:BE:E3:C0:48:55:29:67:FF:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 162.246.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:10:d2:8c:98:61:9d:28:8c:f0:71:31:17:a6:33:3a:bb:f0: e1:b1:19:e9:75:99:7e:21:d1:c4:c1:6c:b4:f1:46:44:33:e4: 86:94:a7:fb:5b:e8:ba:1e:11:3f:4d:92:28:3f:4d:02:41:69: 34:e8:60:e7:66:00:09:83:cc:2e:dc:3a:81:77:c8:ef:ce:35: 9a:81:51:20:f0:78:1f:57:54:a2:5e:6e:b3:c5:11:75:89:eb: de:f0:a4:df:8d:a3:86:57:b9:22:79:9f:f0:74:0e:3d:70:33: b7:fe:68:36:03:d6:40:c0:27:34:ee:76:c7:a0:4c:3a:1a:12: 17:73:67:e2:b7:47:50:b7:0a:61:17:25:4d:b7:02:8a:cb:a7: 3d:c4:b0:8e:23:66:e0:7a:3e:c1:7d:77:8c:3e:ff:20:b5:fb: 99:e6:52:12:ea:17:41:c9:8d:21:8d:5d:3a:ab:36:6d:11:84: 2f:b4:5a:4a:32:b6:81:51:59:94:c7:7f:1c:d4:80:36:58:7e: e2:30:be:e5:0e:31:da:fb:e4:d6:ea:61:03:ed:7a:22:d4:51: f5:0c:10:50:e2:8f:fd:fe:61:dc:96:44:b7:79:26:a3:a0:a9: 37:0c:da:99:d0:f0:63:f6:1d:8a:0d:e7:cf:60:63:45:b0:ae: 75:05:07:2b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5wu0TvzQknE3SngoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwOTA5NTYyMloXDTI4MTAxMTA5NTYyMlowLzEtMCsGA1UEAxMk OTdjZmUwMDctMGFiNi00M2UxLTljNjctZmI0NDQ2YjBhYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcSZjgs4Y+RSeXApC+MwvHXvbz5PDMNu8/KC u+qGjyew8n9JVlcHI19jO7Zi2zKVpSedtliILukkoQ8OiYlX3F/AjRDoPYIKRgQT mdhubVn7E6SolI7lEslsP4JP6AXF63NpPWMEHiccO7LDdX0iCGnTCvj8WuDkrYxH jAsdPPlsJkTrRYXbIwtUtv0kwrWGABKm3Gs5T0in7y+DxBLKZbrlilm1JF/4P3nC lzvPh4vi37NkZD+otLiNVfVCvcuZt0CxVaLqr8K5MWiJYA8I+vJ8qj/EA0eh/NjM rEG3wfK8HUqQV+xAT9FN58SnrraaKlKaXkzilvSmjEpX4sVqMwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFANsNSiqSh6RTreYvuPASFUpZ//GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 N2NmZTAwNy0wYWI2LTQzZTEtOWM2Ny1mYjQ0NDZiMGFiZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzk3Y2ZlMDA3LTBhYjYtNDNlMS05 YzY3LWZiNDQ0NmIwYWJmMy85N2NmZTAwNy0wYWI2LTQzZTEtOWM2Ny1mYjQ0NDZi MGFiZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGi9ugwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFxDSjJhhnSiM8HExF6Yz Orvw4bEZ6XWZfiHRxMFstPFGRDPkhpSn+1vouh4RP02SKD9NAkFpNOhg52YACYPM Ltw6gXfI7841moFRIPB4H1dUol5us8URdYnr3vCk342jhle5Inmf8HQOPXAzt/5o NgPWQMAnNO52x6BMOhoSF3Nn4rdHULcKYRclTbcCisunPcSwjiNm4Ho+wX13jD7/ ILX7meZSEuoXQcmNIY1dOqs2bRGEL7RaSjK2gVFZlMd/HNSANlh+4jC+5Q4x2vvk 1uphA+16ItRR9QwQUOKP/f5h3JZEt3kmo6CpNwzamdDwY/Ydig3nz2BjRbCudQUH Kw== -----END CERTIFICATE-----Generated at Tue Jul 21 06:44:59 2026 by rpki-client