$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/065971b9-0f1c-4434-bc4c-693577de283b.cer File: 065971b9-0f1c-4434-bc4c-693577de283b.cer (raw, json) Hash identifier: 74tde+ge3bnFMFs31vtjPbGWp1ypfdu2wcGRDchewUI= Subject key identifier: 1D:D8:7A:98:B9:0B:22:E4:F4:CF:A8:4B:09:06:20:63:45:43:71:62 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5C0B53CA1B5E546BBF734040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/065971b9-0f1c-4434-bc4c-693577de283b/065971b9-0f1c-4434-bc4c-693577de283b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/065971b9-0f1c-4434-bc4c-693577de283b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 00:05:42 +0000 Certificate not after: Wed 04 Oct 2028 00:05:42 +0000 Subordinate resources: AS: 22653 IP: 66.154.0.0 -- 66.154.95.255 IP: 69.61.0.0/17 IP: 2607:1a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5c:0b:53:ca:1b:5e:54:6b:bf:73:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 00:05:42 2026 GMT Not After : Oct 4 00:05:42 2028 GMT Subject: CN=065971b9-0f1c-4434-bc4c-693577de283b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a0:bd:79:ab:13:76:e0:2b:89:49:88:be:a8: a7:6f:ae:ca:8e:69:e4:3d:d8:4c:f4:e9:48:17:ea: cc:7e:0d:e1:b0:68:bd:3d:39:b9:59:86:ea:72:f5: 18:e3:1f:86:ac:57:be:c6:8b:13:4e:c4:ee:d2:39: 31:ad:77:97:f4:d5:c3:38:22:31:9f:ac:4a:cf:17: b0:3c:d0:ab:bf:c3:71:74:6f:0e:b7:d2:ab:e2:71: f0:55:ab:ea:86:54:bd:7e:fb:c2:32:2a:47:57:e3: 81:b4:7a:0b:4f:41:04:e8:d0:c0:26:b2:87:0b:12: 40:d2:ef:cb:cc:f2:4d:ba:69:dc:d7:e1:93:cb:66: b2:d4:94:68:fe:9f:48:cb:52:f2:b9:65:a9:b0:00: 13:17:0e:3b:2a:75:8a:ae:e5:83:17:d9:36:fd:12: d8:7b:f9:09:78:6e:60:c9:e8:dd:8b:7c:01:9a:f3: f6:c1:38:43:65:f8:2e:38:53:d9:55:63:4a:c1:7d: dc:04:18:29:d2:be:bf:ba:5c:92:7d:ae:42:d2:34: 2e:cd:53:7e:d8:a8:bf:cb:d4:0d:82:c7:b8:82:e7: f1:cd:2c:62:ed:d9:3b:84:50:db:2f:a5:18:89:75: cc:05:8a:ba:f8:f4:22:cb:90:7e:aa:bf:10:be:50: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D8:7A:98:B9:0B:22:E4:F4:CF:A8:4B:09:06:20:63:45:43:71:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/065971b9-0f1c-4434-bc4c-693577de283b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/065971b9-0f1c-4434-bc4c-693577de283b/065971b9-0f1c-4434-bc4c-693577de283b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.154.0.0-66.154.95.255 69.61.0.0/17 IPv6: 2607:1a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22653 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:66:de:09:23:ad:98:d2:0e:a4:65:11:e4:45:7f:70:3f:2e: af:c0:f2:97:81:0f:9c:8a:12:2d:57:0e:6f:51:97:b2:45:ba: 1c:bd:27:0c:53:41:3e:74:04:5f:30:48:e9:cf:45:b6:32:1c: af:21:31:92:bd:2c:d8:ae:80:ea:de:bf:ab:70:c1:41:c6:65: ca:f2:7f:a4:61:7b:d6:76:8d:74:fd:12:f3:f0:40:cc:18:cd: ab:63:43:cc:94:f6:bd:4e:e9:a9:c9:8a:da:6a:30:e7:52:33: 53:49:6f:5c:7e:fe:fd:9e:ff:4a:97:12:cb:60:3d:84:ea:80: 17:0b:d0:0a:ea:87:4a:74:8f:a0:53:d6:84:a0:db:b4:15:a0: 4e:69:93:3e:5b:78:f1:0b:ec:5f:16:f0:7e:78:a2:4e:c2:15: c3:66:bf:0b:4f:d2:9a:16:08:84:dd:c9:01:29:94:83:7d:c3: c6:6c:b2:38:51:e1:36:e2:4a:0b:2e:97:0c:eb:55:ba:7a:c6: 3b:36:36:02:a5:c8:b5:d5:bd:98:4f:e1:f2:a7:6f:5b:9e:be: c9:06:16:9a:5e:ce:ff:1a:3e:1a:a3:e7:46:e8:ed:86:18:74: 97:3e:3c:27:92:5f:16:0b:f7:82:9d:c8:32:95:d6:e7:cd:2b: 24:da:74:69 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE5cC1PKG15Ua79zQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjAwMDU0MloXDTI4MTAwNDAwMDU0MlowLzEtMCsGA1UEAxMk MDY1OTcxYjktMGYxYy00NDM0LWJjNGMtNjkzNTc3ZGUyODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqC9easTduAriUmIvqinb67KjmnkPdhM9OlI F+rMfg3hsGi9PTm5WYbqcvUY4x+GrFe+xosTTsTu0jkxrXeX9NXDOCIxn6xKzxew PNCrv8NxdG8Ot9Kr4nHwVavqhlS9fvvCMipHV+OBtHoLT0EE6NDAJrKHCxJA0u/L zPJNumnc1+GTy2ay1JRo/p9Iy1LyuWWpsAATFw47KnWKruWDF9k2/RLYe/kJeG5g yejdi3wBmvP2wThDZfguOFPZVWNKwX3cBBgp0r6/ulySfa5C0jQuzVN+2Ki/y9QN gse4gufxzSxi7dk7hFDbL6UYiXXMBYq6+PQiy5B+qr8QvlAE1wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFB3Yepi5CyLk9M+oSwkGIGNFQ3FiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w NjU5NzFiOS0wZjFjLTQ0MzQtYmM0Yy02OTM1NzdkZTI4M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzA2NTk3MWI5LTBmMWMtNDQzNC1i YzRjLTY5MzU3N2RlMjgzYi8wNjU5NzFiOS0wZjFjLTQ0MzQtYmM0Yy02OTM1Nzdk ZTI4M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBkEAgABMBMwCwMDAUKaAwQFQppAAwQHRT0AMA0EAgACMAcDBQAm BxoAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlh9MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMZm3gkjrZjS DqRlEeRFf3A/Lq/A8peBD5yKEi1XDm9Rl7JFuhy9JwxTQT50BF8wSOnPRbYyHK8h MZK9LNiugOrev6twwUHGZcryf6Rhe9Z2jXT9EvPwQMwYzatjQ8yU9r1O6anJitpq MOdSM1NJb1x+/v2e/0qXEstgPYTqgBcL0Arqh0p0j6BT1oSg27QVoE5pkz5bePEL 7F8W8H54ok7CFcNmvwtP0poWCITdyQEplIN9w8ZssjhR4TbiSgsulwzrVbp6xjs2 NgKlyLXVvZhP4fKnb1uevskGFppezv8aPhqj50bo7YYYdJc+PCeSXxYL94KdyDKV 1ufNKyTadGk= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:42 2026 by rpki-client