$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07dec3d7-b48c-43a7-8c52-f69a64b2f492.cer File: 07dec3d7-b48c-43a7-8c52-f69a64b2f492.cer (raw, json) Hash identifier: ih19JkQSfkN2JcNsxMGwlgEfZdPGJuqCOYAK1/uDGDA= Subject key identifier: D5:69:24:1A:58:22:51:36:EC:65:79:EE:4A:F0:89:CB:D1:65:F8:F7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E68C8C2A42773C8DFE9251480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07dec3d7-b48c-43a7-8c52-f69a64b2f492/07dec3d7-b48c-43a7-8c52-f69a64b2f492.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07dec3d7-b48c-43a7-8c52-f69a64b2f492/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 13:37:05 +0000 Certificate not after: Sun 08 Oct 2028 13:37:05 +0000 Subordinate resources: AS: 32096 AS: 33566 IP: 162.81.0.0/16 IP: 204.238.198.0/24 IP: 2606:83c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:c8:c2:a4:27:73:c8:df:e9:25:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 6 13:37:05 2026 GMT Not After : Oct 8 13:37:05 2028 GMT Subject: CN=07dec3d7-b48c-43a7-8c52-f69a64b2f492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ec:5d:4c:2a:35:c6:29:a9:4c:c8:2e:d5:dd: 2c:bd:75:ec:d0:01:bb:f8:80:53:3a:ce:c3:cb:e3: 6b:34:0e:fd:ea:a8:35:92:9e:92:89:71:16:98:a3: 20:3b:b3:a4:4f:8d:dd:02:e6:26:87:1c:d8:ad:2d: 90:6c:e9:57:b8:cd:f5:6d:25:9f:f1:8d:a4:fe:56: ef:cf:f3:a2:d2:46:66:6f:8a:f1:de:08:67:1b:17: 54:f0:78:7c:91:38:50:0b:f8:6b:3c:22:17:d5:26: 38:78:c4:8e:eb:7f:31:28:03:b8:de:61:b6:7f:2f: 5a:aa:b6:2b:f9:c9:50:04:7f:31:c4:b0:7d:4a:a6: 20:bf:8e:f5:85:c5:2a:5f:23:fa:d0:1e:4c:06:32: 4c:65:a1:8c:aa:73:42:3f:68:10:80:df:7e:e4:aa: f0:e9:33:a2:88:b4:20:5e:2f:d7:ce:c3:90:f1:98: 62:36:53:b1:b1:ec:67:04:31:ae:cf:9e:d8:e5:05: 28:4a:91:58:76:e6:54:86:06:11:46:e9:a8:c3:13: 77:bc:fa:02:d0:d9:8a:c3:30:12:59:9a:0b:e4:72: 65:81:52:46:f9:7d:c3:14:93:ba:fc:1d:00:9b:9e: dc:e1:87:98:4f:24:0b:62:72:bf:6d:8a:c8:c2:b7: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:69:24:1A:58:22:51:36:EC:65:79:EE:4A:F0:89:CB:D1:65:F8:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07dec3d7-b48c-43a7-8c52-f69a64b2f492/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/07dec3d7-b48c-43a7-8c52-f69a64b2f492/07dec3d7-b48c-43a7-8c52-f69a64b2f492.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 162.81.0.0/16 204.238.198.0/24 IPv6: 2606:83c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32096 33566 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:34:07:8a:19:bb:b3:36:82:f3:9c:ad:09:b2:4c:51:d5:ce: de:5c:d2:39:ab:df:98:3e:56:73:8c:85:2a:fc:c2:40:2d:da: 1d:05:9b:c8:fa:c7:ed:6a:23:20:6f:3d:a6:94:68:ad:01:c7: f2:c1:1a:ef:f7:4a:e2:cb:a3:82:ae:0a:01:b2:82:7f:40:c2: ca:0e:01:fe:89:c3:6b:49:a8:3a:0d:df:ff:80:b4:b0:b6:61: 0e:12:fe:ff:e4:2a:54:26:4b:d1:42:c4:d0:e6:78:7b:b5:26: d0:0f:8c:c2:78:ff:d5:bb:58:cf:af:6d:95:fe:c3:69:51:50: d1:40:11:0a:fe:24:1b:33:53:fc:7b:32:8a:8d:b8:d1:c3:d7: 48:ee:b8:54:c1:68:53:f3:59:d4:26:4a:ff:08:a7:74:4b:81: e7:4b:1a:f7:93:03:88:74:2a:a4:bb:03:2f:8d:30:a5:c1:2a: e3:84:0e:d7:2c:62:ed:e4:35:9d:d8:6e:3c:2c:75:98:4e:d5: cc:ec:65:a8:bb:d9:fb:80:8f:ba:0b:29:87:cd:f2:af:e2:f0: 80:15:12:7b:fd:6c:9d:2c:3e:11:62:72:00:df:68:f8:40:7a: ff:0c:06:a3:4e:2a:ca:8c:8a:ca:37:d7:e3:da:5e:bd:47:d2: cf:5d:0c:9f -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWE5oyMKkJ3PI3+klFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNjEzMzcwNVoXDTI4MTAwODEzMzcwNVowLzEtMCsGA1UEAxMk MDdkZWMzZDctYjQ4Yy00M2E3LThjNTItZjY5YTY0YjJmNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluxdTCo1ximpTMgu1d0svXXs0AG7+IBTOs7D y+NrNA796qg1kp6SiXEWmKMgO7OkT43dAuYmhxzYrS2QbOlXuM31bSWf8Y2k/lbv z/Oi0kZmb4rx3ghnGxdU8Hh8kThQC/hrPCIX1SY4eMSO638xKAO43mG2fy9aqrYr +clQBH8xxLB9SqYgv471hcUqXyP60B5MBjJMZaGMqnNCP2gQgN9+5Krw6TOiiLQg Xi/XzsOQ8ZhiNlOxsexnBDGuz57Y5QUoSpFYduZUhgYRRumowxN3vPoC0NmKwzAS WZoL5HJlgVJG+X3DFJO6/B0Am57c4YeYTyQLYnK/bYrIwrcRrwIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFNVpJBpYIlE27GV57krwicvRZfj3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w N2RlYzNkNy1iNDhjLTQzYTctOGM1Mi1mNjlhNjRiMmY0OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzA3ZGVjM2Q3LWI0OGMtNDNhNy04 YzUyLWY2OWE2NGIyZjQ5Mi8wN2RlYzNkNy1iNDhjLTQzYTctOGM1Mi1mNjlhNjRi MmY0OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMBEEAgABMAsDAwCiUQMEAMzuxjANBAIAAjAHAwUAJgaDwDAeBggr BgEFBQcBCAEB/wQPMA2gCzAJAgJ9YAIDAIMeMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALQ0B4oZu7M2gvOc rQmyTFHVzt5c0jmr35g+VnOMhSr8wkAt2h0Fm8j6x+1qIyBvPaaUaK0Bx/LBGu/3 SuLLo4KuCgGygn9AwsoOAf6Jw2tJqDoN3/+AtLC2YQ4S/v/kKlQmS9FCxNDmeHu1 JtAPjMJ4/9W7WM+vbZX+w2lRUNFAEQr+JBszU/x7MoqNuNHD10juuFTBaFPzWdQm Sv8Ip3RLgedLGveTA4h0KqS7Ay+NMKXBKuOEDtcsYu3kNZ3YbjwsdZhO1czsZai7 2fuAj7oLKYfN8q/i8IAVEnv9bJ0sPhFicgDfaPhAev8MBqNOKsqMiso31+PaXr1H 0s9dDJ8= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:42 2026 by rpki-client