$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer File: 082b5dd7-830e-4bd5-ac9d-2949ba50501f.cer (raw, json) Hash identifier: WtfX3L2VGvjUp7n98AGH8rBxLHlhPW85gLQNWF1lS88= Subject key identifier: BB:A1:24:25:0E:38:A1:8A:07:23:27:AF:C7:4F:D1:68:8B:CE:0C:D6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5ADAF271B0748370F0203AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 13:52:25 +0000 Certificate not after: Tue 03 Oct 2028 13:52:25 +0000 Subordinate resources: AS: 62672 IP: 131.143.250.0/24 IP: 2620:c4:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:da:f2:71:b0:74:83:70:f0:20:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 1 13:52:25 2026 GMT Not After : Oct 3 13:52:25 2028 GMT Subject: CN=082b5dd7-830e-4bd5-ac9d-2949ba50501f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:c0:cf:a4:52:26:a1:9b:70:a5:3f:7a:0c: d7:80:59:cd:00:07:4f:e3:04:8d:bb:87:3c:ff:9c: f2:70:d0:04:ed:3d:6b:0e:bf:b4:03:b0:3d:0d:34: da:e1:7d:99:a9:65:b7:77:6c:d0:c1:fe:af:0d:82: 4d:9a:4a:d2:0a:21:68:b5:7b:95:ff:a0:8c:0a:55: 4b:34:05:33:12:d0:c3:05:8c:a2:5e:ea:c7:66:a3: 8b:c3:b7:28:e2:3e:a9:e9:ba:7f:53:4e:ff:b6:bc: 5d:75:37:a9:6b:06:f3:f3:2e:67:78:4c:15:50:6e: da:99:00:1c:60:9f:06:8c:30:7b:49:ad:aa:60:96: 8a:58:ee:3b:0c:e1:63:2d:41:4e:47:59:44:a0:a9: b5:0f:81:88:fc:a1:17:ee:5e:05:4e:a6:ff:41:9f: 19:cf:1a:dc:4f:cf:2f:86:3b:9f:ef:3f:aa:c0:89: db:56:9d:25:92:64:94:0b:50:10:9b:6c:65:cb:d0: 9e:c3:80:50:46:16:1b:68:41:90:35:23:2e:b3:29: 22:93:2a:95:31:a5:ae:4f:63:83:d1:39:17:f7:18: 25:32:f7:36:4d:77:04:61:34:ec:f5:6d:f6:83:b2: 31:62:a7:fb:1b:86:8c:43:ef:44:81:09:a1:95:66: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A1:24:25:0E:38:A1:8A:07:23:27:AF:C7:4F:D1:68:8B:CE:0C:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/082b5dd7-830e-4bd5-ac9d-2949ba50501f/082b5dd7-830e-4bd5-ac9d-2949ba50501f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 131.143.250.0/24 IPv6: 2620:c4:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62672 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:95:7b:1e:ed:2a:42:75:18:58:1e:8f:0a:cc:cc:04:0d:f3: aa:76:5a:5f:59:ce:0e:14:e3:58:44:52:a6:57:8e:55:64:4c: aa:54:05:75:2b:e7:d6:ff:11:00:79:b8:18:fd:3a:85:ea:17: 36:e7:73:f9:c0:3a:6d:22:cf:d8:8c:dd:2d:ba:45:33:1a:97: ad:0d:99:bb:e0:82:47:1c:97:83:c8:3f:ca:75:7e:e5:ca:28: c1:c6:d9:8e:57:c6:6d:b0:c9:7c:65:11:a7:62:28:95:56:7c: 96:fe:a8:ed:fd:a2:0d:17:e6:6b:52:e1:71:a2:85:d7:70:0e: 05:f4:a4:12:a2:61:75:3f:1b:21:48:69:02:83:34:43:9b:94: c4:c5:4c:79:4b:ad:5a:81:17:56:10:99:d2:76:6c:fa:a7:f2: ec:89:0d:c3:9e:4b:fa:1b:e1:29:eb:59:60:3e:61:fd:c9:7b: 9d:9d:26:7f:dc:f8:ae:86:00:c4:5b:66:0f:b2:50:96:55:62: fa:e9:39:43:64:8d:c6:83:6e:3a:f5:d3:c5:c7:30:fb:40:59: e0:a0:38:42:87:c7:cc:97:02:6d:12:04:9f:03:73:9a:56:4d: 36:69:06:78:f9:16:ea:82:cd:60:7d:05:71:5e:cd:e2:92:86: cf:f8:62:f7 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5a2vJxsHSDcPAgOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMTEzNTIyNVoXDTI4MTAwMzEzNTIyNVowLzEtMCsGA1UEAxMk MDgyYjVkZDctODMwZS00YmQ1LWFjOWQtMjk0OWJhNTA1MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7zAz6RSJqGbcKU/egzXgFnNAAdP4wSNu4c8 /5zycNAE7T1rDr+0A7A9DTTa4X2ZqWW3d2zQwf6vDYJNmkrSCiFotXuV/6CMClVL NAUzEtDDBYyiXurHZqOLw7co4j6p6bp/U07/trxddTepawbz8y5neEwVUG7amQAc YJ8GjDB7Sa2qYJaKWO47DOFjLUFOR1lEoKm1D4GI/KEX7l4FTqb/QZ8ZzxrcT88v hjuf7z+qwInbVp0lkmSUC1AQm2xly9Cew4BQRhYbaEGQNSMusykikyqVMaWuT2OD 0TkX9xglMvc2TXcEYTTs9W32g7IxYqf7G4aMQ+9EgQmhlWY0gwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLuhJCUOOKGKByMnr8dP0WiLzgzWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w ODJiNWRkNy04MzBlLTRiZDUtYWM5ZC0yOTQ5YmE1MDUwMWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzA4MmI1ZGQ3LTgzMGUtNGJkNS1h YzlkLTI5NDliYTUwNTAxZi8wODJiNWRkNy04MzBlLTRiZDUtYWM5ZC0yOTQ5YmE1 MDUwMWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACDj/owDgQCAAIwCAMGACYgAMTgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD00DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXlXse7SpCdRhYHo8KzMwEDfOq dlpfWc4OFONYRFKmV45VZEyqVAV1K+fW/xEAebgY/TqF6hc253P5wDptIs/YjN0t ukUzGpetDZm74IJHHJeDyD/KdX7lyijBxtmOV8ZtsMl8ZRGnYiiVVnyW/qjt/aIN F+ZrUuFxooXXcA4F9KQSomF1PxshSGkCgzRDm5TExUx5S61agRdWEJnSdmz6p/Ls iQ3Dnkv6G+Ep61lgPmH9yXudnSZ/3PiuhgDEW2YPslCWVWL66TlDZI3Gg2469dPF xzD7QFngoDhCh8fMlwJtEgSfA3OaVk02aQZ4+Rbqgs1gfQVxXs3ikobP+GL3 -----END CERTIFICATE-----Generated at Mon Jul 13 14:42:08 2026 by rpki-client