$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8.cer File: 0a272229-8b75-460f-8428-1997894397c8.cer (raw, json) Hash identifier: yMH7MndkqmqVC1fS9QjtHxqMFKf8aIDq3yvykxJy2KE= Subject key identifier: C1:83:F9:43:BE:EE:AB:DD:E9:98:38:4E:B9:30:82:68:BC:A7:8B:03 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E28DD0F6D62BBA3382D7C10C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Jun 2026 16:06:15 +0000 Certificate not after: Fri 15 Sep 2028 16:06:15 +0000 Subordinate resources: AS: 17279 IP: 208.66.88.0/22 IP: 208.69.236.0/22 IP: 208.86.192.0/22 IP: 2605:a440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:dd:0f:6d:62:bb:a3:38:2d:7c:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 13 16:06:15 2026 GMT Not After : Sep 15 16:06:15 2028 GMT Subject: CN=0a272229-8b75-460f-8428-1997894397c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:00:ab:87:33:79:0f:6c:e7:88:83:c1:16:d3: d2:6a:fb:83:d2:7c:27:ad:2e:33:ba:36:95:c7:63: ae:c1:3a:ff:de:af:a3:73:a8:7a:6b:a6:3b:e1:52: 9e:14:3a:6b:86:11:04:f4:1d:7a:ff:d5:3b:85:d7: d8:dc:32:98:fc:ab:b7:43:82:34:ac:73:93:1b:c4: 14:80:fb:75:f7:c2:92:bc:79:15:9d:01:38:ef:70: 0c:df:af:02:e4:c7:d7:dc:59:89:63:80:41:5a:08: f7:d9:5f:97:4c:54:9e:91:87:f1:26:28:65:f3:2a: 53:0b:ad:7a:e5:77:07:bd:cb:80:30:69:61:5b:6a: d9:5c:47:51:bd:23:2e:a3:55:10:6c:1e:7b:20:fc: 01:cd:3c:49:c1:ee:b9:b8:22:22:59:98:17:96:52: a7:c6:e7:73:da:dd:3b:fa:9a:01:c7:ce:4f:a0:ba: bc:b7:8b:89:a8:cb:e8:10:70:41:c6:93:ab:33:93: cc:d2:cc:c1:b3:d0:b9:63:7c:c8:5c:5b:ba:a9:f4: 69:e4:e0:8f:8b:56:ba:88:e8:c2:9f:98:f1:81:e5: 58:e4:12:d9:9a:c8:44:bb:df:49:28:87:14:5a:7c: e0:b1:4b:b9:7a:3c:3f:2f:c4:91:51:b6:da:d6:40: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:F9:43:BE:EE:AB:DD:E9:98:38:4E:B9:30:82:68:BC:A7:8B:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.66.88.0/22 208.69.236.0/22 208.86.192.0/22 IPv6: 2605:a440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f7:02:34:57:63:02:66:ed:af:28:86:8e:83:87:76:2d:34: 16:d3:3b:29:59:e7:2f:cf:c8:c8:e1:24:c5:c2:d3:e1:6d:66: 18:c9:7d:4a:8d:5b:c8:16:57:02:28:bd:84:3f:ac:7c:e6:eb: 08:2d:09:39:e3:8d:67:e6:a5:d8:b9:72:42:52:4f:d5:81:23: 90:40:f2:9f:eb:5e:78:7a:b0:58:04:7c:b3:59:33:c1:4d:9e: 78:70:18:bb:bd:69:9b:25:ff:c2:88:ae:bd:8e:67:69:27:da: 07:be:2a:05:81:a2:46:54:7c:10:f7:e1:32:de:83:87:e8:d9: 30:b5:97:f6:fe:e1:e2:aa:34:55:2d:09:2b:f5:80:7b:7e:5d: 60:58:1e:fe:ad:ad:33:c3:58:d2:44:a8:73:20:9e:3c:e0:a7: 45:12:12:57:ed:1f:1b:45:75:24:1e:66:0a:3c:03:69:cf:48: 40:42:54:4e:97:49:a0:bf:de:5c:03:a4:6a:e2:21:aa:66:c2: 36:7a:57:9e:67:92:77:c7:e5:c9:b8:2f:cd:94:7d:6d:b2:37: bb:7f:77:97:c5:fc:9d:c4:54:32:e6:9f:70:8a:af:21:68:fd: dd:57:c8:86:d1:d7:6f:b6:3c:6e:bc:36:f3:a4:3d:e9:a3:41: ab:c1:b2:6e -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE4o3Q9tYrujOC18EMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxMzE2MDYxNVoXDTI4MDkxNTE2MDYxNVowLzEtMCsGA1UEAxMk MGEyNzIyMjktOGI3NS00NjBmLTg0MjgtMTk5Nzg5NDM5N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQCrhzN5D2zniIPBFtPSavuD0nwnrS4zujaV x2OuwTr/3q+jc6h6a6Y74VKeFDprhhEE9B16/9U7hdfY3DKY/Ku3Q4I0rHOTG8QU gPt198KSvHkVnQE473AM368C5MfX3FmJY4BBWgj32V+XTFSekYfxJihl8ypTC616 5XcHvcuAMGlhW2rZXEdRvSMuo1UQbB57IPwBzTxJwe65uCIiWZgXllKnxudz2t07 +poBx85PoLq8t4uJqMvoEHBBxpOrM5PM0szBs9C5Y3zIXFu6qfRp5OCPi1a6iOjC n5jxgeVY5BLZmshEu99JKIcUWnzgsUu5ejw/L8SRUbba1kCqjwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFMGD+UO+7qvd6Zg4Trkwgmi8p4sDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w YTI3MjIyOS04Yjc1LTQ2MGYtODQyOC0xOTk3ODk0Mzk3YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBhMjcyMjI5LThiNzUtNDYwZi04 NDI4LTE5OTc4OTQzOTdjOC8wYTI3MjIyOS04Yjc1LTQ2MGYtODQyOC0xOTk3ODk0 Mzk3YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBALQQlgDBALQRewDBALQVsAwDQQCAAIwBwMFACYF pEAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICQ38wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALPcCNFdjAmbt ryiGjoOHdi00FtM7KVnnL8/IyOEkxcLT4W1mGMl9So1byBZXAii9hD+sfObrCC0J OeONZ+al2LlyQlJP1YEjkEDyn+teeHqwWAR8s1kzwU2eeHAYu71pmyX/woiuvY5n aSfaB74qBYGiRlR8EPfhMt6Dh+jZMLWX9v7h4qo0VS0JK/WAe35dYFge/q2tM8NY 0kSocyCePOCnRRISV+0fG0V1JB5mCjwDac9IQEJUTpdJoL/eXAOkauIhqmbCNnpX nmeSd8flybgvzZR9bbI3u393l8X8ncRUMuafcIqvIWj93VfIhtHXb7Y8brw286Q9 6aNBq8Gybg== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:48 2026 by rpki-client