$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea.cer File: 0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea.cer (raw, json) Hash identifier: KgIBsbyuOuYdiSaQGxbHGP0NuMCAbEpAdIkc8szpNR0= Subject key identifier: B9:47:C1:8A:CC:D7:24:9D:47:F5:6F:05:1A:A1:0C:4C:65:2A:7F:78 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E370D5907E468245C0CC1FDB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea/0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Jun 2026 18:04:52 +0000 Certificate not after: Wed 20 Sep 2028 18:04:52 +0000 Subordinate resources: AS: 32699 IP: 68.169.96.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:0d:59:07:e4:68:24:5c:0c:c1:fd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 18 18:04:52 2026 GMT Not After : Sep 20 18:04:52 2028 GMT Subject: CN=0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:05:b5:85:ea:ae:3c:4d:47:89:16:4e:31: 52:37:9f:b7:3c:4c:7b:10:07:e0:9b:f8:28:bf:2f: e8:d1:ec:18:ee:34:4a:a8:c7:55:e2:13:93:24:01: a4:12:ab:06:79:86:dc:f1:b0:c8:ec:59:5b:d2:80: 3c:88:ed:35:e3:86:14:bb:9d:0c:da:ac:9e:e9:e1: dc:34:66:a2:28:4b:c4:f1:f3:ae:cb:ad:9b:e6:47: b2:b7:22:7c:c3:0d:e0:5c:38:80:50:1a:f0:0c:01: 40:e8:bf:d6:67:87:ba:b3:dc:8a:c5:d4:f3:6b:1c: 4f:ae:63:7d:21:2b:f9:88:ca:28:16:a1:05:5a:99: 6b:ee:3b:cd:b2:e6:cf:96:ab:b5:cb:b1:ca:f6:23: f0:ae:12:c0:c8:04:64:d5:1a:7d:b5:d5:f1:c7:69: 01:7b:18:0d:ff:10:8b:01:55:76:30:24:ed:58:e2: cb:f0:64:9b:da:7f:b8:95:d1:99:ed:ee:65:2a:6d: 9d:a8:fb:d6:82:ed:8b:1a:e8:83:39:a1:a9:97:0c: 14:f9:29:4b:b3:86:69:a6:80:f2:ed:18:61:bc:c9: 88:52:d1:29:03:a7:90:e4:f0:a8:98:fa:a3:b7:ae: 48:37:64:29:ee:b7:87:96:9a:b1:5b:49:b2:12:a4: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:C1:8A:CC:D7:24:9D:47:F5:6F:05:1A:A1:0C:4C:65:2A:7F:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea/0c7118e6-ba2c-4ba3-b4c6-fb318f6b9cea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 68.169.96.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32699 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:03:21:c3:e0:07:73:32:ca:0d:a9:f1:75:c1:f9:4f:c7:4e: 37:ff:8c:e5:e5:59:66:c5:3c:f7:2f:91:3c:be:13:62:2d:79: 92:06:11:dc:a6:f4:99:27:76:a2:58:20:00:f9:8a:42:0f:7c: c5:97:18:30:31:9a:d2:e2:57:23:84:09:e6:da:df:7b:c3:92: 20:32:4c:30:b5:2a:2e:4a:5b:cf:7b:3b:13:f1:79:d2:46:78: f4:d5:3a:4b:60:a3:4b:c2:5c:e7:c4:67:85:91:5a:9e:cb:66: 83:26:a3:30:ac:71:65:c1:77:64:83:e4:60:c6:94:84:4b:ab: af:75:3e:84:31:e7:a8:19:c9:d2:d8:3e:ff:e0:80:8f:49:56: 2a:82:ee:0f:96:e7:20:2e:9e:92:3b:ee:e1:24:a8:02:1e:b0: 1a:1b:7d:1b:34:4b:26:ab:bf:6b:c2:d2:5f:55:b4:5e:ad:3e: 98:fe:14:7a:89:27:8b:e5:4d:35:74:36:6e:87:56:fa:e9:63: 6b:d5:df:ae:58:cd:9e:e2:ab:8d:7c:a6:e1:7e:aa:3c:10:b0: 51:ba:78:72:6f:0d:ad:ba:cd:38:c0:cc:67:09:9d:69:53:7c: 40:09:e5:b5:28:09:00:0c:4a:91:ad:69:77:d6:b3:0e:b3:f2: 4e:e5:ef:04 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE43DVkH5GgkXAzB/bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxODE4MDQ1MloXDTI4MDkyMDE4MDQ1MlowLzEtMCsGA1UEAxMk MGM3MTE4ZTYtYmEyYy00YmEzLWI0YzYtZmIzMThmNmI5Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jEFtYXqrjxNR4kWTjFSN5+3PEx7EAfgm/go vy/o0ewY7jRKqMdV4hOTJAGkEqsGeYbc8bDI7Flb0oA8iO0144YUu50M2qye6eHc NGaiKEvE8fOuy62b5keytyJ8ww3gXDiAUBrwDAFA6L/WZ4e6s9yKxdTzaxxPrmN9 ISv5iMooFqEFWplr7jvNsubPlqu1y7HK9iPwrhLAyARk1Rp9tdXxx2kBexgN/xCL AVV2MCTtWOLL8GSb2n+4ldGZ7e5lKm2dqPvWgu2LGuiDOaGplwwU+SlLs4ZppoDy 7RhhvMmIUtEpA6eQ5PComPqjt65IN2Qp7reHlpqxW0myEqRlbQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFLlHwYrM1ySdR/VvBRqhDExlKn94MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w YzcxMThlNi1iYTJjLTRiYTMtYjRjNi1mYjMxOGY2YjljZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBjNzExOGU2LWJhMmMtNGJhMy1i NGM2LWZiMzE4ZjZiOWNlYS8wYzcxMThlNi1iYTJjLTRiYTMtYjRjNi1mYjMxOGY2 YjljZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABEqWAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC f7swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAgMhw+AHczLKDanxdcH5T8dON/+M5eVZZsU89y+RPL4TYi15 kgYR3Kb0mSd2olggAPmKQg98xZcYMDGa0uJXI4QJ5trfe8OSIDJMMLUqLkpbz3s7 E/F50kZ49NU6S2CjS8Jc58RnhZFanstmgyajMKxxZcF3ZIPkYMaUhEurr3U+hDHn qBnJ0tg+/+CAj0lWKoLuD5bnIC6ekjvu4SSoAh6wGht9GzRLJqu/a8LSX1W0Xq0+ mP4Ueokni+VNNXQ2bodW+ulja9XfrljNnuKrjXym4X6qPBCwUbp4cm8NrbrNOMDM ZwmdaVN8QAnltSgJAAxKka1pd9azDrPyTuXvBA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:01 2026 by rpki-client