$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f24c86d-0e30-4386-b496-ce5642fe10e2.cer File: 0f24c86d-0e30-4386-b496-ce5642fe10e2.cer (raw, json) Hash identifier: ttlwrRtNxMd9CNCBRMmQ8uyyESuWGs28PheP8TQlK/0= Subject key identifier: 02:52:65:53:E7:50:4F:8E:BB:FC:A6:AD:DB:57:DB:01:73:F1:65:09 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6B6E5C2CA984406498197C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f24c86d-0e30-4386-b496-ce5642fe10e2/0f24c86d-0e30-4386-b496-ce5642fe10e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f24c86d-0e30-4386-b496-ce5642fe10e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 12:22:22 +0000 Certificate not after: Mon 09 Oct 2028 12:22:22 +0000 Subordinate resources: AS: 55104 IP: 198.179.220.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:6e:5c:2c:a9:84:40:64:98:19:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 12:22:22 2026 GMT Not After : Oct 9 12:22:22 2028 GMT Subject: CN=0f24c86d-0e30-4386-b496-ce5642fe10e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:51:c8:ee:8d:47:72:de:26:d4:e9:52:ec: af:99:55:79:ed:b8:ea:7a:15:70:cd:a5:9a:9f:3b: bc:2b:dd:4d:b4:6b:e9:a1:02:34:03:1d:1d:e8:71: 4c:d2:c0:e0:54:60:52:f4:de:35:59:6e:c3:15:6b: 9d:ef:e6:ae:8e:5e:b6:1f:41:4c:07:1b:05:b6:71: 8f:22:04:24:73:ee:3a:44:9d:a7:09:50:71:dd:07: 38:a6:39:5e:ab:b4:a7:0a:c3:ba:57:a0:48:15:10: 70:4a:a8:6b:d1:f3:e7:05:2a:60:b2:fc:ad:6d:81: ff:b5:78:39:7f:25:71:29:4b:a0:e7:bc:e4:2c:a7: bd:be:cc:47:cf:8d:b1:17:61:d2:3f:4c:ab:75:50: a1:a2:8c:2a:8b:6f:f4:aa:9a:aa:6b:a2:15:5a:2c: 7a:8c:17:e9:87:52:14:5c:08:de:67:9b:ec:cd:59: 54:90:19:f2:4a:e6:39:6c:55:a4:ca:93:fa:ee:98: 08:08:3e:de:89:2c:48:33:ef:6c:d7:67:70:8a:1d: 86:4e:9a:e7:1d:a6:64:6e:8e:43:b4:e7:12:0c:55: 53:57:5a:14:eb:41:87:9b:da:46:19:1b:47:9f:06: 97:69:ec:28:59:02:c7:26:d6:b7:84:ef:af:1e:0e: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:52:65:53:E7:50:4F:8E:BB:FC:A6:AD:DB:57:DB:01:73:F1:65:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f24c86d-0e30-4386-b496-ce5642fe10e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f24c86d-0e30-4386-b496-ce5642fe10e2/0f24c86d-0e30-4386-b496-ce5642fe10e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.179.220.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55104 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d2:df:ab:9b:77:c8:c6:56:c1:20:20:ff:a3:69:7f:91:ea: f3:ac:c3:b5:17:27:2d:10:64:c6:0d:84:47:69:4f:45:1e:c8: 3b:68:ae:60:45:e0:67:98:dd:d9:62:10:04:3f:c9:ff:b0:92: 76:d4:ac:97:e8:83:14:83:14:99:fa:58:06:4c:d6:72:6f:07: a4:dd:37:bc:ef:24:69:31:9c:47:c3:23:f9:39:6f:0f:89:5c: 90:18:14:18:a5:5d:13:90:4b:28:36:7f:00:e0:17:da:a4:43: 2b:c4:5f:32:04:10:ef:dd:ca:6c:02:9b:00:79:6d:bb:69:bf: b4:24:7d:5a:18:3e:8c:36:6e:4a:50:5d:08:ce:4b:e4:10:95: a8:4c:42:b4:b6:1e:ed:f6:09:79:42:27:93:83:3c:30:4b:aa: 2d:0a:3c:36:4b:41:f5:eb:76:15:43:99:dc:20:6c:a2:01:34: 77:05:7c:10:51:03:02:e4:ad:aa:3b:3f:10:13:e9:23:fe:d3: 1f:14:2b:e8:42:50:8b:39:5f:c7:9e:d7:43:da:50:ca:e5:eb: 19:b5:1d:7e:52:bd:40:47:d4:08:db:cc:cb:13:28:95:6d:4d: 0f:45:f2:dd:13:53:e1:18:34:77:f4:c1:4a:62:05:75:18:c0: e2:58:95:d4 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5rblwsqYRAZJgZfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzEyMjIyMloXDTI4MTAwOTEyMjIyMlowLzEtMCsGA1UEAxMk MGYyNGM4NmQtMGUzMC00Mzg2LWI0OTYtY2U1NjQyZmUxMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIhRyO6NR3LeJtTpUuyvmVV57bjqehVwzaWa nzu8K91NtGvpoQI0Ax0d6HFM0sDgVGBS9N41WW7DFWud7+aujl62H0FMBxsFtnGP IgQkc+46RJ2nCVBx3Qc4pjleq7SnCsO6V6BIFRBwSqhr0fPnBSpgsvytbYH/tXg5 fyVxKUug57zkLKe9vsxHz42xF2HSP0yrdVChoowqi2/0qpqqa6IVWix6jBfph1IU XAjeZ5vszVlUkBnySuY5bFWkypP67pgICD7eiSxIM+9s12dwih2GTprnHaZkbo5D tOcSDFVTV1oU60GHm9pGGRtHnwaXaewoWQLHJta3hO+vHg5VNwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAJSZVPnUE+Ou/ymrdtX2wFz8WUJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w ZjI0Yzg2ZC0wZTMwLTQzODYtYjQ5Ni1jZTU2NDJmZTEwZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBmMjRjODZkLTBlMzAtNDM4Ni1i NDk2LWNlNTY0MmZlMTBlMi8wZjI0Yzg2ZC0wZTMwLTQzODYtYjQ5Ni1jZTU2NDJm ZTEwZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGs9wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANdAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF/S36ubd8jGVsEgIP+jaX+R6vOsw7UXJy0QZMYNhEdpT0Ue yDtormBF4GeY3dliEAQ/yf+wknbUrJfogxSDFJn6WAZM1nJvB6TdN7zvJGkxnEfD I/k5bw+JXJAYFBilXROQSyg2fwDgF9qkQyvEXzIEEO/dymwCmwB5bbtpv7QkfVoY Pow2bkpQXQjOS+QQlahMQrS2Hu32CXlCJ5ODPDBLqi0KPDZLQfXrdhVDmdwgbKIB NHcFfBBRAwLkrao7PxAT6SP+0x8UK+hCUIs5X8ee10PaUMrl6xm1HX5SvUBH1Ajb zMsTKJVtTQ9F8t0TU+EYNHf0wUpiBXUYwOJYldQ= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:11 2026 by rpki-client