$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20.cer File: 0f75debb-24cd-4c8a-a64c-c330e9155a20.cer (raw, json) Hash identifier: Ls/GaqnbkJ/LoLUYS9CxZ9UGpN8HHknHczMzNZZzL/I= Subject key identifier: 8E:6B:5F:03:34:6B:7A:F8:9D:F7:9A:FB:19:02:98:FB:71:0C:FA:03 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E69C5EAE075A5A38B2F32653C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/0f75debb-24cd-4c8a-a64c-c330e9155a20.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 22:07:10 +0000 Certificate not after: Sun 08 Oct 2028 22:07:10 +0000 Subordinate resources: AS: 33152 IP: 216.158.240.0/20 IP: 2607:f768::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:c5:ea:e0:75:a5:a3:8b:2f:32:65:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 6 22:07:10 2026 GMT Not After : Oct 8 22:07:10 2028 GMT Subject: CN=0f75debb-24cd-4c8a-a64c-c330e9155a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:64:c1:da:3a:59:3e:91:d4:b8:89:c4:eb: be:71:24:4c:ac:66:b3:f5:6c:0d:53:1b:6a:c1:da: e2:f7:29:f6:28:0e:f7:cd:44:5d:f4:87:a6:60:67: 9f:30:11:ba:d6:0a:05:8a:a3:f6:ae:43:58:c9:a5: a8:69:e6:fb:8f:fb:a1:f4:1a:49:0c:85:4e:08:1e: 32:12:6d:14:3c:61:d2:87:c6:75:84:90:8d:60:46: 64:61:fe:e9:44:35:1d:d1:86:c4:dd:d7:c9:8e:bf: 67:32:2a:0c:43:7b:08:f2:af:38:35:c6:fc:dc:c0: 1b:1a:74:0e:34:75:ff:97:5b:b2:7c:68:3a:65:db: e3:92:8d:ba:6e:d1:d3:75:35:fd:66:57:d2:a4:b7: 73:ba:3f:c1:67:83:7c:25:0b:dd:84:96:45:70:c1: 0e:ff:e0:2e:3c:a2:d8:e8:6a:1f:a8:1a:42:7e:98: e9:f0:6c:66:47:aa:f8:cf:6d:88:4d:a5:34:f3:47: a6:70:25:a5:13:9b:be:31:3f:6a:f7:1e:fe:05:19: 53:81:17:90:6a:20:c4:14:56:bb:3e:42:41:fc:49: 29:4b:a1:bf:b4:9a:0b:9e:85:0c:97:41:b9:a2:f0: 52:d8:7f:75:79:06:93:02:69:2b:98:8a:0e:a1:6b: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:5F:03:34:6B:7A:F8:9D:F7:9A:FB:19:02:98:FB:71:0C:FA:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0f75debb-24cd-4c8a-a64c-c330e9155a20/0f75debb-24cd-4c8a-a64c-c330e9155a20.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 216.158.240.0/20 IPv6: 2607:f768::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33152 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ac:0a:b8:01:fe:e6:15:1f:82:f5:52:d2:a4:a6:1a:e5:39: 09:18:0f:c4:c9:ea:04:dc:ca:9a:9d:43:93:f7:9c:0f:50:48: d4:5d:d4:e8:b4:fb:f1:19:51:47:85:45:59:34:55:d7:d8:d9: 07:2a:39:52:bd:ee:75:a8:8b:6b:ce:93:c3:c6:39:7b:79:a1: be:b9:15:5b:a3:03:83:91:d1:cc:6c:74:52:09:f2:53:31:da: fc:e9:88:65:cf:32:d2:a4:73:62:97:56:d8:8a:83:d0:38:46: 92:ad:a5:06:4d:a3:5f:8c:78:39:5c:d8:27:f2:78:59:c3:68: b0:8a:a3:dc:a3:8e:d1:a6:a1:e5:5d:ff:6c:3e:34:2c:51:b4: 71:28:cc:ed:d5:a3:b8:d5:d6:2b:83:5a:5a:3e:70:51:84:07: 21:f7:42:7a:32:9f:6a:f9:41:35:3d:4b:5f:68:37:84:c2:74: b1:9c:09:b6:d8:1f:23:92:69:02:fa:a8:c4:f3:0f:d9:f4:16: 3c:3e:85:59:65:42:3e:20:bf:20:b5:f9:b2:9d:49:6c:d5:ce: 5b:d7:b2:c2:6c:59:df:eb:5b:37:38:a6:ea:f0:fe:09:2a:d2: d0:37:66:66:4b:d7:3b:73:7b:2a:cf:95:bb:ba:54:e3:cb:cb: a7:a6:08:ec -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5pxergdaWjiy8yZTwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNjIyMDcxMFoXDTI4MTAwODIyMDcxMFowLzEtMCsGA1UEAxMk MGY3NWRlYmItMjRjZC00YzhhLWE2NGMtYzMzMGU5MTU1YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE1kwdo6WT6R1LiJxOu+cSRMrGaz9WwNUxtq wdri9yn2KA73zURd9IemYGefMBG61goFiqP2rkNYyaWoaeb7j/uh9BpJDIVOCB4y Em0UPGHSh8Z1hJCNYEZkYf7pRDUd0YbE3dfJjr9nMioMQ3sI8q84Ncb83MAbGnQO NHX/l1uyfGg6Zdvjko26btHTdTX9ZlfSpLdzuj/BZ4N8JQvdhJZFcMEO/+AuPKLY 6GofqBpCfpjp8GxmR6r4z22ITaU080emcCWlE5u+MT9q9x7+BRlTgReQaiDEFFa7 PkJB/EkpS6G/tJoLnoUMl0G5ovBS2H91eQaTAmkrmIoOoWuDdwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFI5rXwM0a3r4nfea+xkCmPtxDPoDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w Zjc1ZGViYi0yNGNkLTRjOGEtYTY0Yy1jMzMwZTkxNTVhMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBmNzVkZWJiLTI0Y2QtNGM4YS1h NjRjLWMzMzBlOTE1NWEyMC8wZjc1ZGViYi0yNGNkLTRjOGEtYTY0Yy1jMzMwZTkx NTVhMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATYnvAwDQQCAAIwBwMFACYH92gwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKWsCrgB/uYVH4L1UtKkphrlOQkY D8TJ6gTcypqdQ5P3nA9QSNRd1Oi0+/EZUUeFRVk0VdfY2QcqOVK97nWoi2vOk8PG OXt5ob65FVujA4OR0cxsdFIJ8lMx2vzpiGXPMtKkc2KXVtiKg9A4RpKtpQZNo1+M eDlc2CfyeFnDaLCKo9yjjtGmoeVd/2w+NCxRtHEozO3Vo7jV1iuDWlo+cFGEByH3 Qnoyn2r5QTU9S19oN4TCdLGcCbbYHyOSaQL6qMTzD9n0Fjw+hVllQj4gvyC1+bKd SWzVzlvXssJsWd/rWzc4purw/gkq0tA3ZmZL1ztzeyrPlbu6VOPLy6emCOw= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:38 2026 by rpki-client