$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d18a27a-bcb4-4075-a1ef-d8e2136943e0.cer File: 1d18a27a-bcb4-4075-a1ef-d8e2136943e0.cer (raw, json) Hash identifier: LfGyZLxl6p4IGZKL7N+t4dqH9e3cr7BHma4zvQqzqW4= Subject key identifier: 2F:89:62:1B:01:C7:20:DC:24:FF:AA:CB:60:49:EB:FA:05:3A:E1:BC Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6F065ED9A32983BC03C3CC60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d18a27a-bcb4-4075-a1ef-d8e2136943e0/1d18a27a-bcb4-4075-a1ef-d8e2136943e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d18a27a-bcb4-4075-a1ef-d8e2136943e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 19:16:04 +0000 Certificate not after: Tue 10 Oct 2028 19:16:04 +0000 Subordinate resources: AS: 62744 IP: 23.130.104.0/22 IP: 204.8.96.0/22 IP: 2620:7:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:06:5e:d9:a3:29:83:bc:03:c3:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 8 19:16:04 2026 GMT Not After : Oct 10 19:16:04 2028 GMT Subject: CN=1d18a27a-bcb4-4075-a1ef-d8e2136943e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:31:6e:37:68:06:d2:0a:18:86:db:52:4b:e1: f3:18:f7:96:6b:84:d1:9b:92:ae:96:b4:1a:e1:dd: 8f:4f:39:b3:d0:c8:4c:a7:71:b0:81:e3:a1:2b:40: 0a:99:35:81:2e:b1:1a:96:24:75:9a:58:e9:16:73: 28:8f:9a:9c:e0:1b:31:ae:c1:da:71:8b:21:74:f0: e5:b7:1f:43:62:cd:04:a3:c6:83:81:c3:e9:d9:e6: 01:d3:81:cf:aa:94:3c:33:92:38:c4:78:c8:c3:38: 6c:27:0f:0c:c5:47:e1:51:04:dd:52:4f:eb:47:45: 69:62:19:98:e7:3b:1e:86:7a:ea:4e:0f:34:a7:ca: 63:6b:b6:bc:8f:26:ca:9f:da:a3:73:2b:bd:64:dd: 8b:b3:a2:74:70:88:bd:57:e8:74:eb:82:9b:c0:70: cb:ab:94:ea:2e:58:66:b1:40:7d:7c:0c:a2:68:fc: b9:ed:68:6d:57:f0:b6:4b:33:4d:95:6a:a6:19:ea: b8:37:2c:c1:0c:55:10:3f:24:fa:80:c0:33:f3:95: 58:49:19:78:f2:59:a4:80:6d:ff:84:c4:f0:38:cb: 60:41:10:b5:1f:33:bc:b1:f3:16:78:51:ef:bb:58: 61:ee:88:46:2f:cc:98:34:86:34:cd:ca:12:61:30: 98:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:89:62:1B:01:C7:20:DC:24:FF:AA:CB:60:49:EB:FA:05:3A:E1:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d18a27a-bcb4-4075-a1ef-d8e2136943e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d18a27a-bcb4-4075-a1ef-d8e2136943e0/1d18a27a-bcb4-4075-a1ef-d8e2136943e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.130.104.0/22 204.8.96.0/22 IPv6: 2620:7:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62744 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1e:6c:4c:52:fd:f3:16:2a:ad:e4:53:26:1a:15:bd:36:f5: 52:51:0c:8f:2a:93:d0:f3:04:0f:f9:b3:4f:a8:ca:a8:27:9b: 8d:8b:a7:de:83:32:ef:31:aa:6a:2f:cb:f2:61:16:f5:ef:08: da:bd:c1:e6:b2:0e:ce:34:53:f4:1e:26:79:06:0b:40:0b:0b: 03:71:b7:92:c7:83:ca:c6:91:6d:01:98:48:bf:8c:06:bc:3d: c8:0b:c3:24:58:20:32:78:b9:01:17:01:5c:72:c9:84:39:eb: 15:06:65:b6:3a:d1:45:c0:c0:e5:30:cf:35:ca:22:00:d3:bd: b4:74:a9:6e:e9:c5:d6:e8:4a:45:7e:41:43:87:30:32:71:34: ea:d0:a2:9c:22:28:49:28:ac:59:87:88:a3:bc:81:50:9f:d7: 5f:29:41:6a:ca:b3:64:87:e3:ed:0f:f7:a8:74:ce:02:2b:6a: 68:ae:59:c5:42:5b:58:cb:f9:ca:42:4f:37:bb:a2:41:fb:aa: 24:46:dd:55:12:74:59:c6:f2:67:77:72:99:ea:67:2a:84:b4: 40:ed:34:68:eb:5c:de:1e:da:76:e8:c0:99:89:b9:19:46:4a: 12:b9:8d:e6:d8:9b:27:98:00:62:16:7d:09:14:42:ed:b7:5b: 22:f1:27:ff -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE5vBl7ZoymDvAPDzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwODE5MTYwNFoXDTI4MTAxMDE5MTYwNFowLzEtMCsGA1UEAxMk MWQxOGEyN2EtYmNiNC00MDc1LWExZWYtZDhlMjEzNjk0M2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDFuN2gG0goYhttSS+HzGPeWa4TRm5KulrQa 4d2PTzmz0MhMp3GwgeOhK0AKmTWBLrEaliR1mljpFnMoj5qc4BsxrsHacYshdPDl tx9DYs0Eo8aDgcPp2eYB04HPqpQ8M5I4xHjIwzhsJw8MxUfhUQTdUk/rR0VpYhmY 5zsehnrqTg80p8pja7a8jybKn9qjcyu9ZN2Ls6J0cIi9V+h064KbwHDLq5TqLlhm sUB9fAyiaPy57WhtV/C2SzNNlWqmGeq4NyzBDFUQPyT6gMAz85VYSRl48lmkgG3/ hMTwOMtgQRC1HzO8sfMWeFHvu1hh7ohGL8yYNIY0zcoSYTCYwQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFC+JYhsBxyDcJP+qy2BJ6/oFOuG8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8x ZDE4YTI3YS1iY2I0LTQwNzUtYTFlZi1kOGUyMTM2OTQzZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzFkMThhMjdhLWJjYjQtNDA3NS1h MWVmLWQ4ZTIxMzY5NDNlMC8xZDE4YTI3YS1iY2I0LTQwNzUtYTFlZi1kOGUyMTM2 OTQzZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAIXgmgDBALMCGAwDwQCAAIwCQMHBCYgAAdgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA9RgwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOB5sTFL98xYqreRT JhoVvTb1UlEMjyqT0PMED/mzT6jKqCebjYun3oMy7zGqai/L8mEW9e8I2r3B5rIO zjRT9B4meQYLQAsLA3G3kseDysaRbQGYSL+MBrw9yAvDJFggMni5ARcBXHLJhDnr FQZltjrRRcDA5TDPNcoiANO9tHSpbunF1uhKRX5BQ4cwMnE06tCinCIoSSisWYeI o7yBUJ/XXylBasqzZIfj7Q/3qHTOAitqaK5ZxUJbWMv5ykJPN7uiQfuqJEbdVRJ0 WcbyZ3dymepnKoS0QO00aOtc3h7adujAmYm5GUZKErmN5tibJ5gAYhZ9CRRC7bdb IvEn/w== -----END CERTIFICATE-----Generated at Sat Jul 18 03:24:10 2026 by rpki-client