$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer File: 201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer (raw, json) Hash identifier: OgRwyi/E7TDPo8dYEk/cXi7cy2OZBJNt98weRWa87l4= Subject key identifier: 92:9B:C2:A0:3E:97:0D:1B:DF:3B:73:F9:2C:B4:B3:02:89:BB:4C:C8 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E30D77B8E863A4EA59D27B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jun 2026 12:41:29 +0000 Certificate not after: Mon 18 Sep 2028 12:41:29 +0000 Subordinate resources: AS: 32888 AS: 33698 AS: 46746 AS: 396249 IP: 67.216.176.0/20 IP: 104.143.112.0/20 IP: 170.52.192.0/18 IP: 198.160.28.0/22 IP: 199.71.236.0/22 IP: 2604:33c0::/32 IP: 2605:4f80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:d7:7b:8e:86:3a:4e:a5:9d:27:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 16 12:41:29 2026 GMT Not After : Sep 18 12:41:29 2028 GMT Subject: CN=201220ff-d9b0-4de3-ae59-82fd519ff7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:7a:c4:8c:9e:42:5c:bd:27:01:a0:22:9d: b2:ad:b9:83:95:97:03:f8:52:fc:9e:52:6d:c4:b5: 57:84:4e:c3:99:6d:53:1d:c6:05:75:0f:df:1d:2a: 28:82:97:71:0e:77:dc:84:31:d4:60:d5:1f:a0:3c: ec:6a:20:88:e9:0d:a1:71:a0:d9:46:50:8f:4f:cc: e6:47:76:e5:e7:93:37:05:e4:b3:ae:75:25:0c:b5: 41:0b:6b:73:dd:13:2e:47:56:92:9b:5c:e9:2e:eb: 3b:fe:a1:41:27:36:c2:e6:c9:19:76:61:b2:7d:f6: 08:76:3f:ec:1e:cd:0f:df:f5:3d:4d:bd:83:c4:84: 90:3e:0f:c6:bd:e6:a3:10:93:b2:8f:18:53:51:27: b9:a5:cb:d9:07:2a:57:16:6f:6a:d7:93:39:85:17: 04:b1:39:db:5a:7f:74:cb:5f:d4:bd:d4:47:cb:97: 72:96:71:79:54:8f:57:1c:3e:26:e1:26:5c:87:24: 7d:b8:af:22:b0:b3:c7:46:29:d3:44:94:41:ea:5c: c0:f5:4d:c0:35:01:45:3d:3e:02:88:ec:86:7e:98: 40:f5:c8:5c:ea:c4:1c:11:4c:64:f6:6e:08:d4:84: 72:5d:29:41:5a:ab:3d:a7:64:5c:e3:90:13:80:65: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9B:C2:A0:3E:97:0D:1B:DF:3B:73:F9:2C:B4:B3:02:89:BB:4C:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 67.216.176.0/20 104.143.112.0/20 170.52.192.0/18 198.160.28.0/22 199.71.236.0/22 IPv6: 2604:33c0::/32 2605:4f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32888 33698 46746 396249 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ee:d4:bc:66:05:04:e1:26:0e:e4:b9:c5:fd:fe:a1:a3:7d: 8b:f3:d6:9b:4d:93:87:4c:1b:31:d3:c9:ed:cd:b4:39:8c:99: 81:91:b5:b8:7c:f0:02:25:dd:8f:41:aa:3b:b0:af:6e:5a:e1: 22:3d:46:c4:3e:94:2f:b7:fe:19:01:f1:97:4a:24:df:93:fd: 93:4e:21:c3:5c:e4:3c:f2:39:04:57:1f:26:06:31:b8:fe:d2: 06:83:aa:0e:e3:0e:11:45:54:6a:f7:b9:c3:fb:56:04:5d:43: a2:04:c6:43:79:86:69:74:0d:c7:9e:29:e5:5c:82:b4:61:f6: e6:ce:4c:38:99:7d:c2:c1:88:f9:53:93:26:26:26:4a:d2:be: a0:78:db:09:43:09:00:1c:84:73:78:5f:44:04:65:12:8f:ba: 1b:62:83:9e:e6:66:f7:ed:2a:1e:b8:5b:b7:4e:f1:3f:c1:15: a1:ba:b9:7c:66:9a:f2:d3:1c:12:2d:e5:16:b7:be:36:a7:d4: f9:50:8d:3e:d9:1a:c8:b1:b3:88:4a:78:b3:cf:a1:02:0f:33: 68:0d:50:44:f5:74:a3:ca:60:30:ef:d3:c8:80:6b:8d:61:15: 98:21:93:24:6a:c9:59:58:1d:05:7f:23:86:0b:7d:e1:db:3b: b1:3b:5f:41 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWE4w13uOhjpOpZ0ntAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxNjEyNDEyOVoXDTI4MDkxODEyNDEyOVowLzEtMCsGA1UEAxMk MjAxMjIwZmYtZDliMC00ZGUzLWFlNTktODJmZDUxOWZmN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvd6xIyeQly9JwGgIp2yrbmDlZcD+FL8nlJt xLVXhE7DmW1THcYFdQ/fHSoogpdxDnfchDHUYNUfoDzsaiCI6Q2hcaDZRlCPT8zm R3bl55M3BeSzrnUlDLVBC2tz3RMuR1aSm1zpLus7/qFBJzbC5skZdmGyffYIdj/s Hs0P3/U9Tb2DxISQPg/GveajEJOyjxhTUSe5pcvZBypXFm9q15M5hRcEsTnbWn90 y1/UvdRHy5dylnF5VI9XHD4m4SZchyR9uK8isLPHRinTRJRB6lzA9U3ANQFFPT4C iOyGfphA9chc6sQcEUxk9m4I1IRyXSlBWqs9p2Rc45ATgGXjqwIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFJKbwqA+lw0b3ztz+Sy0swKJu0zIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y MDEyMjBmZi1kOWIwLTRkZTMtYWU1OS04MmZkNTE5ZmY3ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzIwMTIyMGZmLWQ5YjAtNGRlMy1h ZTU5LTgyZmQ1MTlmZjdkMS8yMDEyMjBmZi1kOWIwLTRkZTMtYWU1OS04MmZkNTE5 ZmY3ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCQEAgABMB4DBARD2LADBARoj3ADBAaqNMADBALGoBwDBALHR+ww FAQCAAIwDgMFACYEM8ADBQAmBU+AMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwCA eAIDAIOiAgMAtpoCAwYL2TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCG7tS8ZgUE4SYO5LnF/f6ho32L89ab TZOHTBsx08ntzbQ5jJmBkbW4fPACJd2PQao7sK9uWuEiPUbEPpQvt/4ZAfGXSiTf k/2TTiHDXOQ88jkEVx8mBjG4/tIGg6oO4w4RRVRq97nD+1YEXUOiBMZDeYZpdA3H ninlXIK0Yfbmzkw4mX3CwYj5U5MmJiZK0r6geNsJQwkAHIRzeF9EBGUSj7obYoOe 5mb37SoeuFu3TvE/wRWhurl8Zpry0xwSLeUWt742p9T5UI0+2RrIsbOISnizz6EC DzNoDVBE9XSjymAw79PIgGuNYRWYIZMkaslZWB0FfyOGC33h2zuxO19B -----END CERTIFICATE-----Generated at Mon Jul 13 00:08:18 2026 by rpki-client