$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa.cer File: 21e2809f-b591-459c-b789-b8d7bb9f22aa.cer (raw, json) Hash identifier: ujUVQ9IfvNTfhgDEsNb0TQSA4uZxcuHk6jJHCt7oTkE= Subject key identifier: C0:6A:9B:59:E3:90:B0:16:9E:5C:31:F5:D7:B1:FE:D1:3A:58:FF:48 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584EB6C554E99B5609D9A8BFBC68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/21e2809f-b591-459c-b789-b8d7bb9f22aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Aug 2026 12:03:14 +0000 Certificate not after: Wed 27 Sep 2028 15:07:44 +0000 Subordinate resources: AS: 399562 AS: 401088 -- 401089 IP: 23.179.16.0/23 IP: 66.179.170.0/23 IP: 207.174.63.0/24 IP: 2606:47c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:c5:54:e9:9b:56:09:d9:a8:bf:bc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Aug 3 12:03:14 2026 GMT Not After : Sep 27 15:07:44 2028 GMT Subject: CN=21e2809f-b591-459c-b789-b8d7bb9f22aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:64:f1:26:65:77:3e:0b:53:ed:46:4b:ca:dd: 12:2b:f2:8b:ea:da:e7:c0:d0:d3:90:df:40:94:75: 8d:cd:07:81:d3:7c:d2:81:c9:a4:f0:e4:fe:1e:3b: ee:4a:bb:7c:0e:75:1c:30:e9:aa:62:dc:4e:5e:8d: 13:15:c0:aa:0e:c9:09:e6:e7:b7:f4:97:f2:45:bc: 84:29:bb:8e:c0:9e:15:80:f2:24:bf:0c:9c:aa:7e: fa:dc:2a:c7:c2:fb:da:76:1b:f8:b7:6b:d2:9e:69: 9e:13:9e:45:da:5e:37:17:97:c2:5d:b6:e6:75:0f: 22:43:19:a9:8b:92:3f:28:15:ea:ee:c0:f5:48:e6: 92:99:cb:96:ff:fd:88:c1:93:37:f6:49:13:b9:8c: 5f:b7:54:14:fa:f5:3d:2b:9d:74:89:20:0a:de:bd: 4d:32:44:2f:54:b5:a5:90:9a:dc:72:ae:7d:45:36: 33:04:41:52:81:4d:e2:c3:2f:1f:2c:e0:27:cc:92: b9:c9:2b:da:75:5a:62:ef:e6:36:02:36:36:c5:54: 89:f2:36:b1:f7:cc:f4:cd:7e:c4:f6:1f:e1:ec:3e: fc:b0:c2:49:7d:c1:76:e9:a8:1a:00:3d:d7:ce:4e: 3b:ac:28:68:14:6c:80:65:d7:78:c8:b1:c6:44:8a: 46:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6A:9B:59:E3:90:B0:16:9E:5C:31:F5:D7:B1:FE:D1:3A:58:FF:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/21e2809f-b591-459c-b789-b8d7bb9f22aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.179.16.0/23 66.179.170.0/23 207.174.63.0/24 IPv6: 2606:47c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399562 401088-401089 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e0:17:36:19:84:70:ae:f6:78:16:e3:d6:03:ad:07:45:65: 0f:84:e2:d1:72:32:ae:6b:fe:63:4c:0b:fe:2a:ed:c6:b4:5c: 9d:eb:86:c9:5b:55:fd:f2:9e:c8:f7:f0:4d:62:65:20:9e:6c: 86:a8:89:72:8e:bc:8c:2f:72:37:54:91:86:c5:77:16:49:00: 2a:a6:81:f7:e7:4f:bd:f2:e8:3b:20:93:ea:1e:a1:5a:63:bd: 14:e9:08:84:95:a3:3f:13:c1:5f:22:99:8a:23:f0:83:2a:8c: fc:46:9d:93:1a:3a:23:a8:7d:7a:f1:14:04:1b:06:66:7f:fb: 71:cc:c8:34:e0:2b:db:8e:15:7c:6f:cb:f0:59:d3:d5:41:a0: e2:3b:2f:c7:05:a8:c2:a5:25:73:68:01:ef:1e:84:1d:7a:c5: ef:94:14:3c:77:9e:81:d8:ac:c4:96:6d:d4:c4:f1:e0:a8:41: e3:0e:c4:70:83:42:c8:60:23:ac:29:cb:78:74:48:91:2f:4f: 2e:aa:a4:4e:e3:54:a7:ca:ff:b1:63:b0:5e:10:cd:b3:45:95: 9b:62:05:05:f8:06:41:6e:58:c6:1d:5e:eb:f2:e2:50:51:56: da:1f:6c:df:7a:05:0a:25:48:4a:cb:12:16:a3:22:54:79:00: 5f:17:18:5a -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWE62xVTpm1YJ2ai/vGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDgwMzEyMDMxNFoXDTI4MDkyNzE1MDc0NFowLzEtMCsGA1UEAxMk MjFlMjgwOWYtYjU5MS00NTljLWI3ODktYjhkN2JiOWYyMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GTxJmV3PgtT7UZLyt0SK/KL6trnwNDTkN9A lHWNzQeB03zSgcmk8OT+HjvuSrt8DnUcMOmqYtxOXo0TFcCqDskJ5ue39JfyRbyE KbuOwJ4VgPIkvwycqn763CrHwvvadhv4t2vSnmmeE55F2l43F5fCXbbmdQ8iQxmp i5I/KBXq7sD1SOaSmcuW//2IwZM39kkTuYxft1QU+vU9K510iSAK3r1NMkQvVLWl kJrccq59RTYzBEFSgU3iwy8fLOAnzJK5ySvadVpi7+Y2AjY2xVSJ8jax98z0zX7E 9h/h7D78sMJJfcF26agaAD3Xzk47rChoFGyAZdd4yLHGRIpG4wIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFMBqm1njkLAWnlwx9dex/tE6WP9IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y MWUyODA5Zi1iNTkxLTQ1OWMtYjc4OS1iOGQ3YmI5ZjIyYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzIxZTI4MDlmLWI1OTEtNDU5Yy1i Nzg5LWI4ZDdiYjlmMjJhYS8yMWUyODA5Zi1iNTkxLTQ1OWMtYjc4OS1iOGQ3YmI5 ZjIyYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAEXsxADBAFCs6oDBADPrj8wDQQCAAIwBwMFACYG R8AwJgYIKwYBBQUHAQgBAf8EFzAVoBMwEQIDBhjKMAoCAwYewAIDBh7BMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBACvgFzYZhHCu9ngW49YDrQdFZQ+E4tFyMq5r/mNMC/4q7ca0XJ3rhslbVf3y nsj38E1iZSCebIaoiXKOvIwvcjdUkYbFdxZJACqmgffnT73y6Dsgk+oeoVpjvRTp CISVoz8TwV8imYoj8IMqjPxGnZMaOiOofXrxFAQbBmZ/+3HMyDTgK9uOFXxvy/BZ 09VBoOI7L8cFqMKlJXNoAe8ehB16xe+UFDx3noHYrMSWbdTE8eCoQeMOxHCDQshg I6wpy3h0SJEvTy6qpE7jVKfK/7FjsF4QzbNFlZtiBQX4BkFuWMYdXuvy4lBRVtof bN96BQolSErLEhajIlR5AF8XGFo= -----END CERTIFICATE-----Generated at Fri Sep 4 21:01:33 2026 by rpki-client