$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179.cer File: 280cbf0c-0cae-414d-8451-5942a3d8b179.cer (raw, json) Hash identifier: um48PlSeGitLHN8BQj4oNb5DLaTkD01cWz87/xneZsw= Subject key identifier: 7F:DD:A3:5B:47:55:D3:98:D5:D3:4B:C0:E1:49:9B:CF:CB:55:B5:45 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5AB3A8A208475F183ECF05E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/280cbf0c-0cae-414d-8451-5942a3d8b179.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 12:33:15 +0000 Certificate not after: Wed 26 Jul 2028 03:56:24 +0000 Subordinate resources: AS: 46232 IP: 66.85.24.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:b3:a8:a2:08:47:5f:18:3e:cf:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 1 12:33:15 2026 GMT Not After : Jul 26 03:56:24 2028 GMT Subject: CN=280cbf0c-0cae-414d-8451-5942a3d8b179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:e9:f9:5b:6b:d6:d1:c7:af:b2:89:95:25: af:c2:55:5a:b4:f6:a5:57:63:d3:4d:2e:55:a3:42: 27:16:d6:7f:9a:c6:90:34:24:03:ea:22:09:0b:1d: 61:eb:76:4c:a7:99:44:2c:8a:4a:18:78:c5:41:22: 91:25:96:bf:0b:e5:26:17:d8:64:58:e4:48:e6:88: f2:88:de:85:10:22:c2:3c:4e:0f:cc:7e:30:4a:7d: 2c:f9:91:e2:2c:d8:02:10:82:b3:4f:f9:bd:c7:01: d4:39:d6:02:7b:94:75:1e:28:de:27:1b:c6:f5:ec: 23:83:63:4e:41:e3:17:1f:4e:71:a3:2e:8f:6c:1c: 8f:1c:27:69:03:69:39:52:16:4c:e7:94:e2:73:a1: b7:c1:e9:44:c8:34:48:30:f3:ef:08:09:20:e5:a2: f5:a7:e1:1f:52:a8:c4:30:2e:f8:60:af:1a:d5:7e: e3:b9:eb:6b:b3:a8:20:cd:ad:1a:fc:e8:63:a7:66: 3a:12:3d:25:20:c3:d1:f9:5d:5b:5a:5a:2a:df:0d: 9d:93:67:42:76:ed:81:ca:5d:c6:55:7b:f9:4b:29: 9a:3a:37:8f:73:66:54:cc:6f:37:32:50:58:91:24: 8f:0c:85:43:f1:bb:30:5d:ab:02:8f:f5:da:74:93: ee:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DD:A3:5B:47:55:D3:98:D5:D3:4B:C0:E1:49:9B:CF:CB:55:B5:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/280cbf0c-0cae-414d-8451-5942a3d8b179.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.85.24.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46232 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:08:67:e8:be:dc:33:be:a3:03:e8:41:00:71:41:39:cd:cb: de:1a:73:2f:27:88:98:de:b1:6e:a0:8d:d4:24:7f:44:fc:a9: e9:f1:e3:a7:e3:5e:d3:58:b5:eb:35:27:b1:83:c4:66:24:68: 04:65:79:9d:e3:e8:1a:97:e1:ba:87:45:ee:3c:b3:15:62:96: 3c:01:45:26:10:ef:3d:dd:e2:2a:86:66:5b:8b:d5:31:98:4b: df:d4:dc:ae:e7:a0:56:69:17:ab:f1:a6:e0:b1:40:f3:aa:7d: f5:c0:6d:63:b9:a7:f4:f3:27:ce:e4:89:8c:64:8a:b4:0e:1a: be:9f:ff:7e:a9:83:ff:b8:44:2e:71:4b:cd:3e:e8:53:d3:8c: c8:40:1a:ec:91:a4:f8:f4:4c:de:00:a9:61:fc:8c:9e:50:17: d5:4e:5b:94:7a:3a:eb:bd:b9:5b:57:d6:5e:85:b5:9c:4a:7e: 85:6e:f6:0a:8a:27:fd:f9:10:f6:62:c3:6e:5f:c9:c3:cf:9c: b3:a0:da:71:87:ec:d6:71:5f:cb:d1:48:93:e5:de:fe:3b:0d: ab:ca:b0:35:89:ea:a9:23:4e:a0:aa:d5:5e:5b:d9:04:a6:3f: ab:a8:43:79:b7:9e:d1:71:e3:08:96:4f:1d:51:34:af:c5:91: c5:c0:ef:35 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5as6iiCEdfGD7PBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMTEyMzMxNVoXDTI4MDcyNjAzNTYyNFowLzEtMCsGA1UEAxMk MjgwY2JmMGMtMGNhZS00MTRkLTg0NTEtNTk0MmEzZDhiMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Xp+Vtr1tHHr7KJlSWvwlVatPalV2PTTS5V o0InFtZ/msaQNCQD6iIJCx1h63ZMp5lELIpKGHjFQSKRJZa/C+UmF9hkWORI5ojy iN6FECLCPE4PzH4wSn0s+ZHiLNgCEIKzT/m9xwHUOdYCe5R1HijeJxvG9ewjg2NO QeMXH05xoy6PbByPHCdpA2k5UhZM55Tic6G3welEyDRIMPPvCAkg5aL1p+EfUqjE MC74YK8a1X7juetrs6ggza0a/Ohjp2Y6Ej0lIMPR+V1bWloq3w2dk2dCdu2Byl3G VXv5SymaOjePc2ZUzG83MlBYkSSPDIVD8bswXasCj/XadJPuRQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFH/do1tHVdOY1dNLwOFJm8/LVbVFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y ODBjYmYwYy0wY2FlLTQxNGQtODQ1MS01OTQyYTNkOGIxNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzI4MGNiZjBjLTBjYWUtNDE0ZC04 NDUxLTU5NDJhM2Q4YjE3OS8yODBjYmYwYy0wY2FlLTQxNGQtODQ1MS01OTQyYTNk OGIxNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABCVRgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALSYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIcIZ+i+3DO+owPoQQBxQTnNy94acy8niJjesW6gjdQkf0T8 qenx46fjXtNYtes1J7GDxGYkaARleZ3j6BqX4bqHRe48sxViljwBRSYQ7z3d4iqG ZluL1TGYS9/U3K7noFZpF6vxpuCxQPOqffXAbWO5p/TzJ87kiYxkirQOGr6f/36p g/+4RC5xS80+6FPTjMhAGuyRpPj0TN4AqWH8jJ5QF9VOW5R6Ouu9uVtX1l6FtZxK foVu9gqKJ/35EPZiw25fycPPnLOg2nGH7NZxX8vRSJPl3v47DavKsDWJ6qkjTqCq 1V5b2QSmP6uoQ3m3ntFx4wiWTx1RNK/FkcXA7zU= -----END CERTIFICATE-----Generated at Tue Jul 21 14:31:19 2026 by rpki-client