$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer File: 2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.cer (raw, json) Hash identifier: UR9+gEMh9nDg5BH6dariKZ/zVQVjhNfREo6P0l8mZnQ= Subject key identifier: 87:A6:1C:A4:00:92:A4:4D:47:93:C3:D9:48:00:C0:2A:5D:CA:D3:20 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6D20362C5BEC2928DC5B1480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 02:56:31 +0000 Certificate not after: Tue 10 Oct 2028 02:56:31 +0000 Subordinate resources: IP: 162.210.64.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:20:36:2c:5b:ec:29:28:dc:5b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 8 02:56:31 2026 GMT Not After : Oct 10 02:56:31 2028 GMT Subject: CN=2e5139d2-c3bf-4b18-9616-d83f50a9f4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:23:17:1d:d4:83:c3:3a:ca:fe:94:66:db: c2:36:bb:44:e5:57:9e:7e:86:95:79:74:97:b3:9a: 3a:92:88:4c:0d:7f:e3:ed:4c:3e:f6:65:94:12:10: 12:b6:7e:d6:e0:35:15:5b:b6:c5:c7:9b:04:0b:43: a9:90:17:87:b6:5f:9b:ab:05:07:d1:85:e0:1c:f7: d4:76:52:86:0e:4f:69:d1:a8:31:59:6c:7b:d3:08: 59:21:36:e0:fd:31:e4:17:60:01:24:95:6e:a0:a5: 9c:8f:ac:1c:b1:e5:7e:34:89:a6:b2:96:da:c8:a6: 9e:d4:cd:83:92:ce:26:d7:d2:e6:df:91:23:bc:a2: 91:8a:e5:47:5f:7a:b2:4b:94:26:23:51:74:26:9a: bf:ef:f1:3d:73:07:8f:e6:d3:ad:ca:bd:42:fe:69: 99:b9:31:a2:3e:62:68:92:91:68:39:92:fe:2e:f1: a3:2d:0a:33:bc:bb:ed:9b:38:5b:ca:7c:6b:23:4e: 34:f6:7c:10:8a:8a:7d:16:58:e0:6c:5f:c6:7b:2c: 28:f2:55:ec:2a:d3:e8:8d:d3:6b:c2:76:d6:6e:37: 1f:34:5f:ab:47:c9:bb:99:d8:18:e6:19:86:43:24: 31:64:c8:c8:e2:de:7e:23:b1:69:45:0a:e3:d4:72: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:1C:A4:00:92:A4:4D:47:93:C3:D9:48:00:C0:2A:5D:CA:D3:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8/2e5139d2-c3bf-4b18-9616-d83f50a9f4e8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 162.210.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d1:4f:2b:c2:86:14:4a:e9:01:af:94:e8:a2:ae:70:2c:9c: 8a:b4:4d:46:f1:8a:50:6f:4c:8a:6c:6b:cf:6a:98:60:53:80: 3d:91:d7:36:21:6d:55:84:0b:ef:f7:e5:d6:93:7e:d8:81:c7: ae:3f:09:4f:ad:47:d8:ca:a9:95:f8:1c:93:d2:b4:48:94:6c: b4:f5:88:2f:9f:c3:38:2f:6d:21:ae:74:ba:68:b3:3a:ce:d0: a3:9f:1d:11:a9:89:53:f3:c0:ab:aa:d6:66:06:0a:18:ce:ff: 6c:02:33:88:c3:6c:ca:50:90:fb:88:5a:51:31:2d:27:8a:ed: 93:32:83:cc:89:00:7a:4c:75:a2:b4:60:db:71:c4:b0:2e:da: b1:f0:f8:66:d1:80:b8:ad:1a:86:61:eb:cd:ca:c2:a0:ed:4d: a7:b9:d1:8a:f2:7a:73:6c:84:57:4e:09:31:25:0b:48:38:76: bc:ff:c0:f9:75:f7:8e:76:08:11:7a:fd:27:e3:0a:ae:c2:0b: 80:cb:4c:d0:70:70:f0:bf:dc:6f:49:f9:5f:9f:83:91:a2:50: e0:c8:2a:20:1b:22:f0:f1:eb:28:db:8c:10:cb:8d:cd:f6:44: 29:28:17:a8:38:cc:6d:27:57:b3:96:0a:3b:a3:bf:f3:61:c7: a8:fd:52:bc -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5tIDYsW+wpKNxbFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwODAyNTYzMVoXDTI4MTAxMDAyNTYzMVowLzEtMCsGA1UEAxMk MmU1MTM5ZDItYzNiZi00YjE4LTk2MTYtZDgzZjUwYTlmNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYIjFx3Ug8M6yv6UZtvCNrtE5VeefoaVeXSX s5o6kohMDX/j7Uw+9mWUEhAStn7W4DUVW7bFx5sEC0OpkBeHtl+bqwUH0YXgHPfU dlKGDk9p0agxWWx70whZITbg/THkF2ABJJVuoKWcj6wcseV+NImmspbayKae1M2D ks4m19Lm35EjvKKRiuVHX3qyS5QmI1F0Jpq/7/E9cweP5tOtyr1C/mmZuTGiPmJo kpFoOZL+LvGjLQozvLvtmzhbynxrI0409nwQiop9FljgbF/Geywo8lXsKtPojdNr wnbWbjcfNF+rR8m7mdgY5hmGQyQxZMjI4t5+I7FpRQrj1HIiCQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIemHKQAkqRNR5PD2UgAwCpdytMgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y ZTUxMzlkMi1jM2JmLTRiMTgtOTYxNi1kODNmNTBhOWY0ZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzJlNTEzOWQyLWMzYmYtNGIxOC05 NjE2LWQ4M2Y1MGE5ZjRlOC8yZTUxMzlkMi1jM2JmLTRiMTgtOTYxNi1kODNmNTBh OWY0ZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKi0kAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK9FPK8KGFErpAa+U6KKu cCycirRNRvGKUG9Mimxrz2qYYFOAPZHXNiFtVYQL7/fl1pN+2IHHrj8JT61H2Mqp lfgck9K0SJRstPWIL5/DOC9tIa50umizOs7Qo58dEamJU/PAq6rWZgYKGM7/bAIz iMNsylCQ+4haUTEtJ4rtkzKDzIkAekx1orRg23HEsC7asfD4ZtGAuK0ahmHrzcrC oO1Np7nRivJ6c2yEV04JMSULSDh2vP/A+XX3jnYIEXr9J+MKrsILgMtM0HBw8L/c b0n5X5+DkaJQ4MgqIBsi8PHrKNuMEMuNzfZEKSgXqDjMbSdXs5YKO6O/82HHqP1S vA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:49 2026 by rpki-client