$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/34eade6d-107b-4a35-8bbd-5cb115650147.cer File: 34eade6d-107b-4a35-8bbd-5cb115650147.cer (raw, json) Hash identifier: sibK3JWxcoM7HELZbXl0UC78hvlYGgDWvRzWKrAOyhc= Subject key identifier: AD:2E:F6:2F:7E:AB:41:CC:53:DE:DC:62:8A:65:85:3B:56:0B:DD:B4 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F5BD802E09789048BA57D3880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/34eade6d-107b-4a35-8bbd-5cb115650147/34eade6d-107b-4a35-8bbd-5cb115650147.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/34eade6d-107b-4a35-8bbd-5cb115650147/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 15:09:15 +0000 Certificate not after: Fri 29 Sep 2028 03:17:39 +0000 Subordinate resources: AS: 17303 AS: 46933 IP: 74.188.240.0/22 IP: 172.81.32.0/22 IP: 185.212.4.0/24 IP: 195.85.116.0/24 IP: 206.55.212.0/24 IP: 208.67.108.0/22 IP: 208.72.220.0/22 IP: 216.250.99.0/24 IP: 2605:dec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:d8:02:e0:97:89:04:8b:a5:7d:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 1 15:09:15 2026 GMT Not After : Sep 29 03:17:39 2028 GMT Subject: CN=34eade6d-107b-4a35-8bbd-5cb115650147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:fb:36:52:a9:01:eb:27:33:ec:0e:31:cd: ff:c5:a8:04:ab:f0:57:6e:3c:89:2e:78:be:75:a2: c0:53:e5:17:b5:93:e3:42:d5:13:25:d8:73:22:be: 25:92:6e:5f:7c:a2:43:ed:a1:7e:5f:f3:46:4b:49: 96:1f:d1:b9:f0:95:83:cd:2b:ff:49:0f:04:3a:c8: e5:59:2f:23:e3:ca:3a:89:4a:20:3c:5c:1a:d4:65: 76:5f:b5:0e:52:c3:bf:e8:c8:d1:d6:e5:27:19:42: 1b:ea:3b:e1:5a:0b:c1:b9:c2:a7:9a:a8:93:3b:1a: 15:da:c9:06:d5:f0:bb:9d:17:34:2f:8e:80:82:0a: ef:f5:46:cf:e9:db:87:c9:d1:7d:c5:0f:fb:cb:dd: a3:0b:84:a2:25:40:b1:3b:c1:e0:17:52:6b:95:ad: 52:15:72:a5:62:20:4e:be:8a:00:bc:ae:40:7f:4b: f3:5e:67:5a:d2:7e:7c:62:ab:dc:1f:ff:9d:c1:39: 1c:8c:9c:a8:86:a3:cd:c5:9f:c0:fe:a5:62:14:18: 33:c2:99:1d:80:df:dc:74:d0:ab:23:07:60:4e:b4: 56:1b:dc:6f:33:e8:d8:46:ab:f3:d6:37:67:cb:61: 29:24:9c:bd:e9:6b:8e:cc:56:32:b7:9b:b7:5a:a4: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:F6:2F:7E:AB:41:CC:53:DE:DC:62:8A:65:85:3B:56:0B:DD:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/34eade6d-107b-4a35-8bbd-5cb115650147/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/34eade6d-107b-4a35-8bbd-5cb115650147/34eade6d-107b-4a35-8bbd-5cb115650147.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 74.188.240.0/22 172.81.32.0/22 185.212.4.0/24 195.85.116.0/24 206.55.212.0/24 208.67.108.0/22 208.72.220.0/22 216.250.99.0/24 IPv6: 2605:dec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17303 46933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:5f:f4:79:bd:95:87:2c:78:05:dd:96:81:ad:00:e6:2b:86: b4:fb:2b:59:65:cc:ae:2b:c5:a1:ab:59:58:2e:e6:76:98:03: 9c:8d:4c:66:7c:12:6a:da:b6:13:6d:8d:fa:5e:1b:d4:bc:69: 4d:46:28:45:e0:03:df:cc:c1:ba:5d:05:cd:af:cf:a8:cd:8e: 3c:c7:95:df:78:67:70:e5:7a:ae:37:07:55:15:86:5b:c8:e5: 25:30:5b:de:82:ae:21:c8:67:7d:db:ac:de:e4:4e:48:5b:87: ec:61:46:ea:7c:54:b9:4a:05:30:f2:ab:fe:1c:09:19:21:6b: a2:de:ae:0f:6b:54:14:7f:76:f8:9c:e7:d1:34:0a:e0:0e:ae: 4c:8c:0d:80:95:ae:85:95:e4:f1:40:f5:67:2e:5e:82:1c:de: 8f:99:2b:de:e2:0c:44:90:cb:96:a1:03:79:6a:22:6c:35:f4: e5:52:fb:7c:43:7b:cd:a7:b6:94:dd:e0:d7:fe:1e:fa:0d:ba: 38:74:93:c3:52:8b:09:9b:28:d7:89:aa:22:bd:ca:58:8e:80: df:5c:9e:2d:6b:08:5c:5b:da:80:98:d6:16:99:35:47:bc:fc: d0:be:42:5f:77:d6:fe:55:e3:f5:03:2e:b4:03:61:51:9e:ce: 73:cd:39:46 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWE9b2ALgl4kEi6V9OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwMTE1MDkxNVoXDTI4MDkyOTAzMTczOVowLzEtMCsGA1UEAxMk MzRlYWRlNmQtMTA3Yi00YTM1LThiYmQtNWNiMTE1NjUwMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5v7NlKpAesnM+wOMc3/xagEq/BXbjyJLni+ daLAU+UXtZPjQtUTJdhzIr4lkm5ffKJD7aF+X/NGS0mWH9G58JWDzSv/SQ8EOsjl WS8j48o6iUogPFwa1GV2X7UOUsO/6MjR1uUnGUIb6jvhWgvBucKnmqiTOxoV2skG 1fC7nRc0L46Aggrv9UbP6duHydF9xQ/7y92jC4SiJUCxO8HgF1Jrla1SFXKlYiBO vooAvK5Af0vzXmda0n58YqvcH/+dwTkcjJyohqPNxZ/A/qViFBgzwpkdgN/cdNCr IwdgTrRWG9xvM+jYRqvz1jdny2EpJJy96WuOzFYyt5u3WqQ8JwIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFK0u9i9+q0HMU97cYoplhTtWC920MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z NGVhZGU2ZC0xMDdiLTRhMzUtOGJiZC01Y2IxMTU2NTAxNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzM0ZWFkZTZkLTEwN2ItNGEzNS04 YmJkLTVjYjExNTY1MDE0Ny8zNGVhZGU2ZC0xMDdiLTRhMzUtOGJiZC01Y2IxMTU2 NTAxNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAJKvPADBAKsUSADBAC51AQDBADDVXQDBADON9QD BALQQ2wDBALQSNwDBADY+mMwDQQCAAIwBwMFACYF3sAwHgYIKwYBBQUHAQgBAf8E DzANoAswCQICQ5cCAwC3VTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/X/R5vZWHLHgF3ZaBrQDmK4a0+ytZ ZcyuK8Whq1lYLuZ2mAOcjUxmfBJq2rYTbY36XhvUvGlNRihF4APfzMG6XQXNr8+o zY48x5XfeGdw5XquNwdVFYZbyOUlMFvegq4hyGd926ze5E5IW4fsYUbqfFS5SgUw 8qv+HAkZIWui3q4Pa1QUf3b4nOfRNArgDq5MjA2Ala6FleTxQPVnLl6CHN6PmSve 4gxEkMuWoQN5aiJsNfTlUvt8Q3vNp7aU3eDX/h76Dbo4dJPDUosJmyjXiaoivcpY joDfXJ4tawhcW9qAmNYWmTVHvPzQvkJfd9b+VeP1Ay60A2FRns5zzTlG -----END CERTIFICATE-----Generated at Tue Oct 20 09:15:08 2026 by rpki-client