$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/421462cb-6975-4143-ad0b-b1185fc1f420.cer File: 421462cb-6975-4143-ad0b-b1185fc1f420.cer (raw, json) Hash identifier: +gznwPkNq3EiNDJVLaBSQnNCbC4qmLm8yvFGoU49pFQ= Subject key identifier: D3:63:8F:58:B8:68:C5:07:A1:CC:B7:54:E4:90:4F:16:D4:C6:38:BB Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5E33FEC79591745E7357A480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/421462cb-6975-4143-ad0b-b1185fc1f420/421462cb-6975-4143-ad0b-b1185fc1f420.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/421462cb-6975-4143-ad0b-b1185fc1f420/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 18:39:16 +0000 Certificate not after: Wed 23 Aug 2028 16:40:15 +0000 Subordinate resources: AS: 18849 IP: 205.233.74.0/24 IP: 2605:1940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:33:fe:c7:95:91:74:5e:73:57:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 18:39:16 2026 GMT Not After : Aug 23 16:40:15 2028 GMT Subject: CN=421462cb-6975-4143-ad0b-b1185fc1f420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:d9:be:c7:e4:6e:9a:7d:42:78:c1:a2:5d: b5:4c:fb:62:96:9f:c6:b2:7a:8f:6f:51:7c:5f:35: 74:89:39:a6:e1:fa:ad:b2:71:d8:28:c0:e9:96:37: 18:e6:58:e1:2b:bf:f8:63:d1:bd:59:5c:0e:30:cf: 7b:93:88:98:62:ae:bc:f8:d5:8d:15:e2:49:c1:c9: 04:9c:02:f2:93:5e:e3:f9:8c:7f:1c:a5:12:ad:5d: 19:c0:ab:bf:e3:c5:46:bc:6b:8e:b3:49:2b:4a:be: c5:31:d6:3a:9a:e1:4b:d1:b6:cd:00:73:ea:99:4b: cb:88:ae:f1:17:2d:03:27:4c:ae:e0:99:9d:e9:3f: 31:6a:75:1d:bc:c2:83:97:38:f9:39:65:84:da:7a: 8c:64:ab:e5:7d:c3:73:bb:30:e7:02:ff:14:b2:73: 4a:bb:4d:14:28:94:cb:93:18:f4:74:82:e0:ce:45: ef:d4:35:69:2c:d2:d6:44:d8:1b:0a:ff:e0:4c:07: 7b:44:c9:95:27:3b:e1:ce:64:70:15:8c:52:60:9c: 7b:89:f9:28:5d:4c:7d:7e:b9:dc:6c:b7:27:31:fc: c2:04:f8:6d:6b:a6:e9:d7:c4:d8:68:47:90:44:ba: c2:f7:d0:d4:dc:81:ae:26:04:a3:4a:bc:fe:f7:9e: 34:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:8F:58:B8:68:C5:07:A1:CC:B7:54:E4:90:4F:16:D4:C6:38:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/421462cb-6975-4143-ad0b-b1185fc1f420/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/421462cb-6975-4143-ad0b-b1185fc1f420/421462cb-6975-4143-ad0b-b1185fc1f420.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 205.233.74.0/24 IPv6: 2605:1940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18849 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:61:5e:f1:dc:9d:18:5a:a3:6a:a5:6e:9a:60:61:04:1d:d2: e3:6a:31:77:b4:69:5d:c0:77:53:38:1d:21:d6:8e:e9:1e:80: 4a:39:9f:25:0e:27:94:7b:77:ff:29:b3:b4:21:6d:80:bb:08: 5e:32:cf:f6:98:4e:66:bb:a3:31:50:bf:3d:0a:49:a1:b6:87: 12:c7:d7:2e:25:33:11:46:01:8d:6b:d9:de:c8:fa:47:5b:d9: af:51:78:35:cd:bd:35:3d:8c:d6:61:3e:fa:10:3b:43:ec:de: 97:18:3d:31:0a:ba:ea:b8:28:66:ae:71:1e:63:84:8b:2c:6d: b3:b6:98:17:06:7e:66:34:d9:39:1e:05:d5:74:1d:27:1a:e3: c6:ea:4b:04:95:2f:fd:75:7e:e1:ad:97:15:a1:ac:e2:c9:8d: 51:32:fe:bc:5e:6c:a5:27:5c:f6:75:83:72:7a:19:cc:72:e8: 2b:ae:49:e4:06:05:08:b8:26:de:a4:26:9e:c6:b3:95:8d:7a: e7:cc:03:5b:9b:34:c4:3d:36:b2:f4:5b:d3:17:a6:8a:8e:ba: 33:5b:e5:3e:d0:fd:f4:c1:33:df:81:50:d1:7b:11:f2:56:c2: 62:2c:78:30:5f:72:ca:fc:53:0a:7d:4b:e8:80:2a:33:51:20: 58:42:a3:7a -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE5eM/7HlZF0XnNXpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjE4MzkxNloXDTI4MDgyMzE2NDAxNVowLzEtMCsGA1UEAxMk NDIxNDYyY2ItNjk3NS00MTQzLWFkMGItYjExODVmYzFmNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwzZvsfkbpp9QnjBol21TPtilp/GsnqPb1F8 XzV0iTmm4fqtsnHYKMDpljcY5ljhK7/4Y9G9WVwOMM97k4iYYq68+NWNFeJJwckE nALyk17j+Yx/HKUSrV0ZwKu/48VGvGuOs0krSr7FMdY6muFL0bbNAHPqmUvLiK7x Fy0DJ0yu4Jmd6T8xanUdvMKDlzj5OWWE2nqMZKvlfcNzuzDnAv8UsnNKu00UKJTL kxj0dILgzkXv1DVpLNLWRNgbCv/gTAd7RMmVJzvhzmRwFYxSYJx7ifkoXUx9frnc bLcnMfzCBPhta6bp18TYaEeQRLrC99DU3IGuJgSjSrz+9540jwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFNNjj1i4aMUHocy3VOSQTxbUxji7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 MjE0NjJjYi02OTc1LTQxNDMtYWQwYi1iMTE4NWZjMWY0MjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQyMTQ2MmNiLTY5NzUtNDE0My1h ZDBiLWIxMTg1ZmMxZjQyMC80MjE0NjJjYi02OTc1LTQxNDMtYWQwYi1iMTE4NWZj MWY0MjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADN6UowDQQCAAIwBwMFACYFGUAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSaEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhWFe8dydGFqjaqVummBhBB3S42ox d7RpXcB3UzgdIdaO6R6ASjmfJQ4nlHt3/ymztCFtgLsIXjLP9phOZrujMVC/PQpJ obaHEsfXLiUzEUYBjWvZ3sj6R1vZr1F4Nc29NT2M1mE++hA7Q+zelxg9MQq66rgo Zq5xHmOEiyxts7aYFwZ+ZjTZOR4F1XQdJxrjxupLBJUv/XV+4a2XFaGs4smNUTL+ vF5spSdc9nWDcnoZzHLoK65J5AYFCLgm3qQmnsazlY1658wDW5s0xD02svRb0xem io66M1vlPtD99MEz34FQ0XsR8lbCYix4MF9yyvxTCn1L6IAqM1EgWEKjeg== -----END CERTIFICATE-----Generated at Tue Jul 21 14:31:22 2026 by rpki-client