$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.cer File: 4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.cer (raw, json) Hash identifier: NFcI6YnK3zdMuoo6hWEHm/vY2LwJ1YtOkWpwGrL7gh8= Subject key identifier: 3C:05:AD:89:C6:A7:7E:29:17:4A:29:DD:AF:DF:34:00:A5:3D:70:BA Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F05A6667EF3599F594B10BC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Aug 2026 18:09:46 +0000 Certificate not after: Sun 03 Dec 2028 19:09:46 +0000 Subordinate resources: IP: 192.135.120.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:a6:66:7e:f3:59:9f:59:4b:10:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Aug 31 18:09:46 2026 GMT Not After : Dec 3 19:09:46 2028 GMT Subject: CN=4311e6cf-5d10-4a05-8153-e6edbb4ec5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:9e:1c:98:75:82:45:9a:2c:1e:8f:b8:1a: 5f:66:8a:b1:24:dc:3f:05:97:95:1e:af:33:83:c7: 75:d1:18:6a:58:74:e5:c9:7f:9a:6f:06:49:97:1d: ed:64:b3:0e:ec:a8:3b:12:68:00:a4:2e:ac:7b:58: 54:70:65:78:96:28:70:d8:fd:aa:1f:96:95:4b:bf: aa:ad:d4:1c:56:33:f1:ad:1a:46:5c:18:4c:c6:4e: 3b:9d:e5:b9:57:72:cd:af:07:a6:6c:f7:5e:6c:98: 38:28:5b:6d:87:db:89:db:d2:bc:04:f3:43:3d:02: b0:b5:95:2b:1a:a0:d6:a2:d4:af:d5:02:a8:88:8a: 5f:24:1f:16:a1:0d:34:ca:f3:49:ba:10:1d:ae:32: 5c:b5:21:aa:83:73:68:ad:3b:a8:e2:4e:21:0f:0a: ab:68:b9:66:dc:bf:2c:f1:3e:a4:cb:23:c6:99:d7: e0:aa:ab:a6:67:6e:bf:5e:91:78:2e:d4:71:cd:01: 4c:ff:fd:45:bd:35:3d:22:65:2b:41:44:20:7f:2e: 7b:02:9a:04:69:f5:18:24:19:78:50:c2:0c:08:ef: 9a:f6:9d:a0:28:26:46:ea:51:4e:17:6d:c6:9d:97: de:74:bd:ab:01:6c:26:42:ba:01:33:44:2f:92:41: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:AD:89:C6:A7:7E:29:17:4A:29:DD:AF:DF:34:00:A5:3D:70:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.135.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a2:b4:7c:c2:df:d8:99:d2:f9:77:f9:43:21:b2:a5:bd:ec: 35:ac:94:23:a5:65:6c:f6:9a:94:79:9a:5f:77:17:8d:03:2a: 9e:0b:ca:b2:0f:7d:ea:fd:09:51:b1:f1:43:17:af:51:96:bb: f2:b3:6b:43:a5:ed:dc:71:30:d4:53:2d:60:5a:91:66:13:c3: fe:19:14:e7:a9:e9:e5:a3:5b:9a:a7:20:52:3e:ea:4e:cf:33: 07:1a:bd:9a:6b:a7:70:54:ed:bd:5f:4f:fc:23:4d:7c:76:1c: e4:f5:36:df:8e:3d:b4:0b:22:4f:99:b2:b1:24:40:43:49:41: a9:37:8a:38:9e:ba:a5:7e:9f:33:6b:44:ab:f2:73:ea:5b:d3: 18:7f:04:e4:7f:df:0b:af:b4:0e:18:25:29:90:c0:99:60:a0: fb:05:54:5a:4c:ed:39:2e:db:56:90:e8:eb:35:52:1b:93:fa: 49:cc:cd:77:1e:77:2b:27:f9:06:1d:81:a2:50:d8:3b:88:4f: 67:a6:89:3f:80:ac:03:9a:90:3c:60:cb:18:f8:e1:75:5a:14: ce:8d:ad:3c:e6:86:25:8b:aa:f0:b0:9f:ee:bc:68:13:aa:ee: 33:cf:8d:b1:ea:97:b0:f2:96:65:26:c1:2a:04:31:6f:98:5f: dc:2c:33:9d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE8FpmZ+81mfWUsQvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDgzMTE4MDk0NloXDTI4MTIwMzE5MDk0NlowLzEtMCsGA1UEAxMk NDMxMWU2Y2YtNWQxMC00YTA1LTgxNTMtZTZlZGJiNGVjNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zieHJh1gkWaLB6PuBpfZoqxJNw/BZeVHq8z g8d10RhqWHTlyX+abwZJlx3tZLMO7Kg7EmgApC6se1hUcGV4lihw2P2qH5aVS7+q rdQcVjPxrRpGXBhMxk47neW5V3LNrwembPdebJg4KFtth9uJ29K8BPNDPQKwtZUr GqDWotSv1QKoiIpfJB8WoQ00yvNJuhAdrjJctSGqg3NorTuo4k4hDwqraLlm3L8s 8T6kyyPGmdfgqqumZ26/XpF4LtRxzQFM//1FvTU9ImUrQUQgfy57ApoEafUYJBl4 UMIMCO+a9p2gKCZG6lFOF23GnZfedL2rAWwmQroBM0QvkkF/AQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDwFrYnGp34pF0op3a/fNAClPXC6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 MzExZTZjZi01ZDEwLTRhMDUtODE1My1lNmVkYmI0ZWM1ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQzMTFlNmNmLTVkMTAtNGEwNS04 MTUzLWU2ZWRiYjRlYzVlMy80MzExZTZjZi01ZDEwLTRhMDUtODE1My1lNmVkYmI0 ZWM1ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAh3gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAo6K0fMLf2JnS+Xf5QyGy pb3sNayUI6VlbPaalHmaX3cXjQMqngvKsg996v0JUbHxQxevUZa78rNrQ6Xt3HEw 1FMtYFqRZhPD/hkU56np5aNbmqcgUj7qTs8zBxq9mmuncFTtvV9P/CNNfHYc5PU2 3449tAsiT5mysSRAQ0lBqTeKOJ66pX6fM2tEq/Jz6lvTGH8E5H/fC6+0DhglKZDA mWCg+wVUWkztOS7bVpDo6zVSG5P6SczNdx53Kyf5Bh2BolDYO4hPZ6aJP4CsA5qQ PGDLGPjhdVoUzo2tPOaGJYuq8LCf7rxoE6ruM8+NseqXsPKWZSbBKgQxb5hf3Cwz nQ== -----END CERTIFICATE-----Generated at Fri Sep 4 20:34:27 2026 by rpki-client