$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.cer File: 450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.cer (raw, json) Hash identifier: xXuBlMrlBeoRVr9ACnxo7nbb2qk27Cd1B8p5rjZbTS4= Subject key identifier: 02:60:D9:8D:53:B5:16:D5:27:05:F9:71:B9:A8:86:02:42:22:F0:8A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6F4343AA67695383477BCF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 21:18:46 +0000 Certificate not after: Tue 10 Oct 2028 21:18:46 +0000 Subordinate resources: AS: 22134 IP: 208.82.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:43:43:aa:67:69:53:83:47:7b:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 8 21:18:46 2026 GMT Not After : Oct 10 21:18:46 2028 GMT Subject: CN=450e8e4a-f260-4fd5-93f6-48b4a6cb0b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:88:a6:b6:ef:44:01:3f:a2:46:3d:47:ae: da:7c:91:af:6d:1e:01:a7:2e:30:99:e4:ff:41:fe: b1:23:6f:9b:c3:0f:48:2a:45:9d:0a:f3:d7:34:b4: 49:20:6c:ea:5d:8d:55:c1:9b:b2:e7:e5:8b:11:75: 7b:fb:db:95:6e:86:17:e5:7c:2f:cb:16:45:e8:f9: 19:12:1a:f0:f9:5e:9c:4e:27:6e:31:6e:a3:b6:55: 40:fc:18:aa:04:85:5f:07:eb:c5:4e:e5:b3:a3:7c: c4:6b:d5:c0:6c:81:57:41:fa:51:76:b3:ab:82:40: 7f:09:dd:6f:81:fa:02:6c:2d:bb:df:3b:65:0f:5c: ba:ac:7c:24:8d:2e:5a:ba:ed:93:72:a7:5b:81:04: 5e:34:1f:e9:6e:14:1f:32:18:85:f6:41:fa:ca:9c: e1:63:67:d0:6a:e9:63:eb:6e:06:ae:2a:38:8d:e0: 9f:fe:f4:77:bb:2a:2a:50:d8:ce:a1:99:54:01:a4: db:a5:6f:1a:72:32:b1:dd:47:52:23:29:2f:59:61: a1:ba:c2:eb:a4:33:c7:fc:09:29:c1:34:1b:2f:7f: 01:00:bb:b8:43:66:c1:7a:3a:1b:8e:9d:1c:df:20: bd:41:bd:5a:99:3f:f8:1d:21:73:c1:43:4d:72:1b: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:60:D9:8D:53:B5:16:D5:27:05:F9:71:B9:A8:86:02:42:22:F0:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.82.124.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22134 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:01:64:11:05:05:5f:c6:c5:35:ad:77:ae:19:d7:4a:50:ea: a8:d5:47:b0:4f:c2:9f:e0:e4:9a:ef:85:ec:68:10:bd:35:04: e4:d3:80:56:40:5b:89:be:56:c2:9a:56:6c:0c:4c:ee:35:8d: 53:f9:d3:a0:55:af:7c:4a:b8:d9:4d:e3:dd:75:52:08:79:19: 4a:f1:56:32:77:d5:68:aa:df:c6:bd:48:b9:eb:5b:23:16:06: 01:fa:11:b8:e8:20:0a:ce:e8:63:c2:71:fd:3f:dc:1c:bf:b7: 75:45:f7:4f:42:85:8b:84:7c:c9:36:32:18:8a:09:4b:a6:7e: c6:c4:70:2f:15:a7:01:c4:d1:b6:3f:b3:8b:b5:44:32:f0:bd: d6:c4:89:f5:b4:74:50:81:d0:13:40:d6:42:94:58:4e:8a:86: 9b:b2:d5:54:8b:56:14:bd:79:40:5c:49:44:a4:cf:b4:13:43: b3:1b:c2:5e:7f:38:c6:03:8a:4d:e3:0c:ea:0e:96:f3:61:45: ea:59:66:1a:03:c5:eb:f5:1d:90:9a:51:94:d8:df:92:e9:d5: 22:7e:4b:27:0e:3e:17:fd:9d:d7:37:89:8c:d0:7e:88:f7:11: 5c:51:81:44:46:ed:28:96:bb:2e:b0:f2:67:97:f7:b2:e6:9d: 71:fb:7a:56 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE5vQ0OqZ2lTg0d7z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwODIxMTg0NloXDTI4MTAxMDIxMTg0NlowLzEtMCsGA1UEAxMk NDUwZThlNGEtZjI2MC00ZmQ1LTkzZjYtNDhiNGE2Y2IwYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vyIprbvRAE/okY9R67afJGvbR4Bpy4wmeT/ Qf6xI2+bww9IKkWdCvPXNLRJIGzqXY1VwZuy5+WLEXV7+9uVboYX5XwvyxZF6PkZ Ehrw+V6cTiduMW6jtlVA/BiqBIVfB+vFTuWzo3zEa9XAbIFXQfpRdrOrgkB/Cd1v gfoCbC273ztlD1y6rHwkjS5auu2TcqdbgQReNB/pbhQfMhiF9kH6ypzhY2fQaulj 624Grio4jeCf/vR3uyoqUNjOoZlUAaTbpW8acjKx3UdSIykvWWGhusLrpDPH/Akp wTQbL38BALu4Q2bBejobjp0c3yC9Qb1amT/4HSFzwUNNchuG5wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAJg2Y1TtRbVJwX5cbmohgJCIvCKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 NTBlOGU0YS1mMjYwLTRmZDUtOTNmNi00OGI0YTZjYjBiNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ1MGU4ZTRhLWYyNjAtNGZkNS05 M2Y2LTQ4YjRhNmNiMGI1MC80NTBlOGU0YS1mMjYwLTRmZDUtOTNmNi00OGI0YTZj YjBiNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQUnwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VnYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjgFkEQUFX8bFNa13rhnXSlDqqNVHsE/Cn+Dkmu+F7GgQvTUE 5NOAVkBbib5WwppWbAxM7jWNU/nToFWvfEq42U3j3XVSCHkZSvFWMnfVaKrfxr1I uetbIxYGAfoRuOggCs7oY8Jx/T/cHL+3dUX3T0KFi4R8yTYyGIoJS6Z+xsRwLxWn AcTRtj+zi7VEMvC91sSJ9bR0UIHQE0DWQpRYToqGm7LVVItWFL15QFxJRKTPtBND sxvCXn84xgOKTeMM6g6W82FF6llmGgPF6/UdkJpRlNjfkunVIn5LJw4+F/2d1zeJ jNB+iPcRXFGBREbtKJa7LrDyZ5f3suadcft6Vg== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:39 2026 by rpki-client