$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer File: 48f56219-8ac3-430e-90fc-cf0aea21115d.cer (raw, json) Hash identifier: DAOrVqdaSnMGr0N605EcRQG7hPJ3Ni81kec2T4gIdsM= Subject key identifier: C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6C32421EA126DB8F8C754B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 18:57:05 +0000 Certificate not after: Mon 09 Oct 2028 18:57:05 +0000 Subordinate resources: AS: 402714 IP: 206.197.76.0/24 IP: 2602:f368::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:32:42:1e:a1:26:db:8f:8c:75:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 18:57:05 2026 GMT Not After : Oct 9 18:57:05 2028 GMT Subject: CN=48f56219-8ac3-430e-90fc-cf0aea21115d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:80:68:33:78:3a:46:a5:86:b5:be:40:ad: ad:54:d9:3e:44:d8:ee:46:fc:d4:d5:ac:58:13:23: ba:71:6a:64:4d:b7:3c:cf:94:86:a9:6f:d1:72:18: 65:7e:f7:37:5f:aa:c7:76:e2:db:35:11:38:63:40: 69:63:71:72:34:d8:61:08:bf:ff:11:61:0b:b8:44: 0b:74:2c:81:04:62:cc:ef:00:2c:ba:26:dd:9a:34: a4:69:be:ec:98:e7:16:56:7a:66:c0:ed:dd:e6:a7: 25:bb:e9:ac:ee:c6:65:30:86:7d:e2:1f:a1:f0:c0: 6d:13:9b:4b:56:02:3c:c2:3c:5c:b8:3b:76:0e:fd: b7:ff:91:f5:9b:43:81:b5:3e:16:a6:d5:74:a4:bb: a3:21:20:4c:64:ef:31:2b:72:67:80:4b:67:00:ff: dc:97:91:8d:95:40:a5:92:35:b6:e5:63:3d:5a:3c: cd:44:87:6e:00:72:92:88:9c:e6:9b:a5:06:d1:28: c5:2e:aa:e3:0a:45:e5:d5:bb:2d:7c:af:aa:81:69: 67:01:73:86:8b:16:00:0e:87:c5:cb:9b:bb:78:37: 53:18:31:bd:02:1e:4c:7c:b9:67:5f:7b:df:45:cb: 20:f3:c9:d8:e6:43:89:1b:22:a8:87:52:29:e2:0a: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 206.197.76.0/24 IPv6: 2602:f368::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402714 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:df:f2:0c:4b:c0:c2:d5:15:15:a5:0c:a9:74:20:c3:d7:29: 36:e7:a0:42:a3:d1:44:76:57:d5:48:e3:2c:d8:28:d3:89:85: be:af:7d:a2:83:15:09:b1:38:bd:89:3a:68:4c:d5:e7:e2:ed: 62:f6:91:0c:31:48:14:b9:52:9e:7b:5c:ed:03:58:fb:cc:ff: 39:52:ae:4c:54:9d:7d:4a:1d:c5:93:3f:ad:19:fc:02:34:4c: d3:e1:56:eb:7f:8a:b4:39:cd:e9:3a:b0:d7:1e:a6:f3:5f:f2: 42:02:19:f4:d8:5f:a0:ee:15:4c:16:c5:96:9d:36:8f:fb:44: ed:28:17:9b:da:17:51:11:5d:f0:7f:ee:da:d7:92:67:84:a4: 78:30:ac:a3:4e:49:7c:47:c6:ba:1f:d4:a3:75:9a:de:90:1e: 9e:a6:73:80:44:ee:53:85:01:a5:34:2a:ce:f9:d6:7a:b4:18: 30:4f:ca:86:13:5a:13:4f:f9:6c:f9:3d:bb:72:84:c6:ba:81: 1b:0b:29:da:12:86:5f:5c:55:8d:29:c4:ab:69:da:9c:d7:28: 00:3d:15:a0:cf:85:d4:4d:83:69:cd:fb:63:3d:64:0b:57:0d: 0d:0c:ca:d6:06:73:52:82:5b:5a:8e:c5:d6:cf:87:32:e6:21: 0f:65:3b:bd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5sMkIeoSbbj4x1S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzE4NTcwNVoXDTI4MTAwOTE4NTcwNVowLzEtMCsGA1UEAxMk NDhmNTYyMTktOGFjMy00MzBlLTkwZmMtY2YwYWVhMjExMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7KAaDN4OkalhrW+QK2tVNk+RNjuRvzU1axY EyO6cWpkTbc8z5SGqW/Rchhlfvc3X6rHduLbNRE4Y0BpY3FyNNhhCL//EWELuEQL dCyBBGLM7wAsuibdmjSkab7smOcWVnpmwO3d5qclu+ms7sZlMIZ94h+h8MBtE5tL VgI8wjxcuDt2Dv23/5H1m0OBtT4WptV0pLujISBMZO8xK3JngEtnAP/cl5GNlUCl kjW25WM9WjzNRIduAHKSiJzmm6UG0SjFLqrjCkXl1bstfK+qgWlnAXOGixYADofF y5u7eDdTGDG9Ah5MfLlnX3vfRcsg88nY5kOJGyKoh1Ip4go00wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMANrYDuPXSAQP1012zlaxVEecWOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 OGY1NjIxOS04YWMzLTQzMGUtOTBmYy1jZjBhZWEyMTExNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ4ZjU2MjE5LThhYzMtNDMwZS05 MGZjLWNmMGFlYTIxMTE1ZC80OGY1NjIxOS04YWMzLTQzMGUtOTBmYy1jZjBhZWEy MTExNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADOxUwwDgQCAAIwCAMGACYC82gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYlGjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAW3/IMS8DC1RUVpQypdCDD1yk2 56BCo9FEdlfVSOMs2CjTiYW+r32igxUJsTi9iTpoTNXn4u1i9pEMMUgUuVKee1zt A1j7zP85Uq5MVJ19Sh3Fkz+tGfwCNEzT4Vbrf4q0Oc3pOrDXHqbzX/JCAhn02F+g 7hVMFsWWnTaP+0TtKBeb2hdREV3wf+7a15JnhKR4MKyjTkl8R8a6H9SjdZrekB6e pnOARO5ThQGlNCrO+dZ6tBgwT8qGE1oTT/ls+T27coTGuoEbCynaEoZfXFWNKcSr adqc1ygAPRWgz4XUTYNpzftjPWQLVw0NDMrWBnNSgltajsXWz4cy5iEPZTu9 -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:40 2026 by rpki-client