$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390.cer File: 4bf449ad-38c7-403a-8696-f8c8e69b7390.cer (raw, json) Hash identifier: 8a/aFTucrnYRtTkJxoc5/hp/mLI/D2G8ptyBlD5MTP4= Subject key identifier: 63:45:1D:5D:AC:E8:9C:18:17:8E:4A:D4:6D:36:83:77:23:E2:30:08 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E71A9EE91112004EF94CF8E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/4bf449ad-38c7-403a-8696-f8c8e69b7390.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jul 2026 17:57:15 +0000 Certificate not after: Tue 10 Oct 2028 02:58:48 +0000 Subordinate resources: AS: 402730 IP: 169.128.196.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:71:a9:ee:91:11:20:04:ef:94:cf:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 9 17:57:15 2026 GMT Not After : Oct 10 02:58:48 2028 GMT Subject: CN=4bf449ad-38c7-403a-8696-f8c8e69b7390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:53:8e:2a:22:bb:19:bf:58:58:88:15:09: 6b:68:e4:a3:63:90:25:7b:16:1e:92:92:85:a4:94: 66:0e:f9:c3:94:ae:e0:a9:b8:7d:07:0a:ba:f1:57: 6e:c8:4e:2e:67:ee:46:57:7a:58:2e:7a:c0:a1:fa: 49:27:86:93:0f:d4:5b:0d:6f:24:74:57:f3:49:a0: 06:43:fd:0c:d4:0e:f5:f9:e8:65:03:aa:1d:dd:4d: 4d:38:b6:57:a6:be:4d:9c:c1:65:b2:c3:1a:d5:ea: 45:84:67:e1:6d:bb:ec:f8:b8:6a:e4:c4:31:7a:da: 38:d2:ae:45:1e:02:e6:2c:c1:a7:e4:6b:e6:72:fd: 51:79:3d:04:45:96:ff:2a:2c:23:3b:2b:6e:d0:91: 49:4c:36:a9:dc:90:68:a7:1a:ee:34:a7:ba:f3:b3: d5:cb:90:f7:2c:b6:59:4f:8c:02:55:93:c4:76:d7: 64:b4:e4:fc:a8:c2:c3:b6:66:26:8d:b4:eb:37:1e: 82:30:af:67:11:55:e5:b5:56:88:01:d8:05:78:4a: d8:ee:c4:85:c9:4b:1a:87:d7:d1:07:c5:10:03:77: 24:72:63:87:af:de:63:28:e6:bf:cc:60:a1:d0:4e: dc:89:8a:d1:ad:77:2f:71:48:65:3a:41:40:3c:f8: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:45:1D:5D:AC:E8:9C:18:17:8E:4A:D4:6D:36:83:77:23:E2:30:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4bf449ad-38c7-403a-8696-f8c8e69b7390/4bf449ad-38c7-403a-8696-f8c8e69b7390.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 169.128.196.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402730 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2d:e9:6a:9e:ee:d1:5c:b4:ea:2f:35:92:95:09:84:d0:41: a6:a0:3a:f3:6a:41:ad:38:7c:e7:f9:91:af:ec:d2:c2:f7:a6: ae:54:76:b9:01:db:3a:98:9c:08:21:8b:b3:c2:b4:e4:3c:12: 17:ab:73:b4:16:52:ed:e3:6f:1a:15:cd:44:e3:b4:18:29:49: 3e:8f:be:5f:58:e8:fe:10:49:b1:0e:9a:12:31:90:18:75:eb: 5e:4a:57:4b:7e:9a:9e:9d:af:40:e8:14:53:3c:a2:a3:1c:60: a8:8f:8d:ea:77:8d:88:24:a5:60:8a:48:7f:d6:0d:02:fd:69: cd:6e:a4:3d:fc:a4:e2:e7:ec:ba:3f:68:ff:d4:33:a2:b2:1e: 76:54:72:18:95:de:42:b5:a4:f7:f3:af:9e:44:b3:43:77:af: e7:b0:b8:d1:61:50:cb:e5:64:ed:09:db:d5:a0:40:d1:81:1e: 72:aa:84:19:2a:96:ce:fa:82:46:4a:66:27:bf:f7:11:8d:39: c3:ed:88:79:87:85:7d:45:fd:23:48:37:2a:0e:4e:8a:b7:77: 00:b6:8a:ac:a0:d7:7e:bc:4f:ee:6a:52:04:b2:f5:9d:49:eb: 44:89:d5:61:72:d2:ec:54:4a:c4:64:4f:a9:98:7c:7d:1d:57: b5:d4:c0:e2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5xqe6RESAE75TPjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwOTE3NTcxNVoXDTI4MTAxMDAyNTg0OFowLzEtMCsGA1UEAxMk NGJmNDQ5YWQtMzhjNy00MDNhLTg2OTYtZjhjOGU2OWI3MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEJTjioiuxm/WFiIFQlraOSjY5AlexYekpKF pJRmDvnDlK7gqbh9Bwq68VduyE4uZ+5GV3pYLnrAofpJJ4aTD9RbDW8kdFfzSaAG Q/0M1A71+ehlA6od3U1NOLZXpr5NnMFlssMa1epFhGfhbbvs+Lhq5MQxeto40q5F HgLmLMGn5Gvmcv1ReT0ERZb/KiwjOytu0JFJTDap3JBopxruNKe687PVy5D3LLZZ T4wCVZPEdtdktOT8qMLDtmYmjbTrNx6CMK9nEVXltVaIAdgFeErY7sSFyUsah9fR B8UQA3ckcmOHr95jKOa/zGCh0E7ciYrRrXcvcUhlOkFAPPjpGQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGNFHV2s6JwYF45K1G02g3cj4jAIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 YmY0NDlhZC0zOGM3LTQwM2EtODY5Ni1mOGM4ZTY5YjczOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzRiZjQ0OWFkLTM4YzctNDAzYS04 Njk2LWY4YzhlNjliNzM5MC80YmY0NDlhZC0zOGM3LTQwM2EtODY5Ni1mOGM4ZTY5 YjczOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKpgMQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiUqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHUt6Wqe7tFctOovNZKVCYTQQaagOvNqQa04fOf5ka/s0sL3 pq5UdrkB2zqYnAghi7PCtOQ8Eherc7QWUu3jbxoVzUTjtBgpST6Pvl9Y6P4QSbEO mhIxkBh1615KV0t+mp6dr0DoFFM8oqMcYKiPjep3jYgkpWCKSH/WDQL9ac1upD38 pOLn7Lo/aP/UM6KyHnZUchiV3kK1pPfzr55Es0N3r+ewuNFhUMvlZO0J29WgQNGB HnKqhBkqls76gkZKZie/9xGNOcPtiHmHhX1F/SNINyoOToq3dwC2iqyg1368T+5q UgSy9Z1J60SJ1WFy0uxUSsRkT6mYfH0dV7XUwOI= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:47 2026 by rpki-client