$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer File: 5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer (raw, json) Hash identifier: 6UQwlIlOLa5ZHzo4JHDd9IdO5b1hvK3MTL35VO7nyHE= Subject key identifier: 54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584EA6DE9CA4D944AE9238ACC040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jul 2026 19:21:14 +0000 Certificate not after: Sun 08 Oct 2028 17:24:59 +0000 Subordinate resources: AS: 394199 IP: 74.114.159.0/24 IP: 192.195.32.0/24 IP: 216.52.235.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:de:9c:a4:d9:44:ae:92:38:ac:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 28 19:21:14 2026 GMT Not After : Oct 8 17:24:59 2028 GMT Subject: CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:35:2e:4d:65:d7:0e:e3:06:61:69:ba:ab: 83:c4:8a:3b:04:19:4c:4b:89:71:e0:67:1e:8f:c8: 29:93:b6:9b:18:7a:e2:a4:ca:11:b4:3c:7e:1f:1d: fc:3a:0d:fa:09:92:95:9f:bd:d2:a1:6c:6d:00:e5: 9d:ae:3b:b7:84:b8:03:fc:15:9c:03:c4:89:31:e1: bc:6d:87:bc:ce:0a:43:4f:79:18:b1:54:5b:50:cf: 0c:c8:4a:0c:9c:14:05:08:c1:78:ee:67:da:5f:13: 64:6d:78:11:17:ac:5d:b8:90:54:9b:fc:4f:fd:68: dd:e8:6c:4b:87:17:8f:48:f6:35:f3:e2:40:0d:53: c9:dd:b3:c3:18:5a:ac:a5:c9:56:5e:c7:bc:97:7f: f9:34:7d:ac:2c:5c:69:37:7e:b6:fe:40:7c:9c:f5: 11:93:df:7f:e4:c1:7c:26:43:03:fa:0f:bb:5b:ed: ec:97:62:ab:eb:59:e8:83:68:ae:82:17:af:b9:0e: 8b:a9:35:da:1e:15:2d:7b:02:6a:e7:09:11:f3:95: 95:97:0e:0d:37:76:f1:74:fa:8a:55:1f:7b:17:dc: 57:e3:1e:9f:68:48:50:d3:f6:fb:82:07:ec:a8:cb: 82:34:60:f1:16:45:dc:d4:b4:99:2f:b4:34:70:51: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 74.114.159.0/24 192.195.32.0/24 216.52.235.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394199 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:25:c3:27:07:b6:b2:bf:60:25:7e:4a:6d:b2:bd:08:2a:08: ca:d2:97:66:03:11:b4:c1:c2:d7:91:8b:f2:c8:99:d0:02:79: 86:ff:54:bf:1f:75:40:e8:ac:eb:86:ff:f6:61:ba:fd:c7:be: e7:6b:38:0f:af:d5:63:84:31:e8:b8:a3:90:a3:2c:a5:cf:4a: c6:9c:53:a4:6e:34:52:dd:14:f7:0d:8e:ca:19:49:eb:12:51: 15:49:39:9b:8f:ee:d0:5c:e4:90:dc:c5:f3:6d:30:3f:27:f7: 03:0c:39:38:2e:6d:91:e1:ca:8c:e0:3a:c7:12:69:2f:88:3c: 30:23:ed:a5:44:1c:4d:53:59:46:50:cb:4a:7c:cf:66:34:b0: 92:c6:20:4a:8b:bc:34:d6:e9:48:4b:af:8d:17:cf:3c:0a:a8: 26:d5:6e:91:cb:fa:ec:09:e4:d2:58:70:39:ee:eb:cd:65:9d: 66:0b:5d:0a:70:96:8e:9e:b3:54:91:63:c0:72:2e:83:0d:d5: e8:34:24:60:13:5e:f8:32:d1:8b:cc:07:4d:83:84:b4:5b:83: ba:66:b7:22:63:bb:4e:f8:ef:d3:2f:a3:c5:a3:dd:be:03:8f: b8:43:db:bd:8f:7b:2c:45:cb:e4:18:6f:f7:05:aa:f6:76:42: e1:87:0b:26 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE6m3pyk2USukjiswEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcyODE5MjExNFoXDTI4MTAwODE3MjQ1OVowLzEtMCsGA1UEAxMk NTExMWRjZGMtMzVmOC00YTJmLWI2NjctYmU2YmFmNWViZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+I1Lk1l1w7jBmFpuquDxIo7BBlMS4lx4Gce j8gpk7abGHripMoRtDx+Hx38Og36CZKVn73SoWxtAOWdrju3hLgD/BWcA8SJMeG8 bYe8zgpDT3kYsVRbUM8MyEoMnBQFCMF47mfaXxNkbXgRF6xduJBUm/xP/Wjd6GxL hxePSPY18+JADVPJ3bPDGFqspclWXse8l3/5NH2sLFxpN362/kB8nPURk99/5MF8 JkMD+g+7W+3sl2Kr61nog2iughevuQ6LqTXaHhUtewJq5wkR85WVlw4NN3bxdPqK VR97F9xX4x6faEhQ0/b7ggfsqMuCNGDxFkXc1LSZL7Q0cFHc4wIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFFRo6TW36EYrW3xKAnNZ613Wv12jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 MTExZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZiYWY1ZWJmOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzUxMTFkY2RjLTM1ZjgtNGEyZi1i NjY3LWJlNmJhZjVlYmY5Yi81MTExZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZiYWY1 ZWJmOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABKcp8DBADAwyADBADYNOswGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBgPXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACElwycHtrK/YCV+Sm2yvQgqCMrSl2YD EbTBwteRi/LImdACeYb/VL8fdUDorOuG//Zhuv3HvudrOA+v1WOEMei4o5CjLKXP SsacU6RuNFLdFPcNjsoZSesSURVJOZuP7tBc5JDcxfNtMD8n9wMMOTgubZHhyozg OscSaS+IPDAj7aVEHE1TWUZQy0p8z2Y0sJLGIEqLvDTW6UhLr40XzzwKqCbVbpHL +uwJ5NJYcDnu681lnWYLXQpwlo6es1SRY8ByLoMN1eg0JGATXvgy0YvMB02DhLRb g7pmtyJju07479Mvo8Wj3b4Dj7hD272PeyxFy+QYb/cFqvZ2QuGHCyY= -----END CERTIFICATE-----Generated at Fri Sep 4 21:16:48 2026 by rpki-client