$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer File: 5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer (raw, json) Hash identifier: 0paJga5xIn1ZUFB4Z8DjS0abd6wyRnmUQL1FtQT8XrQ= Subject key identifier: 54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6939DE662448637B267520C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 17:24:59 +0000 Certificate not after: Sun 08 Oct 2028 17:24:59 +0000 Subordinate resources: AS: 394199 IP: 74.114.159.0/24 IP: 192.195.32.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:39:de:66:24:48:63:7b:26:75:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 6 17:24:59 2026 GMT Not After : Oct 8 17:24:59 2028 GMT Subject: CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:35:2e:4d:65:d7:0e:e3:06:61:69:ba:ab: 83:c4:8a:3b:04:19:4c:4b:89:71:e0:67:1e:8f:c8: 29:93:b6:9b:18:7a:e2:a4:ca:11:b4:3c:7e:1f:1d: fc:3a:0d:fa:09:92:95:9f:bd:d2:a1:6c:6d:00:e5: 9d:ae:3b:b7:84:b8:03:fc:15:9c:03:c4:89:31:e1: bc:6d:87:bc:ce:0a:43:4f:79:18:b1:54:5b:50:cf: 0c:c8:4a:0c:9c:14:05:08:c1:78:ee:67:da:5f:13: 64:6d:78:11:17:ac:5d:b8:90:54:9b:fc:4f:fd:68: dd:e8:6c:4b:87:17:8f:48:f6:35:f3:e2:40:0d:53: c9:dd:b3:c3:18:5a:ac:a5:c9:56:5e:c7:bc:97:7f: f9:34:7d:ac:2c:5c:69:37:7e:b6:fe:40:7c:9c:f5: 11:93:df:7f:e4:c1:7c:26:43:03:fa:0f:bb:5b:ed: ec:97:62:ab:eb:59:e8:83:68:ae:82:17:af:b9:0e: 8b:a9:35:da:1e:15:2d:7b:02:6a:e7:09:11:f3:95: 95:97:0e:0d:37:76:f1:74:fa:8a:55:1f:7b:17:dc: 57:e3:1e:9f:68:48:50:d3:f6:fb:82:07:ec:a8:cb: 82:34:60:f1:16:45:dc:d4:b4:99:2f:b4:34:70:51: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 74.114.159.0/24 192.195.32.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394199 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c6:a3:97:46:ea:bb:a2:e7:1d:5c:04:47:c3:13:a0:51:a1: 39:0d:a4:d6:f9:e4:c0:fd:2f:83:ad:e8:dc:75:b7:4d:e6:06: 7d:4d:cd:15:9c:10:19:e8:b3:f0:d7:bd:4b:3e:25:2c:07:28: 6d:67:28:6b:23:ce:bd:28:6b:cd:55:cf:fd:85:a2:ca:b9:3e: 29:f0:ad:39:38:7a:d1:64:f9:23:c8:c1:0d:00:31:85:cd:c7: 38:b8:8c:b8:68:77:ae:a9:fa:a1:22:ef:ea:7d:2e:19:67:33: 64:9b:83:ab:bc:2c:11:55:f2:87:90:d2:f2:8c:58:85:e5:6d: be:ad:09:30:ab:19:70:cc:bb:a2:f5:b2:a1:18:f3:27:62:39: 0e:d5:f6:46:b4:d8:93:f2:1e:58:e0:cc:58:22:07:df:30:2b: 20:4c:03:b5:72:6f:83:d9:c3:f0:d4:85:f0:64:07:44:a3:c5: 28:11:e5:ae:23:b4:b3:86:0d:e2:89:b0:33:54:40:30:99:14: da:b6:1e:9f:c2:10:99:e4:c9:7e:3a:27:2e:ec:49:92:e2:68: a8:02:9a:92:e9:d9:40:28:9a:97:39:eb:36:1b:d8:34:1b:58: e9:25:19:bb:15:6f:62:da:86:22:47:89:25:03:53:5e:8b:64: 1d:48:55:50 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE5pOd5mJEhjeyZ1IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNjE3MjQ1OVoXDTI4MTAwODE3MjQ1OVowLzEtMCsGA1UEAxMk NTExMWRjZGMtMzVmOC00YTJmLWI2NjctYmU2YmFmNWViZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+I1Lk1l1w7jBmFpuquDxIo7BBlMS4lx4Gce j8gpk7abGHripMoRtDx+Hx38Og36CZKVn73SoWxtAOWdrju3hLgD/BWcA8SJMeG8 bYe8zgpDT3kYsVRbUM8MyEoMnBQFCMF47mfaXxNkbXgRF6xduJBUm/xP/Wjd6GxL hxePSPY18+JADVPJ3bPDGFqspclWXse8l3/5NH2sLFxpN362/kB8nPURk99/5MF8 JkMD+g+7W+3sl2Kr61nog2iughevuQ6LqTXaHhUtewJq5wkR85WVlw4NN3bxdPqK VR97F9xX4x6faEhQ0/b7ggfsqMuCNGDxFkXc1LSZL7Q0cFHc4wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFFRo6TW36EYrW3xKAnNZ613Wv12jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 MTExZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZiYWY1ZWJmOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzUxMTFkY2RjLTM1ZjgtNGEyZi1i NjY3LWJlNmJhZjVlYmY5Yi81MTExZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZiYWY1 ZWJmOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABKcp8DBADAwyAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgPXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALfGo5dG6rui5x1cBEfDE6BRoTkNpNb55MD9L4Ot 6Nx1t03mBn1NzRWcEBnos/DXvUs+JSwHKG1nKGsjzr0oa81Vz/2Fosq5PinwrTk4 etFk+SPIwQ0AMYXNxzi4jLhod66p+qEi7+p9LhlnM2Sbg6u8LBFV8oeQ0vKMWIXl bb6tCTCrGXDMu6L1sqEY8ydiOQ7V9ka02JPyHljgzFgiB98wKyBMA7Vyb4PZw/DU hfBkB0SjxSgR5a4jtLOGDeKJsDNUQDCZFNq2Hp/CEJnkyX46Jy7sSZLiaKgCmpLp 2UAompc56zYb2DQbWOklGbsVb2LahiJHiSUDU16LZB1IVVA= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:35 2026 by rpki-client