$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de.cer File: 5398a1dc-9144-466a-9218-fa7b21ae09de.cer (raw, json) Hash identifier: THY7NvaUF5jb4sWTcnvcZPQ4bVgrN7Zcw5oO6x4S0Tw= Subject key identifier: 0B:49:AB:F1:0B:38:9E:1E:04:D0:74:70:79:D8:B6:94:88:7D:0C:E8 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E55FEB8274148C5D61B2245C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jun 2026 20:05:27 +0000 Certificate not after: Sun 01 Oct 2028 20:05:27 +0000 Subordinate resources: AS: 16939 IP: 199.101.148.0/22 IP: 204.16.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:55:fe:b8:27:41:48:c5:d6:1b:22:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 29 20:05:27 2026 GMT Not After : Oct 1 20:05:27 2028 GMT Subject: CN=5398a1dc-9144-466a-9218-fa7b21ae09de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b3:cc:0d:6c:4b:e6:bf:0e:7f:33:47:fd:4d: 9b:6a:44:34:0f:67:a9:14:c4:2c:87:17:46:7b:68: d2:0b:46:ae:06:c2:22:30:c1:d6:44:b9:c6:a3:cd: 27:fb:ce:eb:9c:8f:eb:be:29:8d:98:ee:45:c0:21: cd:f2:7f:18:c4:cf:f4:01:8a:4e:ba:44:c0:df:c0: c8:32:ac:41:16:e7:00:48:f5:f7:78:41:58:c8:97: 77:64:23:13:8d:0c:98:4c:b6:13:95:85:ef:73:78: 48:66:79:5e:68:46:6b:1f:a0:00:46:0b:9b:d1:9a: dc:ce:5c:2a:e5:83:b3:0b:c9:a9:4e:a1:96:8b:e8: fd:69:75:61:24:4c:cf:54:8d:03:41:71:93:44:fa: 3c:9a:67:13:75:d5:12:41:95:ae:63:03:85:e0:f7: bc:e8:c4:60:0e:ca:92:32:3b:b8:e2:9f:8f:1a:e6: aa:a3:44:e9:1e:ec:34:21:45:c4:f9:e4:59:b6:5c: 07:df:23:47:c1:6b:03:2c:12:5b:cc:cf:de:72:22: 69:24:ce:bc:58:02:73:85:c7:0c:54:e7:e6:ec:ef: b5:ea:a1:1b:f9:eb:1f:76:2d:cd:b8:b1:93:8f:0d: e3:06:e3:86:09:7b:34:02:b7:38:db:1a:d4:94:02: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:AB:F1:0B:38:9E:1E:04:D0:74:70:79:D8:B6:94:88:7D:0C:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5398a1dc-9144-466a-9218-fa7b21ae09de/5398a1dc-9144-466a-9218-fa7b21ae09de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.101.148.0/22 204.16.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16939 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:46:1e:ef:d2:ec:9c:7e:2f:ed:86:47:23:19:a2:0f:43:f8: 69:76:5e:bc:d0:e6:20:1f:62:21:6c:8e:eb:92:14:20:04:37: 10:d9:35:92:d9:35:3c:49:ad:67:70:b6:ab:ec:ef:6e:0b:10: e9:9a:25:f0:0f:68:f7:7e:82:d3:6e:21:64:f7:c3:d9:86:f6: 4a:f0:9d:2d:3f:7b:71:5f:45:f0:cf:65:1c:19:f9:5c:66:5a: 82:cc:1b:a0:c8:da:2f:d4:5f:c3:10:45:ce:f2:f6:06:49:c4: a4:6a:4e:1c:85:4e:d7:34:f6:36:51:61:2a:59:ea:64:85:1a: 01:08:11:a2:8c:70:09:3d:b8:23:7c:b2:9f:31:39:6b:7f:fc: 4f:72:ac:0b:4b:13:8e:3a:7f:10:51:b7:d8:7c:82:f7:bb:17: 1c:a5:83:f8:77:71:b9:88:8e:cc:04:84:66:57:d9:d1:ad:5f: 5e:d8:ed:34:31:39:65:04:d7:90:ae:62:5a:b1:04:f5:d4:f0: 35:bc:46:ec:7a:bd:83:a9:e4:62:69:fc:08:97:f9:40:89:94: d6:7b:7f:77:a1:8e:e3:4d:89:1a:71:80:fa:ed:9e:b7:5f:42: e4:94:35:f2:94:4f:b1:d0:7f:a3:86:7d:3c:01:d3:a8:91:82: c1:d1:77:b7 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE5V/rgnQUjF1hsiRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyOTIwMDUyN1oXDTI4MTAwMTIwMDUyN1owLzEtMCsGA1UEAxMk NTM5OGExZGMtOTE0NC00NjZhLTkyMTgtZmE3YjIxYWUwOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrPMDWxL5r8OfzNH/U2bakQ0D2epFMQshxdG e2jSC0auBsIiMMHWRLnGo80n+87rnI/rvimNmO5FwCHN8n8YxM/0AYpOukTA38DI MqxBFucASPX3eEFYyJd3ZCMTjQyYTLYTlYXvc3hIZnleaEZrH6AARgub0Zrczlwq 5YOzC8mpTqGWi+j9aXVhJEzPVI0DQXGTRPo8mmcTddUSQZWuYwOF4Pe86MRgDsqS Mju44p+PGuaqo0TpHuw0IUXE+eRZtlwH3yNHwWsDLBJbzM/eciJpJM68WAJzhccM VOfm7O+16qEb+esfdi3NuLGTjw3jBuOGCXs0Arc42xrUlAI23QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFAtJq/ELOJ4eBNB0cHnYtpSIfQzoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 Mzk4YTFkYy05MTQ0LTQ2NmEtOTIxOC1mYTdiMjFhZTA5ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzUzOThhMWRjLTkxNDQtNDY2YS05 MjE4LWZhN2IyMWFlMDlkZS81Mzk4YTFkYy05MTQ0LTQ2NmEtOTIxOC1mYTdiMjFh ZTA5ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHZZQDBALMEPgwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICQiswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAmEYe79LsnH4v7YZHIxmiD0P4aXZevNDmIB9iIWyO 65IUIAQ3ENk1ktk1PEmtZ3C2q+zvbgsQ6Zol8A9o936C024hZPfD2Yb2SvCdLT97 cV9F8M9lHBn5XGZagswboMjaL9RfwxBFzvL2BknEpGpOHIVO1zT2NlFhKlnqZIUa AQgRooxwCT24I3yynzE5a3/8T3KsC0sTjjp/EFG32HyC97sXHKWD+HdxuYiOzASE ZlfZ0a1fXtjtNDE5ZQTXkK5iWrEE9dTwNbxG7Hq9g6nkYmn8CJf5QImU1nt/d6GO 402JGnGA+u2et19C5JQ18pRPsdB/o4Z9PAHTqJGCwdF3tw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:10 2026 by rpki-client