$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/54a43c54-c87c-4425-8f89-90c94d0303a0.cer File: 54a43c54-c87c-4425-8f89-90c94d0303a0.cer (raw, json) Hash identifier: 8cL3wys5jXD2YL8RNc7VnA04cecauT+pmbx6IUthS6o= Subject key identifier: 93:84:D2:5D:EC:BB:C8:8C:80:C8:DE:05:E7:9C:B1:BF:85:97:C4:D6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E41A75B4D5396565B4D390228 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/54a43c54-c87c-4425-8f89-90c94d0303a0/54a43c54-c87c-4425-8f89-90c94d0303a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/54a43c54-c87c-4425-8f89-90c94d0303a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Jun 2026 13:13:15 +0000 Certificate not after: Sun 24 Sep 2028 13:13:15 +0000 Subordinate resources: AS: 15231 IP: 208.82.184.0/21 IP: 2602:ff67::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:a7:5b:4d:53:96:56:5b:4d:39:02:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 22 13:13:15 2026 GMT Not After : Sep 24 13:13:15 2028 GMT Subject: CN=54a43c54-c87c-4425-8f89-90c94d0303a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:93:a9:3c:4d:5f:b8:08:a3:bf:b4:f1:a8: fe:37:24:0a:c9:e5:93:74:cf:58:86:ee:ef:a6:94: f9:67:61:c0:f9:a8:46:6a:bb:38:c7:39:b6:8b:7d: 75:23:1e:c8:24:22:8b:1c:1f:a3:09:59:3d:c8:65: a3:79:11:70:d5:20:cd:71:44:d1:e3:06:12:7d:e8: dd:ed:63:b6:e9:ad:11:44:91:d5:fd:09:22:86:1e: f0:17:7c:c8:0f:4f:f5:87:97:2f:1f:dc:7b:ae:9d: 1c:f0:80:d3:de:26:fc:39:d2:bd:e3:e7:5b:3f:81: a0:82:14:f3:4c:be:28:a0:eb:4d:e7:44:64:f1:b7: c7:04:2e:bf:bf:95:c8:5f:02:62:7d:92:6f:0f:27: c2:28:8f:b9:9a:6a:59:47:05:e0:db:a6:3a:8f:2e: 84:a8:8d:3c:ab:d4:37:0f:dc:76:ed:81:57:b0:37: 27:f9:72:ef:15:2e:91:ac:6c:54:a7:e0:bd:4d:cf: 34:57:69:c4:c1:33:df:54:88:52:24:f1:11:f2:eb: 95:10:0a:9d:0d:85:60:7d:0e:81:28:a4:06:99:d1: 68:5f:ec:8e:a7:cd:1d:11:0e:25:9a:92:c7:12:f8: 27:0d:23:20:a9:f2:25:a7:2a:0e:23:2e:d8:02:b1: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:84:D2:5D:EC:BB:C8:8C:80:C8:DE:05:E7:9C:B1:BF:85:97:C4:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/54a43c54-c87c-4425-8f89-90c94d0303a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/54a43c54-c87c-4425-8f89-90c94d0303a0/54a43c54-c87c-4425-8f89-90c94d0303a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.82.184.0/21 IPv6: 2602:ff67::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15231 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:36:40:93:b6:5d:ca:20:f2:8b:18:bc:8d:c6:e5:a6:f6:ee: 69:bd:7a:6a:ca:11:f7:98:d5:1c:65:e6:5f:ea:fb:3c:9c:49: ed:74:3d:c9:15:f1:a6:90:ac:8a:51:ea:ff:c8:ee:8b:f1:ff: 23:25:36:1f:a7:dc:7a:3d:99:7b:83:4c:00:e5:69:4c:04:01: 63:75:82:04:7d:ab:00:77:aa:e6:ab:27:24:fa:d8:19:f3:03: 34:ac:8d:22:e0:2d:94:12:35:a8:7c:d9:38:04:3b:9a:14:04: 28:b2:ad:9e:e2:52:d5:f3:da:bc:5f:c9:24:66:5c:30:87:e7: f9:63:38:20:85:29:d4:3d:35:45:97:24:52:c1:98:bb:e9:cf: 5d:63:d6:a9:e5:4c:77:9c:c9:3a:59:7f:7f:2c:0f:30:13:74: 8b:c1:ca:74:ac:69:4b:76:25:15:a1:b8:72:65:21:18:cd:f2: 18:71:e3:60:c6:b3:a8:11:cd:31:0b:69:01:1b:88:66:4d:67: 60:43:d6:e8:5b:66:3b:92:a7:f4:da:11:9f:3a:94:4f:10:35: 8e:06:d5:b4:57:3d:72:70:bc:43:4d:2a:9e:84:8a:1c:5e:f0: d3:30:b5:8f:88:72:d8:57:6b:8c:2e:81:3f:6e:8f:63:9e:0f: 34:f3:d5:8b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5Bp1tNU5ZWW005AigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyMjEzMTMxNVoXDTI4MDkyNDEzMTMxNVowLzEtMCsGA1UEAxMk NTRhNDNjNTQtYzg3Yy00NDI1LThmODktOTBjOTRkMDMwM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi+TqTxNX7gIo7+08aj+NyQKyeWTdM9Yhu7v ppT5Z2HA+ahGars4xzm2i311Ix7IJCKLHB+jCVk9yGWjeRFw1SDNcUTR4wYSfejd 7WO26a0RRJHV/Qkihh7wF3zID0/1h5cvH9x7rp0c8IDT3ib8OdK94+dbP4GgghTz TL4ooOtN50Rk8bfHBC6/v5XIXwJifZJvDyfCKI+5mmpZRwXg26Y6jy6EqI08q9Q3 D9x27YFXsDcn+XLvFS6RrGxUp+C9Tc80V2nEwTPfVIhSJPER8uuVEAqdDYVgfQ6B KKQGmdFoX+yOp80dEQ4lmpLHEvgnDSMgqfIlpyoOIy7YArFZdwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJOE0l3su8iMgMjeBeecsb+Fl8TWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NGE0M2M1NC1jODdjLTQ0MjUtOGY4OS05MGM5NGQwMzAzYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU0YTQzYzU0LWM4N2MtNDQyNS04 Zjg5LTkwYzk0ZDAzMDNhMC81NGE0M2M1NC1jODdjLTQ0MjUtOGY4OS05MGM5NGQw MzAzYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAPQUrgwDgQCAAIwCAMGBCYC/2cAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjt/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAQ2QJO2Xcog8osYvI3G5ab27mm9 emrKEfeY1Rxl5l/q+zycSe10PckV8aaQrIpR6v/I7ovx/yMlNh+n3Ho9mXuDTADl aUwEAWN1ggR9qwB3quarJyT62BnzAzSsjSLgLZQSNah82TgEO5oUBCiyrZ7iUtXz 2rxfySRmXDCH5/ljOCCFKdQ9NUWXJFLBmLvpz11j1qnlTHecyTpZf38sDzATdIvB ynSsaUt2JRWhuHJlIRjN8hhx42DGs6gRzTELaQEbiGZNZ2BD1uhbZjuSp/TaEZ86 lE8QNY4G1bRXPXJwvENNKp6Eihxe8NMwtY+IcthXa4wugT9uj2OeDzTz1Ys= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:45 2026 by rpki-client