$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6.cer File: 566f1590-ff68-4a9f-816c-86a11bd82db6.cer (raw, json) Hash identifier: widhVzcKNybLa3zCnCOLDkmBMeF5+9C7eASCEkZs3xU= Subject key identifier: A9:7E:C0:56:3F:66:7D:1C:10:D3:27:9D:42:29:1E:CD:78:7B:73:C9 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F674149E0BFBF58F6CF19BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/566f1590-ff68-4a9f-816c-86a11bd82db6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 17:15:16 +0000 Certificate not after: Mon 31 Jul 2028 21:04:50 +0000 Subordinate resources: AS: 402450 IP: 198.252.223.0/24 IP: 2602:f3d8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:41:49:e0:bf:bf:58:f6:cf:19:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 5 17:15:16 2026 GMT Not After : Jul 31 21:04:50 2028 GMT Subject: CN=566f1590-ff68-4a9f-816c-86a11bd82db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:2e:57:ae:be:f6:56:49:c2:75:bf:84:be: f5:d7:33:ea:c1:9d:3f:67:3f:b6:2b:9c:aa:16:cf: 9d:41:80:a7:12:d7:64:42:b1:91:38:79:fb:8d:ff: b3:e1:d1:65:ee:41:69:e6:f7:25:72:de:58:2e:2c: 70:b6:b7:6c:a1:9c:95:39:4c:81:a2:8b:9a:ea:0a: 9e:45:73:ac:5e:d8:6e:44:c8:78:f8:f4:88:43:9d: e0:41:c3:e7:ee:45:2d:a3:6f:a6:66:05:fd:69:5b: 88:6a:54:bd:d8:9c:af:7e:7f:52:22:bd:f6:92:5a: cc:ff:7d:fb:c4:9d:d0:70:29:2a:a2:f2:28:61:c1: a3:97:1a:ee:f5:a2:db:a5:1a:89:02:40:1d:29:b8: a6:2b:2d:42:c2:70:31:7b:55:f7:b0:e3:17:87:6e: ac:ba:e0:24:7c:ef:28:cf:54:b1:05:95:3c:76:f9: af:9b:c7:7b:0f:50:6c:9c:86:40:d4:3a:58:cf:2e: 50:53:2f:b7:af:88:ce:3d:67:76:4e:b6:e3:b0:85: 10:05:73:78:c8:f3:62:7c:67:e2:b4:0e:45:42:93: 9f:41:16:c6:f6:e8:f1:21:0f:c5:58:db:da:f1:95: 37:09:6d:d8:19:e9:6e:ba:72:50:31:5e:70:bf:d5: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7E:C0:56:3F:66:7D:1C:10:D3:27:9D:42:29:1E:CD:78:7B:73:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/566f1590-ff68-4a9f-816c-86a11bd82db6/566f1590-ff68-4a9f-816c-86a11bd82db6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.252.223.0/24 IPv6: 2602:f3d8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402450 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3d:00:c3:ae:bb:60:fb:76:9f:d0:dc:f3:d1:01:62:76:20: 2c:0d:f3:1d:57:09:bd:85:e5:ab:fb:c2:cf:2a:ad:5f:65:70: 82:dc:b9:4e:ce:2b:d7:e6:5b:75:08:78:b1:a1:ba:72:c1:82: a4:ec:4a:1f:ea:2e:a3:d0:1e:b7:c8:1a:70:b8:e6:ab:54:02: a5:8a:4d:c0:97:4e:c7:cf:98:28:5e:e0:22:38:b0:74:11:a2: 44:4e:37:e3:0d:4c:9b:03:c5:49:22:3e:9a:88:2f:04:2d:43: 10:52:1a:ee:29:d1:19:8e:6b:4d:ce:e1:2e:32:f2:e0:88:30: 0a:ce:68:a7:9c:66:8c:7b:df:b1:99:b7:bd:72:32:ba:39:37: ab:c7:91:f9:8d:ab:a1:2f:50:f7:a3:0a:e1:bd:16:82:65:27: a2:62:1a:71:46:1c:da:93:98:d6:fd:96:0d:85:c4:7d:64:a7: 33:82:62:39:c0:f5:46:80:77:49:2b:b2:41:a9:d2:7d:69:52: a4:15:09:8f:ce:4e:15:b9:51:90:47:19:04:59:8a:66:b7:42: 71:e4:42:80:48:3f:7f:83:97:4a:85:72:d7:4c:09:8f:52:81: f6:88:b2:08:b4:3c:20:b7:0b:d7:c5:c9:90:88:b6:34:89:4d: 25:04:f5:db -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9nQUngv79Y9s8ZvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNTE3MTUxNloXDTI4MDczMTIxMDQ1MFowLzEtMCsGA1UEAxMk NTY2ZjE1OTAtZmY2OC00YTlmLTgxNmMtODZhMTFiZDgyZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYIuV66+9lZJwnW/hL711zPqwZ0/Zz+2K5yq Fs+dQYCnEtdkQrGROHn7jf+z4dFl7kFp5vclct5YLixwtrdsoZyVOUyBooua6gqe RXOsXthuRMh4+PSIQ53gQcPn7kUto2+mZgX9aVuIalS92Jyvfn9SIr32klrM/337 xJ3QcCkqovIoYcGjlxru9aLbpRqJAkAdKbimKy1CwnAxe1X3sOMXh26suuAkfO8o z1SxBZU8dvmvm8d7D1BsnIZA1DpYzy5QUy+3r4jOPWd2TrbjsIUQBXN4yPNifGfi tA5FQpOfQRbG9ujxIQ/FWNva8ZU3CW3YGeluunJQMV5wv9UcxQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKl+wFY/Zn0cENMnnUIpHs14e3PJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NjZmMTU5MC1mZjY4LTRhOWYtODE2Yy04NmExMWJkODJkYjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU2NmYxNTkwLWZmNjgtNGE5Zi04 MTZjLTg2YTExYmQ4MmRiNi81NjZmMTU5MC1mZjY4LTRhOWYtODE2Yy04NmExMWJk ODJkYjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADG/N8wDgQCAAIwCAMGACYC89gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkEjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCPQDDrrtg+3af0Nzz0QFidiAs DfMdVwm9heWr+8LPKq1fZXCC3LlOzivX5lt1CHixobpywYKk7Eof6i6j0B63yBpw uOarVAKlik3Al07Hz5goXuAiOLB0EaJETjfjDUybA8VJIj6aiC8ELUMQUhruKdEZ jmtNzuEuMvLgiDAKzminnGaMe9+xmbe9cjK6OTerx5H5jauhL1D3owrhvRaCZSei YhpxRhzak5jW/ZYNhcR9ZKczgmI5wPVGgHdJK7JBqdJ9aVKkFQmPzk4VuVGQRxkE WYpmt0Jx5EKASD9/g5dKhXLXTAmPUoH2iLIItDwgtwvXxcmQiLY0iU0lBPXb -----END CERTIFICATE-----Generated at Tue Oct 20 11:49:35 2026 by rpki-client