$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda.cer File: 56ce5662-3b8d-4725-80ff-829d50d5beda.cer (raw, json) Hash identifier: H+GAjgkLBi4HY9oNXx1YQ7yP/SLLcGtlp+x8EVFemn0= Subject key identifier: 7A:87:C6:39:F2:3D:8B:23:DB:EF:31:36:0F:50:0F:79:FB:97:C7:3E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4D07E65EE82CAFEFC2C0C28F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/56ce5662-3b8d-4725-80ff-829d50d5beda.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 15:01:40 +0000 Certificate not after: Thu 28 Sep 2028 15:01:40 +0000 Subordinate resources: IP: 138.49.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:07:e6:5e:e8:2c:af:ef:c2:c0:c2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 26 15:01:40 2026 GMT Not After : Sep 28 15:01:40 2028 GMT Subject: CN=56ce5662-3b8d-4725-80ff-829d50d5beda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:2c:48:77:20:90:f1:02:5a:86:54:2f:ab: 56:85:8c:84:4f:5a:3b:9c:bf:d9:48:d6:f9:19:9b: be:ce:09:2c:e1:de:36:b0:74:66:66:70:2e:9f:bf: 45:dd:50:39:7d:b8:0b:e7:cb:ed:6b:8a:ee:28:f2: 1c:b4:00:ef:bf:be:02:35:48:45:5f:52:00:5e:db: 83:da:1c:1f:b4:3f:f4:39:ba:d4:46:68:2a:21:8c: 4f:9e:78:a4:94:7f:3a:b1:3d:cb:c9:3b:88:de:20: 82:67:9a:cc:ff:e5:d2:8f:84:ca:4d:b4:6e:bc:b2: 53:13:c4:8e:8d:66:a1:eb:0a:7b:ce:4b:45:bc:1c: 0e:5c:04:d9:03:5d:64:24:b7:e9:7e:e7:8f:b4:67: fd:25:cb:68:0d:da:2d:db:67:d6:a5:5d:41:8f:a3: 42:a1:b8:68:07:8a:ad:04:b2:bd:66:23:dd:79:94: c6:0f:ea:9f:09:88:fc:76:a3:51:cc:db:aa:2d:16: ce:45:1d:d1:d2:af:16:da:9c:2b:e6:c6:76:c5:fe: 72:24:a0:9e:d8:cb:86:c9:c5:5d:c6:4f:3f:8a:ab: d4:ad:17:c9:f0:1a:8c:a5:a2:70:4f:a8:90:ba:2d: 05:ae:33:e0:51:09:62:4e:6e:c0:3a:67:78:41:63: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:C6:39:F2:3D:8B:23:DB:EF:31:36:0F:50:0F:79:FB:97:C7:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/56ce5662-3b8d-4725-80ff-829d50d5beda/56ce5662-3b8d-4725-80ff-829d50d5beda.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 138.49.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2a:8d:57:08:fa:2e:8a:d5:db:d1:ef:31:67:e7:c3:5d:72: 10:72:1a:68:a8:88:8a:69:50:f6:a2:73:0f:44:92:7b:e7:08: c4:06:db:45:ed:a1:b6:23:be:5d:bd:6f:71:91:0d:c0:a8:a9: 8f:c0:d9:7f:4d:ea:7f:43:d4:46:b6:39:57:b7:1e:77:a9:4b: 12:fe:a8:21:fe:ce:7c:94:04:04:83:fb:4f:f7:16:2f:8d:43: 7f:d9:65:ad:da:26:97:f3:b8:e4:85:64:4d:24:05:a1:e1:0f: 41:5a:06:f7:24:e2:2d:82:cc:91:5a:01:2d:bf:49:fa:40:48: 72:bc:91:ae:00:7f:ec:ec:c1:c2:76:52:00:f2:06:b6:10:df: 91:a6:da:66:fb:17:8f:09:10:f6:15:3a:d0:40:46:ef:57:cf: 92:d0:86:89:65:cd:0e:02:0f:d1:d5:54:95:93:db:0d:1c:c7: 29:99:2c:16:57:0e:1a:0f:9a:f3:55:82:b5:f7:ce:b3:40:54: f4:76:6d:4e:f8:0f:93:a1:c1:1c:ad:18:59:e0:1d:1c:25:f5: b6:4b:04:24:47:61:25:b7:6b:bc:24:9e:cc:63:61:80:29:ec: f6:77:d5:58:7d:34:58:49:7a:1e:7f:c9:94:fd:59:65:df:ed: 57:71:bc:43 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE5NB+Ze6Cyv78LAwo8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNjE1MDE0MFoXDTI4MDkyODE1MDE0MFowLzEtMCsGA1UEAxMk NTZjZTU2NjItM2I4ZC00NzI1LTgwZmYtODI5ZDUwZDViZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmIsSHcgkPECWoZUL6tWhYyET1o7nL/ZSNb5 GZu+zgks4d42sHRmZnAun79F3VA5fbgL58vta4ruKPIctADvv74CNUhFX1IAXtuD 2hwftD/0ObrURmgqIYxPnniklH86sT3LyTuI3iCCZ5rM/+XSj4TKTbRuvLJTE8SO jWah6wp7zktFvBwOXATZA11kJLfpfuePtGf9JctoDdot22fWpV1Bj6NCobhoB4qt BLK9ZiPdeZTGD+qfCYj8dqNRzNuqLRbORR3R0q8W2pwr5sZ2xf5yJKCe2MuGycVd xk8/iqvUrRfJ8BqMpaJwT6iQui0FrjPgUQliTm7AOmd4QWNetwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHqHxjnyPYsj2+8xNg9QD3n7l8c+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NmNlNTY2Mi0zYjhkLTQ3MjUtODBmZi04MjlkNTBkNWJlZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU2Y2U1NjYyLTNiOGQtNDcyNS04 MGZmLTgyOWQ1MGQ1YmVkYS81NmNlNTY2Mi0zYjhkLTQ3MjUtODBmZi04MjlkNTBk NWJlZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCKMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnKo1XCPouitXb0e8xZ+fD XXIQchpoqIiKaVD2onMPRJJ75wjEBttF7aG2I75dvW9xkQ3AqKmPwNl/Tep/Q9RG tjlXtx53qUsS/qgh/s58lAQEg/tP9xYvjUN/2WWt2iaX87jkhWRNJAWh4Q9BWgb3 JOItgsyRWgEtv0n6QEhyvJGuAH/s7MHCdlIA8ga2EN+Rptpm+xePCRD2FTrQQEbv V8+S0IaJZc0OAg/R1VSVk9sNHMcpmSwWVw4aD5rzVYK1986zQFT0dm1O+A+TocEc rRhZ4B0cJfW2SwQkR2Elt2u8JJ7MY2GAKez2d9VYfTRYSXoef8mU/Vll3+1XcbxD -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:59 2026 by rpki-client