$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.cer File: 5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.cer (raw, json) Hash identifier: YIGSHNYU585IvHC8uVr0nMXJyX5m7St3a6dOAUj2l7o= Subject key identifier: E9:EF:5A:B7:ED:15:75:F5:FB:D9:50:89:34:C9:46:28:8B:61:26:8E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E7C70EB1FC9347583319E72C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jul 2026 14:36:16 +0000 Certificate not after: Wed 30 Aug 2028 12:18:55 +0000 Subordinate resources: AS: 40831 IP: 170.223.0.0/16 IP: 2620:191::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7c:70:eb:1f:c9:34:75:83:31:9e:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 13 14:36:16 2026 GMT Not After : Aug 30 12:18:55 2028 GMT Subject: CN=5ee41791-1f3e-4a65-b25c-ee2d1bbdd908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:73:88:a4:82:69:5c:fd:62:4b:46:64:12: 03:ec:7c:23:98:a4:51:dd:f7:96:37:ba:9e:e2:bc: db:2f:c9:2a:1f:9c:0c:34:47:0e:ca:bb:b3:73:97: e6:0c:76:cf:3f:3e:ab:c5:b5:4c:91:82:be:92:a8: 5c:69:6e:99:53:56:85:0a:4f:11:47:c7:3f:4e:90: cd:23:68:06:61:78:29:cd:e0:01:a6:83:2b:7f:b6: e6:83:88:71:29:0f:22:54:9f:d0:b8:38:ca:97:b2: d4:12:6d:4e:4f:25:13:fd:cd:ef:58:34:b1:cc:0d: 49:9d:bd:2b:4f:c1:8e:ef:b4:40:fb:b0:04:1d:11: f9:cb:ba:d9:a6:ae:6f:22:b4:d9:34:9b:86:30:31: 13:05:1b:c6:46:30:92:08:a5:9c:2f:a8:62:e5:de: 91:89:df:c6:f8:19:9c:26:90:e3:e4:51:bd:4a:91: 99:79:5e:01:64:fd:b9:4a:53:02:38:47:7e:b0:06: 14:62:30:3a:fe:93:f0:cc:87:55:d3:d1:8d:69:81: 0e:f6:9d:7c:be:78:29:e7:9b:ac:3d:c8:e5:6f:33: 91:8a:01:a0:fd:05:2f:f4:aa:91:62:22:83:fc:72: be:4a:68:d1:db:67:02:c5:75:28:56:e4:8d:19:5d: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EF:5A:B7:ED:15:75:F5:FB:D9:50:89:34:C9:46:28:8B:61:26:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 170.223.0.0/16 IPv6: 2620:191::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40831 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:95:60:8f:70:42:06:71:8d:fd:16:88:29:52:fb:b5:10:c3: 8d:37:5c:30:4e:83:0d:16:bd:ab:79:cf:28:56:17:a3:f1:2e: 59:ee:74:a0:19:61:91:8e:2d:6f:6c:f3:66:d4:0c:95:cf:8e: 83:88:02:7d:66:78:a2:90:1a:95:1f:eb:1c:92:73:33:96:2f: 4c:bc:40:db:c8:4a:f1:a0:04:10:be:7d:b3:93:08:48:d0:9e: a1:fa:e7:85:8d:dc:b6:ee:99:ec:df:64:fc:31:2b:cd:b0:8b: 2c:9e:8b:b5:0d:6f:29:83:d3:f0:93:2d:65:06:4a:69:a3:f1: f1:a2:4b:31:41:1a:a1:06:52:1a:89:3a:c2:e2:85:65:e5:da: 5f:e7:ff:e0:3d:9d:a8:78:4c:2b:cd:86:ff:a3:dc:e9:85:9c: a3:24:ae:68:4b:52:c4:83:e1:99:de:e9:9c:8e:56:dd:ae:ce: a5:70:43:91:6f:e2:8a:d4:54:5b:c8:94:eb:a3:e7:a6:d8:3f: 47:6e:a7:4f:8b:94:71:fd:54:a0:f1:ee:f1:b8:77:84:4c:27: 7e:6f:c0:bb:7b:b8:e0:c5:2e:67:60:39:67:3e:44:9e:92:6c: a2:d5:c5:70:da:82:17:0a:04:d9:49:32:da:8b:90:1b:69:53: cb:a5:62:f9 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE58cOsfyTR1gzGecsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxMzE0MzYxNloXDTI4MDgzMDEyMTg1NVowLzEtMCsGA1UEAxMk NWVlNDE3OTEtMWYzZS00YTY1LWIyNWMtZWUyZDFiYmRkOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ1ziKSCaVz9YktGZBID7HwjmKRR3feWN7qe 4rzbL8kqH5wMNEcOyruzc5fmDHbPPz6rxbVMkYK+kqhcaW6ZU1aFCk8RR8c/TpDN I2gGYXgpzeABpoMrf7bmg4hxKQ8iVJ/QuDjKl7LUEm1OTyUT/c3vWDSxzA1Jnb0r T8GO77RA+7AEHRH5y7rZpq5vIrTZNJuGMDETBRvGRjCSCKWcL6hi5d6Rid/G+Bmc JpDj5FG9SpGZeV4BZP25SlMCOEd+sAYUYjA6/pPwzIdV09GNaYEO9p18vngp55us PcjlbzORigGg/QUv9KqRYiKD/HK+SmjR22cCxXUoVuSNGV15pQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFOnvWrftFXX1+9lQiTTJRiiLYSaOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 ZWU0MTc5MS0xZjNlLTRhNjUtYjI1Yy1lZTJkMWJiZGQ5MDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVlZTQxNzkxLTFmM2UtNGE2NS1i MjVjLWVlMmQxYmJkZDkwOC81ZWU0MTc5MS0xZjNlLTRhNjUtYjI1Yy1lZTJkMWJi ZGQ5MDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAsEAgABMAUDAwCq3zAOBAIAAjAIAwYEJiABkQAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJ9/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAL+VYI9wQgZxjf0WiClS+7UQw403 XDBOgw0Wvat5zyhWF6PxLlnudKAZYZGOLW9s82bUDJXPjoOIAn1meKKQGpUf6xyS czOWL0y8QNvISvGgBBC+fbOTCEjQnqH654WN3LbumezfZPwxK82wiyyei7UNbymD 0/CTLWUGSmmj8fGiSzFBGqEGUhqJOsLihWXl2l/n/+A9nah4TCvNhv+j3OmFnKMk rmhLUsSD4Zne6ZyOVt2uzqVwQ5Fv4orUVFvIlOuj56bYP0dup0+LlHH9VKDx7vG4 d4RMJ35vwLt7uODFLmdgOWc+RJ6SbKLVxXDaghcKBNlJMtqLkBtpU8ulYvk= -----END CERTIFICATE-----Generated at Tue Jul 21 14:30:40 2026 by rpki-client