$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483.cer File: 6233e94e-eef9-400d-a6d8-9dd6947fd483.cer (raw, json) Hash identifier: AQXY23VibRyDkhWoX4+r68JgCm3SmEAf5qpAsdZN0QE= Subject key identifier: 75:4B:44:94:AD:9D:67:DE:2A:F2:A5:06:77:57:AE:FF:E9:7A:02:D8 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4D2E5ED103D4881DFD6BE898 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/6233e94e-eef9-400d-a6d8-9dd6947fd483.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 16:19:11 +0000 Certificate not after: Thu 28 Sep 2028 16:19:11 +0000 Subordinate resources: AS: 402649 IP: 204.130.140.0/24 IP: 2602:f658::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:2e:5e:d1:03:d4:88:1d:fd:6b:e8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 26 16:19:11 2026 GMT Not After : Sep 28 16:19:11 2028 GMT Subject: CN=6233e94e-eef9-400d-a6d8-9dd6947fd483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:8e:4a:b2:7d:4c:aa:88:4d:8c:f4:99:18: 7a:e2:14:ec:0b:b7:9b:99:fd:4b:34:33:bd:74:1a: 87:5b:a1:ec:e5:e6:0a:5d:34:c5:99:97:6d:5e:a9: d6:0e:e1:30:8d:1e:2e:85:ed:59:33:fe:d9:03:f7: eb:d7:f8:6d:70:92:9a:be:59:0b:46:92:2b:07:47: ca:b3:3b:64:15:8b:73:b4:0d:18:d8:1b:24:4c:9c: 68:bb:6e:1a:a8:14:d7:a0:09:21:1e:9f:5d:10:b5: ee:ed:3c:f0:75:26:80:ba:36:38:b2:9c:89:2f:ec: df:a4:7b:d4:e7:cc:8f:50:ac:b6:e9:2b:03:bb:e2: 0d:ba:65:af:47:55:d8:1b:c6:ff:b1:74:a3:30:f3: b3:db:e7:ff:04:e7:32:bb:0b:4a:05:e0:a1:49:49: ac:07:f0:f4:68:49:f2:e8:3b:fa:d8:0d:02:62:a3: d8:57:ca:6b:ac:c2:8b:1d:f8:d2:c4:b5:f1:c9:14: 14:0c:84:f3:5c:47:8d:6c:9a:1d:08:2c:7f:7a:9e: c4:1e:ad:15:b7:39:fd:1d:a3:6f:00:d4:45:14:f8: c3:a2:66:70:7d:2d:4e:b5:f6:a0:15:ee:f9:a2:db: 7f:07:40:0f:7e:eb:a4:80:43:68:22:e8:cf:0b:0a: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:44:94:AD:9D:67:DE:2A:F2:A5:06:77:57:AE:FF:E9:7A:02:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6233e94e-eef9-400d-a6d8-9dd6947fd483/6233e94e-eef9-400d-a6d8-9dd6947fd483.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 204.130.140.0/24 IPv6: 2602:f658::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402649 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:66:87:00:6c:9a:79:5a:2a:aa:ab:a4:38:41:e7:dd:5e:e0: 3a:be:9a:82:66:1a:ce:af:e4:5c:54:10:e8:0c:d7:10:55:4b: 3c:71:f8:3c:35:3c:5c:cf:5d:74:df:00:b3:40:5b:f1:20:b1: b2:04:b9:76:af:1d:06:77:c7:fa:f8:e7:dd:77:3d:df:83:eb: 82:04:73:a8:5d:0a:16:d4:14:af:45:2a:d8:6a:af:35:f8:80: 45:7c:4b:c0:5c:cc:1f:5f:6f:98:2e:1a:61:68:ff:4d:4d:23: 02:d6:ab:ff:0d:35:22:fe:e9:1d:6d:80:7f:69:e9:07:38:64: 54:42:a3:c9:bd:e1:eb:2c:bc:1e:98:b4:bd:97:cc:a7:a0:27: c9:e6:0c:f4:5d:2c:16:e6:28:83:a6:09:c2:c8:ff:14:89:8b: 4e:74:16:dc:62:6a:68:2d:92:f4:b8:b1:4c:73:fb:23:a6:43: 3b:32:61:73:bd:fd:5f:ac:4e:a4:57:e3:c3:32:13:f6:fb:ab: bb:ec:9d:f1:53:c1:8e:87:1e:3b:f0:c5:1e:12:3d:f7:81:70: 03:cc:1d:9a:14:18:ac:6a:85:ed:66:de:53:6a:04:37:37:83: 44:75:ae:16:4c:f5:cd:31:dc:f6:db:08:f2:8c:6b:1c:78:39: d1:6e:6e:60 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5NLl7RA9SIHf1r6JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNjE2MTkxMVoXDTI4MDkyODE2MTkxMVowLzEtMCsGA1UEAxMk NjIzM2U5NGUtZWVmOS00MDBkLWE2ZDgtOWRkNjk0N2ZkNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAKOSrJ9TKqITYz0mRh64hTsC7ebmf1LNDO9 dBqHW6Hs5eYKXTTFmZdtXqnWDuEwjR4uhe1ZM/7ZA/fr1/htcJKavlkLRpIrB0fK sztkFYtztA0Y2BskTJxou24aqBTXoAkhHp9dELXu7TzwdSaAujY4spyJL+zfpHvU 58yPUKy26SsDu+INumWvR1XYG8b/sXSjMPOz2+f/BOcyuwtKBeChSUmsB/D0aEny 6Dv62A0CYqPYV8prrMKLHfjSxLXxyRQUDITzXEeNbJodCCx/ep7EHq0Vtzn9HaNv ANRFFPjDomZwfS1OtfagFe75ott/B0APfuukgENoIujPCwrcqwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHVLRJStnWfeKvKlBndXrv/pegLYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 MjMzZTk0ZS1lZWY5LTQwMGQtYTZkOC05ZGQ2OTQ3ZmQ0ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzYyMzNlOTRlLWVlZjktNDAwZC1h NmQ4LTlkZDY5NDdmZDQ4My82MjMzZTk0ZS1lZWY5LTQwMGQtYTZkOC05ZGQ2OTQ3 ZmQ0ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADMgowwDgQCAAIwCAMGACYC9lgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYk2TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzZocAbJp5Wiqqq6Q4QefdXuA6 vpqCZhrOr+RcVBDoDNcQVUs8cfg8NTxcz1103wCzQFvxILGyBLl2rx0Gd8f6+Ofd dz3fg+uCBHOoXQoW1BSvRSrYaq81+IBFfEvAXMwfX2+YLhphaP9NTSMC1qv/DTUi /ukdbYB/aekHOGRUQqPJveHrLLwemLS9l8ynoCfJ5gz0XSwW5iiDpgnCyP8UiYtO dBbcYmpoLZL0uLFMc/sjpkM7MmFzvf1frE6kV+PDMhP2+6u77J3xU8GOhx478MUe Ej33gXADzB2aFBisaoXtZt5TagQ3N4NEda4WTPXNMdz22wjyjGsceDnRbm5g -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:48 2026 by rpki-client