$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613.cer File: 65dc75a9-d89a-4a10-b35b-5f649226e613.cer (raw, json) Hash identifier: NC4q27W3GGB1XfWEmhlHpZOWVHoH9PFJeRnMN38vuE0= Subject key identifier: 66:F7:2D:F7:E3:07:39:AF:B3:E0:1B:0D:C8:28:6E:00:CB:1D:52:D6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E81CDB23758BE30348D1735C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/65dc75a9-d89a-4a10-b35b-5f649226e613.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jul 2026 12:42:15 +0000 Certificate not after: Mon 09 Oct 2028 22:26:08 +0000 Subordinate resources: AS: 402763 IP: 169.128.72.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:cd:b2:37:58:be:30:34:8d:17:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 15 12:42:15 2026 GMT Not After : Oct 9 22:26:08 2028 GMT Subject: CN=65dc75a9-d89a-4a10-b35b-5f649226e613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:6e:7a:af:5c:2e:84:86:0e:8a:4e:39:2e: 3c:a4:2d:92:3f:d5:f3:57:1c:6b:a4:53:92:af:71: af:38:4a:03:42:34:87:7b:65:80:e3:74:a0:91:9a: be:a6:4a:b2:01:9c:85:9c:da:79:31:b8:3f:66:9b: 82:90:36:55:d9:69:4f:f3:75:40:a0:c3:6b:be:4d: 6d:12:81:6d:be:c2:4a:aa:b3:97:ae:fa:13:69:23: 29:9d:02:bb:24:3e:6e:b9:3f:80:6c:21:99:ce:0d: 0e:a8:95:49:06:52:fb:d9:67:10:f1:2d:d0:a6:22: d8:b8:df:74:a5:9f:7d:1d:be:7e:28:c9:c9:53:19: 21:b8:5e:90:e7:4f:71:81:4d:b5:e4:b7:e0:79:ad: 61:12:0b:59:08:f9:a9:21:23:7c:65:1a:9d:ad:54: 2e:a7:8e:78:3d:50:48:b2:91:ad:44:22:bb:fc:d6: c5:dd:a5:4e:38:49:57:fa:17:ee:4d:77:13:1d:60: 77:b1:82:a3:73:e1:04:3d:d4:12:3e:99:d5:7a:5d: e8:25:a3:4b:80:e8:03:c7:e9:ab:d1:bd:38:38:bd: 78:73:55:85:3f:c2:24:d8:f4:31:10:b9:fa:91:68: ce:4f:8b:a2:1b:d5:0f:4a:c2:82:29:1e:86:5e:e6: d5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F7:2D:F7:E3:07:39:AF:B3:E0:1B:0D:C8:28:6E:00:CB:1D:52:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65dc75a9-d89a-4a10-b35b-5f649226e613/65dc75a9-d89a-4a10-b35b-5f649226e613.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 169.128.72.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402763 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c5:2d:55:ca:67:3e:d9:59:74:6f:c7:a6:dc:9d:12:ff:be: 3f:f2:36:03:00:10:b8:9d:42:b3:c1:83:47:ea:89:97:fd:27: a7:75:38:22:d9:41:86:e7:39:93:a8:16:ed:76:c2:85:a3:79: af:10:82:fe:df:77:f9:b9:74:ef:b3:f7:21:8c:8c:5a:76:87: e5:05:c8:f2:99:45:f6:ed:e7:75:b8:83:a9:41:9b:58:49:25: 1d:bb:e1:0a:61:29:1d:bf:dc:04:c7:3d:56:6d:9b:ff:37:c1: 71:9d:f0:f1:89:f3:7a:19:8b:5a:64:53:35:14:41:8c:c5:98: 0c:6d:9f:94:0c:a2:ac:cd:73:a6:24:f8:7b:21:99:97:92:0e: a6:3c:37:74:34:2c:73:2c:4e:ef:a4:cf:73:cc:71:6d:f2:f9: 5e:0c:38:60:62:18:57:a4:59:1d:ed:7c:8c:43:49:9d:40:81: 7c:60:73:79:78:b3:63:05:96:e1:8d:4e:62:0a:3a:66:b3:c6: af:ad:bd:f8:f8:dc:98:a2:6d:1c:d9:35:fc:0d:14:9a:57:c7: 6f:87:06:f4:fc:96:d2:dd:5e:0d:92:25:47:86:f7:e3:20:43: 27:e6:42:87:e1:01:b4:e6:8d:57:43:a6:99:4b:bf:f1:32:37: 89:eb:11:c3 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE6BzbI3WL4wNI0XNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxNTEyNDIxNVoXDTI4MTAwOTIyMjYwOFowLzEtMCsGA1UEAxMk NjVkYzc1YTktZDg5YS00YTEwLWIzNWItNWY2NDkyMjZlNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Nueq9cLoSGDopOOS48pC2SP9XzVxxrpFOS r3GvOEoDQjSHe2WA43SgkZq+pkqyAZyFnNp5Mbg/ZpuCkDZV2WlP83VAoMNrvk1t EoFtvsJKqrOXrvoTaSMpnQK7JD5uuT+AbCGZzg0OqJVJBlL72WcQ8S3QpiLYuN90 pZ99Hb5+KMnJUxkhuF6Q509xgU215Lfgea1hEgtZCPmpISN8ZRqdrVQup454PVBI spGtRCK7/NbF3aVOOElX+hfuTXcTHWB3sYKjc+EEPdQSPpnVel3oJaNLgOgDx+mr 0b04OL14c1WFP8Ik2PQxELn6kWjOT4uiG9UPSsKCKR6GXubV0QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFGb3LffjBzmvs+AbDcgobgDLHVLWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 NWRjNzVhOS1kODlhLTRhMTAtYjM1Yi01ZjY0OTIyNmU2MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY1ZGM3NWE5LWQ4OWEtNGExMC1i MzViLTVmNjQ5MjI2ZTYxMy82NWRjNzVhOS1kODlhLTRhMTAtYjM1Yi01ZjY0OTIy NmU2MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKpgEgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiVLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGfFLVXKZz7ZWXRvx6bcnRL/vj/yNgMAELidQrPBg0fqiZf9 J6d1OCLZQYbnOZOoFu12woWjea8Qgv7fd/m5dO+z9yGMjFp2h+UFyPKZRfbt53W4 g6lBm1hJJR274QphKR2/3ATHPVZtm/83wXGd8PGJ83oZi1pkUzUUQYzFmAxtn5QM oqzNc6Yk+HshmZeSDqY8N3Q0LHMsTu+kz3PMcW3y+V4MOGBiGFekWR3tfIxDSZ1A gXxgc3l4s2MFluGNTmIKOmazxq+tvfj43JiibRzZNfwNFJpXx2+HBvT8ltLdXg2S JUeG9+MgQyfmQofhAbTmjVdDpplLv/EyN4nrEcM= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:10 2026 by rpki-client