$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67adae8d-7292-4fe4-80a6-7cc2a854a8e9.cer File: 67adae8d-7292-4fe4-80a6-7cc2a854a8e9.cer (raw, json) Hash identifier: pwebEib95COUjhuYuCHdsAt6aiwPyRU4OYbfsMjJSyk= Subject key identifier: E3:83:C2:64:B3:9C:09:FB:2F:D5:2F:AA:1D:22:4E:AC:AB:F2:0B:EF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6CAE76B36B59BDFFE0E83B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67adae8d-7292-4fe4-80a6-7cc2a854a8e9/67adae8d-7292-4fe4-80a6-7cc2a854a8e9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67adae8d-7292-4fe4-80a6-7cc2a854a8e9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 23:07:20 +0000 Certificate not after: Mon 09 Oct 2028 23:07:20 +0000 Subordinate resources: IP: 198.235.202.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:ae:76:b3:6b:59:bd:ff:e0:e8:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 23:07:20 2026 GMT Not After : Oct 9 23:07:20 2028 GMT Subject: CN=67adae8d-7292-4fe4-80a6-7cc2a854a8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:e9:3d:82:78:1d:5a:60:fc:12:25:93:1f: 37:58:b1:ab:84:c5:c9:20:4f:5c:b2:58:ca:97:3b: bd:3b:a7:08:26:77:69:ed:9d:9d:8d:88:1f:6d:f0: 7b:e6:af:ea:91:b3:7b:bc:61:38:e4:5b:7f:17:aa: 27:c3:6e:4d:75:a3:15:5b:7e:19:0b:0e:45:0e:ad: 99:18:d1:3f:f4:6f:fa:18:93:92:5b:7e:74:68:3e: 1a:c0:4d:2b:55:fd:7a:bc:5a:1a:d3:d7:ef:e3:45: 35:b4:2f:74:57:c2:6b:ca:5d:08:64:39:0a:84:cb: 39:78:dd:66:81:89:9b:bb:65:34:8b:1b:10:6e:d9: e2:54:99:39:c2:dc:23:c1:95:12:81:13:1c:76:f7: 38:2b:45:b3:d3:ee:6c:2f:7f:82:31:30:18:ea:96: 61:2d:59:9e:b2:88:ef:b3:fd:2b:f2:f3:12:83:39: 3d:ea:81:69:5f:e5:47:23:1e:23:28:42:6f:da:4d: 4f:3d:41:aa:fc:72:57:c8:14:58:01:5a:8d:62:96: bf:06:b2:4d:10:58:e1:58:00:b3:1e:fd:21:5f:81: 13:69:a3:46:fb:e8:37:b6:2e:94:63:60:7d:cc:08: c6:b1:82:3d:e0:2a:08:16:fe:3d:fe:06:0a:b4:03: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:83:C2:64:B3:9C:09:FB:2F:D5:2F:AA:1D:22:4E:AC:AB:F2:0B:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67adae8d-7292-4fe4-80a6-7cc2a854a8e9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67adae8d-7292-4fe4-80a6-7cc2a854a8e9/67adae8d-7292-4fe4-80a6-7cc2a854a8e9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.235.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fa:e8:fe:11:a7:6a:3d:47:3f:f3:8a:b6:6a:ab:43:b5:f6: 36:be:67:58:da:d6:70:a5:36:50:17:5e:70:f2:32:82:af:07: 7b:6a:8c:c9:86:88:d6:ab:78:a7:de:e8:bd:7e:4f:ec:04:0a: df:da:59:79:b1:11:cb:6a:97:aa:f3:44:33:ce:88:4b:41:dd: 05:60:50:ac:b9:35:25:e9:ea:77:41:47:50:f3:5e:71:5f:03: 01:f7:ab:68:ae:8c:7f:00:94:09:8a:dd:bd:73:21:8e:c2:b8: 59:f8:85:38:7c:bb:bb:21:ed:4a:a5:ac:3b:02:80:76:6b:f1: 08:9e:40:69:47:62:03:7c:91:c4:fa:13:70:fd:fe:48:a1:28: 09:11:b1:20:90:76:e6:f2:12:8a:15:95:e4:26:4a:0d:8b:27: 37:b3:10:45:cb:4f:9d:c1:3e:b9:7d:43:cc:95:37:17:ac:b9: 71:32:ea:b9:ce:93:3c:c6:80:62:21:bf:04:37:95:2a:0f:a1: a3:86:7b:e3:0b:5a:fb:ae:41:bb:97:58:53:34:4e:eb:a6:b4: 89:ae:de:b5:d6:b8:be:6c:26:19:76:45:dc:55:c6:71:fd:c5: 32:45:85:3a:62:3b:c3:bd:97:8a:cc:10:54:c3:3b:1e:2f:6b: bf:18:ba:ec -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5srnaza1m9/+DoO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzIzMDcyMFoXDTI4MTAwOTIzMDcyMFowLzEtMCsGA1UEAxMk NjdhZGFlOGQtNzI5Mi00ZmU0LTgwYTYtN2NjMmE4NTRhOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2jpPYJ4HVpg/BIlkx83WLGrhMXJIE9csljK lzu9O6cIJndp7Z2djYgfbfB75q/qkbN7vGE45Ft/F6onw25NdaMVW34ZCw5FDq2Z GNE/9G/6GJOSW350aD4awE0rVf16vFoa09fv40U1tC90V8Jryl0IZDkKhMs5eN1m gYmbu2U0ixsQbtniVJk5wtwjwZUSgRMcdvc4K0Wz0+5sL3+CMTAY6pZhLVmesojv s/0r8vMSgzk96oFpX+VHIx4jKEJv2k1PPUGq/HJXyBRYAVqNYpa/BrJNEFjhWACz Hv0hX4ETaaNG++g3ti6UY2B9zAjGsYI94CoIFv49/gYKtANaIQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOODwmSznAn7L9Uvqh0iTqyr8gvvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 N2FkYWU4ZC03MjkyLTRmZTQtODBhNi03Y2MyYTg1NGE4ZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY3YWRhZThkLTcyOTItNGZlNC04 MGE2LTdjYzJhODU0YThlOS82N2FkYWU4ZC03MjkyLTRmZTQtODBhNi03Y2MyYTg1 NGE4ZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADG68owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGPro/hGnaj1HP/OKtmqr Q7X2Nr5nWNrWcKU2UBdecPIygq8He2qMyYaI1qt4p97ovX5P7AQK39pZebERy2qX qvNEM86IS0HdBWBQrLk1Jenqd0FHUPNecV8DAferaK6MfwCUCYrdvXMhjsK4WfiF OHy7uyHtSqWsOwKAdmvxCJ5AaUdiA3yRxPoTcP3+SKEoCRGxIJB25vISihWV5CZK DYsnN7MQRctPncE+uX1DzJU3F6y5cTLquc6TPMaAYiG/BDeVKg+ho4Z74wta+65B u5dYUzRO66a0ia7etda4vmwmGXZF3FXGcf3FMkWFOmI7w72XiswQVMM7Hi9rvxi6 7A== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:46 2026 by rpki-client