$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6884e349-048b-464a-8332-c2b8b2d60951.cer File: 6884e349-048b-464a-8332-c2b8b2d60951.cer (raw, json) Hash identifier: IV+zjotpKbp/STeI/D9YZuo95v7e0d+89bSwuHdRMmA= Subject key identifier: 7F:99:34:91:4B:80:48:A3:2D:5C:F2:0B:84:81:92:9C:B1:76:E7:FF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6C038E2ABE68EF2687372780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6884e349-048b-464a-8332-c2b8b2d60951/6884e349-048b-464a-8332-c2b8b2d60951.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6884e349-048b-464a-8332-c2b8b2d60951/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 17:22:59 +0000 Certificate not after: Mon 09 Oct 2028 17:22:59 +0000 Subordinate resources: AS: 26855 IP: 64.66.0.0/20 IP: 69.4.160.0/20 IP: 2607:fe68::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:03:8e:2a:be:68:ef:26:87:37:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 17:22:59 2026 GMT Not After : Oct 9 17:22:59 2028 GMT Subject: CN=6884e349-048b-464a-8332-c2b8b2d60951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ed:5a:9e:d4:31:1c:48:e5:f3:b6:9f:d0:77: 0a:1b:56:78:b7:41:40:11:c7:51:8f:52:f9:31:1d: 5d:90:0a:37:1c:01:b4:74:80:7e:d1:ae:a1:c6:cf: 3f:14:14:c7:1f:a0:9a:63:e2:b4:1c:6a:c9:ca:1a: 04:93:76:88:d0:54:6c:4f:94:f1:cb:9c:2a:45:ef: a9:a0:f0:fe:b3:ef:fe:9b:17:d7:e5:c6:21:e3:51: cc:33:d5:45:91:af:5c:25:83:80:8a:e7:9d:ac:71: 35:60:68:3a:b5:b9:09:26:36:7f:90:c6:64:e1:fb: b2:78:47:02:fb:89:2d:64:91:f6:b4:26:3c:01:44: d7:e4:15:43:c9:7e:09:bc:23:55:ee:1d:a2:72:22: 8e:7b:fe:47:e2:59:c4:8d:65:35:53:c4:11:3f:ce: 05:91:16:e9:1e:4f:49:19:77:28:e5:47:60:57:31: 24:ab:a9:e6:c7:d0:01:50:b2:12:4e:3d:5b:69:ad: 16:fe:43:b2:f5:ac:6d:dc:8a:1d:45:24:f2:77:3e: 6f:1b:b1:fb:74:35:c0:24:05:05:91:d4:f6:05:42: 8f:fe:5d:1f:aa:03:02:a9:57:04:ad:8a:fd:fd:7a: 24:0a:af:7f:5e:e9:d5:e8:e2:65:fd:98:61:51:e3: 0e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:99:34:91:4B:80:48:A3:2D:5C:F2:0B:84:81:92:9C:B1:76:E7:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6884e349-048b-464a-8332-c2b8b2d60951/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6884e349-048b-464a-8332-c2b8b2d60951/6884e349-048b-464a-8332-c2b8b2d60951.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.66.0.0/20 69.4.160.0/20 IPv6: 2607:fe68::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26855 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6c:61:ee:59:86:45:f1:51:f4:37:c3:93:1d:3c:ea:02:36: 98:b5:3c:53:db:32:cc:1a:fd:af:da:03:bb:5a:31:34:8d:d1: 3e:dc:de:9d:96:12:94:fd:27:02:60:33:be:b8:a3:58:4d:6b: 61:f6:76:af:ef:ad:67:4a:58:70:e1:d2:5e:0a:cb:91:90:40: c8:44:f4:0f:74:c2:f1:f3:42:ff:07:34:49:02:f2:22:d2:e2: 9e:99:dd:f9:86:a4:ba:28:73:52:7d:65:cd:f2:1f:68:39:a9: bd:67:c5:08:07:11:09:f4:be:fb:3f:32:38:df:c0:69:78:51: 1c:8f:29:2f:8b:80:52:91:dc:51:a8:bf:dc:62:62:37:ac:46: 4f:28:ff:1f:e2:d6:75:21:e4:bc:be:75:98:12:ad:2c:f0:40: c9:98:4e:4a:0b:11:16:a2:7c:4e:40:6f:67:25:7b:0c:ae:fb: f9:ae:0f:79:c4:c5:9f:a2:a3:54:56:31:02:c8:9e:2e:45:f9: 32:52:dc:4b:53:1e:cf:6d:8d:9b:20:bf:6b:f2:3d:13:a2:50: 38:6f:87:38:b4:b3:f2:d0:ab:03:67:a8:bb:d4:d0:71:a5:00: 29:a2:8e:83:99:65:f7:e9:d4:30:26:39:da:6d:ca:fa:8b:ae: 90:19:2c:7d -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE5sA44qvmjvJoc3J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzE3MjI1OVoXDTI4MTAwOTE3MjI1OVowLzEtMCsGA1UEAxMk Njg4NGUzNDktMDQ4Yi00NjRhLTgzMzItYzJiOGIyZDYwOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe1antQxHEjl87af0HcKG1Z4t0FAEcdRj1L5 MR1dkAo3HAG0dIB+0a6hxs8/FBTHH6CaY+K0HGrJyhoEk3aI0FRsT5Txy5wqRe+p oPD+s+/+mxfX5cYh41HMM9VFka9cJYOAiuedrHE1YGg6tbkJJjZ/kMZk4fuyeEcC +4ktZJH2tCY8AUTX5BVDyX4JvCNV7h2iciKOe/5H4lnEjWU1U8QRP84FkRbpHk9J GXco5UdgVzEkq6nmx9ABULISTj1baa0W/kOy9axt3IodRSTydz5vG7H7dDXAJAUF kdT2BUKP/l0fqgMCqVcErYr9/XokCq9/XunV6OJl/ZhhUeMO6wIDAQABo4IELzCC BCswHQYDVR0OBBYEFH+ZNJFLgEijLVzyC4SBkpyxduf/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 ODg0ZTM0OS0wNDhiLTQ2NGEtODMzMi1jMmI4YjJkNjA5NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY4ODRlMzQ5LTA0OGItNDY0YS04 MzMyLWMyYjhiMmQ2MDk1MS82ODg0ZTM0OS0wNDhiLTQ2NGEtODMzMi1jMmI4YjJk NjA5NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARAQgADBARFBKAwDQQCAAIwBwMFACYH/mgwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICaOcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAp2xh7lmGRfFR9DfDkx08 6gI2mLU8U9syzBr9r9oDu1oxNI3RPtzenZYSlP0nAmAzvrijWE1rYfZ2r++tZ0pY cOHSXgrLkZBAyET0D3TC8fNC/wc0SQLyItLinpnd+YakuihzUn1lzfIfaDmpvWfF CAcRCfS++z8yON/AaXhRHI8pL4uAUpHcUai/3GJiN6xGTyj/H+LWdSHkvL51mBKt LPBAyZhOSgsRFqJ8TkBvZyV7DK77+a4PecTFn6KjVFYxAsieLkX5MlLcS1Mez22N myC/a/I9E6JQOG+HOLSz8tCrA2eou9TQcaUAKaKOg5ll9+nUMCY52m3K+ouukBks fQ== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:02 2026 by rpki-client