$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.cer File: 69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.cer (raw, json) Hash identifier: Ixcw/oBQRcQ4k0EWcTsxN7PTz8UvCn41sew2LJrJ+4s= Subject key identifier: 2F:94:5A:96:C2:04:52:DC:31:D5:70:D4:4B:66:76:B6:A4:C5:E9:DE Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E60C997F5B4BF87D09DE74780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Jul 2026 16:52:18 +0000 Certificate not after: Thu 05 Oct 2028 16:52:18 +0000 Subordinate resources: AS: 53723 IP: 66.85.68.0/24 IP: 2602:f60b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:60:c9:97:f5:b4:bf:87:d0:9d:e7:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 3 16:52:18 2026 GMT Not After : Oct 5 16:52:18 2028 GMT Subject: CN=69ad0bf6-41e7-4013-90d7-0bb2735b7bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:02:2b:c4:52:ab:26:d3:aa:23:b3:c3:93: 8a:8c:74:1e:53:9e:09:49:ae:f3:20:ea:3f:4b:17: c0:4b:75:15:4a:9e:9a:10:14:13:b5:e6:95:d2:ae: 39:8c:dc:ed:60:da:e0:2b:32:59:de:47:33:51:78: 74:1c:c7:74:c8:0a:a7:65:d1:d6:83:a1:61:65:68: db:76:87:00:d4:ff:47:c5:d3:29:e5:be:2a:92:09: 36:04:5d:91:63:54:f5:31:5d:36:65:b0:33:85:3f: b1:55:fd:ec:8e:3d:a4:5a:51:36:2d:bf:c9:77:2b: 81:0d:6e:51:4a:3e:da:34:ec:88:11:9b:0b:a8:aa: 11:02:dc:2b:b3:ca:af:db:76:3a:23:5f:1b:3a:11: 63:40:37:ae:53:10:2d:bb:04:59:39:a2:88:60:27: 89:0f:aa:09:46:3d:64:59:28:be:96:08:81:1e:d5: ee:c2:e2:19:49:ed:20:f0:ff:e1:2b:15:ad:cc:af: 97:1f:bb:b4:32:8b:21:61:6d:ad:fe:66:fc:ac:cb: 59:9f:be:96:cc:69:b1:5b:22:6c:40:53:73:6a:fe: 09:3b:3e:e8:f9:af:55:4d:88:17:3b:38:30:f1:81: 7c:1f:c3:30:7c:3b:70:78:32:68:04:dc:2e:30:b6: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:94:5A:96:C2:04:52:DC:31:D5:70:D4:4B:66:76:B6:A4:C5:E9:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.85.68.0/24 IPv6: 2602:f60b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53723 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:f5:2e:93:79:da:d1:07:f3:dc:a9:25:ae:5b:23:a9:e3:27: 75:e3:4c:9d:6a:73:94:40:13:60:39:86:4b:b0:d6:40:a0:7f: fb:ab:55:5a:fa:96:f1:18:2d:89:89:29:b6:45:4c:e5:f4:83: 37:8c:b8:4d:dc:bf:d0:1b:44:76:e4:3d:08:6f:78:c5:4f:a2: 7c:c9:44:ba:b4:b4:1b:c0:86:cf:69:7f:d0:15:14:84:0b:72: 66:7c:10:52:5f:15:08:0a:3c:ef:ef:26:f9:58:c4:80:56:98: 69:61:47:f5:7f:91:17:d8:65:9c:49:bf:f6:88:55:7a:75:27: 78:b3:10:f1:80:aa:92:5c:94:2a:49:cf:7c:c6:8f:fa:25:3e: 9b:8f:9c:af:14:77:f4:62:27:12:6b:3d:a0:b4:3c:3f:2e:fe: 45:57:86:32:30:16:6a:c8:3c:91:32:99:d3:2e:b2:52:cc:a4: 8c:38:7a:7b:b9:08:9b:b5:2f:c4:92:a1:3d:cb:64:e5:0a:7b: 8c:32:62:1d:96:97:46:fe:f6:fb:ae:75:35:4f:44:21:bb:5f: b0:5f:b8:48:01:3e:7c:c2:96:90:79:26:39:ab:b6:9a:9f:67: 1e:c5:59:75:48:a4:dc:f9:c5:1c:43:8a:41:65:ea:2c:7c:c0: 49:bb:09:5f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5gyZf1tL+H0J3nR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMzE2NTIxOFoXDTI4MTAwNTE2NTIxOFowLzEtMCsGA1UEAxMk NjlhZDBiZjYtNDFlNy00MDEzLTkwZDctMGJiMjczNWI3YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguICK8RSqybTqiOzw5OKjHQeU54JSa7zIOo/ SxfAS3UVSp6aEBQTteaV0q45jNztYNrgKzJZ3kczUXh0HMd0yAqnZdHWg6FhZWjb docA1P9HxdMp5b4qkgk2BF2RY1T1MV02ZbAzhT+xVf3sjj2kWlE2Lb/JdyuBDW5R Sj7aNOyIEZsLqKoRAtwrs8qv23Y6I18bOhFjQDeuUxAtuwRZOaKIYCeJD6oJRj1k WSi+lgiBHtXuwuIZSe0g8P/hKxWtzK+XH7u0MoshYW2t/mb8rMtZn76WzGmxWyJs QFNzav4JOz7o+a9VTYgXOzgw8YF8H8MwfDtweDJoBNwuMLbUBwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC+UWpbCBFLcMdVw1EtmdrakxeneMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 OWFkMGJmNi00MWU3LTQwMTMtOTBkNy0wYmIyNzM1YjdiYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY5YWQwYmY2LTQxZTctNDAxMy05 MGQ3LTBiYjI3MzViN2JjOC82OWFkMGJmNi00MWU3LTQwMTMtOTBkNy0wYmIyNzM1 YjdiYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABCVUQwDgQCAAIwCAMGACYC9gsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDR2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDD9S6TedrRB/PcqSWuWyOp4yd1 40ydanOUQBNgOYZLsNZAoH/7q1Va+pbxGC2JiSm2RUzl9IM3jLhN3L/QG0R25D0I b3jFT6J8yUS6tLQbwIbPaX/QFRSEC3JmfBBSXxUICjzv7yb5WMSAVphpYUf1f5EX 2GWcSb/2iFV6dSd4sxDxgKqSXJQqSc98xo/6JT6bj5yvFHf0YicSaz2gtDw/Lv5F V4YyMBZqyDyRMpnTLrJSzKSMOHp7uQibtS/EkqE9y2TlCnuMMmIdlpdG/vb7rnU1 T0Qhu1+wX7hIAT58wpaQeSY5q7aan2cexVl1SKTc+cUcQ4pBZeosfMBJuwlf -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:59 2026 by rpki-client