$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2.cer File: 709a4541-fc5b-40cd-b9fe-c967d885ead2.cer (raw, json) Hash identifier: OYnpBHcfjT/4YtWYlEKqj/tOO2fMZtfqq3GcUsVgQRw= Subject key identifier: 5A:C1:BE:54:3C:91:F3:64:EC:18:D8:AE:A7:9A:6C:43:19:50:30:DF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4CAF58BFE0F8870C288ACA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/709a4541-fc5b-40cd-b9fe-c967d885ead2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 12:03:15 +0000 Certificate not after: Wed 06 Sep 2028 01:06:30 +0000 Subordinate resources: AS: 402591 IP: 216.181.20.0/24 IP: 2602:f39f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:af:58:bf:e0:f8:87:0c:28:8a:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 26 12:03:15 2026 GMT Not After : Sep 6 01:06:30 2028 GMT Subject: CN=709a4541-fc5b-40cd-b9fe-c967d885ead2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:10:4c:df:bd:61:d2:62:7d:21:10:2f:03: dc:9d:75:23:33:92:47:5b:e8:cd:88:58:21:75:10: 0a:d3:f8:3c:e9:e3:b7:73:0b:ff:9e:98:d3:a2:93: 84:91:4b:58:14:bc:7c:21:9e:bd:f7:58:11:c8:ba: 3d:00:26:e0:28:b9:fe:8e:d3:f2:52:1a:fd:31:33: 2f:01:8d:a0:e7:93:f7:92:ff:28:77:6e:b9:84:2b: e1:93:b7:91:fc:e1:86:c9:a4:8f:64:fe:9b:7e:3b: a4:3a:ea:2e:b8:87:f7:ba:c8:f2:34:ac:9d:52:3d: ec:7c:77:19:2a:28:90:50:e4:6f:49:cc:aa:03:47: 93:11:8e:de:72:56:31:fb:d8:8a:d8:c3:dd:d4:d9: 94:da:06:99:46:ae:84:08:71:c1:99:f6:76:d9:7e: 43:6f:76:29:98:6a:4e:07:4b:8e:a4:a5:91:0f:7e: 01:46:ec:ed:32:9b:75:6f:25:96:7c:07:7b:aa:d6: 93:31:62:c7:20:b5:e4:60:36:30:ad:dd:f1:b8:b8: c0:d3:21:51:94:55:6f:5f:06:d5:58:14:fa:c6:61: 67:12:a3:c2:aa:c4:ad:26:e7:32:92:6d:38:e3:5d: b6:3b:a4:87:a4:d5:6f:1e:96:7f:b2:d5:ed:fc:97: fc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C1:BE:54:3C:91:F3:64:EC:18:D8:AE:A7:9A:6C:43:19:50:30:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/709a4541-fc5b-40cd-b9fe-c967d885ead2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 216.181.20.0/24 IPv6: 2602:f39f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402591 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6c:4e:7e:fa:15:0f:85:0a:0e:67:52:2f:41:42:6e:ba:2c: 20:ea:4e:ca:2a:0c:44:60:de:f4:90:6b:08:6a:1c:73:27:be: 7b:0b:33:77:02:97:6e:4b:98:b3:9a:16:cd:1d:37:e9:f6:01: b7:46:fa:59:ac:b5:d6:c3:d7:41:64:ae:18:92:ce:ee:c1:5e: ae:ec:2a:a5:6c:6a:7b:e1:23:ad:fe:47:af:5a:74:53:ce:a0: 47:7b:d6:10:7f:8a:2f:36:cb:2f:a4:31:25:14:46:db:8f:47: 5a:8e:0a:91:b2:33:6c:57:91:c9:16:c2:3d:49:dd:8f:7c:fe: d2:9a:fc:24:11:ee:1d:43:61:8d:30:a0:e3:9d:91:f8:29:aa: 14:8a:ca:11:ad:5d:89:68:66:eb:f7:af:da:2e:d0:27:62:77: 4a:e4:39:ad:eb:0f:d8:07:cc:37:b8:ff:51:4a:64:a3:69:d8: e5:f5:a4:da:6d:75:da:39:33:12:fe:48:79:52:cd:9f:c7:8a: a1:f9:fc:1f:d9:57:37:3c:de:0f:7f:e8:cd:c5:1c:77:ec:c5: 06:4d:69:d6:61:2c:fa:95:94:29:58:b1:9f:b8:12:7d:b6:4f: 30:72:00:c8:34:c5:33:db:8e:ac:f1:18:09:d3:74:d7:e2:77: 98:d8:2c:39 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5Mr1i/4PiHDCiKyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNjEyMDMxNVoXDTI4MDkwNjAxMDYzMFowLzEtMCsGA1UEAxMk NzA5YTQ1NDEtZmM1Yi00MGNkLWI5ZmUtYzk2N2Q4ODVlYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fMQTN+9YdJifSEQLwPcnXUjM5JHW+jNiFgh dRAK0/g86eO3cwv/npjTopOEkUtYFLx8IZ6991gRyLo9ACbgKLn+jtPyUhr9MTMv AY2g55P3kv8od265hCvhk7eR/OGGyaSPZP6bfjukOuouuIf3usjyNKydUj3sfHcZ KiiQUORvScyqA0eTEY7eclYx+9iK2MPd1NmU2gaZRq6ECHHBmfZ22X5Db3YpmGpO B0uOpKWRD34BRuztMpt1byWWfAd7qtaTMWLHILXkYDYwrd3xuLjA0yFRlFVvXwbV WBT6xmFnEqPCqsStJucykm044122O6SHpNVvHpZ/stXt/Jf8jwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFrBvlQ8kfNk7BjYrqeabEMZUDDfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MDlhNDU0MS1mYzViLTQwY2QtYjlmZS1jOTY3ZDg4NWVhZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzcwOWE0NTQxLWZjNWItNDBjZC1i OWZlLWM5NjdkODg1ZWFkMi83MDlhNDU0MS1mYzViLTQwY2QtYjlmZS1jOTY3ZDg4 NWVhZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADYtRQwDgQCAAIwCAMGACYC858AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYknzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8bE5++hUPhQoOZ1IvQUJuuiwg 6k7KKgxEYN70kGsIahxzJ757CzN3ApduS5izmhbNHTfp9gG3RvpZrLXWw9dBZK4Y ks7uwV6u7CqlbGp74SOt/kevWnRTzqBHe9YQf4ovNssvpDElFEbbj0dajgqRsjNs V5HJFsI9Sd2PfP7SmvwkEe4dQ2GNMKDjnZH4KaoUisoRrV2JaGbr96/aLtAnYndK 5Dmt6w/YB8w3uP9RSmSjadjl9aTabXXaOTMS/kh5Us2fx4qh+fwf2Vc3PN4Pf+jN xRx37MUGTWnWYSz6lZQpWLGfuBJ9tk8wcgDINMUz246s8RgJ03TX4neY2Cw5 -----END CERTIFICATE-----Generated at Tue Jul 21 14:32:18 2026 by rpki-client