$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/729fa1be-8961-433d-af29-2d29d2654de9.cer File: 729fa1be-8961-433d-af29-2d29d2654de9.cer (raw, json) Hash identifier: Wx5Lw5yDYM8F6y12Peozn9OGYxd+zS1jFMG4VCRaQiM= Subject key identifier: 07:96:D2:12:50:A9:EF:3C:6E:18:88:9D:E7:72:3F:B7:A1:67:C0:96 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E7F9669DCD23755D8F0692E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/729fa1be-8961-433d-af29-2d29d2654de9/729fa1be-8961-433d-af29-2d29d2654de9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/729fa1be-8961-433d-af29-2d29d2654de9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jul 2026 17:39:14 +0000 Certificate not after: Mon 09 Oct 2028 22:35:21 +0000 Subordinate resources: AS: 402758 IP: 23.246.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:96:69:dc:d2:37:55:d8:f0:69:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 14 17:39:14 2026 GMT Not After : Oct 9 22:35:21 2028 GMT Subject: CN=729fa1be-8961-433d-af29-2d29d2654de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:db:80:57:ed:5d:3c:d0:76:09:f5:a7:cb: b6:6f:15:e5:d3:2d:17:f1:8b:0b:39:9e:86:53:bf: 71:c2:aa:6f:1d:75:7f:dc:30:20:25:c2:14:b6:3a: 27:a0:10:92:be:a0:37:4d:da:18:46:53:6c:5e:da: 50:6a:74:45:14:d9:c5:64:e3:cd:dd:59:18:2f:57: 13:25:13:5c:f3:f3:f2:9d:d8:28:0b:30:b2:2a:a3: 0a:08:8f:e0:4b:7c:03:56:c3:4c:e1:97:bb:9a:ce: be:00:74:de:18:29:2a:bc:20:6c:a7:10:a0:51:79: 0d:81:3f:2c:6a:45:36:7f:f0:5e:0c:0f:2f:c7:65: 61:00:19:4f:b3:ef:8b:20:b3:34:25:67:56:be:ce: f4:ad:f4:97:f2:f8:1b:1f:45:3a:d6:ef:35:94:6b: ed:c0:b9:c1:e2:03:f9:0e:b8:00:56:08:c4:df:87: 0e:d4:80:fb:54:b6:d3:53:99:fb:8a:4e:4a:7e:48: ad:f2:c0:07:d6:0d:34:eb:64:57:b4:ad:85:7f:04: 1a:3b:e2:79:ff:1b:8d:dc:d8:f4:d6:07:70:00:0b: 52:6b:47:66:21:ce:c2:66:96:48:42:41:cb:89:69: f5:e3:f1:74:9b:50:68:32:c7:58:ee:0e:17:83:6f: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:96:D2:12:50:A9:EF:3C:6E:18:88:9D:E7:72:3F:B7:A1:67:C0:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/729fa1be-8961-433d-af29-2d29d2654de9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/729fa1be-8961-433d-af29-2d29d2654de9/729fa1be-8961-433d-af29-2d29d2654de9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.246.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402758 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:25:d9:08:06:bc:9e:5d:df:ab:c6:c9:55:f8:43:5f:05:78: c7:9d:f3:e9:5a:19:d3:1f:2a:bf:84:1f:c4:d3:bf:89:f9:35: 6a:68:47:1f:3a:71:4e:41:ae:7e:4c:72:a9:a3:33:03:89:9c: a7:ec:07:9e:1c:8f:94:e7:3f:f1:6f:7e:84:01:d2:ee:8d:7d: 1d:0e:2c:f8:ea:8c:05:e4:55:c2:33:f6:70:88:92:1f:5b:41: b8:35:02:89:f3:e1:6f:17:ec:b2:14:53:f6:e6:38:ee:32:cd: 1d:fd:37:24:57:52:ca:04:a5:ff:2b:73:0f:0d:73:21:c4:3f: c9:42:e1:ea:4b:28:e4:11:4c:8e:97:38:48:ae:25:16:8e:b2: cb:b4:0d:92:9d:71:f4:a2:9d:d8:19:f6:23:ee:e3:b6:c7:f3: 6a:83:b2:17:74:e2:26:23:22:ac:e2:19:7b:8e:2a:63:2e:20: 2d:d3:6b:8b:54:15:e6:32:08:4e:03:3d:e2:32:f8:37:e3:8d: 14:af:c2:13:d5:bc:00:60:87:71:43:33:fd:01:06:db:91:39: a0:5a:02:9f:4b:6f:17:17:01:d4:ab:df:c3:22:fd:d2:5d:70: 33:13:b1:ab:69:37:ef:ba:64:c1:66:3b:8b:7a:f1:eb:4b:2c: 84:29:94:1b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5/lmnc0jdV2PBpLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxNDE3MzkxNFoXDTI4MTAwOTIyMzUyMVowLzEtMCsGA1UEAxMk NzI5ZmExYmUtODk2MS00MzNkLWFmMjktMmQyOWQyNjU0ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxDbgFftXTzQdgn1p8u2bxXl0y0X8YsLOZ6G U79xwqpvHXV/3DAgJcIUtjonoBCSvqA3TdoYRlNsXtpQanRFFNnFZOPN3VkYL1cT JRNc8/PyndgoCzCyKqMKCI/gS3wDVsNM4Ze7ms6+AHTeGCkqvCBspxCgUXkNgT8s akU2f/BeDA8vx2VhABlPs++LILM0JWdWvs70rfSX8vgbH0U61u81lGvtwLnB4gP5 DrgAVgjE34cO1ID7VLbTU5n7ik5Kfkit8sAH1g0062RXtK2FfwQaO+J5/xuN3Nj0 1gdwAAtSa0dmIc7CZpZIQkHLiWn14/F0m1BoMsdY7g4Xg28w3QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAeW0hJQqe88bhiInedyP7ehZ8CWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MjlmYTFiZS04OTYxLTQzM2QtYWYyOS0yZDI5ZDI2NTRkZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzcyOWZhMWJlLTg5NjEtNDMzZC1h ZjI5LTJkMjlkMjY1NGRlOS83MjlmYTFiZS04OTYxLTQzM2QtYWYyOS0yZDI5ZDI2 NTRkZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIX9rwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiVGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADwl2QgGvJ5d36vGyVX4Q18FeMed8+laGdMfKr+EH8TTv4n5 NWpoRx86cU5Brn5McqmjMwOJnKfsB54cj5TnP/FvfoQB0u6NfR0OLPjqjAXkVcIz 9nCIkh9bQbg1Aonz4W8X7LIUU/bmOO4yzR39NyRXUsoEpf8rcw8NcyHEP8lC4epL KOQRTI6XOEiuJRaOssu0DZKdcfSindgZ9iPu47bH82qDshd04iYjIqziGXuOKmMu IC3Ta4tUFeYyCE4DPeIy+DfjjRSvwhPVvABgh3FDM/0BBtuROaBaAp9LbxcXAdSr 38Mi/dJdcDMTsatpN++6ZMFmO4t68etLLIQplBs= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:02 2026 by rpki-client