$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66.cer File: 732f5ebd-63a7-4f6c-94c9-df796a848d66.cer (raw, json) Hash identifier: ooQawPQY2RfhPtnW4/8frInzq1APlyMUF/bSyIJpKZk= Subject key identifier: 4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E397BD3BA5F6DE38EDC51C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Jun 2026 14:59:05 +0000 Certificate not after: Thu 21 Sep 2028 14:59:05 +0000 Subordinate resources: AS: 19766 IP: 66.51.192.0/22 IP: 168.151.160.0/20 IP: 2604:460::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:39:7b:d3:ba:5f:6d:e3:8e:dc:51:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 19 14:59:05 2026 GMT Not After : Sep 21 14:59:05 2028 GMT Subject: CN=732f5ebd-63a7-4f6c-94c9-df796a848d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:f9:30:16:c6:5b:9f:d6:e0:c4:a6:84:a2: 7f:93:e0:4e:44:f6:30:47:a3:fa:0d:2f:35:64:9f: 7b:75:f9:4e:19:4a:2e:ae:4a:47:20:c1:4c:4c:bb: ef:2c:93:9c:27:aa:09:c6:ee:78:6f:60:40:05:b2: 2a:27:af:1b:f4:9b:f1:8e:35:64:34:a3:8c:22:8f: e1:83:64:cc:77:19:c0:10:92:d4:06:ef:c4:85:2f: 66:47:ab:cf:e0:d3:9f:f3:2a:82:e0:f4:5f:e4:77: ee:c8:cf:2c:ec:10:ad:9e:7a:11:6e:a0:74:60:26: f7:a1:0b:0b:36:61:c2:cb:ec:5f:86:f7:1d:d6:44: 7b:10:cc:3d:f7:a8:73:4b:e0:79:41:42:2b:6e:9b: b2:31:7f:5f:04:50:ef:c2:f3:77:d2:27:cb:3a:d6: a2:51:ce:cd:7a:8c:e6:7c:b5:44:d6:3e:98:f8:ca: eb:8b:95:6f:64:de:30:b2:81:29:84:52:b4:a6:99: 7d:b7:35:ff:1d:66:b5:33:35:b5:58:67:77:a1:b7: 32:a0:6d:e1:43:99:0b:d1:19:8d:c9:13:71:3f:ee: cc:cf:34:6b:93:fd:8b:4c:51:79:aa:01:09:20:be: cf:48:0f:d9:ab:37:f8:62:e6:f1:b3:cc:10:7c:87: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:54:6F:D2:FA:8D:B3:0C:7D:20:9C:3A:DE:70:6C:99:6A:64:12:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/732f5ebd-63a7-4f6c-94c9-df796a848d66/732f5ebd-63a7-4f6c-94c9-df796a848d66.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.51.192.0/22 168.151.160.0/20 IPv6: 2604:460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:3a:78:af:0d:c6:af:16:8f:41:c9:f2:df:a2:de:2c:55:da: 2f:45:5f:72:1f:f3:57:35:87:dc:c4:7e:cf:98:3a:4b:77:a2: 7e:da:4e:50:92:5c:a7:9e:a8:fa:bb:28:09:23:35:77:e9:ec: 16:c9:1e:13:d2:6d:00:f9:24:58:20:ac:5c:46:35:43:98:46: f0:64:18:3d:a6:9d:ad:2c:ed:69:8f:dc:19:33:f0:3f:8c:ab: 26:cc:bf:46:ea:8e:17:db:8f:b2:1a:e4:e8:a3:92:55:9a:cc: bc:d7:c1:4c:aa:c0:3d:9d:f4:86:48:52:ff:b4:96:9e:04:91: 1e:52:5f:3b:75:c7:66:7f:06:76:b7:07:90:e6:28:4a:bb:4d: 31:fe:94:85:ef:a3:57:1a:5a:5b:5f:13:e2:db:35:29:7a:be: 7c:7c:aa:04:ac:ea:8f:c5:fc:0d:28:34:50:f2:01:26:46:21: b2:5c:39:93:d5:3a:a6:e7:8b:88:84:c0:14:be:2f:0e:7b:e8: 2a:3e:bf:b5:dc:9d:00:6d:d9:93:d7:df:39:eb:a3:f3:34:f6: c2:7f:e3:61:d2:5a:51:19:6a:a0:57:6f:5c:3e:55:cd:74:91: 65:7f:32:c9:2d:6b:e2:6f:b6:4a:47:8a:d5:5f:60:01:55:93: 80:fc:47:7f -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE45e9O6X23jjtxRxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxOTE0NTkwNVoXDTI4MDkyMTE0NTkwNVowLzEtMCsGA1UEAxMk NzMyZjVlYmQtNjNhNy00ZjZjLTk0YzktZGY3OTZhODQ4ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKz5MBbGW5/W4MSmhKJ/k+BORPYwR6P6DS81 ZJ97dflOGUourkpHIMFMTLvvLJOcJ6oJxu54b2BABbIqJ68b9JvxjjVkNKOMIo/h g2TMdxnAEJLUBu/EhS9mR6vP4NOf8yqC4PRf5HfuyM8s7BCtnnoRbqB0YCb3oQsL NmHCy+xfhvcd1kR7EMw996hzS+B5QUIrbpuyMX9fBFDvwvN30ifLOtaiUc7Neozm fLVE1j6Y+Mrri5VvZN4wsoEphFK0ppl9tzX/HWa1MzW1WGd3obcyoG3hQ5kL0RmN yRNxP+7MzzRrk/2LTFF5qgEJIL7PSA/Zqzf4Yubxs8wQfIem0wIDAQABo4IELzCC BCswHQYDVR0OBBYEFExUb9L6jbMMfSCcOt5wbJlqZBIjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MzJmNWViZC02M2E3LTRmNmMtOTRjOS1kZjc5NmE4NDhkNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzczMmY1ZWJkLTYzYTctNGY2Yy05 NGM5LWRmNzk2YTg0OGQ2Ni83MzJmNWViZC02M2E3LTRmNmMtOTRjOS1kZjc5NmE4 NDhkNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJCM8ADBASol6AwDQQCAAIwBwMFACYEBGAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICTTYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqTp4rw3GrxaPQcny36Le LFXaL0Vfch/zVzWH3MR+z5g6S3eiftpOUJJcp56o+rsoCSM1d+nsFskeE9JtAPkk WCCsXEY1Q5hG8GQYPaadrSztaY/cGTPwP4yrJsy/RuqOF9uPshrk6KOSVZrMvNfB TKrAPZ30hkhS/7SWngSRHlJfO3XHZn8GdrcHkOYoSrtNMf6Uhe+jVxpaW18T4ts1 KXq+fHyqBKzqj8X8DSg0UPIBJkYhslw5k9U6pueLiITAFL4vDnvoKj6/tdydAG3Z k9ffOeuj8zT2wn/jYdJaURlqoFdvXD5VzXSRZX8yyS1r4m+2SkeK1V9gAVWTgPxH fw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:00 2026 by rpki-client