$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer File: 74d22a1a-fc42-41ba-92e0-a233913b3c86.cer (raw, json) Hash identifier: 33cOv2HHRqqr2UDSygZvAUlTYnuYms5K1Z2/E/Novxo= Subject key identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4CB0D865F02AADE3B1F22E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 12:06:16 +0000 Certificate not after: Thu 07 Sep 2028 02:10:09 +0000 Subordinate resources: AS: 402586 IP: 131.162.236.0/22 IP: 2602:81d:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:b0:d8:65:f0:2a:ad:e3:b1:f2:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 26 12:06:16 2026 GMT Not After : Sep 7 02:10:09 2028 GMT Subject: CN=74d22a1a-fc42-41ba-92e0-a233913b3c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:ff:82:b8:ab:23:e0:49:cc:1f:99:b1:5e: 79:b9:b0:27:e7:4c:29:e8:43:7b:52:21:98:d9:81: 2f:a7:03:40:95:c2:3d:16:ad:be:4b:ab:f6:db:19: 28:e4:58:be:50:bf:46:a2:59:13:59:92:4b:3e:04: ed:66:e7:9d:5e:6f:fc:72:b3:dc:08:e8:37:41:bb: 4a:c6:49:38:54:06:51:b3:3b:c4:f0:64:79:f8:18: 4f:8c:28:fe:92:b1:f6:9d:98:95:95:63:05:33:5c: e0:7b:ec:45:fb:dc:8e:95:f1:e1:2e:0c:3a:bb:20: 18:ef:fb:fd:9b:ed:00:eb:f2:aa:8b:3b:46:2e:70: e9:28:8f:bf:f3:84:76:e3:bd:63:05:13:29:c2:11: 23:1a:82:db:c3:42:35:7b:65:ff:72:ca:f3:85:9e: 27:81:b2:67:c6:1d:b5:18:45:15:5a:13:eb:ed:f9: a8:0e:ff:ee:9e:2f:11:e3:3c:c4:e2:b3:09:3d:2f: 2a:17:d9:23:fd:8b:c4:e9:f9:fb:dc:3a:cf:0c:02: 60:16:4d:65:c2:d3:d6:df:5c:43:9e:28:61:8e:b1: 0c:8f:75:c9:02:be:0d:63:89:7b:ed:1d:cd:9c:ad: 6c:95:e2:eb:78:74:d6:99:38:fb:8b:91:61:4a:40: d8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 131.162.236.0/22 IPv6: 2602:81d:e000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402586 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ab:b1:b7:06:8d:40:9e:27:66:a3:c9:a7:b0:e3:76:3b:82: 32:45:5e:26:ae:0b:ec:ba:65:f9:e7:f0:4e:ba:31:fa:17:08: 18:cb:e7:37:93:0a:75:51:e1:60:bf:32:7b:04:0f:28:a5:22: e4:a4:8f:1d:f9:ff:e7:24:a9:ce:ca:f9:7d:8e:73:fe:1a:2b: 67:50:63:22:00:38:c1:69:80:df:19:e6:0c:75:61:60:1c:ab: 22:35:26:c4:33:a3:bb:d0:00:41:c0:9a:b7:36:d6:3c:4a:58: 48:08:8b:35:be:f4:c6:e9:5e:32:a1:8e:21:bc:56:18:2f:44: 1d:4c:6f:8e:c6:3d:11:fd:fd:b4:23:66:2f:67:af:56:7a:83: db:e8:d1:51:b0:2d:57:b3:cb:98:f4:5e:cd:0e:e2:f0:9b:28: 63:35:1d:ca:d5:b1:e8:16:31:ff:fb:00:7e:a4:e3:3f:c7:fd: 0d:8e:33:10:60:c7:a5:ab:01:b0:ed:a6:9e:01:d4:40:fa:c1: d9:11:16:90:d4:41:97:3f:ad:14:ac:e8:3f:2f:1a:17:a9:f4: a4:69:b4:11:26:47:ed:e1:49:b2:2c:84:05:33:ca:96:33:b7: 87:c0:53:95:65:03:b9:e7:34:2b:92:96:79:03:c9:57:df:25: 0a:cb:27:ad -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE5MsNhl8Cqt47HyLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNjEyMDYxNloXDTI4MDkwNzAyMTAwOVowLzEtMCsGA1UEAxMk NzRkMjJhMWEtZmM0Mi00MWJhLTkyZTAtYTIzMzkxM2IzYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrz/grirI+BJzB+ZsV55ubAn50wp6EN7UiGY 2YEvpwNAlcI9Fq2+S6v22xko5Fi+UL9GolkTWZJLPgTtZuedXm/8crPcCOg3QbtK xkk4VAZRszvE8GR5+BhPjCj+krH2nZiVlWMFM1zge+xF+9yOlfHhLgw6uyAY7/v9 m+0A6/KqiztGLnDpKI+/84R2471jBRMpwhEjGoLbw0I1e2X/csrzhZ4ngbJnxh21 GEUVWhPr7fmoDv/uni8R4zzE4rMJPS8qF9kj/YvE6fn73DrPDAJgFk1lwtPW31xD nihhjrEMj3XJAr4NY4l77R3NnK1sleLreHTWmTj7i5FhSkDYMwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFMPTIql09yF8lvo+J6aQNHSmdYvdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 NGQyMmExYS1mYzQyLTQxYmEtOTJlMC1hMjMzOTEzYjNjODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzc0ZDIyYTFhLWZjNDItNDFiYS05 MmUwLWEyMzM5MTNiM2M4Ni83NGQyMmExYS1mYzQyLTQxYmEtOTJlMC1hMjMzOTEz YjNjODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAKDouwwDwQCAAIwCQMHBCYCCB3gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJJowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcauxtwaNQJ4nZqPJp7DjdjuC MkVeJq4L7Lpl+efwTrox+hcIGMvnN5MKdVHhYL8yewQPKKUi5KSPHfn/5ySpzsr5 fY5z/horZ1BjIgA4wWmA3xnmDHVhYByrIjUmxDOju9AAQcCatzbWPEpYSAiLNb70 xuleMqGOIbxWGC9EHUxvjsY9Ef39tCNmL2evVnqD2+jRUbAtV7PLmPRezQ7i8Jso YzUdytWx6BYx//sAfqTjP8f9DY4zEGDHpasBsO2mngHUQPrB2REWkNRBlz+tFKzo Py8aF6n0pGm0ESZH7eFJsiyEBTPKljO3h8BTlWUDuec0K5KWeQPJV98lCssnrQ== -----END CERTIFICATE-----Generated at Tue Jul 21 14:32:56 2026 by rpki-client