$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7652de6e-ee04-492d-91d5-55f0e00823da.cer File: 7652de6e-ee04-492d-91d5-55f0e00823da.cer (raw, json) Hash identifier: 71tbZ6IPdbZhRO1B8FyG+KkUq7UtQM1giEkvE/XCDtQ= Subject key identifier: 8D:D9:1D:D0:6A:97:E6:F8:8C:9B:91:35:F4:A1:D3:B1:AA:E3:82:B2 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5060FDC7FCF2E77A2E87D240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7652de6e-ee04-492d-91d5-55f0e00823da/7652de6e-ee04-492d-91d5-55f0e00823da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7652de6e-ee04-492d-91d5-55f0e00823da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Jun 2026 19:48:36 +0000 Certificate not after: Fri 29 Sep 2028 19:48:36 +0000 Subordinate resources: AS: 33638 IP: 208.69.160.0/21 IP: 208.86.56.0/21 IP: 2604:6c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:60:fd:c7:fc:f2:e7:7a:2e:87:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 27 19:48:36 2026 GMT Not After : Sep 29 19:48:36 2028 GMT Subject: CN=7652de6e-ee04-492d-91d5-55f0e00823da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:37:15:51:96:f1:12:72:b1:97:e8:7a:c9: af:98:d4:e7:e9:59:4e:fc:94:11:ef:a6:ab:0e:9c: de:ee:57:08:70:e9:06:56:0a:5e:f9:79:3d:7c:25: 3d:7b:23:10:a2:4f:5c:22:1c:1a:d8:10:44:78:07: 92:1e:63:23:29:97:e4:96:37:c1:e6:bb:d5:34:38: b7:65:3c:79:b6:a7:34:56:59:11:db:9f:79:11:da: 52:3f:81:90:f1:13:4f:c4:a3:e3:28:5f:0d:02:59: 64:c1:25:2a:6b:a1:c7:15:6c:86:1b:bf:b8:5c:7e: ab:de:bd:34:a3:9c:57:d4:fb:2b:71:0d:9e:72:42: de:3f:8e:5c:6b:79:a7:cc:4c:4c:2d:1b:21:84:f9: 21:db:94:3c:66:a8:79:f6:49:cf:3b:c0:6d:bc:ac: 56:75:8c:08:66:07:74:d5:33:4d:0a:c1:c2:fe:71: 5c:55:74:d9:04:44:48:69:4a:8f:6e:76:93:ff:b8: 94:83:7a:f0:60:75:53:3c:3b:66:28:a2:11:9d:82: 63:1c:80:72:20:e2:87:e7:b6:40:73:6d:e2:70:05: 44:7d:06:5f:2a:07:b4:57:c3:2a:8a:84:5e:65:86: fa:ab:5d:1d:ec:c6:6b:6a:f1:e0:04:b0:03:32:bf: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D9:1D:D0:6A:97:E6:F8:8C:9B:91:35:F4:A1:D3:B1:AA:E3:82:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7652de6e-ee04-492d-91d5-55f0e00823da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7652de6e-ee04-492d-91d5-55f0e00823da/7652de6e-ee04-492d-91d5-55f0e00823da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.69.160.0/21 208.86.56.0/21 IPv6: 2604:6c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33638 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9a:26:e9:78:5b:6b:ef:df:34:ef:16:41:b6:22:36:90:64: 41:e4:d6:9a:0e:37:f9:cf:00:f6:7e:2d:da:bf:12:12:5d:40: a7:59:64:d1:08:3a:f6:f3:24:90:d3:e3:57:70:0d:47:d8:e6: bb:00:91:8a:1f:05:b9:b2:26:e3:da:31:74:70:76:ae:a1:bb: 7e:9f:54:a1:7c:03:c0:f5:f6:5f:5a:ae:64:c1:af:90:24:50: f6:c1:e7:1e:17:e9:fb:d4:f1:3f:b9:fc:30:c3:99:1b:23:be: 3a:29:14:c8:6f:5a:83:14:57:48:89:f9:a7:4c:79:b1:58:b2: 48:66:d7:1c:d2:fa:a4:ec:a2:40:28:ce:f2:d3:d3:e6:b7:68: 17:e3:6c:08:2b:10:27:c9:43:b2:f7:7d:63:c8:61:48:93:bb: 9c:45:22:f8:f6:95:25:49:b6:dc:62:1d:71:44:51:5e:f4:8c: d8:04:ed:97:4c:e3:77:97:8b:eb:0d:e1:bb:45:c2:31:75:68: f3:7b:9f:26:25:2d:93:a6:4b:3f:5b:0d:93:0f:ac:b0:86:67: 7c:35:e9:54:99:6f:23:f4:6e:dd:72:20:63:24:3b:cb:ea:c4: 69:b9:b7:7a:0b:e1:8c:a3:24:00:7d:3e:1f:b1:ab:c9:a7:75: 8f:26:73:a0 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5QYP3H/PLnei6H0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNzE5NDgzNloXDTI4MDkyOTE5NDgzNlowLzEtMCsGA1UEAxMk NzY1MmRlNmUtZWUwNC00OTJkLTkxZDUtNTVmMGUwMDgyM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM03FVGW8RJysZfoesmvmNTn6VlO/JQR76ar Dpze7lcIcOkGVgpe+Xk9fCU9eyMQok9cIhwa2BBEeAeSHmMjKZfkljfB5rvVNDi3 ZTx5tqc0VlkR2595EdpSP4GQ8RNPxKPjKF8NAllkwSUqa6HHFWyGG7+4XH6r3r00 o5xX1PsrcQ2eckLeP45ca3mnzExMLRshhPkh25Q8Zqh59knPO8BtvKxWdYwIZgd0 1TNNCsHC/nFcVXTZBERIaUqPbnaT/7iUg3rwYHVTPDtmKKIRnYJjHIByIOKH57ZA c23icAVEfQZfKge0V8MqioReZYb6q10d7MZravHgBLADMr+JlQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFI3ZHdBql+b4jJuRNfSh07Gq44KyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 NjUyZGU2ZS1lZTA0LTQ5MmQtOTFkNS01NWYwZTAwODIzZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzc2NTJkZTZlLWVlMDQtNDkyZC05 MWQ1LTU1ZjBlMDA4MjNkYS83NjUyZGU2ZS1lZTA0LTQ5MmQtOTFkNS01NWYwZTAw ODIzZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPQRaADBAPQVjgwDQQCAAIwBwMFACYEbEAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAINmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAKaJul4W2vv3zTvFkG2 IjaQZEHk1poON/nPAPZ+Ldq/EhJdQKdZZNEIOvbzJJDT41dwDUfY5rsAkYofBbmy JuPaMXRwdq6hu36fVKF8A8D19l9armTBr5AkUPbB5x4X6fvU8T+5/DDDmRsjvjop FMhvWoMUV0iJ+adMebFYskhm1xzS+qTsokAozvLT0+a3aBfjbAgrECfJQ7L3fWPI YUiTu5xFIvj2lSVJttxiHXFEUV70jNgE7ZdM43eXi+sN4btFwjF1aPN7nyYlLZOm Sz9bDZMPrLCGZ3w16VSZbyP0bt1yIGMkO8vqxGm5t3oL4YyjJAB9Ph+xq8mndY8m c6A= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:10 2026 by rpki-client