$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e46470b-488c-46f3-99e2-56fb819ed9d6.cer File: 7e46470b-488c-46f3-99e2-56fb819ed9d6.cer (raw, json) Hash identifier: uS0t+30ucTT4GL9Jb1uasxlRHqP3LDF2PweRE/qaOiM= Subject key identifier: 0E:54:BB:B4:2B:53:5A:8B:24:C6:DF:43:68:96:15:FD:7E:6E:F6:5F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5DCBF28DC32C3A08871DA540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e46470b-488c-46f3-99e2-56fb819ed9d6/7e46470b-488c-46f3-99e2-56fb819ed9d6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e46470b-488c-46f3-99e2-56fb819ed9d6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 15:09:37 +0000 Certificate not after: Wed 04 Oct 2028 15:09:37 +0000 Subordinate resources: AS: 16738 IP: 104.152.72.0/22 IP: 199.195.188.0/22 IP: 2620:10e:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:cb:f2:8d:c3:2c:3a:08:87:1d:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 15:09:37 2026 GMT Not After : Oct 4 15:09:37 2028 GMT Subject: CN=7e46470b-488c-46f3-99e2-56fb819ed9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c1:50:82:85:d4:a8:b7:30:d3:77:f0:5a:88: 4f:31:e5:f7:d9:6d:b5:79:3e:41:85:bc:2d:64:c5: c6:47:90:d7:1a:43:3f:8e:f0:ab:e9:69:46:ab:d5: 9a:66:e6:17:d4:82:52:f4:68:7b:ac:9c:28:48:7e: b0:41:55:30:25:3d:3f:a0:70:96:1b:b9:56:04:be: 79:5d:a1:c4:1e:30:8a:ab:02:45:bb:5b:0d:16:93: 0c:84:60:33:89:76:49:56:0b:b6:e7:d0:d1:46:85: a7:1a:2f:c7:5e:01:e5:54:bf:d2:94:36:63:db:d5: 80:8f:c1:3c:b0:27:34:f3:62:6f:22:16:7f:c2:ab: b2:8e:43:ec:52:ae:d6:e1:be:78:ce:48:0c:31:a8: 88:47:e8:d7:a0:bf:a7:4b:80:c5:6c:1a:45:61:82: 6e:30:60:92:38:78:b1:01:08:0a:76:9a:5f:91:67: 7d:9d:2a:ef:fe:81:12:68:35:ff:97:1b:53:dd:67: 5b:d8:f6:bd:95:fc:eb:bf:43:c1:e7:ac:f5:7c:49: 01:f6:db:97:27:26:5f:05:3a:12:95:56:4d:77:c4: 28:2e:c8:f8:63:0b:e3:95:96:67:bc:35:5f:75:fc: e8:b3:87:43:10:b3:ae:18:8d:d1:d5:73:01:4d:f3: af:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:BB:B4:2B:53:5A:8B:24:C6:DF:43:68:96:15:FD:7E:6E:F6:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e46470b-488c-46f3-99e2-56fb819ed9d6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e46470b-488c-46f3-99e2-56fb819ed9d6/7e46470b-488c-46f3-99e2-56fb819ed9d6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 104.152.72.0/22 199.195.188.0/22 IPv6: 2620:10e:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16738 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a7:fc:4c:9f:d3:7a:26:70:a4:a0:66:2b:a2:ce:cf:a4:44: 65:3d:6a:3e:8a:81:5d:5e:40:f4:0d:12:83:ef:31:bb:ad:13: 14:3e:a2:88:7a:f7:fb:0e:4d:5e:16:4e:9f:29:1f:dd:5c:fa: 64:5e:c5:19:93:14:f3:bc:dc:b3:d9:6b:61:67:55:b4:95:43: 57:35:78:80:67:ff:3c:60:cb:6f:e1:5f:ed:93:85:e8:3b:48: fd:d0:14:ce:83:89:6c:4e:f9:98:2b:f1:d0:40:e4:ad:9a:0e: 36:5d:d3:4f:4d:03:fa:bc:fe:2d:2a:e6:04:45:e1:39:46:a4: 1a:c1:34:cc:0e:0b:30:35:38:c8:8f:78:5b:0b:48:4d:36:39: 34:6d:4f:bf:dc:52:e0:be:a7:50:b2:29:0c:c7:76:9d:de:10: 4c:cd:f2:4f:97:a3:0f:00:08:05:83:5a:6c:52:5f:0c:d8:b0: 8e:2f:26:b7:15:78:2e:58:92:c8:2b:af:d3:22:ba:70:88:03: 1c:52:e0:0f:65:1b:9a:be:77:08:65:d0:5a:17:55:f3:88:09: 70:f6:ea:74:7a:7f:a8:a1:95:2c:af:77:0b:70:bd:ba:9d:fa: 46:44:93:a1:32:8b:d3:1b:0d:c2:be:0e:3e:8a:ac:76:14:cd: c6:32:c5:fa -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE5dy/KNwyw6CIcdpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjE1MDkzN1oXDTI4MTAwNDE1MDkzN1owLzEtMCsGA1UEAxMk N2U0NjQ3MGItNDg4Yy00NmYzLTk5ZTItNTZmYjgxOWVkOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8FQgoXUqLcw03fwWohPMeX32W21eT5Bhbwt ZMXGR5DXGkM/jvCr6WlGq9WaZuYX1IJS9Gh7rJwoSH6wQVUwJT0/oHCWG7lWBL55 XaHEHjCKqwJFu1sNFpMMhGAziXZJVgu259DRRoWnGi/HXgHlVL/SlDZj29WAj8E8 sCc082JvIhZ/wquyjkPsUq7W4b54zkgMMaiIR+jXoL+nS4DFbBpFYYJuMGCSOHix AQgKdppfkWd9nSrv/oESaDX/lxtT3Wdb2Pa9lfzrv0PB56z1fEkB9tuXJyZfBToS lVZNd8QoLsj4YwvjlZZnvDVfdfzos4dDELOuGI3R1XMBTfOvowIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFA5Uu7QrU1qLJMbfQ2iWFf1+bvZfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 ZTQ2NDcwYi00ODhjLTQ2ZjMtOTllMi01NmZiODE5ZWQ5ZDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzdlNDY0NzBiLTQ4OGMtNDZmMy05 OWUyLTU2ZmI4MTllZDlkNi83ZTQ2NDcwYi00ODhjLTQ2ZjMtOTllMi01NmZiODE5 ZWQ5ZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAJomEgDBALHw7wwDwQCAAIwCQMHBCYgAQ4gADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJBYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqp/xMn9N6JnCkoGYr os7PpERlPWo+ioFdXkD0DRKD7zG7rRMUPqKIevf7Dk1eFk6fKR/dXPpkXsUZkxTz vNyz2WthZ1W0lUNXNXiAZ/88YMtv4V/tk4XoO0j90BTOg4lsTvmYK/HQQOStmg42 XdNPTQP6vP4tKuYEReE5RqQawTTMDgswNTjIj3hbC0hNNjk0bU+/3FLgvqdQsikM x3ad3hBMzfJPl6MPAAgFg1psUl8M2LCOLya3FXguWJLIK6/TIrpwiAMcUuAPZRua vncIZdBaF1XziAlw9up0en+ooZUsr3cLcL26nfpGRJOhMovTGw3Cvg4+iqx2FM3G MsX6 -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:58 2026 by rpki-client