$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90.cer File: 863946c7-0487-4718-8fbe-aa36bf63ba90.cer (raw, json) Hash identifier: UEa3oxuLysk01kCxrb38RM+lnR2xjiLYq4QbkJcR/CU= Subject key identifier: 48:7D:E3:BB:D5:A5:13:0F:C5:76:C6:92:D6:6B:D7:6F:86:EE:0A:D2 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5E78BAEE040DB6D273E86C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/863946c7-0487-4718-8fbe-aa36bf63ba90.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 20:57:45 +0000 Certificate not after: Wed 04 Oct 2028 20:57:45 +0000 Subordinate resources: AS: 402114 IP: 199.202.153.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:78:ba:ee:04:0d:b6:d2:73:e8:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 20:57:45 2026 GMT Not After : Oct 4 20:57:45 2028 GMT Subject: CN=863946c7-0487-4718-8fbe-aa36bf63ba90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:49:99:62:61:23:27:d0:06:73:c2:b6:02:6e: 0d:eb:49:4d:cd:e8:25:13:ba:6a:84:8a:a4:f3:7e: 29:03:92:f2:e2:4f:88:6b:d9:c6:d7:8f:26:d4:07: 69:78:6c:88:04:6b:df:f2:88:4c:77:94:54:d0:53: 67:f5:05:f6:31:5f:5a:d1:12:f8:ad:2f:0a:15:52: 15:54:11:ce:5b:77:d8:75:f7:1a:a4:30:58:5d:8f: 72:e8:e2:4f:a5:0d:17:d0:84:66:cb:20:05:60:92: 8f:23:3e:15:35:84:d5:29:9b:3d:fe:2e:7c:d9:2e: fd:87:a5:47:4c:8f:b4:ca:5c:ce:80:31:02:ff:82: 4a:08:eb:91:06:e3:5a:3e:84:36:07:4c:57:65:6a: 66:a2:45:9c:a7:fb:0b:6d:82:b2:5a:62:69:6c:03: fd:28:8d:94:02:53:af:83:dc:5f:6a:51:be:83:3e: 91:dc:2d:19:15:ce:f4:d7:82:89:43:71:39:a1:98: 9b:d7:40:eb:49:aa:48:b1:db:a9:d7:d6:61:81:08: f4:75:25:74:6e:bd:03:2c:45:70:b8:9e:d9:99:01: 5e:78:88:3b:19:1a:33:1b:f4:ad:9b:62:50:b6:a1: 1a:33:fb:56:1a:dc:66:88:70:15:59:ce:c8:4f:0b: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7D:E3:BB:D5:A5:13:0F:C5:76:C6:92:D6:6B:D7:6F:86:EE:0A:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/863946c7-0487-4718-8fbe-aa36bf63ba90/863946c7-0487-4718-8fbe-aa36bf63ba90.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.202.153.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402114 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:65:f0:51:70:3e:a5:9e:54:5d:9f:cc:6a:9f:39:14:49:13: 29:f3:7c:60:e8:1f:d9:99:aa:46:89:b1:27:c9:ac:69:73:2a: 61:f6:71:d5:ea:d0:da:7a:a0:42:9d:ad:08:99:ce:5b:57:e6: 0d:f0:3d:0c:3c:06:45:cf:db:6f:f6:f8:af:eb:21:38:13:3b: 17:bc:11:18:f2:51:e3:44:76:3a:8e:55:da:2a:23:13:af:b8: 38:ce:53:d4:08:88:b6:be:53:98:8a:3c:34:b4:c8:9b:9f:82: 47:07:53:f5:25:e5:c7:d9:66:5e:75:99:1b:e9:9a:08:c7:ba: 60:8f:74:1a:7a:cc:10:7d:0e:c3:21:8b:aa:42:e6:0d:ea:5b: 2f:17:4e:90:f0:04:59:0f:1d:c7:54:5d:75:77:a2:a6:ec:69: 4e:cd:93:d2:a1:3b:0b:f3:05:79:43:74:0b:e4:cf:8f:c6:d0: 25:32:56:f3:cb:54:48:a5:fa:3f:de:c7:47:7b:b6:09:b3:d1: 49:3d:31:30:8b:e7:84:a2:b9:fc:44:8c:dd:58:0b:e9:0e:17: b4:30:39:b5:04:3d:d9:10:09:4b:27:58:fe:89:e8:a0:a9:39: 10:77:94:c5:16:45:1d:f5:f7:b4:0f:58:89:28:52:59:ed:55: 5e:b3:9a:89 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5eeLruBA220nPobAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjIwNTc0NVoXDTI4MTAwNDIwNTc0NVowLzEtMCsGA1UEAxMk ODYzOTQ2YzctMDQ4Ny00NzE4LThmYmUtYWEzNmJmNjNiYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0mZYmEjJ9AGc8K2Am4N60lNzeglE7pqhIqk 834pA5Ly4k+Ia9nG148m1AdpeGyIBGvf8ohMd5RU0FNn9QX2MV9a0RL4rS8KFVIV VBHOW3fYdfcapDBYXY9y6OJPpQ0X0IRmyyAFYJKPIz4VNYTVKZs9/i582S79h6VH TI+0ylzOgDEC/4JKCOuRBuNaPoQ2B0xXZWpmokWcp/sLbYKyWmJpbAP9KI2UAlOv g9xfalG+gz6R3C0ZFc7014KJQ3E5oZib10DrSapIsdup19ZhgQj0dSV0br0DLEVw uJ7ZmQFeeIg7GRozG/Stm2JQtqEaM/tWGtxmiHAVWc7ITwvBPwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEh947vVpRMPxXbGktZr12+G7grSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 NjM5NDZjNy0wNDg3LTQ3MTgtOGZiZS1hYTM2YmY2M2JhOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg2Mzk0NmM3LTA0ODctNDcxOC04 ZmJlLWFhMzZiZjYzYmE5MC84NjM5NDZjNy0wNDg3LTQ3MTgtOGZiZS1hYTM2YmY2 M2JhOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHypkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiLCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABhl8FFwPqWeVF2fzGqfORRJEynzfGDoH9mZqkaJsSfJrGlz KmH2cdXq0Np6oEKdrQiZzltX5g3wPQw8BkXP22/2+K/rITgTOxe8ERjyUeNEdjqO VdoqIxOvuDjOU9QIiLa+U5iKPDS0yJufgkcHU/Ul5cfZZl51mRvpmgjHumCPdBp6 zBB9DsMhi6pC5g3qWy8XTpDwBFkPHcdUXXV3oqbsaU7Nk9KhOwvzBXlDdAvkz4/G 0CUyVvPLVEil+j/ex0d7tgmz0Uk9MTCL54SiufxEjN1YC+kOF7QwObUEPdkQCUsn WP6J6KCpORB3lMUWRR3197QPWIkoUlntVV6zmok= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:42 2026 by rpki-client