$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer File: 865141a9-b215-47ce-b5f4-0c09bdeaba89.cer (raw, json) Hash identifier: nP1R3YsJizmcfiH59Fg7GESCw1dRXltHjbcBjxYyCWA= Subject key identifier: EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584EAEF8B3E973606AF7971B9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Jul 2026 17:00:16 +0000 Certificate not after: Tue 15 Aug 2028 19:58:14 +0000 Subordinate resources: IP: 45.45.156.0/24 IP: 91.103.141.0/24 IP: 2604:28e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:f8:b3:e9:73:60:6a:f7:97:1b:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 31 17:00:16 2026 GMT Not After : Aug 15 19:58:14 2028 GMT Subject: CN=865141a9-b215-47ce-b5f4-0c09bdeaba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:39:51:0b:7d:88:a2:e7:c3:4e:db:5b:e2: d5:cf:03:fe:89:bf:09:47:c2:be:ee:0e:a6:f4:ee: 9b:82:b2:69:f5:14:45:bc:2d:1c:b0:a0:c5:c3:f9: 9a:ec:93:e8:4b:6d:a9:3b:64:48:b8:2d:02:73:5e: 7f:c4:08:3a:6a:a4:27:2d:6d:fb:e2:e7:08:99:e5: f4:c0:d7:ce:4c:71:40:b2:ab:13:94:5b:59:bf:cd: 1d:c4:33:78:bd:0b:de:31:65:7a:8a:95:c2:00:d7: 58:7d:6d:21:4f:f6:45:6c:cb:ec:17:65:33:d1:99: b4:81:5b:2a:6d:17:d3:af:62:6f:fb:ab:42:1c:79: a9:62:25:21:29:ad:65:84:5c:af:56:f2:2a:83:71: a8:19:e3:6e:3f:a3:d3:81:28:e4:8d:6f:9a:84:7a: e9:05:e8:ab:38:88:f8:b2:fa:24:17:08:a8:31:12: f6:8d:5f:10:93:d2:cc:15:0d:af:45:e1:78:29:10: 3f:c5:7e:e2:f4:d1:38:c7:26:9f:06:b5:52:9a:75: 0a:e6:d9:1f:db:2f:13:d1:42:3e:95:3d:1c:09:c7: 22:1c:95:77:03:b7:df:0a:97:7e:94:ab:44:01:b4: 83:ac:a7:20:f0:d5:4c:59:1c:19:80:bc:88:5f:ec: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 45.45.156.0/24 91.103.141.0/24 IPv6: 2604:28e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:08:76:27:01:1a:d6:a8:b7:5c:aa:82:18:c5:06:17:9c:9c: 83:ff:ae:b8:77:d2:ec:a3:a1:26:3a:6a:e0:b4:4c:ef:66:54: 32:d4:2b:c5:ce:f1:ab:30:97:74:cf:63:03:f2:ba:8b:c1:29: 35:0f:86:2b:55:0e:b7:aa:c0:9a:0e:1e:a7:15:95:ee:09:de: f1:93:54:0b:6f:e9:7a:ca:22:09:29:43:7a:c1:4d:c4:d0:1e: 5c:ab:70:fd:d9:ad:34:a7:42:7e:79:04:45:50:e4:eb:d9:63: ff:a6:c1:fb:5c:24:ea:ac:89:08:75:51:8f:f2:ca:59:dd:17: 68:a2:81:ee:b8:8a:df:5a:2a:c0:e7:3a:91:cf:02:e8:7e:ee: ab:07:d9:39:33:38:18:3b:e2:7d:2f:f9:23:3b:d9:98:4a:19: 95:38:5c:12:fc:86:7f:49:f2:5c:68:0d:16:47:db:52:a0:86: 00:3e:34:5f:27:69:95:7a:0d:0d:bb:c1:67:3e:cd:2f:9f:42: 68:d8:39:4d:c4:8f:f0:87:6a:12:1a:85:05:f3:b0:b8:99:0f: 55:85:d3:73:7b:84:69:9d:73:59:0d:74:d7:eb:ee:ab:95:0a: 97:d3:54:58:76:8e:c8:60:c8:28:32:48:32:8c:41:20:29:3c: f3:cf:af:e3 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWE6u+LPpc2Bq95cbkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDczMTE3MDAxNloXDTI4MDgxNTE5NTgxNFowLzEtMCsGA1UEAxMk ODY1MTQxYTktYjIxNS00N2NlLWI1ZjQtMGMwOWJkZWFiYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOs5UQt9iKLnw07bW+LVzwP+ib8JR8K+7g6m 9O6bgrJp9RRFvC0csKDFw/ma7JPoS22pO2RIuC0Cc15/xAg6aqQnLW374ucImeX0 wNfOTHFAsqsTlFtZv80dxDN4vQveMWV6ipXCANdYfW0hT/ZFbMvsF2Uz0Zm0gVsq bRfTr2Jv+6tCHHmpYiUhKa1lhFyvVvIqg3GoGeNuP6PTgSjkjW+ahHrpBeirOIj4 svokFwioMRL2jV8Qk9LMFQ2vReF4KRA/xX7i9NE4xyafBrVSmnUK5tkf2y8T0UI+ lT0cCcciHJV3A7ffCpd+lKtEAbSDrKcg8NVMWRwZgLyIX+zIjwIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFOz7npup+P+Ec6IrASZpMqryTWfqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 NjUxNDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5YmRlYWJhODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg2NTE0MWE5LWIyMTUtNDdjZS1i NWY0LTBjMDliZGVhYmE4OS84NjUxNDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5YmRl YWJhODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAtLZwDBABbZ40wDQQCAAIwBwMFACYEKOAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqQh2JwEa1qi3XKqCGMUGF5ycg/+uuHfS7KOhJjpq4LRM72ZUMtQrxc7x qzCXdM9jA/K6i8EpNQ+GK1UOt6rAmg4epxWV7gne8ZNUC2/pesoiCSlDesFNxNAe XKtw/dmtNKdCfnkERVDk69lj/6bB+1wk6qyJCHVRj/LKWd0XaKKB7riK31oqwOc6 kc8C6H7uqwfZOTM4GDvifS/5IzvZmEoZlThcEvyGf0nyXGgNFkfbUqCGAD40Xydp lXoNDbvBZz7NL59CaNg5TcSP8IdqEhqFBfOwuJkPVYXTc3uEaZ1zWQ101+vuq5UK l9NUWHaOyGDIKDJIMoxBICk888+v4w== -----END CERTIFICATE-----Generated at Fri Sep 4 22:13:08 2026 by rpki-client