$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69.cer File: 8718a34a-0473-4338-8132-defee58e8e69.cer (raw, json) Hash identifier: qF2dIuHgt0E+0sKJK4cYxERIT1Xh/g/DGzjJMjgauWs= Subject key identifier: 66:17:77:41:45:C1:9F:6A:BC:BE:B2:F0:F3:9E:EB:83:1E:A5:DF:9E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5B10FBD2F0B56CC4637D22E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/8718a34a-0473-4338-8132-defee58e8e69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 15:41:18 +0000 Certificate not after: Tue 03 Oct 2028 15:41:18 +0000 Subordinate resources: AS: 402607 IP: 23.159.164.0/24 IP: 2602:f397::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:10:fb:d2:f0:b5:6c:c4:63:7d:22:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 1 15:41:18 2026 GMT Not After : Oct 3 15:41:18 2028 GMT Subject: CN=8718a34a-0473-4338-8132-defee58e8e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:a5:3a:f1:5c:f2:91:fd:dd:a2:04:0c:8d: 20:03:0e:1e:9b:0a:96:61:86:91:0e:e5:74:93:89: 0a:39:95:c5:a6:d9:c1:97:0e:ca:bb:ff:d2:f6:7d: 42:d1:68:6c:6a:3a:82:25:21:0a:69:48:40:30:7a: ab:e3:fa:57:16:a2:96:2a:47:77:b5:fe:7d:e5:bc: 0b:aa:99:ac:0b:3b:10:36:f9:3c:96:09:d7:a1:bd: af:1d:15:45:dd:68:8b:30:3b:82:37:68:ae:a4:cc: 74:00:b5:91:68:f4:37:e4:b1:ff:83:fb:3a:89:db: ad:15:55:20:95:46:a4:d0:ae:ec:bf:75:7d:f5:5d: 37:42:f4:1c:5c:b3:5a:78:1c:82:93:c1:8c:2a:dc: a0:d9:e5:73:3f:72:ce:5c:b9:f8:df:80:7c:d8:b8: 1d:f3:6f:21:10:32:c9:a8:fb:41:84:87:db:e3:95: 76:48:f2:8d:4a:c4:69:43:1e:82:02:99:3d:24:de: 46:3f:27:9d:cd:e4:da:98:5c:28:43:7e:24:d2:a1: 77:7e:2a:47:6d:cd:60:3b:74:f6:56:50:16:e8:48: 4a:93:48:6c:f2:5a:22:66:9b:3a:30:f3:7b:91:a5: 64:ca:4c:d5:80:b8:be:ee:33:36:3a:33:a2:7c:31: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:17:77:41:45:C1:9F:6A:BC:BE:B2:F0:F3:9E:EB:83:1E:A5:DF:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8718a34a-0473-4338-8132-defee58e8e69/8718a34a-0473-4338-8132-defee58e8e69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.159.164.0/24 IPv6: 2602:f397::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402607 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a2:0a:b8:fb:f0:98:14:cd:e5:19:75:58:8b:b8:cd:f1:44: 38:c7:7e:ac:35:5f:28:19:22:a4:0d:72:01:be:94:47:a3:40: 1a:cc:49:80:6d:18:f8:72:e1:fb:c5:05:54:40:8e:82:94:60: c2:3d:b7:53:4e:4e:de:4f:f9:d7:64:72:57:05:1f:8c:90:4a: 9a:d2:eb:7e:e7:1e:d8:8a:ce:e6:36:24:c9:7c:55:26:55:c1: f5:83:12:55:93:b6:ad:55:05:ca:b0:4f:6c:83:36:5f:3b:c3: ba:e3:c6:9d:3f:43:09:ee:ad:b6:c5:a6:db:ea:29:be:e2:57: e6:c0:1e:38:2f:98:4a:62:b3:38:e1:fb:cc:55:1a:39:60:cf: 13:cd:d0:f2:71:11:59:02:bc:3b:7f:b2:74:6d:bd:c6:7b:db: 43:8e:07:76:c8:e6:b2:bc:b8:7c:cc:fb:c8:d8:10:05:88:6d: 77:5c:19:a1:86:51:6d:f1:09:35:9c:01:aa:51:9c:27:66:9c: 35:cf:40:5b:8a:ef:f9:93:a8:8c:6e:2f:75:cc:84:59:cd:98: e1:21:b6:ad:85:9e:1f:2a:89:76:e1:9e:85:e5:74:03:2b:14: df:ff:b1:f2:c8:84:f0:07:d2:bd:40:1d:2f:d7:1f:ad:11:03: 7a:8e:5a:43 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5bEPvS8LVsxGN9IugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMTE1NDExOFoXDTI4MTAwMzE1NDExOFowLzEtMCsGA1UEAxMk ODcxOGEzNGEtMDQ3My00MzM4LTgxMzItZGVmZWU1OGU4ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+KlOvFc8pH93aIEDI0gAw4emwqWYYaRDuV0 k4kKOZXFptnBlw7Ku//S9n1C0WhsajqCJSEKaUhAMHqr4/pXFqKWKkd3tf595bwL qpmsCzsQNvk8lgnXob2vHRVF3WiLMDuCN2iupMx0ALWRaPQ35LH/g/s6idutFVUg lUak0K7sv3V99V03QvQcXLNaeByCk8GMKtyg2eVzP3LOXLn434B82Lgd828hEDLJ qPtBhIfb45V2SPKNSsRpQx6CApk9JN5GPyedzeTamFwoQ34k0qF3fipHbc1gO3T2 VlAW6EhKk0hs8loiZps6MPN7kaVkykzVgLi+7jM2OjOifDE0MQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGYXd0FFwZ9qvL6y8POe64Mepd+eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 NzE4YTM0YS0wNDczLTQzMzgtODEzMi1kZWZlZTU4ZThlNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg3MThhMzRhLTA0NzMtNDMzOC04 MTMyLWRlZmVlNThlOGU2OS84NzE4YTM0YS0wNDczLTQzMzgtODEzMi1kZWZlZTU4 ZThlNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXn6QwDgQCAAIwCAMGACYC85cAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkrzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApogq4+/CYFM3lGXVYi7jN8UQ4 x36sNV8oGSKkDXIBvpRHo0AazEmAbRj4cuH7xQVUQI6ClGDCPbdTTk7eT/nXZHJX BR+MkEqa0ut+5x7Yis7mNiTJfFUmVcH1gxJVk7atVQXKsE9sgzZfO8O648adP0MJ 7q22xabb6im+4lfmwB44L5hKYrM44fvMVRo5YM8TzdDycRFZArw7f7J0bb3Ge9tD jgd2yOayvLh8zPvI2BAFiG13XBmhhlFt8Qk1nAGqUZwnZpw1z0Bbiu/5k6iMbi91 zIRZzZjhIbathZ4fKol24Z6F5XQDKxTf/7HyyITwB9K9QB0v1x+tEQN6jlpD -----END CERTIFICATE-----Generated at Wed Jul 15 06:23:05 2026 by rpki-client