$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.cer File: 87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.cer (raw, json) Hash identifier: IuD9EtERXcfnKYUW44pQHgH0nMJ2CP/laREFicEbliM= Subject key identifier: 3E:F3:8C:02:C5:FD:4A:27:C8:78:18:BC:06:B7:71:17:86:A9:20:22 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5B66FE096DECC87989DD5000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 18:34:35 +0000 Certificate not after: Tue 03 Oct 2028 18:34:35 +0000 Subordinate resources: AS: 40799 IP: 66.111.62.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:66:fe:09:6d:ec:c8:79:89:dd:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 1 18:34:35 2026 GMT Not After : Oct 3 18:34:35 2028 GMT Subject: CN=87f40e96-f8df-46d8-9e7d-a1e5c6de9df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:15:bc:c3:a8:ac:8a:75:f1:5f:b8:76:09: 63:49:1d:46:21:69:91:11:55:25:53:04:36:b3:19: c1:e4:f1:b8:a6:27:11:7d:b2:b8:e2:6c:0a:fd:ef: 4d:e1:74:a7:31:fa:d7:18:da:87:4b:c7:53:aa:7e: b7:b4:06:f7:4c:5b:84:50:54:58:b0:40:a3:eb:eb: 67:18:c5:29:0c:9f:e5:69:62:38:70:32:ec:9d:7a: 7b:07:2a:99:3d:42:ba:d4:f2:fc:f7:65:7f:fb:20: db:f0:db:13:d2:49:57:24:21:69:cb:ce:31:eb:5d: e2:17:d0:e3:f8:5e:98:99:4f:51:73:88:f6:d2:08: d4:d2:86:14:97:86:a5:84:f8:77:3d:ff:32:8b:d7: 4c:1d:c3:e2:49:71:77:ca:b1:6d:f7:91:49:af:c3: 04:09:0e:1d:a2:39:8c:df:dc:a7:bb:25:9d:2e:a5: b5:bc:5e:9f:bd:4e:eb:b2:6c:e5:a7:1a:08:42:a4: 63:7e:bc:c2:c9:ac:31:d4:9c:30:33:6b:7e:82:78: b9:56:15:df:a9:fc:4d:c3:3f:f2:ec:af:0f:2d:1e: 14:ef:b9:b3:da:e8:f4:66:c3:8e:d1:43:db:fb:24: 1b:88:d6:c6:c1:c7:06:a0:ef:7e:64:a5:e0:ca:7f: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:8C:02:C5:FD:4A:27:C8:78:18:BC:06:B7:71:17:86:A9:20:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5/87f40e96-f8df-46d8-9e7d-a1e5c6de9df5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.111.62.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40799 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0a:c7:96:98:27:cd:c7:c6:d1:72:3a:ae:07:0c:e3:85:86: 0c:c7:f6:44:7e:6e:6b:d9:13:e5:5f:59:50:15:cc:58:5e:3a: c5:61:b6:ee:de:b3:02:d9:7e:fe:04:6a:29:30:fd:90:51:08: 16:c1:10:f7:8e:e6:38:3d:fe:de:2e:92:46:2b:4c:b6:bb:7c: a6:94:ef:28:33:b1:b5:5e:e9:5c:bc:5b:f5:b1:b6:4f:a0:08: cc:c0:15:e5:42:93:85:ea:0d:6b:68:d7:33:1f:a7:fd:92:93: bd:5e:2f:ca:7a:8d:e6:03:92:67:00:f7:9c:18:f4:c6:5c:97: ce:a7:ff:44:dd:cd:eb:99:27:32:14:1e:12:c9:73:96:28:61: 4e:dd:7b:3e:15:2b:b3:18:14:8a:27:c2:c8:58:22:bf:21:b5: f6:b8:99:9a:4d:a9:0a:ed:95:bb:e6:1d:b7:76:8c:db:10:66: 2d:66:59:94:59:35:dd:a1:1b:36:10:e8:02:c1:64:b9:03:82: 85:da:1c:84:53:9c:5c:e4:d4:b1:ff:d5:b2:75:a8:8e:b5:2f: 5e:d4:10:b1:7e:ef:97:b4:c2:a4:d2:2c:68:f0:03:58:24:4c: 91:1d:80:4a:e6:57:7c:85:c9:c0:fe:41:9e:1a:14:43:de:b3: b1:d1:40:85 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5bZv4JbezIeYndUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMTE4MzQzNVoXDTI4MTAwMzE4MzQzNVowLzEtMCsGA1UEAxMk ODdmNDBlOTYtZjhkZi00NmQ4LTllN2QtYTFlNWM2ZGU5ZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvcVvMOorIp18V+4dgljSR1GIWmREVUlUwQ2 sxnB5PG4picRfbK44mwK/e9N4XSnMfrXGNqHS8dTqn63tAb3TFuEUFRYsECj6+tn GMUpDJ/laWI4cDLsnXp7ByqZPUK61PL892V/+yDb8NsT0klXJCFpy84x613iF9Dj +F6YmU9Rc4j20gjU0oYUl4alhPh3Pf8yi9dMHcPiSXF3yrFt95FJr8MECQ4dojmM 39ynuyWdLqW1vF6fvU7rsmzlpxoIQqRjfrzCyawx1JwwM2t+gni5VhXfqfxNwz/y 7K8PLR4U77mz2uj0ZsOO0UPb+yQbiNbGwccGoO9+ZKXgyn9OhwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFD7zjALF/UonyHgYvAa3cReGqSAiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 N2Y0MGU5Ni1mOGRmLTQ2ZDgtOWU3ZC1hMWU1YzZkZTlkZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg3ZjQwZTk2LWY4ZGYtNDZkOC05 ZTdkLWExZTVjNmRlOWRmNS84N2Y0MGU5Ni1mOGRmLTQ2ZDgtOWU3ZC1hMWU1YzZk ZTlkZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFCbz4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ9fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEcKx5aYJ83HxtFyOq4HDOOFhgzH9kR+bmvZE+VfWVAVzFhe OsVhtu7eswLZfv4Eaikw/ZBRCBbBEPeO5jg9/t4ukkYrTLa7fKaU7ygzsbVe6Vy8 W/Wxtk+gCMzAFeVCk4XqDWto1zMfp/2Sk71eL8p6jeYDkmcA95wY9MZcl86n/0Td zeuZJzIUHhLJc5YoYU7dez4VK7MYFIonwshYIr8htfa4mZpNqQrtlbvmHbd2jNsQ Zi1mWZRZNd2hGzYQ6ALBZLkDgoXaHIRTnFzk1LH/1bJ1qI61L17UELF+75e0wqTS LGjwA1gkTJEdgErmV3yFycD+QZ4aFEPes7HRQIU= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:02 2026 by rpki-client