$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8816d330-b1ee-4b25-975d-94a5788ce4f2.cer File: 8816d330-b1ee-4b25-975d-94a5788ce4f2.cer (raw, json) Hash identifier: g/Uh6ZzMe3Y41MOUVWNBG7zsCwQVhHk06hRIiT+t4wU= Subject key identifier: 06:5E:02:4F:77:72:72:79:FB:82:21:46:B7:A0:AB:4E:7D:E5:C3:B6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E7CEF785E53E98BA5F2101C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8816d330-b1ee-4b25-975d-94a5788ce4f2/8816d330-b1ee-4b25-975d-94a5788ce4f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8816d330-b1ee-4b25-975d-94a5788ce4f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jul 2026 18:51:15 +0000 Certificate not after: Mon 09 Oct 2028 22:38:57 +0000 Subordinate resources: AS: 402752 IP: 169.128.24.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7c:ef:78:5e:53:e9:8b:a5:f2:10:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 13 18:51:15 2026 GMT Not After : Oct 9 22:38:57 2028 GMT Subject: CN=8816d330-b1ee-4b25-975d-94a5788ce4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a3:f9:3d:f3:64:37:41:db:7a:fb:9d:21:c0: 87:32:ab:4f:35:d0:ca:08:1a:41:4e:ae:d6:3f:9f: 1f:21:44:20:0b:16:32:c5:a2:ae:ed:53:34:c4:af: 50:90:78:dd:8e:b3:73:17:bf:d4:39:a7:6c:e7:0c: 60:73:8c:bc:53:63:ab:7c:e5:9b:d4:de:1b:9a:89: b7:5b:00:73:6f:7a:d4:0e:29:b0:b1:b7:31:f7:4f: cd:36:30:94:bf:57:13:ff:b1:1c:e0:e5:1c:99:94: 85:72:d7:69:8c:ff:08:59:f3:d3:9c:13:d1:ae:4a: 7a:a2:b4:ff:90:cd:c0:b3:3d:6a:2b:00:b9:0a:9c: 81:e9:83:bd:64:3d:da:21:27:68:60:ba:39:ec:31: fb:eb:3e:94:be:05:37:93:26:60:14:a3:ee:3a:ed: 88:15:7e:79:4e:a1:8e:e0:4b:12:5a:26:aa:63:9a: c7:c8:fc:ad:f8:b5:4b:de:5d:80:85:87:15:bd:c0: ac:98:39:2d:3a:d6:0d:38:cb:7f:fa:fa:82:38:ea: ab:07:88:3f:91:ac:1f:4a:75:15:92:27:c9:f3:50: 86:3b:82:4f:99:83:0d:38:d0:93:24:56:89:a8:8a: 94:e8:3e:ca:a9:ed:de:f5:ca:b2:e1:01:87:a0:d0: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:02:4F:77:72:72:79:FB:82:21:46:B7:A0:AB:4E:7D:E5:C3:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8816d330-b1ee-4b25-975d-94a5788ce4f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8816d330-b1ee-4b25-975d-94a5788ce4f2/8816d330-b1ee-4b25-975d-94a5788ce4f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 169.128.24.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402752 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c4:65:b6:fb:13:6b:41:6f:0d:55:3e:51:93:a1:89:a7:ba: 70:0e:d6:35:12:f9:a1:f9:81:9c:5b:7f:1b:c8:39:12:d8:3a: 5f:42:02:15:39:84:4f:96:a6:43:98:da:f2:de:96:36:68:6d: 2c:0f:ce:27:01:8a:10:d0:9f:4e:3f:e8:81:ed:78:0a:c8:e8: c5:3a:6e:65:42:eb:26:c0:ad:15:05:0e:a3:e8:83:5a:b2:b4: 3f:b2:a3:b2:7a:4e:32:62:10:9e:76:7d:90:18:8c:73:b8:86: 5c:bd:83:70:43:4b:de:96:4a:2f:56:fa:89:a5:ec:96:af:f0: c2:82:ce:89:c0:98:92:a9:2c:93:a4:0e:8b:fa:42:6e:1c:50: 3a:48:d1:77:0d:e9:b6:77:e1:c1:8b:96:86:50:3e:e5:52:21: 8d:52:43:1d:91:40:1f:a1:e9:d4:02:7a:b3:74:cc:3a:31:45: 3a:3c:1b:bd:f8:cb:56:28:ec:cd:26:02:7a:e3:a4:0d:cb:90: bc:83:7f:8c:49:90:00:ae:2b:22:aa:fc:a8:4a:ec:9e:2b:4f: 5c:58:0b:33:b3:a1:aa:84:1a:9d:c8:05:51:8e:19:c1:20:e4: 46:72:b7:48:40:c7:49:8a:a4:68:3d:d8:bf:30:81:f3:11:df: 9b:06:51:94 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5873heU+mLpfIQHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxMzE4NTExNVoXDTI4MTAwOTIyMzg1N1owLzEtMCsGA1UEAxMk ODgxNmQzMzAtYjFlZS00YjI1LTk3NWQtOTRhNTc4OGNlNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaP5PfNkN0HbevudIcCHMqtPNdDKCBpBTq7W P58fIUQgCxYyxaKu7VM0xK9QkHjdjrNzF7/UOads5wxgc4y8U2OrfOWb1N4bmom3 WwBzb3rUDimwsbcx90/NNjCUv1cT/7Ec4OUcmZSFctdpjP8IWfPTnBPRrkp6orT/ kM3Asz1qKwC5CpyB6YO9ZD3aISdoYLo57DH76z6UvgU3kyZgFKPuOu2IFX55TqGO 4EsSWiaqY5rHyPyt+LVL3l2AhYcVvcCsmDktOtYNOMt/+vqCOOqrB4g/kawfSnUV kifJ81CGO4JPmYMNONCTJFaJqIqU6D7Kqe3e9cqy4QGHoNC1MwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAZeAk93cnJ5+4IhRregq0595cO2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 ODE2ZDMzMC1iMWVlLTRiMjUtOTc1ZC05NGE1Nzg4Y2U0ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzg4MTZkMzMwLWIxZWUtNGIyNS05 NzVkLTk0YTU3ODhjZTRmMi84ODE2ZDMzMC1iMWVlLTRiMjUtOTc1ZC05NGE1Nzg4 Y2U0ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKpgBgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABTEZbb7E2tBbw1VPlGToYmnunAO1jUS+aH5gZxbfxvIORLY Ol9CAhU5hE+WpkOY2vLeljZobSwPzicBihDQn04/6IHteArI6MU6bmVC6ybArRUF DqPog1qytD+yo7J6TjJiEJ52fZAYjHO4hly9g3BDS96WSi9W+oml7Jav8MKCzonA mJKpLJOkDov6Qm4cUDpI0XcN6bZ34cGLloZQPuVSIY1SQx2RQB+h6dQCerN0zDox RTo8G734y1Yo7M0mAnrjpA3LkLyDf4xJkACuKyKq/KhK7J4rT1xYCzOzoaqEGp3I BVGOGcEg5EZyt0hAx0mKpGg92L8wgfMR35sGUZQ= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:10 2026 by rpki-client