$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer File: 8cb2cf59-f4a5-4440-8588-1f835a0e0201.cer (raw, json) Hash identifier: F+z8wE2+Rm7b32Y8+3t93Jg7T9ti/CHXTJOUlk5iq3w= Subject key identifier: 31:79:91:C7:76:3C:9F:9D:FF:4C:BD:AC:92:D0:B4:35:BD:F2:65:3A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6C3BBA60EA481F72007FCCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 19:16:10 +0000 Certificate not after: Mon 09 Oct 2028 19:16:10 +0000 Subordinate resources: AS: 402686 IP: 192.231.230.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:3b:ba:60:ea:48:1f:72:00:7f:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 19:16:10 2026 GMT Not After : Oct 9 19:16:10 2028 GMT Subject: CN=8cb2cf59-f4a5-4440-8588-1f835a0e0201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b1:4a:3c:25:78:b4:bb:87:db:7d:9b:4a:ad: 43:b0:88:08:1b:a9:dd:e4:96:6f:49:f1:a9:05:40: 9a:60:e9:71:3c:03:23:7e:09:9c:0d:d1:7f:22:e6: ab:00:ef:14:c8:8d:3f:bb:cb:21:d7:8c:1e:b7:14: 00:c7:cb:8f:1b:e1:3c:5b:0d:6f:77:0b:07:37:0b: 18:eb:e5:0f:d2:42:aa:64:8b:18:91:ed:f0:2a:09: dd:a9:4c:4f:ee:96:f9:95:e7:0f:99:af:26:8c:a5: 5e:51:f3:41:2d:77:2a:3d:50:9f:5e:6a:5a:dd:64: be:a1:6d:84:e2:d3:c7:a8:83:b7:a4:97:41:85:50: 2c:ab:8a:fa:cc:08:a0:b1:ec:c3:90:36:f7:e8:56: 67:2f:7e:09:87:e8:03:ee:35:b8:1d:04:ac:43:f7: e9:81:97:f4:b2:6b:69:2a:b7:41:58:cd:ed:69:80: 67:d6:24:3c:5c:35:bf:e1:58:4a:d2:74:87:ee:5d: 6a:1f:bd:cc:27:13:3a:b1:bc:0f:ff:87:9c:ed:a4: dc:3c:0b:de:5f:05:bb:f1:e9:48:08:27:3f:b2:6b: 01:a6:7c:9a:a2:91:7e:48:28:4c:94:e0:b9:a9:c9: 09:e1:0c:4a:5a:14:38:87:59:aa:ff:5a:c4:1a:94: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:79:91:C7:76:3C:9F:9D:FF:4C:BD:AC:92:D0:B4:35:BD:F2:65:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8cb2cf59-f4a5-4440-8588-1f835a0e0201/8cb2cf59-f4a5-4440-8588-1f835a0e0201.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.231.230.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:f3:b2:7e:50:99:f3:21:ff:5b:bf:28:4c:cf:47:71:fd:58: 79:56:a1:50:e2:71:5e:94:d5:a1:3d:91:36:e0:2d:a1:c5:33: 65:bb:d0:88:d7:7a:65:18:ad:be:9b:24:e5:c5:9e:a6:ea:6f: fa:41:85:0c:61:10:ea:cf:d0:9f:35:4a:08:56:e9:0d:18:c6: 16:42:83:ba:72:78:bf:51:76:04:83:b6:8c:70:57:9d:0d:41: 02:a2:6c:7b:5f:7a:d0:79:28:16:ec:3d:84:1b:29:05:dd:30: f1:b9:a1:d5:57:a3:1d:51:b6:66:2f:1f:e1:76:43:74:93:47: 4b:9e:d6:10:1a:81:b5:28:30:c3:f9:1d:9a:a7:49:92:54:7f: 8f:34:32:13:3d:13:64:95:c4:c8:44:fb:b3:7e:f6:1a:c7:59: 67:61:9f:b5:bd:ff:27:76:8e:2c:a9:37:55:bd:96:5b:e7:a3: a3:e0:2d:83:dc:23:07:c3:be:21:5d:af:5d:02:3e:51:1c:34: 0f:36:81:bf:6d:3e:f7:0d:c7:af:66:a7:40:5c:a0:a2:e2:62: d2:82:40:1d:70:6e:b8:2e:48:2b:fa:0d:2a:2c:74:e9:8c:a6: 50:9a:da:e4:35:42:51:a8:e7:2b:ae:4d:95:6d:3d:3d:b8:81: bc:23:4e:fd -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5sO7pg6kgfcgB/zMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzE5MTYxMFoXDTI4MTAwOTE5MTYxMFowLzEtMCsGA1UEAxMk OGNiMmNmNTktZjRhNS00NDQwLTg1ODgtMWY4MzVhMGUwMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rFKPCV4tLuH232bSq1DsIgIG6nd5JZvSfGp BUCaYOlxPAMjfgmcDdF/IuarAO8UyI0/u8sh14wetxQAx8uPG+E8Ww1vdwsHNwsY 6+UP0kKqZIsYke3wKgndqUxP7pb5lecPma8mjKVeUfNBLXcqPVCfXmpa3WS+oW2E 4tPHqIO3pJdBhVAsq4r6zAigsezDkDb36FZnL34Jh+gD7jW4HQSsQ/fpgZf0smtp KrdBWM3taYBn1iQ8XDW/4VhK0nSH7l1qH73MJxM6sbwP/4ec7aTcPAveXwW78elI CCc/smsBpnyaopF+SChMlOC5qckJ4QxKWhQ4h1mq/1rEGpSs7QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDF5kcd2PJ+d/0y9rJLQtDW98mU6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 Y2IyY2Y1OS1mNGE1LTQ0NDAtODU4OC0xZjgzNWEwZTAyMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzhjYjJjZjU5LWY0YTUtNDQ0MC04 NTg4LTFmODM1YTBlMDIwMS84Y2IyY2Y1OS1mNGE1LTQ0NDAtODU4OC0xZjgzNWEw ZTAyMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA5+YwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiT+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL3zsn5QmfMh/1u/KEzPR3H9WHlWoVDicV6U1aE9kTbgLaHF M2W70IjXemUYrb6bJOXFnqbqb/pBhQxhEOrP0J81SghW6Q0YxhZCg7pyeL9RdgSD toxwV50NQQKibHtfetB5KBbsPYQbKQXdMPG5odVXox1RtmYvH+F2Q3STR0ue1hAa gbUoMMP5HZqnSZJUf480MhM9E2SVxMhE+7N+9hrHWWdhn7W9/yd2jiypN1W9llvn o6PgLYPcIwfDviFdr10CPlEcNA82gb9tPvcNx69mp0BcoKLiYtKCQB1wbrguSCv6 DSosdOmMplCa2uQ1QlGo5yuuTZVtPT24gbwjTv0= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:46 2026 by rpki-client