$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer File: 8f744de9-b5b8-4da8-a7f3-989871978fa6.cer (raw, json) Hash identifier: pRW54E8IwucwLtOQd68z/sKySnvVMddn1g3gXXlw8Fc= Subject key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E711F727A2109B10275A42400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jul 2026 13:18:13 +0000 Certificate not after: Wed 11 Oct 2028 13:18:13 +0000 Subordinate resources: AS: 10279 IP: 45.74.212.0/23 IP: 152.44.0.0/19 IP: 164.153.32.0/19 IP: 198.13.80.0/20 IP: 2604:3680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:71:1f:72:7a:21:09:b1:02:75:a4:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 9 13:18:13 2026 GMT Not After : Oct 11 13:18:13 2028 GMT Subject: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:0b:71:35:9f:6f:92:27:db:3e:89:9d:3c: 06:9f:88:a7:10:5e:13:f4:cc:6e:b1:e3:a4:05:e3: ff:97:67:30:25:ce:54:6e:37:7f:9d:67:e0:20:cb: 53:ab:ec:b2:9b:f5:c7:ee:b6:f4:9b:a8:78:af:b4: d6:61:c7:ce:d6:a9:bb:19:77:42:e1:57:91:72:1b: c4:dd:6d:32:71:71:92:44:5c:8b:6c:58:3d:99:4e: bd:51:4d:25:28:99:f8:16:a5:44:25:09:e0:e4:8a: b5:da:c0:f9:fd:b8:98:b8:80:1e:06:04:8e:3d:68: 4f:18:07:5b:02:bc:54:2b:ae:b3:21:d8:05:1f:91: 25:31:04:cc:86:f8:68:6a:a6:0c:7c:5d:b9:ce:cd: e3:19:8c:a9:6f:0f:f7:61:f6:66:9a:8d:94:3d:6c: 4a:f0:84:ed:95:49:b8:ef:a0:79:60:0c:b7:36:cc: 15:d8:9c:e5:df:99:4e:2c:d2:6a:89:a9:eb:69:99: 0a:62:02:c9:91:94:62:40:ad:91:d1:44:f7:64:96: b4:bf:be:d8:76:e2:ae:12:c2:0d:38:03:69:07:1d: e8:0a:aa:47:cf:d1:ff:6d:e6:c2:f0:23:fe:cd:4e: 3f:86:68:06:08:d7:98:54:09:a4:98:db:6d:d4:ca: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 45.74.212.0/23 152.44.0.0/19 164.153.32.0/19 198.13.80.0/20 IPv6: 2604:3680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:54:08:db:3c:49:ca:7a:07:2f:23:f4:c0:bf:0f:76:da:83: ee:aa:c1:7b:0a:0b:4f:71:13:0c:81:55:f7:e9:2c:5c:9a:6d: 55:fb:2f:b1:78:95:c9:d6:a7:82:e1:b8:aa:28:e4:7d:19:a6: aa:8e:b8:fe:36:07:12:0a:32:18:d2:a1:b9:49:99:6b:e2:95: 8d:5e:b9:82:b1:d0:b4:11:3a:b3:1f:d2:09:9d:40:b8:f3:3a: 8c:fb:2f:8d:f9:7f:95:e0:bb:32:c1:f4:ab:3e:1d:d2:ea:a9: 03:48:ee:5f:f5:aa:33:d3:f0:3d:ce:5b:04:37:64:8c:fb:98: 78:cb:eb:af:94:c3:3a:05:9a:37:8d:a6:5d:21:1e:57:8d:60: 3a:3f:30:63:ee:90:2e:3b:76:b5:09:01:ad:77:1f:fb:8b:2a: 41:81:3e:e8:ec:e6:64:fd:e2:f1:14:0a:7e:9c:68:7e:e9:86: 16:f9:3b:1a:d6:aa:c2:b7:b9:6c:f3:f0:da:92:bf:33:96:07: 2a:98:c2:0f:d1:09:58:38:82:6a:e2:e3:bd:06:2b:c2:cb:63: 0f:91:59:6f:05:4d:79:55:ae:38:75:61:2f:ab:d1:74:da:71: de:69:5f:24:12:f4:ed:c2:05:8e:57:c8:eb:c1:5a:a9:4b:d9: a9:f4:9b:a3 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE5xH3J6IQmxAnWkJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwOTEzMTgxM1oXDTI4MTAxMTEzMTgxM1owLzEtMCsGA1UEAxMk OGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4ZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhwLcTWfb5In2z6JnTwGn4inEF4T9MxuseOk BeP/l2cwJc5Ubjd/nWfgIMtTq+yym/XH7rb0m6h4r7TWYcfO1qm7GXdC4VeRchvE 3W0ycXGSRFyLbFg9mU69UU0lKJn4FqVEJQng5Iq12sD5/biYuIAeBgSOPWhPGAdb ArxUK66zIdgFH5ElMQTMhvhoaqYMfF25zs3jGYypbw/3YfZmmo2UPWxK8ITtlUm4 76B5YAy3NswV2Jzl35lOLNJqianraZkKYgLJkZRiQK2R0UT3ZJa0v77YduKuEsIN OANpBx3oCqpHz9H/bebC8CP+zU4/hmgGCNeYVAmkmNtt1MrfNQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFP6wePWj4DqBpFdY+3gwbUTjW+iLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84 Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzhmNzQ0ZGU5LWI1YjgtNGRhOC1h N2YzLTk4OTg3MTk3OGZhNi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5 NzhmYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAEtStQDBAWYLAADBAWkmSADBATGDVAwDQQCAAIw BwMFACYENoAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICKCcwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQFQI 2zxJynoHLyP0wL8PdtqD7qrBewoLT3ETDIFV9+ksXJptVfsvsXiVydanguG4qijk fRmmqo64/jYHEgoyGNKhuUmZa+KVjV65grHQtBE6sx/SCZ1AuPM6jPsvjfl/leC7 MsH0qz4d0uqpA0juX/WqM9PwPc5bBDdkjPuYeMvrr5TDOgWaN42mXSEeV41gOj8w Y+6QLjt2tQkBrXcf+4sqQYE+6OzmZP3i8RQKfpxofumGFvk7Gtaqwre5bPPw2pK/ M5YHKpjCD9EJWDiCauLjvQYrwstjD5FZbwVNeVWuOHVhL6vRdNpx3mlfJBL07cIF jlfI68FaqUvZqfSbow== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:57 2026 by rpki-client