$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564.cer File: 969a8b97-1a80-41dd-895d-87bb48020564.cer (raw, json) Hash identifier: Xjlezbtsppz6XrVrzVc8rNhQd/+nqRw+que2IEN/fm4= Subject key identifier: CC:CE:B3:A5:F0:E3:07:C5:8F:24:23:65:16:80:D8:E4:6E:CB:F4:FA Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6C1A480BF4C0810A2F394080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/969a8b97-1a80-41dd-895d-87bb48020564.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 18:08:46 +0000 Certificate not after: Mon 09 Oct 2028 18:08:46 +0000 Subordinate resources: AS: 394273 IP: 199.187.224.0/22 IP: 206.220.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:1a:48:0b:f4:c0:81:0a:2f:39:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 18:08:46 2026 GMT Not After : Oct 9 18:08:46 2028 GMT Subject: CN=969a8b97-1a80-41dd-895d-87bb48020564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:30:e1:01:c1:6a:45:d2:a6:17:6d:03:b8: 7e:6d:95:07:b4:38:ea:ae:a0:2c:5f:44:29:be:cd: e9:1d:5e:76:44:3f:db:3b:2f:54:6c:bf:96:c8:19: 0c:9b:09:fb:c3:2b:b6:32:8f:01:73:6c:9c:be:1e: 92:10:dc:01:47:29:45:7d:ae:a5:b2:73:a3:36:f7: 47:b2:fd:37:3f:be:db:fb:9c:12:c4:2f:2f:06:b0: 54:6c:be:cb:fb:5a:64:36:6a:5a:04:0c:a3:31:0b: 41:ad:e7:eb:f8:99:ef:c5:58:a8:27:02:1d:a6:9d: 63:f2:7c:3f:40:f2:73:55:28:51:a4:ae:2f:38:19: f4:50:8e:42:28:2a:28:ea:5b:48:c3:8b:ae:08:e2: 15:86:cc:60:e4:d9:10:fe:bb:ef:ae:9f:a5:23:e4: df:21:e2:2b:7a:01:7a:c7:5a:e4:37:23:fb:f5:63: 3f:db:e0:d7:78:7b:a3:09:5c:81:7f:d6:d1:b3:59: 3a:81:38:97:46:53:23:a3:d3:f4:4d:f3:ae:ae:38: 75:9d:74:80:3b:37:31:57:ca:e7:3d:a8:b1:0f:c3: b6:97:45:4d:8f:af:d8:23:21:75:97:46:ac:d2:38: 59:3f:ce:68:61:3a:ab:f7:68:b4:01:77:8a:40:7b: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CE:B3:A5:F0:E3:07:C5:8F:24:23:65:16:80:D8:E4:6E:CB:F4:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969a8b97-1a80-41dd-895d-87bb48020564/969a8b97-1a80-41dd-895d-87bb48020564.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.187.224.0/22 206.220.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394273 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b7:08:6b:c5:98:85:05:6f:85:3d:db:bc:d8:20:80:7e:e1: 83:8b:a8:94:d1:d0:30:64:10:2e:40:2d:b4:97:71:29:81:70: 68:bd:04:0a:e2:cd:ce:9d:fd:84:3d:5f:f5:fe:5d:18:0e:a1: f1:41:35:39:d4:2e:e3:81:36:02:b6:02:db:40:cd:02:03:fe: ba:54:e7:dc:5d:a8:15:d5:4b:1d:13:fe:5b:ee:8e:74:f4:ca: f5:64:d7:2d:86:3f:e6:d1:9a:21:91:dc:58:f7:35:74:29:b1: 67:a5:e1:00:5c:c2:73:b8:81:d3:18:3b:f1:8b:68:f9:b8:41: 3c:e2:af:a2:e0:0a:ef:00:1f:46:20:0f:a3:bb:f6:c5:50:55: a8:30:a2:46:2e:c4:d1:d8:83:3a:e1:20:1a:ae:e1:67:ef:9d: 30:5b:ee:50:08:9b:4f:d8:1f:51:e4:95:51:e7:7d:d0:f0:5a: 87:71:29:eb:69:28:60:e3:12:21:90:1f:74:fb:fe:7e:d2:8f: a6:63:8e:99:d9:00:29:4f:86:15:af:08:9d:84:17:7a:43:14: 38:92:62:16:60:29:0e:6e:8b:58:e4:a5:4a:ac:70:eb:b9:88: 13:a7:fb:f4:b4:38:ee:b0:87:cf:23:1c:45:b3:b9:18:e6:82: e7:b8:f8:70 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE5sGkgL9MCBCi85QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzE4MDg0NloXDTI4MTAwOTE4MDg0NlowLzEtMCsGA1UEAxMk OTY5YThiOTctMWE4MC00MWRkLTg5NWQtODdiYjQ4MDIwNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ow4QHBakXSphdtA7h+bZUHtDjqrqAsX0Qp vs3pHV52RD/bOy9UbL+WyBkMmwn7wyu2Mo8Bc2ycvh6SENwBRylFfa6lsnOjNvdH sv03P77b+5wSxC8vBrBUbL7L+1pkNmpaBAyjMQtBrefr+JnvxVioJwIdpp1j8nw/ QPJzVShRpK4vOBn0UI5CKCoo6ltIw4uuCOIVhsxg5NkQ/rvvrp+lI+TfIeIregF6 x1rkNyP79WM/2+DXeHujCVyBf9bRs1k6gTiXRlMjo9P0TfOurjh1nXSAOzcxV8rn PaixD8O2l0VNj6/YIyF1l0as0jhZP85oYTqr92i0AXeKQHsyWQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFMzOs6Xw4wfFjyQjZRaA2ORuy/T6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 NjlhOGI5Ny0xYTgwLTQxZGQtODk1ZC04N2JiNDgwMjA1NjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzk2OWE4Yjk3LTFhODAtNDFkZC04 OTVkLTg3YmI0ODAyMDU2NC85NjlhOGI5Ny0xYTgwLTQxZGQtODk1ZC04N2JiNDgw MjA1NjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHu+ADBALO3LwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgQhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ23CGvFmIUFb4U927zYIIB+4YOLqJTR0DBkEC5A LbSXcSmBcGi9BArizc6d/YQ9X/X+XRgOofFBNTnULuOBNgK2AttAzQID/rpU59xd qBXVSx0T/lvujnT0yvVk1y2GP+bRmiGR3Fj3NXQpsWel4QBcwnO4gdMYO/GLaPm4 QTzir6LgCu8AH0YgD6O79sVQVagwokYuxNHYgzrhIBqu4WfvnTBb7lAIm0/YH1Hk lVHnfdDwWodxKetpKGDjEiGQH3T7/n7Sj6ZjjpnZAClPhhWvCJ2EF3pDFDiSYhZg KQ5ui1jkpUqscOu5iBOn+/S0OO6wh88jHEWzuRjmgue4+HA= -----END CERTIFICATE-----Generated at Mon Jul 20 06:55:07 2026 by rpki-client