$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240.cer File: 969db95f-7221-480e-8d12-fd6cfb8ce240.cer (raw, json) Hash identifier: St/yUNR28eUE0zMNKqAGC3F336GgjQm2VoBaanZOAsY= Subject key identifier: 89:F4:FA:36:E2:93:E2:81:02:DE:3B:9C:15:61:29:A9:FC:17:98:4C Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5DAC453D8539AFCA06B90CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 14:05:48 +0000 Certificate not after: Wed 04 Oct 2028 14:05:48 +0000 Subordinate resources: AS: 402024 IP: 204.52.222.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:ac:45:3d:85:39:af:ca:06:b9:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 14:05:48 2026 GMT Not After : Oct 4 14:05:48 2028 GMT Subject: CN=969db95f-7221-480e-8d12-fd6cfb8ce240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:54:06:c4:7a:e6:e6:31:30:3f:4c:a5:97: 26:62:fc:6b:1a:64:4e:a2:8e:7d:10:98:f7:91:b6: 2e:cd:42:95:28:66:2c:7d:2c:18:1c:73:58:a6:58: 62:79:e5:ae:40:f4:d9:69:31:23:bf:62:5f:6f:25: 6a:0c:75:20:20:c4:f4:6c:fb:a1:4b:31:5e:9d:75: c5:04:15:b9:9e:a6:5d:c0:e0:c5:4c:cf:fb:e2:5e: df:97:7a:da:ed:84:43:27:2f:84:55:80:91:10:22: e9:1a:3b:ea:ea:97:d0:af:ec:fc:c4:5e:ee:68:4f: e4:3f:1d:ab:54:18:94:36:cf:8a:06:96:28:0d:35: d2:d6:b4:98:16:3a:b5:2c:3f:14:31:44:a9:ea:44: 8d:54:19:55:b0:c4:47:a0:21:fe:19:34:f9:88:5c: ae:40:9a:f3:ea:62:fd:2b:62:89:c4:2b:77:75:d3: 67:23:44:20:98:71:54:36:57:82:bb:ff:bd:ff:d9: 67:fe:2a:2c:41:07:cf:18:2c:43:46:25:96:3c:fb: e6:43:b8:ef:12:4b:63:57:07:8e:40:65:32:20:da: c6:d3:09:4d:9a:4e:9a:2b:f6:fb:54:4f:fc:de:c1: f4:e9:d4:95:56:82:5c:8c:59:e9:c2:7b:91:61:f5: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:FA:36:E2:93:E2:81:02:DE:3B:9C:15:61:29:A9:FC:17:98:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/969db95f-7221-480e-8d12-fd6cfb8ce240/969db95f-7221-480e-8d12-fd6cfb8ce240.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 204.52.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402024 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:46:95:80:28:05:96:13:a3:44:05:e9:a1:0a:b3:ad:cd:18: 97:67:14:36:39:e8:50:04:6b:ae:0f:ee:d0:74:ac:d1:e3:41: 37:dc:91:83:39:74:a7:58:52:9e:dc:2b:9a:4b:e2:d2:26:ef: 80:25:ca:65:9f:39:88:03:fe:2f:51:09:1c:42:fb:ad:34:4f: b3:ca:cc:0c:c1:f8:1d:c6:fc:6f:db:88:c6:ec:28:41:27:9b: 90:a1:08:7d:d7:55:6f:75:2b:76:95:12:23:df:e5:10:4f:58: 8d:71:0e:27:cd:47:83:91:d3:3d:78:a6:a2:7d:80:27:07:61: 34:80:81:5d:98:2c:b1:6f:ea:bd:eb:91:e6:06:94:09:bd:1b: f4:b4:42:c7:b5:39:d3:b6:e7:c4:29:cc:f7:7f:f7:33:ff:b5: 59:82:06:e5:91:6a:2d:1f:81:b5:b2:6e:eb:f8:81:ee:4a:8d: 2a:53:6a:3f:98:b4:03:19:3f:66:a8:b0:40:45:32:33:54:83: 6d:58:81:c4:3e:85:27:da:3c:bf:61:3d:2c:2d:2c:24:49:d5: a9:d8:9c:4e:0b:c0:ea:20:f2:3e:47:04:17:bf:e4:d2:f0:30: ee:a7:f7:84:e2:ea:48:8d:bc:14:a3:a8:44:6d:d1:8e:fe:0d: 8c:66:68:3f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5drEU9hTmvyga5DMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjE0MDU0OFoXDTI4MTAwNDE0MDU0OFowLzEtMCsGA1UEAxMk OTY5ZGI5NWYtNzIyMS00ODBlLThkMTItZmQ2Y2ZiOGNlMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm5UBsR65uYxMD9MpZcmYvxrGmROoo59EJj3 kbYuzUKVKGYsfSwYHHNYplhieeWuQPTZaTEjv2JfbyVqDHUgIMT0bPuhSzFenXXF BBW5nqZdwODFTM/74l7fl3ra7YRDJy+EVYCRECLpGjvq6pfQr+z8xF7uaE/kPx2r VBiUNs+KBpYoDTXS1rSYFjq1LD8UMUSp6kSNVBlVsMRHoCH+GTT5iFyuQJrz6mL9 K2KJxCt3ddNnI0QgmHFUNleCu/+9/9ln/iosQQfPGCxDRiWWPPvmQ7jvEktjVweO QGUyINrG0wlNmk6aK/b7VE/83sH06dSVVoJcjFnpwnuRYfWKpQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIn0+jbik+KBAt47nBVhKan8F5hMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 NjlkYjk1Zi03MjIxLTQ4MGUtOGQxMi1mZDZjZmI4Y2UyNDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzk2OWRiOTVmLTcyMjEtNDgwZS04 ZDEyLWZkNmNmYjhjZTI0MC85NjlkYjk1Zi03MjIxLTQ4MGUtOGQxMi1mZDZjZmI4 Y2UyNDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMNN4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiJoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB9GlYAoBZYTo0QF6aEKs63NGJdnFDY56FAEa64P7tB0rNHj QTfckYM5dKdYUp7cK5pL4tIm74AlymWfOYgD/i9RCRxC+600T7PKzAzB+B3G/G/b iMbsKEEnm5ChCH3XVW91K3aVEiPf5RBPWI1xDifNR4OR0z14pqJ9gCcHYTSAgV2Y LLFv6r3rkeYGlAm9G/S0Qse1OdO258QpzPd/9zP/tVmCBuWRai0fgbWybuv4ge5K jSpTaj+YtAMZP2aosEBFMjNUg21YgcQ+hSfaPL9hPSwtLCRJ1anYnE4LwOog8j5H BBe/5NLwMO6n94Ti6kiNvBSjqERt0Y7+DYxmaD8= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:01 2026 by rpki-client