$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/985a2450-427b-461c-a2f7-be7d9c6e5255.cer File: 985a2450-427b-461c-a2f7-be7d9c6e5255.cer (raw, json) Hash identifier: chLTxYMIe1PrvM+70WAlM8F+ME73vmkK1rpQZCH5yOg= Subject key identifier: 95:71:6C:A2:D1:8A:F4:F4:30:3B:D7:26:8A:4F:D9:3C:20:1D:2D:EF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4D87ED0F2CDC09CA60652080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/985a2450-427b-461c-a2f7-be7d9c6e5255/985a2450-427b-461c-a2f7-be7d9c6e5255.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/985a2450-427b-461c-a2f7-be7d9c6e5255/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 19:19:38 +0000 Certificate not after: Thu 28 Sep 2028 19:19:38 +0000 Subordinate resources: AS: 11329 AS: 19958 IP: 209.62.128.0/19 IP: 209.135.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:87:ed:0f:2c:dc:09:ca:60:65:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 26 19:19:38 2026 GMT Not After : Sep 28 19:19:38 2028 GMT Subject: CN=985a2450-427b-461c-a2f7-be7d9c6e5255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:1a:44:ea:2e:20:4b:6a:7d:2d:99:69:ea: 9c:9f:54:8b:6c:0f:f7:d5:97:58:25:3e:ed:05:7a: af:44:e5:3d:a6:72:87:15:9d:01:32:e8:99:7e:d6: 0b:c7:e7:c1:22:aa:66:18:a2:0a:f3:4d:6c:7c:ec: 83:7d:a6:77:77:a8:e2:a9:3a:50:fa:27:c5:c0:41: ed:f2:fb:a9:9a:9d:75:1d:35:d1:1c:fb:3c:e1:18: 5d:6f:40:a5:a3:46:47:0c:f4:b4:aa:df:20:93:f0: a0:52:01:43:bb:e9:06:34:94:85:d3:4b:5f:d8:e4: d6:f3:f0:97:b3:d8:a2:48:10:f9:62:ee:5b:e2:88: 62:45:b3:df:60:59:25:48:20:28:f7:9f:ea:99:47: 6e:7b:3f:7e:e3:3c:94:eb:d9:7d:c5:c3:00:b5:f3: 54:dc:58:ea:ff:7d:c5:0f:01:6b:fe:7c:d9:7b:1f: bf:b6:67:6f:28:a0:d8:e6:e9:bd:82:09:2e:56:fa: b0:d5:88:04:6b:9b:6a:31:a7:e7:3a:77:89:77:d7: f8:3a:68:07:a2:b0:bb:95:83:24:19:00:a4:e6:3e: 2f:28:bf:31:fd:0b:22:a1:00:2e:ce:41:e0:3a:77: fa:95:8f:e9:21:a4:89:af:1c:25:87:80:1e:9c:a3: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:71:6C:A2:D1:8A:F4:F4:30:3B:D7:26:8A:4F:D9:3C:20:1D:2D:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/985a2450-427b-461c-a2f7-be7d9c6e5255/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/985a2450-427b-461c-a2f7-be7d9c6e5255/985a2450-427b-461c-a2f7-be7d9c6e5255.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 209.62.128.0/19 209.135.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11329 19958 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d5:d4:be:23:e3:7b:00:cb:0b:f4:17:d3:9f:e4:da:08:6e: fd:4d:f8:b5:25:cd:9b:bc:f6:09:7a:0d:92:7d:53:b0:aa:20: d5:82:c7:bb:f4:27:0e:7d:61:cf:1e:be:3b:66:3f:b3:30:23: b3:e7:51:9a:3c:3a:66:99:26:8a:53:6d:f4:bf:a6:c8:7c:62: 2e:cf:ce:d3:0d:6e:78:b5:4a:4c:2d:43:14:46:0d:a6:fd:cc: cd:a2:e4:69:b0:9c:56:73:0b:38:06:1b:c9:a8:af:3f:fc:c4: f2:0c:80:29:99:35:50:e3:1a:52:1f:bc:5f:12:10:18:75:5f: 3a:2a:15:c9:3d:4a:48:80:87:b7:c8:78:cd:55:37:17:04:94: 82:16:37:d3:89:7c:7b:f4:fa:2d:49:f6:d4:9d:21:8e:69:94: bc:1b:c4:16:bc:0c:fb:2b:35:4f:ec:63:10:e8:3b:c0:2c:b0: 74:0a:f5:20:03:b0:7c:e7:c8:23:63:34:5b:68:50:87:94:05: 69:84:2d:93:b7:2d:0e:c4:89:f3:1d:61:b6:b3:b8:1b:ea:9f: c9:e8:87:3c:53:f5:a0:41:c9:f4:44:76:a2:74:32:07:c5:fb: cf:da:0e:ca:77:da:4a:97:52:a9:0b:f7:67:04:22:86:6b:9b: dc:36:4b:83 -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWE5Nh+0PLNwJymBlIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNjE5MTkzOFoXDTI4MDkyODE5MTkzOFowLzEtMCsGA1UEAxMk OTg1YTI0NTAtNDI3Yi00NjFjLWEyZjctYmU3ZDljNmU1MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpwaROouIEtqfS2Zaeqcn1SLbA/31ZdYJT7t BXqvROU9pnKHFZ0BMuiZftYLx+fBIqpmGKIK801sfOyDfaZ3d6jiqTpQ+ifFwEHt 8vupmp11HTXRHPs84Rhdb0Clo0ZHDPS0qt8gk/CgUgFDu+kGNJSF00tf2OTW8/CX s9iiSBD5Yu5b4ohiRbPfYFklSCAo95/qmUduez9+4zyU69l9xcMAtfNU3Fjq/33F DwFr/nzZex+/tmdvKKDY5um9ggkuVvqw1YgEa5tqMafnOneJd9f4OmgHorC7lYMk GQCk5j4vKL8x/QsioQAuzkHgOnf6lY/pIaSJrxwlh4AenKPwnQIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFJVxbKLRivT0MDvXJopP2TwgHS3vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 ODVhMjQ1MC00MjdiLTQ2MWMtYTJmNy1iZTdkOWM2ZTUyNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzk4NWEyNDUwLTQyN2ItNDYxYy1h MmY3LWJlN2Q5YzZlNTI1NS85ODVhMjQ1MC00MjdiLTQ2MWMtYTJmNy1iZTdkOWM2 ZTUyNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAXRPoADBAXRhyAwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICLEECAk32MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIDV1L4j43sAywv0F9Of5NoIbv1N+LUlzZu8 9gl6DZJ9U7CqINWCx7v0Jw59Yc8evjtmP7MwI7PnUZo8OmaZJopTbfS/psh8Yi7P ztMNbni1SkwtQxRGDab9zM2i5GmwnFZzCzgGG8morz/8xPIMgCmZNVDjGlIfvF8S EBh1XzoqFck9SkiAh7fIeM1VNxcElIIWN9OJfHv0+i1J9tSdIY5plLwbxBa8DPsr NU/sYxDoO8AssHQK9SADsHznyCNjNFtoUIeUBWmELZO3LQ7EifMdYbazuBvqn8no hzxT9aBByfREdqJ0MgfF+8/aDsp32kqXUqkL92cEIoZrm9w2S4M= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:11 2026 by rpki-client