$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer File: 9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer (raw, json) Hash identifier: AblvL0AfDXF+wV7/042aLV3fc528zoo4ZXygynlOJss= Subject key identifier: A3:FC:89:A7:9E:55:75:B0:61:39:44:9D:AE:B1:52:0F:C9:F7:53:29 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E30A472DADA6BB75FB43CA000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jun 2026 10:58:39 +0000 Certificate not after: Mon 18 Sep 2028 10:58:39 +0000 Subordinate resources: AS: 116 AS: 158 AS: 32094 AS: 36274 AS: 395592 AS: 397997 AS: 398364 IP: 128.96.0.0/16 IP: 129.192.0.0/16 IP: 138.85.0.0/16 IP: 142.133.0.0/16 IP: 146.250.0.0/16 IP: 147.117.0.0/16 IP: 147.128.0.0/16 IP: 155.53.128.0/17 IP: 169.144.0.0/16 IP: 192.4.16.0 -- 192.4.237.255 IP: 192.4.244.0 -- 192.4.255.255 IP: 192.75.88.0/23 IP: 192.86.1.0/24 IP: 198.24.0.0 -- 198.24.9.255 IP: 205.132.5.0/24 IP: 205.203.224.0/19 IP: 2620:a3::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:a4:72:da:da:6b:b7:5f:b4:3c:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 16 10:58:39 2026 GMT Not After : Sep 18 10:58:39 2028 GMT Subject: CN=9b297cc7-4f76-4bfe-bf80-19a353b6648e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:5f:b5:40:af:40:c5:64:4b:63:73:1b:08: d8:19:cb:2d:b5:ff:ab:91:d6:3c:e9:d0:bf:29:18: 74:6e:ee:bb:82:cb:93:56:24:8e:b7:d3:61:7b:8c: 43:27:8d:79:53:a5:fb:30:1b:f9:06:95:b4:8b:91: 8e:c7:ef:ae:08:48:0e:ac:90:7b:5a:96:75:19:42: 47:1f:cb:d3:83:53:b6:f0:04:23:ce:e3:01:b3:94: fa:9d:e3:3a:47:32:8d:25:51:5b:c9:82:99:fd:9b: 12:1e:16:d1:1a:b2:e7:44:2d:f1:1e:bc:3f:27:11: 49:37:8a:8c:10:67:e6:90:a8:e7:e3:90:46:49:70: 06:79:d8:9b:6e:f4:cd:f8:ad:b0:70:b5:72:12:b5: 9c:02:d2:8a:54:90:b7:06:5c:28:cc:aa:c1:48:9d: 7f:28:f1:bc:d9:4f:69:3d:dd:fc:e5:76:c0:1c:3b: 4c:3f:72:d7:07:05:0b:a2:68:58:64:47:9b:77:ca: e2:a0:e2:9e:75:df:86:2c:4b:60:1c:4f:2e:29:61: 8d:95:85:1c:69:e7:c8:9d:9e:a8:6a:66:03:48:2f: a0:d7:66:3d:a3:9f:97:1f:f5:65:8e:5f:1e:15:93: 5c:04:6f:0f:6f:07:9f:75:7b:fe:98:01:57:22:73: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FC:89:A7:9E:55:75:B0:61:39:44:9D:AE:B1:52:0F:C9:F7:53:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 128.96.0.0/16 129.192.0.0/16 138.85.0.0/16 142.133.0.0/16 146.250.0.0/16 147.117.0.0/16 147.128.0.0/16 155.53.128.0/17 169.144.0.0/16 192.4.16.0-192.4.237.255 192.4.244.0-192.4.255.255 192.75.88.0/23 192.86.1.0/24 198.24.0.0-198.24.9.255 205.132.5.0/24 205.203.224.0/19 IPv6: 2620:a3::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 116 158 32094 36274 395592 397997 398364 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:af:89:09:f1:ab:7c:7d:8e:d1:5a:1a:a4:70:7d:b0:5d:3e: 3f:27:b2:86:7b:ad:8c:f7:f3:8a:aa:57:95:49:b9:56:9c:a8: 28:36:fc:29:eb:a4:92:1e:a1:be:c7:10:7f:db:d2:fe:2a:df: c3:43:42:07:5e:fa:6c:8e:3c:8f:0b:55:cb:2e:07:37:6d:fb: c7:5c:73:d9:42:39:ca:0c:3e:c1:b4:ec:81:d5:19:02:0b:41: 94:6e:07:2c:86:cc:62:b6:f4:52:1c:1f:b0:9b:1a:e2:68:42: 74:5e:3a:90:c4:5e:2b:d6:fd:db:6d:95:a9:3f:12:4e:eb:fb: 98:bd:b2:e3:a2:30:a7:92:e2:1f:98:34:d1:0d:02:c8:10:30: 30:db:50:96:6b:d0:bc:c5:a8:6e:0f:f5:9c:28:f8:bd:c8:da: 87:e9:30:e5:d5:b6:b0:c7:8e:dc:22:62:3d:48:2f:3d:50:60: 35:54:89:39:4b:2b:05:5c:89:e6:3f:5d:35:b3:69:eb:26:99: 8e:fa:f5:c9:1f:35:4d:df:13:ba:93:73:89:8b:84:7e:06:86: aa:0f:39:fe:44:43:00:6a:59:8e:be:45:56:0b:24:ca:cd:e4: f6:d7:a2:dc:16:a2:fc:12:9b:76:af:24:10:9d:d2:37:42:aa: af:c5:c1:04 -----BEGIN CERTIFICATE----- MIIHnzCCBoegAwIBAgIUAQ0Mn0MoWE4wpHLa2mu3X7Q8oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxNjEwNTgzOVoXDTI4MDkxODEwNTgzOVowLzEtMCsGA1UEAxMk OWIyOTdjYzctNGY3Ni00YmZlLWJmODAtMTlhMzUzYjY2NDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7hftUCvQMVkS2NzGwjYGcsttf+rkdY86dC/ KRh0bu67gsuTViSOt9Nhe4xDJ415U6X7MBv5BpW0i5GOx++uCEgOrJB7WpZ1GUJH H8vTg1O28AQjzuMBs5T6neM6RzKNJVFbyYKZ/ZsSHhbRGrLnRC3xHrw/JxFJN4qM EGfmkKjn45BGSXAGedibbvTN+K2wcLVyErWcAtKKVJC3BlwozKrBSJ1/KPG82U9p Pd385XbAHDtMP3LXBwULomhYZEebd8rioOKedd+GLEtgHE8uKWGNlYUcaefInZ6o amYDSC+g12Y9o5+XH/Vljl8eFZNcBG8PbwefdXv+mAFXInNsZwIDAQABo4IEsTCC BK0wHQYDVR0OBBYEFKP8iaeeVXWwYTlEna6xUg/J91MpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 YjI5N2NjNy00Zjc2LTRiZmUtYmY4MC0xOWEzNTNiNjY0OGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzliMjk3Y2M3LTRmNzYtNGJmZS1i ZjgwLTE5YTM1M2I2NjQ4ZS85YjI5N2NjNy00Zjc2LTRiZmUtYmY4MC0xOWEzNTNi NjY0OGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwgZoGCCsGAQUF BwEHAQH/BIGKMIGHMHQEAgABMG4DAwCAYAMDAIHAAwMAilUDAwCOhQMDAJL6AwMA k3UDAwCTgAMEB5s1gAMDAKmQMAwDBATABBADBAHABOwwCwMEAsAE9AMDAMAEAwQB wEtYAwQAwFYBMAsDAwPGGAMEAcYYCAMEAM2EBQMEBc3L4DAPBAIAAjAJAwcAJiAA owAAMDQGCCsGAQUFBwEIAQH/BCUwI6AhMB8CAXQCAgCeAgJ9XgIDAI2yAgMGCUgC AwYSrQIDBhQcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA6viQnxq3x9jtFaGqRwfbBdPj8nsoZ7rYz384qq V5VJuVacqCg2/CnrpJIeob7HEH/b0v4q38NDQgde+myOPI8LVcsuBzdt+8dcc9lC OcoMPsG07IHVGQILQZRuByyGzGK29FIcH7CbGuJoQnReOpDEXivW/dttlak/Ek7r +5i9suOiMKeS4h+YNNENAsgQMDDbUJZr0LzFqG4P9Zwo+L3I2ofpMOXVtrDHjtwi Yj1ILz1QYDVUiTlLKwVcieY/XTWzaesmmY769ckfNU3fE7qTc4mLhH4GhqoPOf5E QwBqWY6+RVYLJMrN5PbXotwWovwSm3avJBCd0jdCqq/FwQQ= -----END CERTIFICATE-----Generated at Sat Jul 18 01:45:51 2026 by rpki-client