$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ea1135b-d1c1-4511-a02e-45629d9eb47c.cer File: 9ea1135b-d1c1-4511-a02e-45629d9eb47c.cer (raw, json) Hash identifier: 191ThvY+boYICFQHjx2aWM7fnflxUaoQ4FtW0i9q4/4= Subject key identifier: F9:C8:B4:93:7D:EE:20:1E:92:D3:CE:DB:62:2F:C3:2A:BD:A7:5E:5B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5CA0E186BC94B7CC446EE480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ea1135b-d1c1-4511-a02e-45629d9eb47c/9ea1135b-d1c1-4511-a02e-45629d9eb47c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ea1135b-d1c1-4511-a02e-45629d9eb47c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 05:07:02 +0000 Certificate not after: Wed 04 Oct 2028 05:07:02 +0000 Subordinate resources: IP: 150.108.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5c:a0:e1:86:bc:94:b7:cc:44:6e:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 05:07:02 2026 GMT Not After : Oct 4 05:07:02 2028 GMT Subject: CN=9ea1135b-d1c1-4511-a02e-45629d9eb47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:82:59:c9:1f:20:25:22:1c:0e:37:27:ff: 23:85:70:b7:25:87:e5:bd:6e:94:cb:9f:67:3b:f4: ca:fd:ed:4a:68:20:0e:ad:24:a2:67:22:91:95:d0: 41:06:d9:d8:8d:25:fe:20:c8:7f:b8:db:5e:c2:85: c7:04:e8:ba:12:aa:21:be:7d:35:45:2a:03:22:a7: d8:f3:d5:ea:5f:dd:5d:ed:52:9e:e9:09:a2:86:d8: 0c:22:d1:70:4a:f5:f1:6a:50:09:3e:f7:5d:fe:b5: 89:99:ba:cc:f1:d1:b6:6a:44:10:57:99:2e:2d:4e: 3c:b0:55:37:1f:54:54:0b:73:30:60:38:0c:db:32: 7b:c6:1e:7b:f8:8c:9c:1c:33:89:b7:60:d3:ba:80: 54:01:9f:d6:f2:b9:93:54:6e:a4:07:dc:d2:14:3f: 70:a5:b6:82:cf:ba:f6:66:c8:49:b1:00:b2:34:bd: 68:72:9b:9c:ab:b5:de:ef:b8:e1:33:2b:fc:de:97: 6d:b0:05:9d:b1:74:80:82:7e:fd:9c:74:73:1d:6e: 85:ab:cb:2f:b9:4d:8a:94:56:53:d4:57:0f:50:5e: 4f:4c:18:66:de:e1:84:ce:e6:46:95:f6:38:ae:75: 56:7a:d9:d2:27:b5:25:f2:b3:bc:3b:5e:df:94:b4: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C8:B4:93:7D:EE:20:1E:92:D3:CE:DB:62:2F:C3:2A:BD:A7:5E:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ea1135b-d1c1-4511-a02e-45629d9eb47c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9ea1135b-d1c1-4511-a02e-45629d9eb47c/9ea1135b-d1c1-4511-a02e-45629d9eb47c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 150.108.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a3:58:ab:8a:8f:d6:36:1e:d5:3d:23:98:15:67:07:ee:3e: 99:fe:66:fa:41:6e:e4:52:7c:57:cb:cd:c9:d1:6b:8f:84:9f: 35:fb:d3:cd:02:7f:93:8a:ab:f2:42:f3:47:a5:1d:96:c9:a2: 23:77:c4:47:9b:9a:bc:d0:71:fb:37:9b:02:0e:74:4d:43:0f: 29:2b:a1:fa:a3:a5:bd:0a:f6:48:3e:2d:fe:ef:e3:e6:de:77: 5a:07:7d:04:3e:7d:8b:47:2d:21:28:bb:20:e2:92:fc:ab:37: 4a:bf:e9:a9:a1:b9:50:7d:52:e5:26:3d:aa:77:30:83:f5:b8: 39:80:8d:0a:0d:63:c9:5d:9b:74:5f:5a:cc:2e:bc:ad:e3:b2: 12:d0:b7:4b:ba:93:dc:af:5a:52:c5:46:30:6e:b9:ee:b4:85: 63:1a:8c:1f:67:c8:b9:04:73:9b:2c:73:52:38:f1:4b:b3:d6: 13:34:6f:17:1e:a4:30:b3:df:a2:95:c4:f1:bb:9e:98:9a:0f: ab:f8:52:59:b7:b3:f1:ea:57:ab:e4:20:7c:db:bb:65:f3:e2: ef:94:81:12:4f:4b:d0:84:89:d5:e7:9b:cd:54:46:30:ac:4e: 7b:ed:db:46:ff:26:f1:13:f1:89:5a:af:53:2b:57:c8:e5:dd: 5e:e4:02:ed -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE5coOGGvJS3zERu5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjA1MDcwMloXDTI4MTAwNDA1MDcwMlowLzEtMCsGA1UEAxMk OWVhMTEzNWItZDFjMS00NTExLWEwMmUtNDU2MjlkOWViNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi+CWckfICUiHA43J/8jhXC3JYflvW6Uy59n O/TK/e1KaCAOrSSiZyKRldBBBtnYjSX+IMh/uNtewoXHBOi6Eqohvn01RSoDIqfY 89XqX91d7VKe6QmihtgMItFwSvXxalAJPvdd/rWJmbrM8dG2akQQV5kuLU48sFU3 H1RUC3MwYDgM2zJ7xh57+IycHDOJt2DTuoBUAZ/W8rmTVG6kB9zSFD9wpbaCz7r2 ZshJsQCyNL1ocpucq7Xe77jhMyv83pdtsAWdsXSAgn79nHRzHW6Fq8svuU2KlFZT 1FcPUF5PTBhm3uGEzuZGlfY4rnVWetnSJ7Ul8rO8O17flLS4tQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFPnItJN97iAektPO22Ivwyq9p15bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 ZWExMTM1Yi1kMWMxLTQ1MTEtYTAyZS00NTYyOWQ5ZWI0N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzllYTExMzViLWQxYzEtNDUxMS1h MDJlLTQ1NjI5ZDllYjQ3Yy85ZWExMTM1Yi1kMWMxLTQ1MTEtYTAyZS00NTYyOWQ5 ZWI0N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCWbDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmo1irio/WNh7VPSOYFWcH 7j6Z/mb6QW7kUnxXy83J0WuPhJ81+9PNAn+TiqvyQvNHpR2WyaIjd8RHm5q80HH7 N5sCDnRNQw8pK6H6o6W9CvZIPi3+7+Pm3ndaB30EPn2LRy0hKLsg4pL8qzdKv+mp oblQfVLlJj2qdzCD9bg5gI0KDWPJXZt0X1rMLryt47IS0LdLupPcr1pSxUYwbrnu tIVjGowfZ8i5BHObLHNSOPFLs9YTNG8XHqQws9+ilcTxu56Ymg+r+FJZt7Px6ler 5CB827tl8+LvlIEST0vQhInV55vNVEYwrE577dtG/ybxE/GJWq9TK1fI5d1e5ALt -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:12 2026 by rpki-client