$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.cer File: a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.cer (raw, json) Hash identifier: bZNuyj5R3xnbY6xSWuypJ7XN+jlLmprrhEPuMNS4Fbk= Subject key identifier: 99:48:8E:CC:76:D6:F8:A2:0B:5E:89:62:6E:58:0E:4F:4B:D3:94:DC Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E7F97E65DE39BE3F7A2C46C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jul 2026 17:42:14 +0000 Certificate not after: Mon 09 Oct 2028 22:31:10 +0000 Subordinate resources: AS: 402759 IP: 169.128.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:97:e6:5d:e3:9b:e3:f7:a2:c4:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 14 17:42:14 2026 GMT Not After : Oct 9 22:31:10 2028 GMT Subject: CN=a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:d2:dd:02:7c:60:3d:87:99:53:d8:f5:37: d2:71:4f:43:1b:00:1d:d8:04:e3:6b:5f:3c:95:cb: e1:40:42:bc:9b:ae:22:12:b0:21:14:f6:4c:8e:96: 6f:41:ce:da:fa:80:14:b6:51:0a:51:ba:4d:0c:e4: 8f:97:22:c3:36:fa:87:3e:32:a2:3e:4d:13:1b:d6: fe:20:6d:72:27:c5:3d:d2:bc:43:a4:d7:e0:e2:72: cf:d4:70:41:49:39:6c:dc:62:53:fc:2f:79:e7:e0: 4f:7c:72:0d:f7:1d:e6:55:93:dd:5d:b3:71:31:c0: 4c:b4:db:f1:11:b2:1b:5b:83:be:f7:a2:3d:cb:46: 30:4a:90:3e:a7:1c:62:4b:d9:e9:3b:f6:d8:d8:37: 7a:25:9c:a8:3f:bc:e2:6c:75:68:ae:ae:61:0c:9d: ac:17:72:46:1c:4a:ba:f3:96:70:5d:9e:d4:09:3d: aa:b4:63:cc:a4:9d:93:f1:98:24:77:53:75:e6:bf: e7:64:81:8a:53:a9:a4:60:03:5e:3e:be:23:8f:e4: cf:29:17:cc:68:da:a2:db:38:4b:f4:c9:da:16:bb: 9a:83:73:c8:34:25:ec:08:b2:2f:4d:b4:99:3d:5d: 0c:4b:76:41:d2:84:03:1d:19:94:81:5d:56:2b:ef: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:48:8E:CC:76:D6:F8:A2:0B:5E:89:62:6E:58:0E:4F:4B:D3:94:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c/a1ad964d-05c6-4cb9-8e3e-2e7b34a2d56c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 169.128.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402759 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a2:89:c7:5c:30:e9:82:29:57:a9:17:02:91:71:59:51:04: 6e:bb:e2:93:8c:79:df:aa:8d:c8:6e:50:a7:a5:f1:09:35:a8: 80:93:56:ac:aa:c0:0a:64:04:8e:fc:ed:f7:25:f7:f3:97:d9: 6a:fc:c8:f6:5d:20:3d:e7:85:15:46:1c:a8:bf:f9:f1:a1:d6: 8e:b3:f3:18:b0:98:ad:67:f7:6b:ba:44:68:fb:9c:66:fa:53: a6:55:78:e6:9f:1e:fc:fd:69:19:82:1c:ed:86:c0:1e:ab:bf: a3:17:ad:bc:82:ed:39:1c:53:1e:69:01:38:03:34:b5:48:29: 96:53:7c:cf:89:66:6d:4e:1f:5a:65:71:a8:e8:7b:66:86:67: e0:07:33:db:4d:40:8d:a3:a8:97:d9:58:a6:54:74:98:99:ff: b8:71:ee:18:1a:d2:66:ff:72:a1:b1:f2:6c:9c:cb:c5:de:a3: 13:74:76:f8:5b:3e:d0:b2:bf:71:02:a6:57:fd:4e:77:e5:27: 3d:05:92:1d:b8:31:7f:9a:85:55:4d:71:82:dc:4d:4a:ca:af: a9:bf:94:07:e0:26:6c:8b:06:9c:de:07:5d:bd:d6:7b:1a:cd: 93:0d:0a:f5:3e:69:46:e6:5d:61:15:48:bc:8e:b0:18:db:18: 9e:83:b8:55 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5/l+Zd45vj96LEbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxNDE3NDIxNFoXDTI4MTAwOTIyMzExMFowLzEtMCsGA1UEAxMk YTFhZDk2NGQtMDVjNi00Y2I5LThlM2UtMmU3YjM0YTJkNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XLS3QJ8YD2HmVPY9TfScU9DGwAd2ATja188 lcvhQEK8m64iErAhFPZMjpZvQc7a+oAUtlEKUbpNDOSPlyLDNvqHPjKiPk0TG9b+ IG1yJ8U90rxDpNfg4nLP1HBBSTls3GJT/C955+BPfHIN9x3mVZPdXbNxMcBMtNvx EbIbW4O+96I9y0YwSpA+pxxiS9npO/bY2Dd6JZyoP7zibHVorq5hDJ2sF3JGHEq6 85ZwXZ7UCT2qtGPMpJ2T8Zgkd1N15r/nZIGKU6mkYANePr4jj+TPKRfMaNqi2zhL 9MnaFruag3PINCXsCLIvTbSZPV0MS3ZB0oQDHRmUgV1WK+/WlQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJlIjsx21viiC16JYm5YDk9L05TcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h MWFkOTY0ZC0wNWM2LTRjYjktOGUzZS0yZTdiMzRhMmQ1NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2ExYWQ5NjRkLTA1YzYtNGNiOS04 ZTNlLTJlN2IzNGEyZDU2Yy9hMWFkOTY0ZC0wNWM2LTRjYjktOGUzZS0yZTdiMzRh MmQ1NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKpgFwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiVHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACSiicdcMOmCKVepFwKRcVlRBG674pOMed+qjchuUKel8Qk1 qICTVqyqwApkBI787fcl9/OX2Wr8yPZdID3nhRVGHKi/+fGh1o6z8xiwmK1n92u6 RGj7nGb6U6ZVeOafHvz9aRmCHO2GwB6rv6MXrbyC7TkcUx5pATgDNLVIKZZTfM+J Zm1OH1plcajoe2aGZ+AHM9tNQI2jqJfZWKZUdJiZ/7hx7hga0mb/cqGx8mycy8Xe oxN0dvhbPtCyv3ECplf9TnflJz0Fkh24MX+ahVVNcYLcTUrKr6m/lAfgJmyLBpze B1291nsazZMNCvU+aUbmXWEVSLyOsBjbGJ6DuFU= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:46 2026 by rpki-client