$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be.cer File: a1ff4338-4c9d-4606-914c-3240a23a01be.cer (raw, json) Hash identifier: /5iy4WHYnEHsIZ3m2XFr+FjM19BOMq7rES4esSuPksc= Subject key identifier: B5:73:4C:62:C9:2F:CE:4B:95:B6:04:5F:B2:5F:29:F6:A2:C9:F3:DF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E748C70883DBC62A7EADDA3E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/a1ff4338-4c9d-4606-914c-3240a23a01be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jul 2026 18:45:15 +0000 Certificate not after: Wed 11 Oct 2028 17:19:13 +0000 Subordinate resources: IP: 23.161.44.0/24 IP: 2604:d890::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:8c:70:88:3d:bc:62:a7:ea:dd:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 10 18:45:15 2026 GMT Not After : Oct 11 17:19:13 2028 GMT Subject: CN=a1ff4338-4c9d-4606-914c-3240a23a01be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:99:1b:2c:b6:db:46:0e:c0:9a:80:6d:dd: 80:7f:9f:da:02:cb:68:d5:05:d3:8d:7a:50:53:95: bd:67:99:dc:14:b5:3c:16:6c:83:82:6a:49:7e:c0: c9:3c:66:00:c2:6f:0c:60:91:7b:e3:c9:ff:d8:b5: c3:e9:88:ec:63:27:01:5e:58:ad:22:4d:4e:46:c1: 9e:a9:a6:2a:84:36:0a:de:67:f0:68:35:68:ea:19: 5d:a9:90:e0:13:2f:d3:c0:0d:64:e9:01:c5:64:c5: 9a:b0:ea:63:d1:81:76:41:97:1a:f7:cb:59:68:c6: d7:9c:32:3a:e5:c1:5b:d4:54:f5:5b:d6:f6:bd:da: c3:3d:d3:9f:99:2c:a1:f3:25:e4:4d:60:74:ed:c0: 8f:ea:70:c7:ad:3f:0a:92:90:d9:64:90:7a:61:e4: 22:74:0e:ed:a0:96:2a:ea:02:34:e8:73:2b:0a:57: 68:14:bb:45:d1:c7:8f:90:76:65:4e:69:f3:9b:1e: 53:48:b8:e7:77:99:48:c1:40:9d:65:52:d4:37:c7: 9d:7e:e7:e9:ab:87:e0:70:cd:e0:d6:70:30:36:70: bf:aa:ac:10:d3:d9:06:7d:76:73:9c:ba:a5:9b:8b: a5:a3:34:b2:55:86:5f:63:2c:8d:3f:12:ac:a3:be: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:4C:62:C9:2F:CE:4B:95:B6:04:5F:B2:5F:29:F6:A2:C9:F3:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/a1ff4338-4c9d-4606-914c-3240a23a01be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.44.0/24 IPv6: 2604:d890::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:77:41:09:e4:5b:ab:96:0a:bf:1c:7b:67:c9:4c:84:2e:51: 4e:30:04:36:7e:cb:8f:90:f8:b3:fa:b4:2e:51:a1:49:65:d4: 79:1e:10:2a:45:f0:9e:8b:2e:1d:8c:94:31:84:a8:b6:a0:f8: 8f:d3:1a:6f:9a:aa:c8:7b:86:f2:99:e8:33:28:82:c9:82:a2: 5d:79:69:36:6f:e4:00:30:80:b0:db:f6:ef:44:71:64:7a:7b: 42:80:d2:b3:4b:78:fa:5e:67:c4:f2:bc:a6:8e:31:a1:d4:55: 11:ef:71:52:46:bc:de:e0:ef:65:39:3c:03:24:d9:a5:14:34: 2a:6f:2f:e1:46:1e:8d:f7:3a:c8:6b:10:8b:5c:de:63:4b:30: 83:53:e5:a7:bb:c0:42:f2:b6:01:84:af:89:55:df:ab:1e:4e: 3a:2e:70:d4:17:ac:1b:14:5b:0e:0f:48:1a:e9:ef:98:d4:74: b3:d2:db:db:2b:c9:d7:e1:7b:e8:c3:d7:78:94:8e:13:ba:2d: 5a:da:61:b8:14:39:c4:51:43:a8:89:e1:31:6a:c6:c5:de:06: 1e:5e:29:5b:50:75:67:5e:ce:b0:b8:81:af:9d:20:ac:cc:60: 06:a4:48:20:ea:e9:cd:af:af:17:7d:a8:08:41:7c:47:0b:68: d9:38:b5:1f -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE50jHCIPbxip+rdo+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxMDE4NDUxNVoXDTI4MTAxMTE3MTkxM1owLzEtMCsGA1UEAxMk YTFmZjQzMzgtNGM5ZC00NjA2LTkxNGMtMzI0MGEyM2EwMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOWZGyy220YOwJqAbd2Af5/aAsto1QXTjXpQ U5W9Z5ncFLU8FmyDgmpJfsDJPGYAwm8MYJF748n/2LXD6YjsYycBXlitIk1ORsGe qaYqhDYK3mfwaDVo6hldqZDgEy/TwA1k6QHFZMWasOpj0YF2QZca98tZaMbXnDI6 5cFb1FT1W9b2vdrDPdOfmSyh8yXkTWB07cCP6nDHrT8KkpDZZJB6YeQidA7toJYq 6gI06HMrCldoFLtF0cePkHZlTmnzmx5TSLjnd5lIwUCdZVLUN8edfufpq4fgcM3g 1nAwNnC/qqwQ09kGfXZznLqlm4ulozSyVYZfYyyNPxKso763pwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFLVzTGLJL85LlbYEX7JfKfaiyfPfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h MWZmNDMzOC00YzlkLTQ2MDYtOTE0Yy0zMjQwYTIzYTAxYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2ExZmY0MzM4LTRjOWQtNDYwNi05 MTRjLTMyNDBhMjNhMDFiZS9hMWZmNDMzOC00YzlkLTQ2MDYtOTE0Yy0zMjQwYTIz YTAxYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXoSwwDQQCAAIwBwMFACYE2JAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA t3dBCeRbq5YKvxx7Z8lMhC5RTjAENn7Lj5D4s/q0LlGhSWXUeR4QKkXwnosuHYyU MYSotqD4j9Mab5qqyHuG8pnoMyiCyYKiXXlpNm/kADCAsNv270RxZHp7QoDSs0t4 +l5nxPK8po4xodRVEe9xUka83uDvZTk8AyTZpRQ0Km8v4UYejfc6yGsQi1zeY0sw g1Plp7vAQvK2AYSviVXfqx5OOi5w1BesGxRbDg9IGunvmNR0s9Lb2yvJ1+F76MPX eJSOE7otWtphuBQ5xFFDqInhMWrGxd4GHl4pW1B1Z17OsLiBr50grMxgBqRIIOrp za+vF32oCEF8Rwto2Ti1Hw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:11 2026 by rpki-client