$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b.cer File: a355dac1-af69-488c-bb83-28eee5ad914b.cer (raw, json) Hash identifier: Femfj98u3CEZ1dm6xIRaxkO31h/PctNBoTyVcCMPViE= Subject key identifier: 12:CA:50:BA:81:52:1A:FE:E9:FB:4C:1A:F4:95:47:BD:8F:1F:1E:61 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E36CFC497F6B38E88344DC620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/a355dac1-af69-488c-bb83-28eee5ad914b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Jun 2026 16:00:47 +0000 Certificate not after: Wed 20 Sep 2028 16:00:47 +0000 Subordinate resources: AS: 401518 AS: 401864 IP: 199.47.142.0/23 IP: 2604:f20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:cf:c4:97:f6:b3:8e:88:34:4d:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 18 16:00:47 2026 GMT Not After : Sep 20 16:00:47 2028 GMT Subject: CN=a355dac1-af69-488c-bb83-28eee5ad914b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:43:5e:ff:60:7e:b5:f4:08:1b:02:39:89: 6c:85:4f:06:3e:6d:69:66:68:95:10:ed:5e:73:38: 9f:ac:06:d5:f9:e7:a8:b5:48:cd:0b:9c:f0:c7:96: 01:2a:d6:1e:76:74:1f:39:63:be:aa:c1:e2:17:a5: 54:00:a0:c3:5b:e9:47:88:39:77:4f:9c:2e:a8:be: 2d:83:29:12:da:3d:41:ec:cc:cb:66:88:25:a5:1d: a2:dc:bd:9c:38:ed:b3:0f:3e:88:c4:99:c5:b6:c8: fc:e1:f5:fe:69:dd:1b:49:d4:5d:13:0a:69:55:2f: 8f:9a:ed:62:50:45:91:57:52:70:e9:68:2f:18:94: 62:df:3e:75:00:ab:76:e2:4e:83:1f:9c:93:71:a3: d1:38:bf:6c:06:0a:fa:a9:a5:3d:61:c3:dd:e6:09: 92:20:b6:d5:64:cd:34:3e:11:c9:ef:42:b5:c0:e2: 01:6a:b7:ae:c2:af:d3:11:6f:09:b0:8c:b9:54:3b: ec:15:ff:bb:24:4c:6c:31:4c:3b:0f:0d:47:21:6a: de:d5:a9:d1:a7:c2:f1:b9:a2:f0:d5:dd:ed:d4:5a: 8f:9a:a8:0d:38:30:e4:5e:b0:bd:58:54:f4:b0:4e: 5a:ca:97:41:1b:56:92:9c:d2:78:44:45:1c:32:2d: 48:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CA:50:BA:81:52:1A:FE:E9:FB:4C:1A:F4:95:47:BD:8F:1F:1E:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/a355dac1-af69-488c-bb83-28eee5ad914b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.47.142.0/23 IPv6: 2604:f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401518 401864 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5d:1f:45:83:ba:68:40:6c:a5:f1:99:a6:f8:41:98:d7:9c: 83:10:7a:83:4c:3d:ea:60:a3:28:63:fa:5a:ed:e2:02:c9:f0: fc:c8:43:49:3e:af:a4:4f:3e:b1:3b:96:cb:46:d9:55:70:8a: 0d:c6:2b:61:b7:66:c4:99:58:07:10:ee:f5:5b:bc:87:26:15: 6d:9b:5b:c0:7d:12:09:0d:ca:f9:bd:97:7d:d0:d3:88:8b:38: a6:0e:6b:8c:ac:9f:d2:50:04:bf:8f:da:66:bd:38:20:68:8f: 69:3c:ab:1a:b3:be:5d:63:ba:21:29:b0:5b:13:ae:6b:87:58: 5f:ea:b2:6d:41:09:f8:8d:dc:67:96:32:a6:9a:46:78:e1:50: be:43:17:06:7d:5d:1b:17:f8:1a:2a:8a:59:7d:bd:26:a8:f2: c6:22:24:7c:49:f3:bb:9d:d0:1e:a4:18:ea:e3:a9:c4:2b:a8: c2:2c:cc:3b:53:a6:ce:ee:17:e1:aa:34:18:94:78:b1:2b:b6: 05:8d:13:18:80:c4:39:ea:15:a4:30:55:42:60:ac:a4:b1:2b: d6:37:a6:ef:8b:ed:7a:04:99:00:5a:a9:d8:dd:79:bf:99:e3: 6d:5d:3c:5e:a6:53:9c:fe:51:23:a6:56:9d:69:65:38:f2:ae: 1c:8a:a8:ca -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE42z8SX9rOOiDRNxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxODE2MDA0N1oXDTI4MDkyMDE2MDA0N1owLzEtMCsGA1UEAxMk YTM1NWRhYzEtYWY2OS00ODhjLWJiODMtMjhlZWU1YWQ5MTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt01DXv9gfrX0CBsCOYlshU8GPm1pZmiVEO1e czifrAbV+eeotUjNC5zwx5YBKtYednQfOWO+qsHiF6VUAKDDW+lHiDl3T5wuqL4t gykS2j1B7MzLZoglpR2i3L2cOO2zDz6IxJnFtsj84fX+ad0bSdRdEwppVS+Pmu1i UEWRV1Jw6WgvGJRi3z51AKt24k6DH5yTcaPROL9sBgr6qaU9YcPd5gmSILbVZM00 PhHJ70K1wOIBareuwq/TEW8JsIy5VDvsFf+7JExsMUw7Dw1HIWre1anRp8LxuaLw 1d3t1FqPmqgNODDkXrC9WFT0sE5aypdBG1aSnNJ4REUcMi1IcQIDAQABo4IELzCC BCswHQYDVR0OBBYEFBLKULqBUhr+6ftMGvSVR72PHx5hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h MzU1ZGFjMS1hZjY5LTQ4OGMtYmI4My0yOGVlZTVhZDkxNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2EzNTVkYWMxLWFmNjktNDg4Yy1i YjgzLTI4ZWVlNWFkOTE0Yi9hMzU1ZGFjMS1hZjY5LTQ4OGMtYmI4My0yOGVlZTVh ZDkxNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAHHL44wDQQCAAIwBwMFACYEDyAwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDBiBuAgMGIcgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcF0fRYO6aEBspfGZpvhB mNecgxB6g0w96mCjKGP6Wu3iAsnw/MhDST6vpE8+sTuWy0bZVXCKDcYrYbdmxJlY BxDu9Vu8hyYVbZtbwH0SCQ3K+b2XfdDTiIs4pg5rjKyf0lAEv4/aZr04IGiPaTyr GrO+XWO6ISmwWxOua4dYX+qybUEJ+I3cZ5YypppGeOFQvkMXBn1dGxf4GiqKWX29 JqjyxiIkfEnzu53QHqQY6uOpxCuowizMO1Omzu4X4ao0GJR4sSu2BY0TGIDEOeoV pDBVQmCspLEr1jem74vtegSZAFqp2N15v5njbV08XqZTnP5RI6ZWnWllOPKuHIqo yg== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:02 2026 by rpki-client