$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer File: a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer (raw, json) Hash identifier: yMvJHAJ0O6gIgGCuXHRSxz5ODNhjEBi/gtF3mh7ZicM= Subject key identifier: 40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4242E6A74FD22FC4E5F16E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Jun 2026 18:26:40 +0000 Certificate not after: Sun 24 Sep 2028 18:26:40 +0000 Subordinate resources: IP: 104.218.239.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:42:e6:a7:4f:d2:2f:c4:e5:f1:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 22 18:26:40 2026 GMT Not After : Sep 24 18:26:40 2028 GMT Subject: CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:f2:52:2c:e0:ff:93:4f:ef:74:ee:e1:a9: d9:f1:bc:89:14:88:1b:dd:15:81:28:a2:2e:dd:e7: ff:7c:db:5d:4f:7f:bd:81:08:a0:20:45:12:1d:16: 92:1c:b7:ca:a2:7f:0e:cf:f8:d7:5d:21:6b:2c:e5: 46:38:2c:34:4e:c8:93:3a:af:ba:34:0f:98:eb:ca: bb:0c:2a:78:90:be:d3:2b:bf:83:9d:4c:25:29:09: d4:33:ea:e9:b8:f3:c1:df:de:ca:1f:02:9c:0c:78: 7e:cc:a9:f8:52:3d:d5:f2:3e:23:9c:6c:47:bc:c5: 17:7a:06:c2:9c:1c:36:95:52:20:a9:dc:7b:0f:77: 4d:6b:bf:5a:8f:a4:30:5b:82:62:ff:d7:51:c3:fa: 46:0f:25:fd:5d:5b:8c:a1:07:de:bc:d9:bc:88:d7: 57:9d:dc:b3:79:25:4c:e8:e9:0b:01:73:fd:16:50: 76:b8:0a:72:9f:17:ee:48:a9:09:c2:b2:c6:61:4e: c5:cd:7f:09:19:23:8c:ed:b1:b1:39:cf:8a:7a:f6: c2:60:a0:5d:07:fe:ad:39:65:97:90:cb:09:6b:44: 3d:94:0b:7e:90:92:4a:42:bd:a4:f5:cc:58:be:73: ac:1f:60:66:4f:25:a6:ce:58:b3:d1:61:6a:4d:d8: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 104.218.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ba:35:ae:53:96:ac:c0:4e:d5:51:ff:1d:82:53:35:d6:d9: d8:42:11:6f:68:97:56:94:6a:00:aa:be:1a:98:6b:99:b1:b3: aa:36:b4:21:d3:f8:c5:af:07:b5:b2:67:d3:51:11:b2:32:b9: 8d:d7:1f:fd:0c:eb:2d:ee:27:9e:68:bb:68:36:4d:f6:d9:94: 3f:c3:39:99:98:a3:c9:1e:b6:b2:94:01:12:a7:23:3c:ec:75: 97:f9:11:61:fc:15:eb:45:2d:f2:c0:df:ed:5e:19:bf:0f:2e: 68:08:59:c5:dc:43:8e:ee:b6:53:0e:6b:97:0b:c7:6c:ab:ed: 0c:1e:66:7e:f2:61:c1:a7:fc:57:63:62:c6:01:7c:41:29:b4: ff:76:d6:b4:ca:f4:b7:38:56:ca:5c:25:d9:f9:ec:4b:82:51: f3:4f:da:57:b9:e8:94:32:a8:fa:7d:5e:40:7a:3d:73:dd:cb: 7c:53:34:59:30:28:90:d1:a4:73:32:44:e2:2b:29:5e:89:a7: 0f:ec:38:ab:ee:8c:a4:83:92:7b:42:a6:93:81:6f:23:d6:1e: 45:95:7b:bc:20:5c:d7:e1:b0:c6:a1:80:5f:e9:7f:fb:12:05: e4:db:8f:68:c2:e6:60:6d:bd:d3:df:16:e1:b2:04:dd:e8:b0: 05:39:35:db -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5CQuanT9IvxOXxboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyMjE4MjY0MFoXDTI4MDkyNDE4MjY0MFowLzEtMCsGA1UEAxMk YTRjZmFhOTUtYzMzYS00OWE2LWI0YWQtNDRiOTM0MjVkZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusLyUizg/5NP73Tu4anZ8byJFIgb3RWBKKIu 3ef/fNtdT3+9gQigIEUSHRaSHLfKon8Oz/jXXSFrLOVGOCw0TsiTOq+6NA+Y68q7 DCp4kL7TK7+DnUwlKQnUM+rpuPPB397KHwKcDHh+zKn4Uj3V8j4jnGxHvMUXegbC nBw2lVIgqdx7D3dNa79aj6QwW4Ji/9dRw/pGDyX9XVuMoQfevNm8iNdXndyzeSVM 6OkLAXP9FlB2uApynxfuSKkJwrLGYU7FzX8JGSOM7bGxOc+KevbCYKBdB/6tOWWX kMsJa0Q9lAt+kJJKQr2k9cxYvnOsH2BmTyWmzliz0WFqTdiUYwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEDXI2OsVx+0Y+v3uWLbV3JdV6OZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h NGNmYWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5MzQyNWRmNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2E0Y2ZhYTk1LWMzM2EtNDlhNi1i NGFkLTQ0YjkzNDI1ZGY2ZS9hNGNmYWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5MzQy NWRmNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABo2u8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV7o1rlOWrMBO1VH/HYJT NdbZ2EIRb2iXVpRqAKq+GphrmbGzqja0IdP4xa8HtbJn01ERsjK5jdcf/QzrLe4n nmi7aDZN9tmUP8M5mZijyR62spQBEqcjPOx1l/kRYfwV60Ut8sDf7V4Zvw8uaAhZ xdxDju62Uw5rlwvHbKvtDB5mfvJhwaf8V2NixgF8QSm0/3bWtMr0tzhWylwl2fns S4JR80/aV7nolDKo+n1eQHo9c93LfFM0WTAokNGkczJE4ispXomnD+w4q+6MpIOS e0Kmk4FvI9YeRZV7vCBc1+GwxqGAX+l/+xIF5NuPaMLmYG29098W4bIE3eiwBTk1 2w== -----END CERTIFICATE-----Generated at Wed Jul 8 18:26:53 2026 by rpki-client