$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aac04bea-d4a0-42ff-a0f6-f088b4ed87db.cer File: aac04bea-d4a0-42ff-a0f6-f088b4ed87db.cer (raw, json) Hash identifier: wwsT77Q/E5N6NH2jSFQiXw4aR+6I7uLvObJypLC34j0= Subject key identifier: 1F:A2:E8:73:F9:5B:33:51:6F:27:55:3E:75:13:8D:13:2B:A4:59:EB Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6B6F5FA4537FB2299D8BA900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aac04bea-d4a0-42ff-a0f6-f088b4ed87db/aac04bea-d4a0-42ff-a0f6-f088b4ed87db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aac04bea-d4a0-42ff-a0f6-f088b4ed87db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 12:24:25 +0000 Certificate not after: Mon 09 Oct 2028 12:24:25 +0000 Subordinate resources: AS: 33756 IP: 207.186.204.0/23 IP: 2602:811:a000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:6f:5f:a4:53:7f:b2:29:9d:8b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 12:24:25 2026 GMT Not After : Oct 9 12:24:25 2028 GMT Subject: CN=aac04bea-d4a0-42ff-a0f6-f088b4ed87db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:b6:55:32:51:91:5e:52:d2:a3:12:f4:fa: b7:ba:97:00:4c:a6:de:69:94:4f:93:89:e7:6e:12: bf:78:e1:46:e6:46:8d:4b:9d:5d:c9:66:17:68:98: 3c:12:5f:59:b6:39:a0:63:8c:81:e5:59:77:f9:a2: 73:04:60:d8:a6:d2:b6:f1:ad:3f:bb:86:1d:fb:08: 18:b0:1f:c3:91:b8:a7:2d:e4:ac:1b:ad:a9:a8:62: 65:b4:17:f5:e3:6b:27:3d:80:07:fa:7a:02:db:34: 3e:19:58:a7:7c:ec:60:d0:b4:73:f5:11:56:8d:95: 87:b2:65:64:21:d5:6e:6d:26:3c:8d:47:f8:57:16: c2:4b:29:e7:52:96:21:6d:3e:3d:03:35:c4:2a:75: 48:b5:7e:4a:99:b1:ea:03:f2:89:57:7e:1d:44:a8: fc:48:62:df:78:74:da:34:4d:b8:f7:36:e6:ce:d8: 76:c7:09:c0:48:4b:01:d9:a8:40:10:10:3b:8a:8d: 99:79:de:a7:4a:32:b9:b0:da:7a:95:ec:6b:e8:74: 13:3b:3f:a9:37:86:2e:ce:4f:9c:cd:00:10:97:fd: aa:21:bc:9b:1e:68:33:df:3d:0f:a0:42:6d:72:22: fc:7d:f2:04:ed:d6:eb:cb:f4:61:7a:04:b0:b4:88: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A2:E8:73:F9:5B:33:51:6F:27:55:3E:75:13:8D:13:2B:A4:59:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aac04bea-d4a0-42ff-a0f6-f088b4ed87db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aac04bea-d4a0-42ff-a0f6-f088b4ed87db/aac04bea-d4a0-42ff-a0f6-f088b4ed87db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 207.186.204.0/23 IPv6: 2602:811:a000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33756 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9b:af:4e:20:aa:3d:00:1b:d4:80:92:1c:63:7e:e7:d3:bf: 42:52:95:f2:63:10:42:0c:1d:7a:c7:2e:71:21:76:e9:d4:44: 7e:e8:d6:0c:2f:8e:3a:75:93:da:f8:6b:07:e2:cb:7f:b0:d1: be:a7:0a:c8:34:5f:b1:3f:21:e9:4d:69:d5:8d:d7:c1:89:a9: b3:83:b8:c6:ac:84:3a:51:1e:82:1e:f8:38:29:d1:f7:cb:e1: 0a:a8:55:19:1e:e8:45:2a:81:37:5d:99:0c:29:d3:f1:13:26: 81:36:7d:3e:17:df:71:f2:e3:46:fa:c9:99:2e:d2:8a:00:02: e9:4e:59:71:03:a5:87:1c:55:9d:ff:07:2e:aa:ed:ce:b7:92: ee:88:bf:a1:3b:68:98:d5:d0:e7:63:07:a8:e6:c6:86:c2:34: 2b:c1:d3:03:13:fe:e8:d8:8c:48:69:2a:a3:bb:63:97:f8:f2: 8b:3b:e6:5f:9a:78:92:6a:fe:4c:b2:72:e6:67:0a:80:60:e3: 29:c4:4a:a5:23:b2:f7:5d:32:b7:42:8f:8a:01:ea:9e:61:c3: fc:8a:f4:32:e8:9a:70:ad:9d:7d:06:10:7a:3a:21:eb:1f:64: db:12:5e:42:3e:b5:68:f9:59:14:e5:ed:21:e9:89:c8:02:86: b3:fa:5c:62 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5rb1+kU3+yKZ2LqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzEyMjQyNVoXDTI4MTAwOTEyMjQyNVowLzEtMCsGA1UEAxMk YWFjMDRiZWEtZDRhMC00MmZmLWEwZjYtZjA4OGI0ZWQ4N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5q2VTJRkV5S0qMS9Pq3upcATKbeaZRPk4nn bhK/eOFG5kaNS51dyWYXaJg8El9ZtjmgY4yB5Vl3+aJzBGDYptK28a0/u4Yd+wgY sB/DkbinLeSsG62pqGJltBf142snPYAH+noC2zQ+GVinfOxg0LRz9RFWjZWHsmVk IdVubSY8jUf4VxbCSynnUpYhbT49AzXEKnVItX5KmbHqA/KJV34dRKj8SGLfeHTa NE249zbmzth2xwnASEsB2ahAEBA7io2Zed6nSjK5sNp6lexr6HQTOz+pN4Yuzk+c zQAQl/2qIbybHmgz3z0PoEJtciL8ffIE7dbry/RhegSwtIgvsQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFB+i6HP5WzNRbydVPnUTjRMrpFnrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h YWMwNGJlYS1kNGEwLTQyZmYtYTBmNi1mMDg4YjRlZDg3ZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2FhYzA0YmVhLWQ0YTAtNDJmZi1h MGY2LWYwODhiNGVkODdkYi9hYWMwNGJlYS1kNGEwLTQyZmYtYTBmNi1mMDg4YjRl ZDg3ZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHPuswwDgQCAAIwCAMGACYCCBGgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCD3DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGm69OIKo9ABvUgJIcY37n079C UpXyYxBCDB16xy5xIXbp1ER+6NYML446dZPa+GsH4st/sNG+pwrINF+xPyHpTWnV jdfBiamzg7jGrIQ6UR6CHvg4KdH3y+EKqFUZHuhFKoE3XZkMKdPxEyaBNn0+F99x 8uNG+smZLtKKAALpTllxA6WHHFWd/wcuqu3Ot5LuiL+hO2iY1dDnYweo5saGwjQr wdMDE/7o2IxIaSqju2OX+PKLO+ZfmniSav5MsnLmZwqAYOMpxEqlI7L3XTK3Qo+K AeqeYcP8ivQy6JpwrZ19BhB6OiHrH2TbEl5CPrVo+VkU5e0h6YnIAoaz+lxi -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:08 2026 by rpki-client