$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818.cer File: ace38bc8-18be-4d46-9e19-5f82b50dc818.cer (raw, json) Hash identifier: /c3muy+5O5bdEE+p9M9scatuQf9/WpvtAXTioOT57ps= Subject key identifier: 95:42:92:F6:8A:A7:EF:54:CC:7C:AD:E2:42:E2:08:A3:C2:D7:C0:53 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6C3E9D784FFE000F408128C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 19:21:59 +0000 Certificate not after: Mon 09 Oct 2028 19:21:59 +0000 Subordinate resources: AS: 54847 IP: 134.195.84.0/22 IP: 198.144.24.0/22 IP: 2606:b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:3e:9d:78:4f:fe:00:0f:40:81:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 19:21:59 2026 GMT Not After : Oct 9 19:21:59 2028 GMT Subject: CN=ace38bc8-18be-4d46-9e19-5f82b50dc818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:9a:57:fb:cd:4c:44:d0:06:3b:cb:d6:f6: b6:cb:2b:c2:94:1c:e0:ed:08:e1:e7:31:26:a5:30: 2f:96:07:fe:16:4c:ac:01:a5:fb:d0:a7:07:24:28: a3:4e:7f:e9:a7:3d:28:50:ba:9a:bb:94:74:18:4b: ce:08:04:fc:90:42:3b:9e:3e:a3:86:03:ae:bd:9a: 87:fa:c5:c7:bd:80:c7:81:26:b9:d5:4e:0a:6c:f5: 4b:da:07:95:69:03:fd:26:05:95:18:eb:e1:1f:97: 17:7f:03:df:ec:94:f9:b4:01:df:c2:cd:f3:01:e3: fb:3a:f4:0c:25:13:07:f4:e8:f7:ad:2d:8d:8a:60: 81:36:04:01:f8:df:23:5a:a5:de:e1:2e:a9:b3:52: b2:4c:0c:65:94:1c:3a:76:ab:ce:1b:b2:6f:bc:f0: 6d:c3:ab:a6:de:f5:cc:ae:24:6a:53:44:fe:6a:27: c7:7e:c4:84:76:97:22:f5:1c:6c:e2:72:eb:44:80: 5a:df:dc:90:a2:36:18:d2:96:41:e7:b7:6f:ae:ac: b7:7f:26:10:74:a6:3a:82:8f:cb:8b:e8:f4:32:01: a7:c8:43:d6:40:0f:41:6e:2a:29:6a:91:de:7f:70: 55:85:15:3d:e7:75:07:58:bc:c2:5c:4a:c1:9a:b3: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:42:92:F6:8A:A7:EF:54:CC:7C:AD:E2:42:E2:08:A3:C2:D7:C0:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 134.195.84.0/22 198.144.24.0/22 IPv6: 2606:b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54847 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:53:04:f7:41:74:62:5d:99:c5:25:61:2a:12:47:f7:3a:64: 81:1f:de:66:5f:31:d3:ae:ee:ee:e9:bc:87:05:fc:94:fd:dd: fb:8c:09:56:39:69:3e:f4:cb:f0:d4:cb:6d:a3:41:f7:07:e3: 8d:0f:5f:7c:e6:a4:af:f7:ba:74:1c:2f:8f:ad:3d:57:08:4b: d4:84:29:b5:03:6b:6d:2a:5c:6b:22:e9:45:2d:a9:50:39:3b: 08:be:cb:c1:de:e9:c7:a3:c6:50:8f:a4:a5:ed:6a:d2:30:4a: 07:0d:1b:1f:87:bf:92:a3:16:e6:89:1e:0a:5b:e8:ce:43:39: ce:07:f1:05:d1:3b:83:3b:3e:73:5b:00:0a:a3:78:5e:cd:e9: 99:27:53:6b:55:89:f8:8c:2b:68:6d:43:62:f9:c5:bb:e8:54: 32:e8:c9:79:2e:4b:b4:b4:f1:88:c9:49:fe:a5:0c:a2:a1:b0: ac:95:d7:e7:16:d4:fe:b0:f2:4f:44:0b:1f:56:71:93:da:a8: 2e:44:d9:83:1d:3c:68:a0:fc:69:33:3c:60:ea:b9:75:95:c4: b2:2a:a5:67:2e:c0:26:85:89:03:e5:16:17:51:38:ee:ec:93: ff:51:11:65:65:92:f0:be:6f:ed:94:39:38:9b:cd:0c:cf:f5: 1d:dc:1d:79 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5sPp14T/4AD0CBKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzE5MjE1OVoXDTI4MTAwOTE5MjE1OVowLzEtMCsGA1UEAxMk YWNlMzhiYzgtMThiZS00ZDQ2LTllMTktNWY4MmI1MGRjODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt26aV/vNTETQBjvL1va2yyvClBzg7Qjh5zEm pTAvlgf+FkysAaX70KcHJCijTn/ppz0oULqau5R0GEvOCAT8kEI7nj6jhgOuvZqH +sXHvYDHgSa51U4KbPVL2geVaQP9JgWVGOvhH5cXfwPf7JT5tAHfws3zAeP7OvQM JRMH9Oj3rS2NimCBNgQB+N8jWqXe4S6ps1KyTAxllBw6dqvOG7JvvPBtw6um3vXM riRqU0T+aifHfsSEdpci9Rxs4nLrRIBa39yQojYY0pZB57dvrqy3fyYQdKY6go/L i+j0MgGnyEPWQA9BbiopapHef3BVhRU953UHWLzCXErBmrOH1QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJVCkvaKp+9UzHyt4kLiCKPC18BTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h Y2UzOGJjOC0xOGJlLTRkNDYtOWUxOS01ZjgyYjUwZGM4MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2FjZTM4YmM4LTE4YmUtNGQ0Ni05 ZTE5LTVmODJiNTBkYzgxOC9hY2UzOGJjOC0xOGJlLTRkNDYtOWUxOS01ZjgyYjUw ZGM4MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKGw1QDBALGkBgwDQQCAAIwBwMFACYGCwAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANY/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGtTBPdBdGJdmcUlYSoS R/c6ZIEf3mZfMdOu7u7pvIcF/JT93fuMCVY5aT70y/DUy22jQfcH440PX3zmpK/3 unQcL4+tPVcIS9SEKbUDa20qXGsi6UUtqVA5Owi+y8He6cejxlCPpKXtatIwSgcN Gx+Hv5KjFuaJHgpb6M5DOc4H8QXRO4M7PnNbAAqjeF7N6ZknU2tVifiMK2htQ2L5 xbvoVDLoyXkuS7S08YjJSf6lDKKhsKyV1+cW1P6w8k9ECx9WcZPaqC5E2YMdPGig /GkzPGDquXWVxLIqpWcuwCaFiQPlFhdROO7sk/9REWVlkvC+b+2UOTibzQzP9R3c HXk= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:56 2026 by rpki-client