$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer File: b3834a8f-3f69-4b14-8090-6b2dc08edacc.cer (raw, json) Hash identifier: x8v8oretg5sS9hGJ5IONxNbeVEI6Te9bE2DF6YJfQaw= Subject key identifier: 83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E556AD053F56904CC5AECE400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jun 2026 15:07:26 +0000 Certificate not after: Sun 01 Oct 2028 15:07:26 +0000 Subordinate resources: IP: 139.225.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:55:6a:d0:53:f5:69:04:cc:5a:ec:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 29 15:07:26 2026 GMT Not After : Oct 1 15:07:26 2028 GMT Subject: CN=b3834a8f-3f69-4b14-8090-6b2dc08edacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:5b:1c:7e:f8:5d:d8:d0:6b:57:ac:20:72: 42:45:b9:98:b0:c5:0c:43:9b:72:30:f1:da:67:49: e8:3d:28:d9:5a:d4:68:d1:11:5a:dd:69:a0:f2:20: d1:72:ba:56:6f:e9:e4:4e:62:0b:1e:e4:c9:c0:ed: 95:3c:b9:5e:15:53:5b:b9:74:d6:27:ff:1b:fa:c3: 68:c0:66:d5:2a:e1:8d:e6:1c:cf:b8:a5:55:a6:a8: df:dc:ba:f8:6a:9a:91:93:45:45:b1:c3:94:d2:8a: ef:9a:8a:c2:88:db:b4:59:7b:02:bf:cc:d7:b5:03: a5:c3:36:8c:cf:bf:22:04:78:13:d5:5a:1b:95:43: 4a:67:7c:5d:33:bc:8d:43:73:29:12:4f:85:e3:45: 73:79:34:c1:0f:5d:80:ee:6d:76:af:2e:66:a5:7e: de:5c:b9:32:c5:bf:7f:42:13:d1:47:57:ce:82:47: 90:ec:c3:54:f2:bc:90:b3:0d:dc:0a:b6:1c:1c:1f: 7e:85:1f:54:1a:cd:2f:a0:e3:11:90:0a:75:17:f2: 76:4a:01:21:9d:ce:dc:47:06:72:be:b0:c5:fa:b2: ae:04:b4:1c:87:57:c4:92:7d:28:21:f2:83:96:fb: 7d:b3:b7:7c:4e:47:24:68:09:80:b6:2b:01:96:3b: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:17:D4:9A:23:BF:D9:07:A7:C7:D9:8D:16:DD:D7:18:11:5E:39:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3834a8f-3f69-4b14-8090-6b2dc08edacc/b3834a8f-3f69-4b14-8090-6b2dc08edacc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 139.225.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:1b:a9:a7:d6:ab:6c:b2:96:e5:10:9b:88:98:2c:30:95:ef: 9b:b0:c0:76:22:b7:d7:18:73:f7:b2:dc:7e:0d:0d:8a:75:6f: d3:7d:0a:33:c4:69:3a:29:50:51:e1:0d:f7:ff:42:59:12:26: 55:4e:b2:0e:30:2e:e9:bb:13:7d:e5:33:e7:18:62:47:d1:8d: 6d:6a:d5:22:5f:de:82:da:13:be:3c:cb:63:01:c8:3c:c8:a9: 4c:d0:2e:20:8b:94:54:c5:41:62:38:08:9c:99:47:e0:f2:9b: 05:97:74:d5:b6:1c:7e:0d:48:48:57:73:00:dc:0e:5c:1c:d2: 1f:8a:f1:b9:f0:15:ae:90:5b:78:f0:70:62:3b:9b:55:8b:87: 75:61:28:15:72:07:0d:46:79:8d:ab:e3:54:79:99:c7:eb:89: 99:fd:55:1e:0f:5b:44:ab:7c:df:2b:28:70:2a:a3:06:64:82: 8c:c1:70:20:3f:c1:b6:80:92:56:9d:b7:fd:7c:b5:76:e8:f5: e7:0d:6d:81:98:d1:aa:be:21:ec:af:59:a1:4d:d3:7b:de:1f: 4d:8e:99:54:13:0e:53:5f:20:55:40:65:91:7a:df:e9:5c:33: 2b:98:cd:88:fa:84:1d:76:60:79:e6:69:7a:af:1d:a5:96:6d: e6:6a:44:84 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE5VatBT9WkEzFrs5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyOTE1MDcyNloXDTI4MTAwMTE1MDcyNlowLzEtMCsGA1UEAxMk YjM4MzRhOGYtM2Y2OS00YjE0LTgwOTAtNmIyZGMwOGVkYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s5bHH74XdjQa1esIHJCRbmYsMUMQ5tyMPHa Z0noPSjZWtRo0RFa3Wmg8iDRcrpWb+nkTmILHuTJwO2VPLleFVNbuXTWJ/8b+sNo wGbVKuGN5hzPuKVVpqjf3Lr4apqRk0VFscOU0orvmorCiNu0WXsCv8zXtQOlwzaM z78iBHgT1VoblUNKZ3xdM7yNQ3MpEk+F40VzeTTBD12A7m12ry5mpX7eXLkyxb9/ QhPRR1fOgkeQ7MNU8ryQsw3cCrYcHB9+hR9UGs0voOMRkAp1F/J2SgEhnc7cRwZy vrDF+rKuBLQch1fEkn0oIfKDlvt9s7d8TkckaAmAtisBljvI0wIDAQABo4ID/jCC A/owHQYDVR0OBBYEFIMX1Jojv9kHp8fZjRbd1xgRXjneMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i MzgzNGE4Zi0zZjY5LTRiMTQtODA5MC02YjJkYzA4ZWRhY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2IzODM0YThmLTNmNjktNGIxNC04 MDkwLTZiMmRjMDhlZGFjYy9iMzgzNGE4Zi0zZjY5LTRiMTQtODA5MC02YjJkYzA4 ZWRhY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCL4TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxG6mn1qtsspblEJuImCww le+bsMB2IrfXGHP3stx+DQ2KdW/TfQozxGk6KVBR4Q33/0JZEiZVTrIOMC7puxN9 5TPnGGJH0Y1tatUiX96C2hO+PMtjAcg8yKlM0C4gi5RUxUFiOAicmUfg8psFl3TV thx+DUhIV3MA3A5cHNIfivG58BWukFt48HBiO5tVi4d1YSgVcgcNRnmNq+NUeZnH 64mZ/VUeD1tEq3zfKyhwKqMGZIKMwXAgP8G2gJJWnbf9fLV26PXnDW2BmNGqviHs r1mhTdN73h9NjplUEw5TXyBVQGWRet/pXDMrmM2I+oQddmB55ml6rx2llm3makSE -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:12 2026 by rpki-client