$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b755473a-7464-4a5b-9aa8-32a5f1faf683.cer File: b755473a-7464-4a5b-9aa8-32a5f1faf683.cer (raw, json) Hash identifier: /ebKSTTPJXN5ePC7YWNzqaIWrwHNojh3ms9AC1oFJqw= Subject key identifier: AA:58:3A:B5:30:5B:BD:5D:48:DF:A9:76:CE:46:EE:F7:B2:85:DB:BC Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E36A6B8A2AA479121C6B41B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b755473a-7464-4a5b-9aa8-32a5f1faf683/b755473a-7464-4a5b-9aa8-32a5f1faf683.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b755473a-7464-4a5b-9aa8-32a5f1faf683/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Jun 2026 14:38:05 +0000 Certificate not after: Wed 20 Sep 2028 14:38:05 +0000 Subordinate resources: AS: 14449 IP: 161.129.72.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:a6:b8:a2:aa:47:91:21:c6:b4:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 18 14:38:05 2026 GMT Not After : Sep 20 14:38:05 2028 GMT Subject: CN=b755473a-7464-4a5b-9aa8-32a5f1faf683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:ab:bc:ab:fb:13:7c:ff:04:b8:08:cc:06: 72:1a:f3:9a:35:51:53:15:0c:38:b2:97:e2:d4:da: 48:b0:06:8a:e4:6d:dc:cf:00:10:9f:7b:40:a6:6c: 48:ba:5f:18:35:70:60:2c:27:f1:50:cb:dd:29:63: 97:27:52:9d:ac:7b:d7:21:53:a8:f7:fb:3a:b6:2f: 1f:4f:8b:13:71:bf:29:b2:5d:ae:ad:a4:6f:3b:75: 44:6d:44:98:8a:1d:58:ce:0c:1d:2b:a8:9f:94:1b: 2a:c4:58:b3:09:44:79:2b:d2:80:9b:48:ba:be:39: 58:c2:6f:b5:4c:b1:60:c5:0d:56:55:d6:60:ea:f5: b4:6b:25:b4:ce:cb:7c:98:be:0e:47:d8:1d:c0:43: d0:7d:eb:4e:f6:7f:57:b7:0c:fb:23:87:e4:57:6d: ad:78:04:d2:48:dc:22:77:73:1d:c9:f8:90:cc:2d: 88:22:d3:5e:47:7c:30:b2:84:88:91:fc:fc:41:63: 54:22:2f:84:c7:8f:eb:de:25:d2:85:c1:bf:eb:b6: ef:9e:4c:c6:6f:e6:86:68:58:71:dd:13:da:a1:c0: 74:e4:a9:42:8b:ac:bb:ff:59:14:8e:17:f1:a7:ec: b0:02:12:2b:09:fb:5c:fa:8e:b0:5a:61:a8:ae:90: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:58:3A:B5:30:5B:BD:5D:48:DF:A9:76:CE:46:EE:F7:B2:85:DB:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b755473a-7464-4a5b-9aa8-32a5f1faf683/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b755473a-7464-4a5b-9aa8-32a5f1faf683/b755473a-7464-4a5b-9aa8-32a5f1faf683.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 161.129.72.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14449 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:20:75:78:90:6f:59:de:41:45:ed:8c:24:f9:b5:14:71:65: 20:bb:bf:3e:d3:fe:03:e1:6b:07:90:0f:2f:3e:54:f4:9b:04: 22:38:cb:ed:a9:db:fa:04:ef:76:3b:f2:57:1e:89:ca:64:87: d3:02:4e:8f:b6:05:eb:41:bc:b3:6a:6c:b0:63:08:c8:95:47: 25:a5:85:8f:ec:3a:b6:0e:c1:d8:e6:6e:7a:64:0f:b0:56:b1: 17:fc:5c:dc:2d:b8:ae:47:6f:4a:92:c9:b7:96:ac:10:bf:db: 1d:06:1a:29:ae:b0:9e:66:d4:96:d9:f1:cf:74:ba:52:0e:4a: a5:96:8e:19:ee:75:bb:dd:a0:be:4e:40:41:37:9a:5e:c9:c3: d3:94:99:1a:1f:89:1a:15:33:f2:64:bd:9a:27:d8:da:d5:27: b0:25:98:70:b9:18:d8:0d:65:bb:95:c0:51:af:8f:73:2a:8e: 6a:49:9e:cb:39:6e:9b:7e:8b:9a:d1:e0:8b:07:f5:13:47:02: 48:f7:39:64:74:17:41:55:c0:85:a1:a7:ef:03:b3:50:da:51: f1:e5:f4:c3:c8:ca:33:27:a9:c1:cf:fc:14:9b:26:7b:ad:3c: fd:f9:73:91:bd:65:78:17:a6:35:bd:3d:b5:e6:62:4f:c7:77: da:f3:01:96 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE42priiqkeRIca0G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxODE0MzgwNVoXDTI4MDkyMDE0MzgwNVowLzEtMCsGA1UEAxMk Yjc1NTQ3M2EtNzQ2NC00YTViLTlhYTgtMzJhNWYxZmFmNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHurvKv7E3z/BLgIzAZyGvOaNVFTFQw4spfi 1NpIsAaK5G3czwAQn3tApmxIul8YNXBgLCfxUMvdKWOXJ1KdrHvXIVOo9/s6ti8f T4sTcb8psl2uraRvO3VEbUSYih1YzgwdK6iflBsqxFizCUR5K9KAm0i6vjlYwm+1 TLFgxQ1WVdZg6vW0ayW0zst8mL4OR9gdwEPQfetO9n9Xtwz7I4fkV22teATSSNwi d3MdyfiQzC2IItNeR3wwsoSIkfz8QWNUIi+Ex4/r3iXShcG/67bvnkzGb+aGaFhx 3RPaocB05KlCi6y7/1kUjhfxp+ywAhIrCftc+o6wWmGorpAvkwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKpYOrUwW71dSN+pds5G7veyhdu8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i NzU1NDczYS03NDY0LTRhNWItOWFhOC0zMmE1ZjFmYWY2ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I3NTU0NzNhLTc0NjQtNGE1Yi05 YWE4LTMyYTVmMWZhZjY4My9iNzU1NDczYS03NDY0LTRhNWItOWFhOC0zMmE1ZjFm YWY2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAChgUgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OHEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAbiB1eJBvWd5BRe2MJPm1FHFlILu/PtP+A+FrB5APLz5U9JsE IjjL7anb+gTvdjvyVx6JymSH0wJOj7YF60G8s2pssGMIyJVHJaWFj+w6tg7B2OZu emQPsFaxF/xc3C24rkdvSpLJt5asEL/bHQYaKa6wnmbUltnxz3S6Ug5KpZaOGe51 u92gvk5AQTeaXsnD05SZGh+JGhUz8mS9mifY2tUnsCWYcLkY2A1lu5XAUa+PcyqO akmeyzlum36LmtHgiwf1E0cCSPc5ZHQXQVXAhaGn7wOzUNpR8eX0w8jKMyepwc/8 FJsme608/flzkb1leBemNb09teZiT8d32vMBlg== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:10 2026 by rpki-client