$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e.cer File: b7ac77c8-e80c-42ed-a289-75dda6df961e.cer (raw, json) Hash identifier: fPyILw5d5OgtIfqwOS1a430YXefC+jqgwRZJ8XU58v0= Subject key identifier: 51:FD:D4:93:5E:03:E8:2F:43:D7:08:03:F5:AF:2F:26:7C:F1:49:F9 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6E893D1BB026C46777AAF580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/b7ac77c8-e80c-42ed-a289-75dda6df961e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 15:03:57 +0000 Certificate not after: Tue 10 Oct 2028 15:03:57 +0000 Subordinate resources: AS: 14460 IP: 167.150.111.0/24 IP: 167.150.117.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:89:3d:1b:b0:26:c4:67:77:aa:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 8 15:03:57 2026 GMT Not After : Oct 10 15:03:57 2028 GMT Subject: CN=b7ac77c8-e80c-42ed-a289-75dda6df961e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:0d:76:c3:97:b8:d7:30:05:2c:e7:a8:9b: 13:9d:23:34:3d:d7:6d:9b:ce:cb:fc:71:31:91:ef: 12:d5:36:c4:af:72:89:43:c7:30:51:ab:89:a1:d0: a5:f7:10:55:5f:ed:36:48:f1:4a:eb:88:6d:52:2c: f8:73:8a:28:e4:14:07:a1:c7:da:05:81:1b:ac:c6: 9d:0d:49:c5:f4:e5:bd:c9:c3:6d:9b:34:7f:cb:99: 49:20:ae:a1:03:63:38:ea:34:35:ad:60:99:a3:48: 43:17:4d:17:51:35:37:3a:ae:ce:a4:c5:8f:8e:a5: fe:ec:71:59:2b:c1:5d:bd:d2:5c:92:fb:ee:4e:6f: d2:c4:4e:1e:1e:74:7b:42:ef:9d:69:28:fc:21:20: ab:02:a2:07:56:e4:87:82:c8:62:a1:68:c0:84:c7: 21:81:d6:cb:31:67:ca:11:de:35:1a:de:52:79:1f: d4:83:4c:70:e9:8f:66:c4:f7:ec:15:68:86:0a:87: 29:8d:3e:a2:35:f0:53:d2:ed:bb:a1:e5:30:8d:1a: 32:21:52:ef:e9:16:a7:55:37:19:4a:12:af:7f:aa: ba:0c:9c:bb:9d:e2:c9:27:f0:a4:99:c5:f9:d1:8f: d2:0f:bc:2f:ff:cb:82:11:d3:64:2d:64:0f:55:1d: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FD:D4:93:5E:03:E8:2F:43:D7:08:03:F5:AF:2F:26:7C:F1:49:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7ac77c8-e80c-42ed-a289-75dda6df961e/b7ac77c8-e80c-42ed-a289-75dda6df961e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 167.150.111.0/24 167.150.117.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14460 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2a:d3:a3:0d:8e:68:cb:6b:4f:ff:28:7d:91:16:52:50:b9: 14:de:79:17:02:c2:3c:6c:10:39:fe:55:1e:90:1f:26:9b:53: 7f:72:e3:06:42:fd:c1:5c:1a:8e:b8:6e:ab:88:e7:60:58:46: 2d:2b:90:16:a1:64:73:a0:00:f5:ee:36:ca:09:8d:8d:c8:7d: 60:86:97:85:72:76:97:24:d9:b0:d2:cb:f2:1d:77:40:4b:49: be:75:fc:c2:f9:dc:50:e9:ab:b1:e8:00:4a:6c:d4:e2:04:d2: 2f:b2:2d:ea:5c:5e:0b:7c:cd:15:f1:9b:bc:e7:ec:29:ef:9b: 7b:74:15:2d:c5:c9:5c:75:0c:7f:1a:20:bf:93:28:42:c0:d1: f8:44:d2:ac:0e:2f:56:1e:2b:15:3c:3c:92:e2:f0:21:55:74: f6:57:ce:22:31:07:23:04:c4:49:54:3d:f4:a8:0c:1a:db:c3: 76:d2:5b:93:26:f6:3f:1d:06:eb:e1:ec:5a:f3:ef:1d:41:9d: a2:b0:52:05:1d:70:0a:40:86:bc:9c:68:dd:35:ee:44:66:e0: 0c:45:8d:ff:08:49:e3:33:54:0d:84:49:1a:e3:f0:71:b0:d8: 9f:9f:37:3f:21:27:98:f9:6f:cd:69:f1:7f:0f:c7:ea:5b:7e: e1:01:23:00 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE5uiT0bsCbEZ3eq9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwODE1MDM1N1oXDTI4MTAxMDE1MDM1N1owLzEtMCsGA1UEAxMk YjdhYzc3YzgtZTgwYy00MmVkLWEyODktNzVkZGE2ZGY5NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ4NdsOXuNcwBSznqJsTnSM0Pddtm87L/HEx ke8S1TbEr3KJQ8cwUauJodCl9xBVX+02SPFK64htUiz4c4oo5BQHocfaBYEbrMad DUnF9OW9ycNtmzR/y5lJIK6hA2M46jQ1rWCZo0hDF00XUTU3Oq7OpMWPjqX+7HFZ K8FdvdJckvvuTm/SxE4eHnR7Qu+daSj8ISCrAqIHVuSHgshioWjAhMchgdbLMWfK Ed41Gt5SeR/Ug0xw6Y9mxPfsFWiGCocpjT6iNfBT0u27oeUwjRoyIVLv6RanVTcZ ShKvf6q6DJy7neLJJ/CkmcX50Y/SD7wv/8uCEdNkLWQPVR07cQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFFH91JNeA+gvQ9cIA/WvLyZ88Un5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i N2FjNzdjOC1lODBjLTQyZWQtYTI4OS03NWRkYTZkZjk2MWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I3YWM3N2M4LWU4MGMtNDJlZC1h Mjg5LTc1ZGRhNmRmOTYxZS9iN2FjNzdjOC1lODBjLTQyZWQtYTI4OS03NWRkYTZk Zjk2MWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACnlm8DBACnlnUwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICOHwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAcSrTow2OaMtrT/8ofZEWUlC5FN55FwLCPGwQOf5V HpAfJptTf3LjBkL9wVwajrhuq4jnYFhGLSuQFqFkc6AA9e42ygmNjch9YIaXhXJ2 lyTZsNLL8h13QEtJvnX8wvncUOmrsegASmzU4gTSL7It6lxeC3zNFfGbvOfsKe+b e3QVLcXJXHUMfxogv5MoQsDR+ETSrA4vVh4rFTw8kuLwIVV09lfOIjEHIwTESVQ9 9KgMGtvDdtJbkyb2Px0G6+HsWvPvHUGdorBSBR1wCkCGvJxo3TXuRGbgDEWN/whJ 4zNUDYRJGuPwcbDYn583PyEnmPlvzWnxfw/H6lt+4QEjAA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:35 2026 by rpki-client