$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer File: b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer (raw, json) Hash identifier: dwyLhFfUx3fNyOlEOI/FX14SkgYdq/1X6Okx6ALBqWs= Subject key identifier: 32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4D0ABDD1CFC5506F3C8EBB50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 15:07:24 +0000 Certificate not after: Thu 28 Sep 2028 15:07:24 +0000 Subordinate resources: AS: 22062 AS: 63075 IP: 135.84.84.0/22 IP: 162.217.132.0/22 IP: 199.96.152.0/22 IP: 2605:8500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:0a:bd:d1:cf:c5:50:6f:3c:8e:bb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 26 15:07:24 2026 GMT Not After : Sep 28 15:07:24 2028 GMT Subject: CN=b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:df:8b:37:2d:50:e1:25:e4:fd:b4:a7:16: 7f:50:de:13:48:be:96:db:c0:af:d3:5e:ba:6b:dc: 24:e7:c1:9d:16:54:34:8d:b8:c2:e2:33:d4:85:15: b5:8b:37:00:09:ed:48:f0:1a:f3:91:b6:97:aa:80: 29:54:16:7b:51:25:30:c1:41:8b:b8:1b:5a:59:6c: da:dd:4c:26:bb:69:04:b9:0f:58:19:e5:3e:6c:6c: 66:10:1b:78:e7:ac:8e:43:ba:bf:1f:b1:21:46:2d: 33:f5:e4:e0:f5:78:a2:66:19:5c:99:86:af:ac:80: 51:4f:48:e5:68:61:3d:74:3f:d3:c4:7d:95:9a:9e: 3c:9c:30:3f:f8:73:a7:c1:dd:6f:91:d3:fe:07:ce: c6:6f:ec:51:82:5a:18:2c:4a:f8:39:fa:f7:48:18: 68:c3:02:dc:e4:6d:f0:0d:80:6c:b5:60:d9:a6:a4: dd:2c:e8:ba:54:00:1a:9b:c5:b8:f2:21:a8:97:35: a4:93:6d:3a:5f:79:86:b8:3c:85:6d:27:14:ba:5b: 61:a3:ac:88:45:8d:1e:b3:cf:cc:ca:bc:e5:44:3d: 2b:92:2a:52:ba:2f:c5:ea:70:70:3b:bc:eb:8c:75: 2a:ab:a7:28:44:76:c2:c9:bd:a3:fe:b2:e7:bb:25: 8c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 135.84.84.0/22 162.217.132.0/22 199.96.152.0/22 IPv6: 2605:8500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22062 63075 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ab:2c:0d:7c:73:b6:8a:fc:a4:4e:e2:35:e9:08:b2:70:48: 98:f7:dd:a9:9c:16:24:a4:c9:54:c8:85:2d:ac:75:2f:a1:28: 05:0e:aa:1c:50:dd:1a:90:b9:f6:f1:bc:b6:7a:db:94:13:f2: 59:7c:5c:31:a5:47:a5:32:ba:84:42:30:6d:71:2f:f3:ce:fc: ff:15:29:5b:5f:7d:72:e0:c7:3d:8a:3e:d8:43:60:74:a3:e5: 64:98:12:cf:d6:b3:f4:c0:66:4e:89:62:42:73:43:92:e7:51: bf:2b:53:40:08:5d:6d:df:dc:a1:6e:df:e8:47:c6:ec:91:d4: 60:cf:7a:fe:f5:cb:0c:e9:d4:c4:0d:54:da:fb:e0:60:77:be: b4:59:0e:ae:8e:d0:03:71:b8:70:1f:fa:57:ce:ed:e5:c1:f7: 89:b9:60:fe:39:60:a2:3e:6f:5b:27:ad:92:b6:5f:b9:f5:44: 71:25:c2:d3:07:4f:6f:58:a0:e8:09:d6:60:f1:a4:0d:e2:83: 7f:84:88:ce:67:2b:43:f7:87:17:98:ae:f3:7d:6a:60:66:ad: 7f:f4:54:a4:f5:29:95:66:44:0a:c5:c0:b8:a1:49:cd:57:10: c8:20:de:fd:fb:86:fe:39:41:a8:ad:03:ae:75:5a:a4:b4:e4: 5d:60:80:da -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWE5NCr3Rz8VQbzyOu1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNjE1MDcyNFoXDTI4MDkyODE1MDcyNFowLzEtMCsGA1UEAxMk YjlmN2Y2YWUtMGRhMi00NjE1LWE4MWQtN2RiNWNiM2E0ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKzfizctUOEl5P20pxZ/UN4TSL6W28Cv0166 a9wk58GdFlQ0jbjC4jPUhRW1izcACe1I8BrzkbaXqoApVBZ7USUwwUGLuBtaWWza 3Uwmu2kEuQ9YGeU+bGxmEBt456yOQ7q/H7EhRi0z9eTg9XiiZhlcmYavrIBRT0jl aGE9dD/TxH2Vmp48nDA/+HOnwd1vkdP+B87Gb+xRgloYLEr4Ofr3SBhowwLc5G3w DYBstWDZpqTdLOi6VAAam8W48iGolzWkk206X3mGuDyFbScUultho6yIRY0es8/M yrzlRD0rkipSui/F6nBwO7zrjHUqq6coRHbCyb2j/rLnuyWMnwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFDJepLEOu2cw37CdJVj6hNQN0lBsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i OWY3ZjZhZS0wZGEyLTQ2MTUtYTgxZC03ZGI1Y2IzYTRlOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2I5ZjdmNmFlLTBkYTItNDYxNS1h ODFkLTdkYjVjYjNhNGU5Yi9iOWY3ZjZhZS0wZGEyLTQ2MTUtYTgxZC03ZGI1Y2Iz YTRlOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKHVFQDBAKi2YQDBALHYJgwDQQCAAIwBwMFACYF hQAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICVi4CAwD2YzBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBqywN fHO2ivykTuI16QiycEiY992pnBYkpMlUyIUtrHUvoSgFDqocUN0akLn28by2etuU E/JZfFwxpUelMrqEQjBtcS/zzvz/FSlbX31y4Mc9ij7YQ2B0o+VkmBLP1rP0wGZO iWJCc0OS51G/K1NACF1t39yhbt/oR8bskdRgz3r+9csM6dTEDVTa++Bgd760WQ6u jtADcbhwH/pXzu3lwfeJuWD+OWCiPm9bJ62Stl+59URxJcLTB09vWKDoCdZg8aQN 4oN/hIjOZytD94cXmK7zfWpgZq1/9FSk9SmVZkQKxcC4oUnNVxDIIN79+4b+OUGo rQOudVqktORdYIDa -----END CERTIFICATE-----Generated at Mon Jun 29 10:35:37 2026 by rpki-client