$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b.cer File: ba9fc663-6e78-4435-a4e3-45ff8082831b.cer (raw, json) Hash identifier: fAV8knvn3S48DrzFpKKac6+c2lQCDLH4JGNvNp8FfG4= Subject key identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E52238F0DD24219402312F8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Jun 2026 10:56:27 +0000 Certificate not after: Sat 30 Sep 2028 10:56:27 +0000 Subordinate resources: AS: 402673 IP: 23.160.172.0/24 IP: 2602:f37b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:52:23:8f:0d:d2:42:19:40:23:12:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 28 10:56:27 2026 GMT Not After : Sep 30 10:56:27 2028 GMT Subject: CN=ba9fc663-6e78-4435-a4e3-45ff8082831b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:a8:e5:cc:25:c2:8e:c7:d9:bb:1c:cb:5e: 78:5d:a6:34:2c:eb:a7:2e:3d:08:6c:4f:03:06:32: d3:d7:06:0a:93:20:f2:85:09:f0:ec:c5:84:18:a4: b7:2b:71:18:ba:65:18:c5:2e:ac:c7:0d:a6:77:d8: 42:9a:02:e6:2c:68:37:85:58:62:b5:2f:3d:c6:c2: c9:cc:94:23:ec:17:d7:f5:74:9b:5f:11:f2:7f:b9: 87:4b:70:13:af:c8:23:0b:52:da:6b:69:5b:61:49: e1:fc:9d:12:67:74:3a:54:ba:b8:f0:28:38:3c:c9: 24:18:08:84:d5:27:c2:64:9f:20:29:3c:22:fd:9b: db:59:b3:44:5d:08:52:5d:55:e6:e6:55:41:e1:11: e6:b3:89:d7:fd:63:74:78:3d:87:94:72:ae:f2:67: 65:24:89:af:cc:19:1b:42:e7:f8:8d:82:a8:56:41: 79:8c:5c:06:3e:7b:3d:5c:f9:df:6b:fa:36:da:ac: 82:55:65:f8:c3:d3:cc:87:9f:a4:2b:57:b3:1a:71: c8:a4:3b:cb:2d:d3:7a:5c:c4:10:dd:38:f4:7a:9f: d9:64:34:a5:07:b9:87:e5:54:24:ad:1b:f7:1d:e9: 1a:f3:d5:80:a6:07:8a:85:43:f3:d7:71:f1:cd:17: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:60:60:A9:6F:7D:C0:21:A6:EB:ED:89:D4:20:65:00:5E:2D:EF:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba9fc663-6e78-4435-a4e3-45ff8082831b/ba9fc663-6e78-4435-a4e3-45ff8082831b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.160.172.0/24 IPv6: 2602:f37b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402673 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:87:6d:f3:2d:a3:40:00:a5:4a:14:fb:45:3e:d6:90:40:0b: d3:cc:5f:e8:7f:d2:ee:f2:a0:39:7c:b3:3f:71:97:2e:4e:2a: cb:8d:68:1c:5c:2a:05:57:b5:18:1e:2b:6b:cb:24:20:c9:73: 12:fa:2f:3f:3f:61:a0:96:cf:8b:c7:ca:d2:ff:fb:aa:d2:d5: a3:39:30:af:ca:f8:61:e8:35:d5:71:be:e5:7b:9d:e8:99:a4: ca:bb:e4:53:61:4c:45:47:43:40:cf:67:52:11:0b:b2:6b:a8: 19:d7:22:03:7a:7f:aa:51:bb:63:0f:4d:e1:ba:76:7e:f8:31: 22:93:b1:37:45:2b:43:a7:64:6a:14:f5:2c:61:61:91:d4:31: 9b:a4:3f:40:75:22:02:64:c1:c8:d4:9a:f0:73:3c:e8:e4:b2: 7b:3f:fa:e3:b0:72:d8:7e:5c:4e:9d:1a:08:17:a9:5a:6d:2a: b0:88:1a:c0:b8:35:33:00:5e:3e:24:7f:27:4a:96:35:6d:fa: 22:40:a0:01:f9:8c:18:9b:bf:b3:0f:c7:a1:18:71:c7:bd:a0: ee:b5:6c:3c:61:06:78:01:73:73:53:42:d3:ee:6e:97:7d:55: c5:f0:d2:eb:29:90:7e:98:82:a9:94:ad:f6:92:c7:df:4e:9d: d5:d1:46:7f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5SI48N0kIZQCMS+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyODEwNTYyN1oXDTI4MDkzMDEwNTYyN1owLzEtMCsGA1UEAxMk YmE5ZmM2NjMtNmU3OC00NDM1LWE0ZTMtNDVmZjgwODI4MzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9+o5cwlwo7H2bscy154XaY0LOunLj0IbE8D BjLT1wYKkyDyhQnw7MWEGKS3K3EYumUYxS6sxw2md9hCmgLmLGg3hVhitS89xsLJ zJQj7BfX9XSbXxHyf7mHS3ATr8gjC1Laa2lbYUnh/J0SZ3Q6VLq48Cg4PMkkGAiE 1SfCZJ8gKTwi/ZvbWbNEXQhSXVXm5lVB4RHms4nX/WN0eD2HlHKu8mdlJImvzBkb Quf4jYKoVkF5jFwGPns9XPnfa/o22qyCVWX4w9PMh5+kK1ezGnHIpDvLLdN6XMQQ 3Tj0ep/ZZDSlB7mH5VQkrRv3Heka89WApgeKhUPz13HxzRfKqwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEVgYKlvfcAhpuvtidQgZQBeLe97MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i YTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4MjgzMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2JhOWZjNjYzLTZlNzgtNDQzNS1h NGUzLTQ1ZmY4MDgyODMxYi9iYTlmYzY2My02ZTc4LTQ0MzUtYTRlMy00NWZmODA4 MjgzMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoKwwDgQCAAIwCAMGACYC83sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYk8TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuh23zLaNAAKVKFPtFPtaQQAvT zF/of9Lu8qA5fLM/cZcuTirLjWgcXCoFV7UYHitryyQgyXMS+i8/P2Ggls+Lx8rS //uq0tWjOTCvyvhh6DXVcb7le53omaTKu+RTYUxFR0NAz2dSEQuya6gZ1yIDen+q UbtjD03hunZ++DEik7E3RStDp2RqFPUsYWGR1DGbpD9AdSICZMHI1Jrwczzo5LJ7 P/rjsHLYflxOnRoIF6labSqwiBrAuDUzAF4+JH8nSpY1bfoiQKAB+YwYm7+zD8eh GHHHvaDutWw8YQZ4AXNzU0LT7m6XfVXF8NLrKZB+mIKplK32ksffTp3V0UZ/ -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:56 2026 by rpki-client