$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787.cer File: bc7849f1-d089-4d74-8be1-86f1735f6787.cer (raw, json) Hash identifier: i8KJ8psBYeL4MpHqmBE+HbjW4AwW8QjI1E0TdQk4BNc= Subject key identifier: 01:5D:34:DC:5F:D3:AF:AB:19:2B:81:6F:1C:B0:3A:A2:C6:DB:AE:23 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E7CF27375D5B6718615F459EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/bc7849f1-d089-4d74-8be1-86f1735f6787.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jul 2026 18:57:15 +0000 Certificate not after: Thu 31 Aug 2028 08:15:31 +0000 Subordinate resources: AS: 398487 IP: 64.17.240.0/22 IP: 64.190.191.0/24 IP: 104.204.250.0/23 IP: 162.213.70.0/23 IP: 172.86.158.0/24 IP: 204.124.168.0/23 IP: 205.174.159.0/24 IP: 216.245.134.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7c:f2:73:75:d5:b6:71:86:15:f4:59:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 13 18:57:15 2026 GMT Not After : Aug 31 08:15:31 2028 GMT Subject: CN=bc7849f1-d089-4d74-8be1-86f1735f6787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:79:4b:5a:53:0e:4b:05:86:a6:ff:12:cb:1c: 25:7b:c5:3b:d8:80:89:c2:c6:92:89:00:ed:e6:02: 5b:ea:75:8a:55:5f:e3:0c:90:1a:2b:1c:9e:41:59: 00:45:aa:e9:48:30:e2:63:94:5a:26:8a:87:86:01: 7a:37:33:22:e2:e4:f0:8a:2e:7e:b8:1f:ec:54:28: d2:10:ee:99:55:e1:7d:00:6f:7a:4c:57:1b:2e:8f: 19:ab:df:8f:2d:60:05:1e:04:59:44:86:cd:64:9d: d8:4e:26:bb:15:b3:da:bd:8e:97:f5:e8:3d:1f:44: d7:07:92:7d:3e:28:2e:df:5a:4e:2d:ab:11:5a:2b: 4e:12:c9:08:bc:10:0e:3b:c0:09:bb:c7:04:1e:fb: a1:f3:2f:d3:2b:dc:d6:a2:65:b0:d6:fe:c5:52:6c: 9a:fb:26:2a:b0:3b:b8:29:3d:18:cb:71:9a:aa:9c: ec:7c:6b:69:92:50:e9:db:dc:2b:d9:4e:a4:7e:50: 2f:64:95:dd:24:59:cc:12:c3:17:50:e4:68:7d:2c: 8f:a0:d5:d2:68:a3:40:5a:f8:23:6a:ef:e3:4c:b9: 9c:c0:6d:21:c5:ab:05:49:2c:7e:97:60:b4:38:d2: 1b:8f:7c:c4:1c:ee:9b:18:7d:8d:c2:1e:64:50:82: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:34:DC:5F:D3:AF:AB:19:2B:81:6F:1C:B0:3A:A2:C6:DB:AE:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bc7849f1-d089-4d74-8be1-86f1735f6787/bc7849f1-d089-4d74-8be1-86f1735f6787.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.17.240.0/22 64.190.191.0/24 104.204.250.0/23 162.213.70.0/23 172.86.158.0/24 204.124.168.0/23 205.174.159.0/24 216.245.134.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398487 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:59:1b:6a:06:d7:d1:6b:3a:c0:21:84:83:8c:0a:20:43:b6: fc:4e:34:7d:22:d6:7b:e6:52:aa:85:1c:39:cc:ff:2d:83:1c: 58:e5:24:b3:b2:07:53:29:e3:af:cf:b1:6b:4d:8c:b5:4b:e5: ea:29:e1:a2:22:a4:06:b7:40:f4:18:7a:98:db:6a:e8:6d:3d: 9c:03:28:44:d6:ea:c6:31:0c:2c:c8:6a:60:6b:fd:67:38:fe: 24:b8:65:68:b3:ed:b5:de:66:5a:14:d9:c1:24:47:75:f4:e9: 0b:6b:9e:1c:14:c8:3c:54:e7:22:31:88:c8:2a:43:30:5a:78: 33:73:7f:3a:5d:c4:61:1e:a7:95:d6:98:67:b1:26:87:81:aa: ac:93:a5:3d:65:ab:2f:bc:25:e0:25:48:a2:f4:72:69:66:0d: 9e:85:44:1d:ef:43:2f:6d:cc:2b:cb:ee:da:ec:60:75:39:0a: d9:35:f2:8e:a8:65:35:47:67:46:ff:9c:5c:66:22:ba:c7:4d: 22:45:ba:43:e1:d3:0d:92:86:18:79:99:9c:69:f9:55:bc:d6: d5:1b:53:31:38:dd:25:70:32:0d:94:41:a0:61:27:53:4e:be: c2:c2:4b:04:68:89:52:9c:09:f3:0c:43:03:86:cb:05:5e:cd: f9:72:0e:12 -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWE588nN11bZxhhX0WewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxMzE4NTcxNVoXDTI4MDgzMTA4MTUzMVowLzEtMCsGA1UEAxMk YmM3ODQ5ZjEtZDA4OS00ZDc0LThiZTEtODZmMTczNWY2Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnlLWlMOSwWGpv8Syxwle8U72ICJwsaSiQDt 5gJb6nWKVV/jDJAaKxyeQVkARarpSDDiY5RaJoqHhgF6NzMi4uTwii5+uB/sVCjS EO6ZVeF9AG96TFcbLo8Zq9+PLWAFHgRZRIbNZJ3YTia7FbPavY6X9eg9H0TXB5J9 Pigu31pOLasRWitOEskIvBAOO8AJu8cEHvuh8y/TK9zWomWw1v7FUmya+yYqsDu4 KT0Yy3GaqpzsfGtpklDp29wr2U6kflAvZJXdJFnMEsMXUORofSyPoNXSaKNAWvgj au/jTLmcwG0hxasFSSx+l2C0ONIbj3zEHO6bGH2Nwh5kUILmUwIDAQABo4IERTCC BEEwHQYDVR0OBBYEFAFdNNxf06+rGSuBbxywOqLG264jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i Yzc4NDlmMS1kMDg5LTRkNzQtOGJlMS04NmYxNzM1ZjY3ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2JjNzg0OWYxLWQwODktNGQ3NC04 YmUxLTg2ZjE3MzVmNjc4Ny9iYzc4NDlmMS1kMDg5LTRkNzQtOGJlMS04NmYxNzM1 ZjY3ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBAJAEfADBABAvr8DBAFozPoDBAGi1UYDBACsVp4D BAHMfKgDBADNrp8DBAHY9YYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhSXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRZG2oG19FrOsAhhIOMCiBDtvxONH0i1nvmUqqFHDnM/y2DHFjlJLOy B1Mp46/PsWtNjLVL5eop4aIipAa3QPQYepjbauhtPZwDKETW6sYxDCzIamBr/Wc4 /iS4ZWiz7bXeZloU2cEkR3X06QtrnhwUyDxU5yIxiMgqQzBaeDNzfzpdxGEep5XW mGexJoeBqqyTpT1lqy+8JeAlSKL0cmlmDZ6FRB3vQy9tzCvL7trsYHU5Ctk18o6o ZTVHZ0b/nFxmIrrHTSJFukPh0w2Shhh5mZxp+VW81tUbUzE43SVwMg2UQaBhJ1NO vsLCSwRoiVKcCfMMQwOGywVezflyDhI= -----END CERTIFICATE-----Generated at Tue Jul 21 14:32:06 2026 by rpki-client