$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5.cer File: bdccab16-a20e-43ba-a454-705ada07e8c5.cer (raw, json) Hash identifier: nI5dtvyMtVcH55JhPn9v7imEDUhG3kdhrf5r7bPbErg= Subject key identifier: 50:66:7E:80:04:91:FD:A0:18:60:B1:C6:4F:2F:71:A0:1C:86:99:D6 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F916195F454D6F613EC811780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bdccab16-a20e-43ba-a454-705ada07e8c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 19:24:17 +0000 Certificate not after: Sat 09 Sep 2028 08:20:39 +0000 Subordinate resources: AS: 11649 IP: 147.222.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:61:95:f4:54:d6:f6:13:ec:81:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 20 19:24:17 2026 GMT Not After : Sep 9 08:20:39 2028 GMT Subject: CN=bdccab16-a20e-43ba-a454-705ada07e8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:ac:5c:ad:cc:7c:f0:27:c1:fe:6a:6f:6c: e4:1a:a8:0f:a0:84:ec:55:2b:bf:2f:9e:69:ee:7e: b5:03:63:cd:32:ac:e2:e1:b6:e0:c1:a3:b7:2f:92: dc:aa:0d:40:3d:40:da:b3:8e:75:bd:3a:1e:94:65: 30:89:85:d6:e2:e7:67:39:4c:62:dd:00:33:95:e0: dd:c1:82:de:0a:ec:87:08:0e:d5:d8:d3:8b:e4:2e: 17:3d:a3:89:fb:e3:a3:9f:a8:3f:c8:29:08:08:d3: fa:0e:6a:57:0e:9f:c5:45:9e:86:d4:af:94:0f:a1: b3:88:87:e2:e1:af:51:8b:1a:57:97:f7:52:f8:af: d7:f3:dc:5d:a4:47:9f:60:68:23:54:33:14:0f:8f: ea:79:a4:8b:a1:56:12:62:b8:a8:b7:6a:ea:be:71: a3:d8:e3:c1:93:b9:87:35:bd:d8:d4:03:3b:f9:c8: 1a:59:fd:5d:92:51:0e:38:02:b2:f0:cd:4c:6a:3a: 0d:7a:ad:b8:80:ab:86:f8:c8:cf:53:9c:46:8e:3e: 5e:64:23:d4:1b:26:f2:37:20:d6:9d:b3:42:fc:f3: 16:ff:bd:13:6b:9a:f4:d1:1e:a1:1f:5a:14:a5:08: 9a:67:1b:82:4d:2c:0d:fa:85:67:27:d9:3d:ea:da: ad:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:66:7E:80:04:91:FD:A0:18:60:B1:C6:4F:2F:71:A0:1C:86:99:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bdccab16-a20e-43ba-a454-705ada07e8c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 147.222.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11649 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a3:46:77:4a:39:08:e1:77:13:f7:22:b1:d9:55:f7:a6:25: 0a:59:68:f4:e8:e7:9c:a4:2e:7a:7c:b5:26:b8:9c:4c:8f:8c: 30:b5:ac:8e:de:81:6b:38:cf:11:15:d5:eb:74:c4:4c:47:44: 8e:8b:76:b2:dc:2d:fc:f9:20:f5:a2:cc:3c:30:d1:3b:72:1f: 97:51:d5:1b:93:d0:89:d1:25:06:4b:d8:ea:39:26:f4:77:74: 11:55:0b:e0:e9:e2:67:fe:7d:a6:70:81:97:62:25:96:2a:aa: c0:10:f0:2f:24:9b:dc:71:76:ed:8e:c0:9d:e5:88:dd:2b:c8: ad:a8:c6:29:31:a0:c9:44:e3:f9:9c:13:f2:c3:32:1a:e0:5a: 44:6f:58:88:7b:6b:a1:41:94:62:4e:e8:24:6c:cc:fe:94:7a: 71:b7:36:aa:51:76:48:a4:10:58:1d:49:e3:02:0b:fe:fb:e4: fb:94:d2:f8:b6:f0:42:27:e7:8e:6a:f0:58:e7:d6:76:35:8b: e5:f6:93:28:89:31:da:3c:69:2e:62:e5:5b:63:b0:43:7d:1f: 1e:27:ef:79:ea:bd:73:53:cf:2c:60:76:6f:fc:b4:fe:50:59: a6:2f:d4:05:58:6b:b9:18:eb:eb:75:3b:a3:c0:24:be:aa:20: 66:03:f3:9f -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE+RYZX0VNb2E+yBF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAyMDE5MjQxN1oXDTI4MDkwOTA4MjAzOVowLzEtMCsGA1UEAxMk YmRjY2FiMTYtYTIwZS00M2JhLWE0NTQtNzA1YWRhMDdlOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvesXK3MfPAnwf5qb2zkGqgPoITsVSu/L55p 7n61A2PNMqzi4bbgwaO3L5Lcqg1APUDas451vToelGUwiYXW4udnOUxi3QAzleDd wYLeCuyHCA7V2NOL5C4XPaOJ++Ojn6g/yCkICNP6DmpXDp/FRZ6G1K+UD6GziIfi 4a9RixpXl/dS+K/X89xdpEefYGgjVDMUD4/qeaSLoVYSYriot2rqvnGj2OPBk7mH Nb3Y1AM7+cgaWf1dklEOOAKy8M1MajoNeq24gKuG+MjPU5xGjj5eZCPUGybyNyDW nbNC/PMW/70Ta5r00R6hH1oUpQiaZxuCTSwN+oVnJ9k96tqtZQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFFBmfoAEkf2gGGCxxk8vcaAchpnWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i ZGNjYWIxNi1hMjBlLTQzYmEtYTQ1NC03MDVhZGEwN2U4YzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2JkY2NhYjE2LWEyMGUtNDNiYS1h NDU0LTcwNWFkYTA3ZThjNS9iZGNjYWIxNi1hMjBlLTQzYmEtYTQ1NC03MDVhZGEw N2U4YzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCT3jAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIt gTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQB2o0Z3SjkI4XcT9yKx2VX3piUKWWj06OecpC56fLUmuJxMj4ww tayO3oFrOM8RFdXrdMRMR0SOi3ay3C38+SD1osw8MNE7ch+XUdUbk9CJ0SUGS9jq OSb0d3QRVQvg6eJn/n2mcIGXYiWWKqrAEPAvJJvccXbtjsCd5YjdK8itqMYpMaDJ ROP5nBPywzIa4FpEb1iIe2uhQZRiTugkbMz+lHpxtzaqUXZIpBBYHUnjAgv+++T7 lNL4tvBCJ+eOavBY59Z2NYvl9pMoiTHaPGkuYuVbY7BDfR8eJ+956r1zU88sYHZv /LT+UFmmL9QFWGu5GOvrdTujwCS+qiBmA/Of -----END CERTIFICATE-----Generated at Fri Oct 23 07:26:20 2026 by rpki-client