$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d.cer File: c175f825-3b85-4838-a06a-704b8afdb54d.cer (raw, json) Hash identifier: a+tAbJGNgaQDrsGSe3U4v3n5PvAKfd3UvR3hUo/47pU= Subject key identifier: C0:5A:14:BD:01:37:59:F0:0B:79:8D:F0:7C:D0:48:37:24:72:70:45 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E47F8C030A2483072A29E3C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/c175f825-3b85-4838-a06a-704b8afdb54d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jun 2026 19:32:06 +0000 Certificate not after: Tue 26 Sep 2028 19:32:06 +0000 Subordinate resources: IP: 155.103.249.0/24 IP: 198.32.144.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:47:f8:c0:30:a2:48:30:72:a2:9e:3c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 24 19:32:06 2026 GMT Not After : Sep 26 19:32:06 2028 GMT Subject: CN=c175f825-3b85-4838-a06a-704b8afdb54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:7f:c2:f4:0b:74:a3:aa:bf:4b:e2:6c:d4: 8d:68:60:a3:da:bb:5b:25:30:63:30:14:3e:25:8f: 35:1f:3f:9e:10:34:75:06:94:34:ea:4b:eb:93:ed: 5a:81:9a:b9:6e:ee:10:fd:b2:7f:d7:b5:dc:ec:a7: 10:5b:b0:1e:dc:bb:79:79:50:3c:b2:f8:d0:e3:10: 9e:48:8b:e7:20:2c:13:c7:59:bc:2a:33:1f:22:47: 2e:9c:8e:61:5d:6c:d9:9d:15:89:4e:d1:18:29:37: a0:63:30:ec:f2:34:fa:d5:d2:da:1d:19:c1:9f:c3: 72:f0:31:e9:5e:16:69:b3:f3:f0:57:1a:a2:d5:a9: c6:da:09:62:48:e8:14:c1:94:5c:9a:64:c2:8f:82: 55:d7:49:49:bb:3e:eb:d7:be:2f:79:38:69:8a:f5: 36:8a:1d:cb:7b:fe:6c:03:41:57:52:fb:cd:e2:44: 49:1f:b0:a9:d1:82:3f:8a:25:d6:58:ff:84:10:4a: 2c:73:f4:67:81:59:d9:b0:6c:89:fb:b7:a2:e7:eb: 77:b8:2c:27:e5:f4:da:99:ab:82:31:35:5d:4b:32: 22:0e:0f:bf:11:fe:5d:26:74:a0:a2:a7:09:f6:30: c3:24:64:be:ff:7e:53:9e:89:af:df:e3:85:2c:eb: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5A:14:BD:01:37:59:F0:0B:79:8D:F0:7C:D0:48:37:24:72:70:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c175f825-3b85-4838-a06a-704b8afdb54d/c175f825-3b85-4838-a06a-704b8afdb54d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 155.103.249.0/24 198.32.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f5:78:b3:bc:35:6f:66:51:01:5a:67:e8:77:00:37:f8:8a: 93:11:a3:c2:f6:e4:2d:8c:86:de:50:3a:9b:bd:8a:e9:58:46: 98:dc:8b:e8:dc:e4:76:c7:4a:28:e2:fa:c8:92:35:56:b8:fd: 69:d7:84:2e:4e:d0:ca:6e:81:6a:16:4e:93:78:c1:30:e2:a8: 88:f9:93:f1:0d:51:8a:72:15:0f:fb:c3:c0:6c:e0:23:31:e4: 54:0c:7f:ec:f0:bf:de:49:74:1a:8c:16:1b:40:ee:c6:38:ca: 40:d7:ce:66:1d:74:11:fe:3f:38:72:59:5a:79:86:bb:cf:ab: ed:9f:7b:ea:1e:9d:cf:d2:15:4b:3e:eb:2e:e4:a8:10:08:bc: 63:f3:09:8a:f6:95:f4:7b:28:6a:f0:9f:8e:aa:f8:ef:bc:56: d0:8b:60:b7:52:22:31:cf:9c:95:90:5c:b3:20:2d:a3:73:aa: f0:62:13:81:0d:a4:ab:04:d3:14:d4:e1:c9:8a:58:87:f9:77: 31:88:38:df:19:4b:a1:6a:03:e1:93:0e:ef:69:dc:32:a9:fa: 5b:6f:25:57:49:a4:b8:5b:dd:21:09:92:8b:b3:d1:e3:15:10: 1a:d5:2c:a0:d9:88:27:1d:f9:5a:a4:52:83:52:eb:8a:15:d6: b0:e5:36:74 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE5H+MAwokgwcqKePGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNDE5MzIwNloXDTI4MDkyNjE5MzIwNlowLzEtMCsGA1UEAxMk YzE3NWY4MjUtM2I4NS00ODM4LWEwNmEtNzA0YjhhZmRiNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU1/wvQLdKOqv0vibNSNaGCj2rtbJTBjMBQ+ JY81Hz+eEDR1BpQ06kvrk+1agZq5bu4Q/bJ/17Xc7KcQW7Ae3Lt5eVA8svjQ4xCe SIvnICwTx1m8KjMfIkcunI5hXWzZnRWJTtEYKTegYzDs8jT61dLaHRnBn8Ny8DHp XhZps/PwVxqi1anG2gliSOgUwZRcmmTCj4JV10lJuz7r174veThpivU2ih3Le/5s A0FXUvvN4kRJH7Cp0YI/iiXWWP+EEEosc/RngVnZsGyJ+7ei5+t3uCwn5fTamauC MTVdSzIiDg+/Ef5dJnSgoqcJ9jDDJGS+/35Tnomv3+OFLOupGwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFMBaFL0BN1nwC3mN8HzQSDckcnBFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j MTc1ZjgyNS0zYjg1LTQ4MzgtYTA2YS03MDRiOGFmZGI1NGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2MxNzVmODI1LTNiODUtNDgzOC1h MDZhLTcwNGI4YWZkYjU0ZC9jMTc1ZjgyNS0zYjg1LTQ4MzgtYTA2YS03MDRiOGFm ZGI1NGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACbZ/kDBADGIJAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATvV4s7w1b2ZR AVpn6HcAN/iKkxGjwvbkLYyG3lA6m72K6VhGmNyL6NzkdsdKKOL6yJI1Vrj9adeE Lk7Qym6BahZOk3jBMOKoiPmT8Q1RinIVD/vDwGzgIzHkVAx/7PC/3kl0GowWG0Du xjjKQNfOZh10Ef4/OHJZWnmGu8+r7Z976h6dz9IVSz7rLuSoEAi8Y/MJivaV9Hso avCfjqr477xW0Itgt1IiMc+clZBcsyAto3Oq8GITgQ2kqwTTFNThyYpYh/l3MYg4 3xlLoWoD4ZMO72ncMqn6W28lV0mkuFvdIQmSi7PR4xUQGtUsoNmIJx35WqRSg1Lr ihXWsOU2dA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:56 2026 by rpki-client