$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c95826c9-cf90-4f7c-ac80-cb15b7908cb1.cer File: c95826c9-cf90-4f7c-ac80-cb15b7908cb1.cer (raw, json) Hash identifier: itHRk+4uL+mA0DD68UAFKbRw/0bSJkW1stpA/1jQ4Ao= Subject key identifier: D7:8A:38:90:E9:49:AA:E2:84:45:04:21:35:5D:CB:07:3E:E7:6E:C4 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6FF5E9C73BF2B96F4A602F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c95826c9-cf90-4f7c-ac80-cb15b7908cb1/c95826c9-cf90-4f7c-ac80-cb15b7908cb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c95826c9-cf90-4f7c-ac80-cb15b7908cb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jul 2026 03:18:43 +0000 Certificate not after: Wed 11 Oct 2028 03:18:43 +0000 Subordinate resources: AS: 402719 IP: 66.208.80.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:f5:e9:c7:3b:f2:b9:6f:4a:60:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 9 03:18:43 2026 GMT Not After : Oct 11 03:18:43 2028 GMT Subject: CN=c95826c9-cf90-4f7c-ac80-cb15b7908cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:c6:88:8f:f3:5d:e7:a4:88:3c:5d:a9:0f: 9b:b4:b4:a7:0d:25:37:51:d6:e6:36:aa:14:50:f8: 2f:fa:0a:fd:a1:b4:54:40:1d:29:ad:e7:ed:55:fd: 9b:df:f1:ab:b4:79:2c:60:f1:cc:dd:28:6c:c2:76: f3:4d:fc:59:c8:0c:ef:ef:e7:5d:05:17:4a:26:ad: c8:30:1d:e9:86:82:ae:de:33:02:54:1d:ce:9c:38: 7e:62:ec:9a:f4:30:1b:67:5b:36:ee:7f:c9:b4:e2: 04:cd:53:c2:18:6e:bd:ea:0e:03:73:90:86:f7:00: cf:af:76:6e:40:b1:e1:d1:8d:af:36:49:6f:f7:2b: 4f:35:c3:e0:23:08:99:e8:cf:7f:c0:d2:65:61:d1: 51:8d:2e:cc:60:7d:39:eb:70:c2:2e:df:17:a4:f1: fd:3f:83:0a:fd:b9:2a:26:fe:b7:4a:e8:6e:48:d4: 33:11:34:33:cd:97:d1:f4:f5:90:a3:d7:77:0e:8d: 0a:a9:65:66:f5:04:5c:86:f9:76:8c:5f:23:86:33: 4c:d5:37:f4:bf:37:f6:10:ee:d5:bf:3f:c3:09:1b: 57:93:8c:de:10:fe:f5:cc:f7:be:3f:9f:42:8a:1e: 1a:c0:6c:e0:db:b3:74:70:f9:17:c6:5f:bc:e5:20: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8A:38:90:E9:49:AA:E2:84:45:04:21:35:5D:CB:07:3E:E7:6E:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c95826c9-cf90-4f7c-ac80-cb15b7908cb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c95826c9-cf90-4f7c-ac80-cb15b7908cb1/c95826c9-cf90-4f7c-ac80-cb15b7908cb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 66.208.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402719 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b7:f8:50:cc:f3:c8:1e:81:aa:79:6f:eb:ce:c5:d2:74:26: 10:c1:38:f1:9e:a6:a8:29:ae:3f:75:95:d0:c9:5d:fe:19:26: f0:18:62:45:af:22:c3:7b:02:e6:2d:87:70:46:fd:7a:98:5e: 5b:3e:6a:12:c7:f1:80:ea:b1:c0:2d:38:c3:20:3f:4f:f5:62: 3a:7e:d2:28:5d:b0:2e:9c:0b:0d:b8:58:ce:26:3d:e4:e2:c3: e3:b8:29:9c:c8:0c:0f:ca:9b:6f:0c:bb:52:ca:c4:ca:3d:4d: 17:f4:fe:cf:aa:02:6e:af:1c:d5:74:bf:1d:26:17:dd:58:c9: 80:f0:4b:b8:2e:ab:42:bc:44:bd:a5:8d:23:79:c9:c9:ad:2c: e6:7b:c8:09:4d:7b:a0:3a:1e:f0:3a:03:ec:ef:77:ab:c9:c9: 7e:e0:d4:9a:36:98:8e:26:76:d5:65:43:a1:56:58:04:52:61: c0:60:60:ae:65:45:54:47:b5:94:55:17:8b:fc:0a:e9:ea:22: 52:69:ef:28:ed:fe:7b:7d:bb:1c:59:c1:3a:fb:1d:36:ee:6d: 16:e4:db:55:17:9f:68:0d:a4:e1:c7:28:4b:d3:84:cb:3a:fc: b1:a4:b2:e4:83:13:05:cf:36:11:bf:27:57:ac:f0:4e:d3:69: 28:09:fa:d0 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5v9enHO/K5b0pgL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwOTAzMTg0M1oXDTI4MTAxMTAzMTg0M1owLzEtMCsGA1UEAxMk Yzk1ODI2YzktY2Y5MC00ZjdjLWFjODAtY2IxNWI3OTA4Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyHGiI/zXeekiDxdqQ+btLSnDSU3UdbmNqoU UPgv+gr9obRUQB0preftVf2b3/GrtHksYPHM3ShswnbzTfxZyAzv7+ddBRdKJq3I MB3phoKu3jMCVB3OnDh+Yuya9DAbZ1s27n/JtOIEzVPCGG696g4Dc5CG9wDPr3Zu QLHh0Y2vNklv9ytPNcPgIwiZ6M9/wNJlYdFRjS7MYH0563DCLt8XpPH9P4MK/bkq Jv63SuhuSNQzETQzzZfR9PWQo9d3Do0KqWVm9QRchvl2jF8jhjNM1Tf0vzf2EO7V vz/DCRtXk4zeEP71zPe+P59Cih4awGzg27N0cPkXxl+85SAeIwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNeKOJDpSarihEUEITVdywc+527EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j OTU4MjZjOS1jZjkwLTRmN2MtYWM4MC1jYjE1Yjc5MDhjYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2M5NTgyNmM5LWNmOTAtNGY3Yy1h YzgwLWNiMTViNzkwOGNiMS9jOTU4MjZjOS1jZjkwLTRmN2MtYWM4MC1jYjE1Yjc5 MDhjYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJC0FAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiUfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADm3+FDM88gegap5b+vOxdJ0JhDBOPGepqgprj91ldDJXf4Z JvAYYkWvIsN7AuYth3BG/XqYXls+ahLH8YDqscAtOMMgP0/1Yjp+0ihdsC6cCw24 WM4mPeTiw+O4KZzIDA/Km28Mu1LKxMo9TRf0/s+qAm6vHNV0vx0mF91YyYDwS7gu q0K8RL2ljSN5ycmtLOZ7yAlNe6A6HvA6A+zvd6vJyX7g1Jo2mI4mdtVlQ6FWWARS YcBgYK5lRVRHtZRVF4v8CunqIlJp7yjt/nt9uxxZwTr7HTbubRbk21UXn2gNpOHH KEvThMs6/LGksuSDEwXPNhG/J1es8E7TaSgJ+tA= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:07 2026 by rpki-client