$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ca8add6e-6d32-4075-983c-20aa16426e7c.cer File: ca8add6e-6d32-4075-983c-20aa16426e7c.cer (raw, json) Hash identifier: fo1kNkqxDi5T+d1UdSw4P7tpKMGjqoevSp1ZFu7qn4A= Subject key identifier: 2B:AB:33:81:FE:DA:A5:BE:22:3B:F0:BC:4D:07:92:D4:02:C7:C4:01 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E4D22E0D3520EC304FA8A7EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ca8add6e-6d32-4075-983c-20aa16426e7c/ca8add6e-6d32-4075-983c-20aa16426e7c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ca8add6e-6d32-4075-983c-20aa16426e7c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 15:56:02 +0000 Certificate not after: Thu 28 Sep 2028 15:56:02 +0000 Subordinate resources: AS: 397740 IP: 152.55.240.0/21 IP: 2605:ddc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:22:e0:d3:52:0e:c3:04:fa:8a:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 26 15:56:02 2026 GMT Not After : Sep 28 15:56:02 2028 GMT Subject: CN=ca8add6e-6d32-4075-983c-20aa16426e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:06:49:cd:57:c9:7c:9d:77:dd:58:9d:00: 8b:97:37:cd:d8:24:a9:8b:7d:f5:ac:34:4a:98:24: fe:8a:a0:c0:35:d5:ad:5d:c5:61:be:0e:6c:2d:f2: 2c:97:30:4e:c3:92:4d:91:95:4c:6d:15:ef:ed:54: 51:41:5e:56:7a:a5:23:12:4e:94:8b:8d:3a:f8:01: 11:53:5a:bb:81:42:84:43:b8:8f:c6:09:b7:b2:a8: f7:d3:af:35:9b:78:82:fc:c8:22:6d:14:84:06:99: 60:12:ed:11:6e:93:cc:18:5e:68:84:3f:82:d4:03: 72:7d:46:dc:5d:3f:16:bd:ec:44:c2:9f:9f:87:05: 7a:44:2b:2e:0f:db:c8:07:a5:72:22:e4:06:85:7d: b4:c5:e0:68:47:cf:33:b7:c9:2c:99:1d:6d:64:f7: c2:59:22:5e:b2:2d:f3:cb:0c:4c:f6:30:8c:09:e4: 4b:a1:9e:11:f1:9e:72:31:96:19:69:06:41:3d:18: 35:ab:99:ef:98:cd:57:fa:de:ea:b3:33:44:ee:6b: 25:94:46:03:ed:3e:71:23:75:35:34:eb:f7:c6:0f: 1e:10:9b:dc:12:54:06:e8:bf:8a:9c:c2:17:98:a7: a2:94:4d:eb:e3:56:7b:1e:41:fc:9e:91:71:12:e4: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AB:33:81:FE:DA:A5:BE:22:3B:F0:BC:4D:07:92:D4:02:C7:C4:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ca8add6e-6d32-4075-983c-20aa16426e7c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ca8add6e-6d32-4075-983c-20aa16426e7c/ca8add6e-6d32-4075-983c-20aa16426e7c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 152.55.240.0/21 IPv6: 2605:ddc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397740 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6f:00:7a:86:f8:47:f6:39:be:73:34:d4:b0:6a:a1:62:57: 1a:81:78:0d:ed:b8:5c:23:6f:fa:ac:b3:b3:ef:0c:a5:16:5c: 41:d6:d0:3f:5b:f5:02:cd:32:2f:1e:50:ff:c0:87:86:d0:49: 5b:1f:cb:6f:53:7b:a4:cd:3e:8b:5e:e1:bc:99:7f:d8:45:a0: 88:10:d2:9b:81:5d:25:ce:86:60:c1:e7:5e:45:b7:eb:c1:dd: dc:9d:54:ba:0a:cb:cb:5c:cb:fd:80:4d:d5:9e:c6:21:b1:ff: 31:b4:50:d4:5e:3a:1a:69:23:f6:e0:bd:23:21:34:05:08:12: 75:f1:de:74:46:7d:1d:93:34:60:7b:12:04:71:7a:f5:a8:7d: 6e:61:4c:77:38:bc:e2:4a:ad:a4:74:5b:ee:2c:26:8e:0f:d6: 0f:84:ea:c3:e9:5f:00:20:67:ed:53:e1:44:7b:a5:6c:27:86: 2d:6b:10:a4:9d:ed:47:dd:1b:06:8e:3f:1d:9c:01:6c:0c:1d: 50:79:ac:83:cd:42:9b:a1:61:c6:f4:4d:34:85:eb:13:67:8b: 13:f1:e7:05:64:05:18:5f:8d:88:95:d1:af:20:18:91:9d:83: e4:e9:ac:c9:fb:b2:ae:c4:b3:c4:74:50:1b:2a:6d:da:e9:b8: 82:7c:a0:27 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5NIuDTUg7DBPqKfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyNjE1NTYwMloXDTI4MDkyODE1NTYwMlowLzEtMCsGA1UEAxMk Y2E4YWRkNmUtNmQzMi00MDc1LTk4M2MtMjBhYTE2NDI2ZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvIGSc1XyXydd91YnQCLlzfN2CSpi331rDRK mCT+iqDANdWtXcVhvg5sLfIslzBOw5JNkZVMbRXv7VRRQV5WeqUjEk6Ui406+AER U1q7gUKEQ7iPxgm3sqj30681m3iC/MgibRSEBplgEu0RbpPMGF5ohD+C1ANyfUbc XT8WvexEwp+fhwV6RCsuD9vIB6VyIuQGhX20xeBoR88zt8ksmR1tZPfCWSJesi3z ywxM9jCMCeRLoZ4R8Z5yMZYZaQZBPRg1q5nvmM1X+t7qszNE7msllEYD7T5xI3U1 NOv3xg8eEJvcElQG6L+KnMIXmKeilE3r41Z7HkH8npFxEuSWcQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCurM4H+2qW+IjvwvE0HktQCx8QBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j YThhZGQ2ZS02ZDMyLTQwNzUtOTgzYy0yMGFhMTY0MjZlN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NhOGFkZDZlLTZkMzItNDA3NS05 ODNjLTIwYWExNjQyNmU3Yy9jYThhZGQ2ZS02ZDMyLTQwNzUtOTgzYy0yMGFhMTY0 MjZlN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOYN/AwDQQCAAIwBwMFACYF3cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhGsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHJvAHqG+Ef2Ob5zNNSwaqFiVxqB eA3tuFwjb/qss7PvDKUWXEHW0D9b9QLNMi8eUP/Ah4bQSVsfy29Te6TNPote4byZ f9hFoIgQ0puBXSXOhmDB515Ft+vB3dydVLoKy8tcy/2ATdWexiGx/zG0UNReOhpp I/bgvSMhNAUIEnXx3nRGfR2TNGB7EgRxevWofW5hTHc4vOJKraR0W+4sJo4P1g+E 6sPpXwAgZ+1T4UR7pWwnhi1rEKSd7UfdGwaOPx2cAWwMHVB5rIPNQpuhYcb0TTSF 6xNnixPx5wVkBRhfjYiV0a8gGJGdg+TprMn7sq7Es8R0UBsqbdrpuIJ8oCc= -----END CERTIFICATE-----Generated at Mon Jul 13 05:28:33 2026 by rpki-client