$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cded638f-5234-4313-9d24-a3f77ae00f05.cer File: cded638f-5234-4313-9d24-a3f77ae00f05.cer (raw, json) Hash identifier: RHPnzgMU7u2c23217TX/NGjQyTS90evXs1IkUg2J88c= Subject key identifier: 25:80:A4:79:84:D7:80:B4:84:9A:33:29:6D:21:E6:63:71:E0:45:2F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6EAA85077FB56DB8C1EC7B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cded638f-5234-4313-9d24-a3f77ae00f05/cded638f-5234-4313-9d24-a3f77ae00f05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cded638f-5234-4313-9d24-a3f77ae00f05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 16:11:00 +0000 Certificate not after: Tue 10 Oct 2028 16:11:00 +0000 Subordinate resources: AS: 46972 IP: 198.102.104.0/24 IP: 2602:f759::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:aa:85:07:7f:b5:6d:b8:c1:ec:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 8 16:11:00 2026 GMT Not After : Oct 10 16:11:00 2028 GMT Subject: CN=cded638f-5234-4313-9d24-a3f77ae00f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:66:64:c3:78:ff:87:23:2a:55:06:a6:57:c7: 0a:e4:01:61:70:45:f8:a9:23:f5:68:07:bf:08:93: f4:f2:85:f5:60:ad:f5:bf:40:c4:6f:f2:26:6a:b6: 80:a3:15:61:cb:9a:32:1c:36:65:89:95:59:a7:8b: 13:3c:23:80:34:be:fa:dc:39:64:dd:1b:59:94:ad: 6e:ba:69:20:c1:d4:d0:09:3f:0b:83:6e:0d:4f:3c: 67:ad:17:32:53:a5:62:1f:8b:77:94:4d:f5:85:12: be:3e:44:f3:69:b5:51:c2:c2:71:6b:22:5c:f2:0a: a8:b9:98:65:bc:62:5a:15:2d:69:ed:7d:a3:1e:7c: 7b:4f:5c:48:cb:1d:40:77:84:d4:c3:4c:05:33:b8: fa:6e:e4:38:7c:13:09:6f:24:4e:85:67:4a:68:50: 18:1e:4c:e7:3d:f6:91:3f:8b:3f:26:27:8b:60:81: c0:a7:76:72:6e:e3:de:37:a7:99:98:ec:54:66:bd: ed:49:bb:28:fc:f7:5f:31:d2:32:57:4d:1c:01:b1: 57:b2:5c:c0:5f:0a:cd:89:30:ea:ba:89:35:86:05: 91:fa:6d:7e:65:6f:18:51:c0:15:92:bf:a7:e1:de: a9:f1:b1:8e:89:2d:11:26:87:08:aa:33:34:6a:80: a6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:A4:79:84:D7:80:B4:84:9A:33:29:6D:21:E6:63:71:E0:45:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cded638f-5234-4313-9d24-a3f77ae00f05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cded638f-5234-4313-9d24-a3f77ae00f05/cded638f-5234-4313-9d24-a3f77ae00f05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 198.102.104.0/24 IPv6: 2602:f759::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46972 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:75:99:57:5f:bf:49:05:61:a0:99:24:40:e5:76:36:cf:9a: fe:57:4a:52:62:a2:c1:84:5e:24:3c:5d:4b:74:ff:86:a2:e1: 88:5f:3b:f2:ec:b8:17:71:43:b3:6d:88:69:85:63:2c:8b:05: 0c:d8:8e:ab:be:d4:c1:11:41:4e:11:2c:4c:44:79:71:fe:5d: 14:ed:59:5c:b5:1e:6a:77:ac:54:bb:63:bb:c2:5f:e4:f9:b0: 05:7f:55:df:03:ea:2e:9e:23:88:b0:d0:43:3a:b4:9f:49:91: 9d:d0:48:88:0f:9a:27:de:10:b2:75:31:b3:4c:b0:46:90:2d: 9e:76:b4:fa:e2:73:64:a1:b1:e1:3f:91:6b:a7:50:65:73:5d: df:4b:ca:f4:4e:c1:23:3e:6b:a0:4f:3c:45:06:5f:e3:f6:95: 1d:63:9e:22:39:57:4d:b8:30:58:61:4f:57:b0:1d:81:f9:f4: 50:a1:d6:8b:37:a2:53:04:63:c3:29:99:62:e2:06:2f:4e:d6: d4:1d:3c:e6:11:36:f1:14:0a:3b:a3:b4:f8:c5:1d:72:ef:4a: 23:f0:04:49:58:4f:95:94:e2:32:ca:8e:68:b9:35:86:c3:cc: bc:43:c0:21:f2:19:b9:82:3c:c9:f1:48:39:8a:25:90:32:14: 4a:30:0b:f4 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE5uqoUHf7VtuMHsewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwODE2MTEwMFoXDTI4MTAxMDE2MTEwMFowLzEtMCsGA1UEAxMk Y2RlZDYzOGYtNTIzNC00MzEzLTlkMjQtYTNmNzdhZTAwZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmZkw3j/hyMqVQamV8cK5AFhcEX4qSP1aAe/ CJP08oX1YK31v0DEb/ImaraAoxVhy5oyHDZliZVZp4sTPCOANL763Dlk3RtZlK1u umkgwdTQCT8Lg24NTzxnrRcyU6ViH4t3lE31hRK+PkTzabVRwsJxayJc8gqouZhl vGJaFS1p7X2jHnx7T1xIyx1Ad4TUw0wFM7j6buQ4fBMJbyROhWdKaFAYHkznPfaR P4s/JieLYIHAp3ZybuPeN6eZmOxUZr3tSbso/PdfMdIyV00cAbFXslzAXwrNiTDq uok1hgWR+m1+ZW8YUcAVkr+n4d6p8bGOiS0RJocIqjM0aoCm7wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCWApHmE14C0hJozKW0h5mNx4EUvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j ZGVkNjM4Zi01MjM0LTQzMTMtOWQyNC1hM2Y3N2FlMDBmMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NkZWQ2MzhmLTUyMzQtNDMxMy05 ZDI0LWEzZjc3YWUwMGYwNS9jZGVkNjM4Zi01MjM0LTQzMTMtOWQyNC1hM2Y3N2Fl MDBmMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGZmgwDgQCAAIwCAMGACYC91kAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC3fDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDAdZlXX79JBWGgmSRA5XY2z5r+ V0pSYqLBhF4kPF1LdP+GouGIXzvy7LgXcUOzbYhphWMsiwUM2I6rvtTBEUFOESxM RHlx/l0U7VlctR5qd6xUu2O7wl/k+bAFf1XfA+ouniOIsNBDOrSfSZGd0EiID5on 3hCydTGzTLBGkC2edrT64nNkobHhP5Frp1Blc13fS8r0TsEjPmugTzxFBl/j9pUd Y54iOVdNuDBYYU9XsB2B+fRQodaLN6JTBGPDKZli4gYvTtbUHTzmETbxFAo7o7T4 xR1y70oj8ARJWE+VlOIyyo5ouTWGw8y8Q8Ah8hm5gjzJ8Ug5iiWQMhRKMAv0 -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:09 2026 by rpki-client