$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59.cer File: d6619d2f-459f-4901-8dc8-d9fa81f76e59.cer (raw, json) Hash identifier: DArC95q2+W/luPOV2eLIJtb9z/EvCP++XsA1CGl+F0U= Subject key identifier: C3:21:56:02:77:A0:F4:B8:DC:2C:23:04:A8:6A:DF:BC:F5:9E:C9:68 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6E922E54383A644FDDAD1D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/d6619d2f-459f-4901-8dc8-d9fa81f76e59.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 15:21:58 +0000 Certificate not after: Tue 10 Oct 2028 15:21:58 +0000 Subordinate resources: AS: 33069 IP: 74.112.240.0/22 IP: 199.15.120.0/22 IP: 2604:3a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:92:2e:54:38:3a:64:4f:dd:ad:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 8 15:21:58 2026 GMT Not After : Oct 10 15:21:58 2028 GMT Subject: CN=d6619d2f-459f-4901-8dc8-d9fa81f76e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:38:ea:4c:5e:89:44:ce:71:76:c5:ae:f2: e6:0e:91:66:7b:39:29:17:ae:fc:d8:2c:a0:9e:84: cb:f7:a3:4f:ec:ed:2b:40:d3:4e:95:8c:36:20:06: 43:d8:04:2a:9b:2a:4b:29:2f:8a:0e:f2:61:e9:c1: 33:17:e0:36:33:a5:67:0f:5f:12:d8:76:e2:8c:16: 4a:52:95:4f:d6:f6:e1:4a:32:ff:51:04:49:10:17: a2:ff:f4:25:e7:5e:de:b3:44:ee:6a:5d:2a:d6:b7: 6c:67:cd:c1:d7:0c:c1:fc:b9:bb:8a:10:82:6c:58: 3f:55:99:c9:fe:0f:8c:18:ab:fc:c5:8c:c0:38:cb: fe:d5:21:df:28:9f:d0:74:3e:d5:38:f9:14:db:f8: a7:6c:24:ef:2f:c1:79:21:a5:2c:3c:52:41:71:81: 98:ca:dc:70:71:a5:08:d8:f8:b3:a8:94:84:a0:db: 2b:42:21:34:f5:62:d0:f4:b6:bd:6b:77:d6:b1:fe: 6f:da:cf:ab:82:a6:a4:63:49:88:10:e9:89:75:ee: 4e:a6:0a:be:3f:be:27:71:96:21:9d:df:9c:76:c2: ea:c4:82:64:d1:1f:8b:0d:6b:76:69:a3:d1:0e:64: a7:7c:f7:3f:6e:d2:f3:f4:c9:f7:5d:07:c8:11:ee: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:21:56:02:77:A0:F4:B8:DC:2C:23:04:A8:6A:DF:BC:F5:9E:C9:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d6619d2f-459f-4901-8dc8-d9fa81f76e59/d6619d2f-459f-4901-8dc8-d9fa81f76e59.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 74.112.240.0/22 199.15.120.0/22 IPv6: 2604:3a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33069 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:da:4c:c4:7a:62:7e:a4:e1:fd:2d:e9:fa:e6:a0:46:7a:c9: ee:ac:f0:a9:50:74:87:23:2c:1b:60:85:04:58:08:f4:8a:fd: 7e:23:d9:7c:dc:e3:54:02:aa:5d:19:05:f7:a8:d5:07:8a:24: 5a:4b:ac:04:e0:fb:f1:da:d8:2e:4a:7f:3e:0e:2e:66:4a:3f: af:58:1b:05:8b:f9:aa:e6:bb:82:a9:fe:8b:86:92:7a:f7:25: d9:68:a4:15:d0:0f:e1:5c:86:1a:a7:f8:72:62:88:0f:79:e9: 8e:d1:d6:15:9d:08:cc:03:1f:92:7a:8a:03:ad:56:82:66:ab: d2:c9:d0:e5:7b:ac:43:ee:f3:5a:90:0d:3c:bd:48:15:26:f6: a2:0d:fd:50:2b:bb:3b:75:62:52:7d:30:1e:e8:94:38:5f:da: 67:51:17:a2:30:2d:cc:42:8d:4e:a4:9a:fa:32:3b:67:ca:66: 2f:da:c9:67:ec:9b:d5:6a:8c:46:ca:70:a3:33:55:75:a3:40: 89:d0:bf:66:a7:44:4c:cc:e5:94:c0:fd:81:12:fd:c0:63:50: e4:bf:0e:2e:de:a4:68:3b:5c:6c:fc:d1:16:87:68:6f:ba:df: 01:9c:f6:ac:32:a4:39:ee:b7:13:74:40:6e:e2:e5:a2:b6:ae: 64:7c:08:9e -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5uki5UODpkT92tHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwODE1MjE1OFoXDTI4MTAxMDE1MjE1OFowLzEtMCsGA1UEAxMk ZDY2MTlkMmYtNDU5Zi00OTAxLThkYzgtZDlmYTgxZjc2ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrA46kxeiUTOcXbFrvLmDpFmezkpF6782Cyg noTL96NP7O0rQNNOlYw2IAZD2AQqmypLKS+KDvJh6cEzF+A2M6VnD18S2HbijBZK UpVP1vbhSjL/UQRJEBei//Ql517es0Tual0q1rdsZ83B1wzB/Lm7ihCCbFg/VZnJ /g+MGKv8xYzAOMv+1SHfKJ/QdD7VOPkU2/inbCTvL8F5IaUsPFJBcYGYytxwcaUI 2PizqJSEoNsrQiE09WLQ9La9a3fWsf5v2s+rgqakY0mIEOmJde5Opgq+P74ncZYh nd+cdsLqxIJk0R+LDWt2aaPRDmSnfPc/btLz9Mn3XQfIEe5L+wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMMhVgJ3oPS43CwjBKhq37z1nsloMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k NjYxOWQyZi00NTlmLTQ5MDEtOGRjOC1kOWZhODFmNzZlNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Q2NjE5ZDJmLTQ1OWYtNDkwMS04 ZGM4LWQ5ZmE4MWY3NmU1OS9kNjYxOWQyZi00NTlmLTQ5MDEtOGRjOC1kOWZhODFm NzZlNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJKcPADBALHD3gwDQQCAAIwBwMFACYEOgAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAIEtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJHaTMR6Yn6k4f0t6frm oEZ6ye6s8KlQdIcjLBtghQRYCPSK/X4j2Xzc41QCql0ZBfeo1QeKJFpLrATg+/Ha 2C5Kfz4OLmZKP69YGwWL+armu4Kp/ouGknr3JdlopBXQD+Fchhqn+HJiiA956Y7R 1hWdCMwDH5J6igOtVoJmq9LJ0OV7rEPu81qQDTy9SBUm9qIN/VAruzt1YlJ9MB7o lDhf2mdRF6IwLcxCjU6kmvoyO2fKZi/ayWfsm9VqjEbKcKMzVXWjQInQv2anREzM 5ZTA/YES/cBjUOS/Di7epGg7XGz80RaHaG+63wGc9qwypDnutxN0QG7i5aK2rmR8 CJ4= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:46 2026 by rpki-client