$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer File: df50907a-5dd1-4ef7-a109-30ae99771030.cer (raw, json) Hash identifier: O7fvJCCITF9T05sdltMFDP0IFve1KEelAtA7YF7Yvr4= Subject key identifier: F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5E361F0A60EB098CCFBCD0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 18:43:33 +0000 Certificate not after: Wed 04 Oct 2028 18:43:33 +0000 Subordinate resources: AS: 394857 IP: 199.202.154.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:36:1f:0a:60:eb:09:8c:cf:bc:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 18:43:33 2026 GMT Not After : Oct 4 18:43:33 2028 GMT Subject: CN=df50907a-5dd1-4ef7-a109-30ae99771030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:dc:03:b0:21:11:96:04:3a:d1:97:40:9f: 4b:63:0c:24:63:0c:45:07:f4:f5:25:b7:dc:59:77: 82:14:20:05:f7:9a:34:0a:91:e5:5e:d8:1c:72:f3: 8b:fd:c5:4c:cf:d1:7e:21:51:88:58:b0:5f:98:9f: 84:e6:f5:b0:c5:b2:74:25:27:41:18:de:8b:a7:b5: 87:c7:b2:f2:ae:87:87:c8:a2:2d:c8:59:f8:35:48: 52:14:0d:c3:37:97:86:2c:fe:90:57:23:d8:60:d4: 6f:85:f3:74:16:07:aa:d2:a1:05:4c:3d:43:68:97: 21:13:a5:7e:b1:05:f0:14:af:6c:6c:66:56:7c:03: 0c:bb:da:be:d4:8a:fd:77:e8:5a:54:c1:53:5c:2d: a9:1e:2a:77:9a:9a:19:9f:62:5f:37:ff:e1:60:0c: aa:20:b8:5f:7f:93:19:f2:b9:43:19:b2:c1:7d:9d: 74:db:a8:46:d2:23:9c:8c:45:4f:35:46:fe:05:7d: dd:d0:e0:6f:a5:e7:9c:e7:ee:34:1f:da:29:98:70: ef:47:6b:d7:f1:21:be:ad:64:3e:ae:3c:aa:d3:39: bb:fc:5c:47:83:35:1e:63:d8:52:29:dc:c0:a7:c7: 40:16:93:aa:75:e6:ad:b6:2a:73:b3:f3:f1:d7:06: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.202.154.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394857 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:62:54:ef:1d:b2:3f:4b:19:c0:5e:3f:ad:6e:59:8f:d8:1a: 97:fe:21:2c:9b:18:01:34:e3:a2:6f:09:ad:d2:ce:62:9a:33: c0:80:6b:65:f3:08:a0:54:b0:80:24:54:36:74:1f:62:45:33: 6a:bc:a8:91:1c:5e:e5:1e:93:cf:94:a2:bb:c6:db:92:51:6b: 92:e1:6d:78:22:8b:d4:f2:4a:2c:59:fd:34:59:b0:c0:68:70: a3:ad:36:f0:48:07:c5:57:72:97:eb:6d:38:84:2c:00:83:c0: 27:fe:03:3b:c1:3e:27:d0:9b:1c:56:4d:a3:31:9b:7b:db:96: 20:c5:07:5b:c4:70:f8:fa:6f:30:23:d5:8d:37:34:ea:d8:26: c8:52:62:86:bc:ae:f2:d7:c8:58:ad:e6:0e:f1:c0:99:1f:c9: ff:59:48:24:c4:27:c0:4f:dc:92:a4:f1:de:41:6d:8a:52:27: 38:44:06:8c:06:61:ec:1a:69:c1:63:6c:92:bd:7f:57:bb:3b: 23:84:ef:2a:09:ba:17:00:84:86:7a:33:b9:c4:18:8e:f2:28: 13:db:57:91:3b:94:31:a5:26:fc:a9:da:44:87:99:4e:db:43: ef:06:39:ff:93:07:79:46:fd:6a:f9:ce:94:f1:90:03:78:48: fc:a7:70:48 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5eNh8KYOsJjM+80MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjE4NDMzM1oXDTI4MTAwNDE4NDMzM1owLzEtMCsGA1UEAxMk ZGY1MDkwN2EtNWRkMS00ZWY3LWExMDktMzBhZTk5NzcxMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0rcA7AhEZYEOtGXQJ9LYwwkYwxFB/T1Jbfc WXeCFCAF95o0CpHlXtgccvOL/cVMz9F+IVGIWLBfmJ+E5vWwxbJ0JSdBGN6Lp7WH x7LyroeHyKItyFn4NUhSFA3DN5eGLP6QVyPYYNRvhfN0Fgeq0qEFTD1DaJchE6V+ sQXwFK9sbGZWfAMMu9q+1Ir9d+haVMFTXC2pHip3mpoZn2JfN//hYAyqILhff5MZ 8rlDGbLBfZ1026hG0iOcjEVPNUb+BX3d0OBvpeec5+40H9opmHDvR2vX8SG+rWQ+ rjyq0zm7/FxHgzUeY9hSKdzAp8dAFpOqdeattipzs/Px1wa7ywIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFPmopjWxcmj870V/d8c+OO63EYVtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ZjUwOTA3YS01ZGQxLTRlZjctYTEwOS0zMGFlOTk3NzEwMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RmNTA5MDdhLTVkZDEtNGVmNy1h MTA5LTMwYWU5OTc3MTAzMC9kZjUwOTA3YS01ZGQxLTRlZjctYTEwOS0zMGFlOTk3 NzEwMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHypowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgZpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABJiVO8dsj9LGcBeP61uWY/YGpf+ISybGAE046JvCa3SzmKa M8CAa2XzCKBUsIAkVDZ0H2JFM2q8qJEcXuUek8+UorvG25JRa5LhbXgii9TySixZ /TRZsMBocKOtNvBIB8VXcpfrbTiELACDwCf+AzvBPifQmxxWTaMxm3vbliDFB1vE cPj6bzAj1Y03NOrYJshSYoa8rvLXyFit5g7xwJkfyf9ZSCTEJ8BP3JKk8d5BbYpS JzhEBowGYewaacFjbJK9f1e7OyOE7yoJuhcAhIZ6M7nEGI7yKBPbV5E7lDGlJvyp 2kSHmU7bQ+8GOf+TB3lG/Wr5zpTxkAN4SPyncEg= -----END CERTIFICATE-----Generated at Mon Jul 6 19:04:07 2026 by rpki-client