$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer File: df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer (raw, json) Hash identifier: 9HhTZrH72WqaMFrUiMHXyFPEIsHFWwsnFflXo4qDrTk= Subject key identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E826FFE162D9335E0EA002880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Jul 2026 18:09:15 +0000 Certificate not after: Wed 04 Oct 2028 20:35:35 +0000 Subordinate resources: AS: 402698 IP: 134.49.228.0/22 IP: 2606:c250::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:82:6f:fe:16:2d:93:35:e0:ea:00:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 15 18:09:15 2026 GMT Not After : Oct 4 20:35:35 2028 GMT Subject: CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:78:31:22:c3:6d:89:ba:07:72:d6:d4:b4: e1:cb:01:1f:15:3c:ef:3d:97:ac:d3:dd:c6:b4:6d: 37:ea:43:53:73:74:75:4d:5c:24:b1:28:44:5a:12: 33:38:15:e7:c6:67:a5:31:19:e7:75:47:a1:09:2c: 16:76:7a:1e:e4:1c:54:f7:40:32:c1:13:51:ef:a8: 33:ae:17:ae:28:8f:22:1f:f1:b5:5a:10:ac:45:6f: 90:fe:72:6a:fb:ad:77:08:a8:75:1b:ab:d6:c8:11: c6:b2:c5:90:76:d1:29:19:ea:a9:44:4c:c6:f6:0e: 1d:18:17:07:33:e8:d9:4f:33:7d:24:68:53:c6:21: 83:eb:ae:c1:06:a8:57:7a:78:1f:57:1e:f7:a8:cb: ab:cc:4f:0f:be:67:26:64:aa:ed:8b:f9:e3:fb:70: 05:e3:e2:d4:b5:39:a1:da:69:65:f4:42:2d:a7:ca: ff:d2:e1:a3:d2:a1:91:d0:bc:e7:1b:62:14:34:2f: f6:e9:66:eb:08:20:2e:97:64:77:f4:07:2e:49:8e: 6e:f8:fd:ed:d6:21:d8:c6:f3:0d:df:d8:66:58:93: 3d:ea:53:38:5a:a2:fc:d6:83:9d:a6:4c:19:a9:43: ee:14:11:31:16:66:7e:23:84:b4:ed:23:5b:17:1e: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 134.49.228.0/22 IPv6: 2606:c250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402698 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e5:b0:2c:93:04:74:a4:3e:36:f9:19:c6:c4:be:1c:e5:7a: 93:c2:83:22:44:12:97:6c:dd:1c:9b:dd:ea:15:c9:ad:e1:24: ed:26:e4:ad:93:a0:99:01:97:5e:21:4a:fb:6d:2d:56:86:6e: d3:66:73:f6:37:26:46:ab:e3:9b:42:1a:9d:7d:4c:bc:49:b3: b4:1f:05:37:b2:e9:2f:ee:5c:1b:d8:21:34:cd:fe:d3:14:05: 6a:a9:fa:ef:76:e4:38:ec:e5:18:06:d0:2e:8e:66:55:0f:06: 1a:59:dc:3c:1a:85:9a:50:0c:32:88:de:9b:52:29:68:85:a3: d0:1f:5f:32:ef:6f:ed:0b:93:bb:e7:93:79:a8:3f:7a:c3:d9: 42:aa:52:3c:94:de:db:1a:51:8f:d1:bc:de:f7:99:ed:f5:5b: ae:f7:59:40:b4:c9:6f:97:93:6e:e1:3f:ea:7f:60:66:b7:f6: ac:c9:b1:d4:11:8e:72:bc:46:06:b8:82:99:eb:a2:c9:88:44: fe:74:07:d9:34:8a:7a:2c:2b:b5:2e:66:8e:5f:7d:9b:22:f5: 01:21:8f:1d:00:8d:50:b7:28:af:51:9c:3b:b7:11:25:18:08: 62:22:9d:6d:4e:dd:5d:ee:21:7d:86:7c:62:eb:59:1c:f9:39: 7f:b6:6d:13 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE6Cb/4WLZM14OoAKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcxNTE4MDkxNVoXDTI4MTAwNDIwMzUzNVowLzEtMCsGA1UEAxMk ZGY2YmMzYjItZTYyMS00MjcyLWI2MDQtMTBlZDVkYmI0ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTp4MSLDbYm6B3LW1LThywEfFTzvPZes093G tG036kNTc3R1TVwksShEWhIzOBXnxmelMRnndUehCSwWdnoe5BxU90AywRNR76gz rheuKI8iH/G1WhCsRW+Q/nJq+613CKh1G6vWyBHGssWQdtEpGeqpREzG9g4dGBcH M+jZTzN9JGhTxiGD667BBqhXengfVx73qMurzE8PvmcmZKrti/nj+3AF4+LUtTmh 2mll9EItp8r/0uGj0qGR0LznG2IUNC/26WbrCCAul2R39AcuSY5u+P3t1iHYxvMN 39hmWJM96lM4WqL81oOdpkwZqUPuFBExFmZ+I4S07SNbFx6WQwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFB287s9n82l1YIIWi0b88YuOLwmnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ZjZiYzNiMi1lNjIxLTQyNzItYjYwNC0xMGVkNWRiYjRlYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RmNmJjM2IyLWU2MjEtNDI3Mi1i NjA0LTEwZWQ1ZGJiNGVjMS9kZjZiYzNiMi1lNjIxLTQyNzItYjYwNC0xMGVkNWRi YjRlYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKGMeQwDQQCAAIwBwMFACYGwlAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiUKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEHlsCyTBHSkPjb5GcbEvhzlepPC gyJEEpds3Ryb3eoVya3hJO0m5K2ToJkBl14hSvttLVaGbtNmc/Y3Jkar45tCGp19 TLxJs7QfBTey6S/uXBvYITTN/tMUBWqp+u925Djs5RgG0C6OZlUPBhpZ3DwahZpQ DDKI3ptSKWiFo9AfXzLvb+0Lk7vnk3moP3rD2UKqUjyU3tsaUY/RvN73me31W673 WUC0yW+Xk27hP+p/YGa39qzJsdQRjnK8Rga4gpnrosmIRP50B9k0inosK7UuZo5f fZsi9QEhjx0AjVC3KK9RnDu3ESUYCGIinW1O3V3uIX2GfGLrWRz5OX+2bRM= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:35 2026 by rpki-client