$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5578dd2-9eb6-4669-a9f0-d17c0a75dd58.cer File: e5578dd2-9eb6-4669-a9f0-d17c0a75dd58.cer (raw, json) Hash identifier: qdGOP17JHgv31Rfi2EkOtRp1lqnmVh6773OGCOrhyKk= Subject key identifier: F4:23:D2:BE:7B:14:66:EF:42:00:51:23:30:DB:23:4A:13:23:7A:8D Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E3636D27A07ABBBEE203A3100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5578dd2-9eb6-4669-a9f0-d17c0a75dd58/e5578dd2-9eb6-4669-a9f0-d17c0a75dd58.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5578dd2-9eb6-4669-a9f0-d17c0a75dd58/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Jun 2026 10:52:37 +0000 Certificate not after: Wed 20 Sep 2028 10:52:37 +0000 Subordinate resources: AS: 398170 IP: 167.94.116.0/23 IP: 2604:2a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:36:d2:7a:07:ab:bb:ee:20:3a:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 18 10:52:37 2026 GMT Not After : Sep 20 10:52:37 2028 GMT Subject: CN=e5578dd2-9eb6-4669-a9f0-d17c0a75dd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cf:41:5a:5a:00:05:65:b8:f3:de:c0:e0:82: d5:6e:84:31:d1:eb:87:1d:c4:c5:09:fc:cf:8c:80: 00:68:46:ef:fd:9d:7c:fe:78:8a:d5:9d:fd:57:a8: 56:0e:98:dd:a6:d8:c5:d0:84:1e:90:f6:1d:b8:7f: e0:cb:a5:16:d5:f8:1b:5d:f3:74:dc:d6:b3:04:56: 54:46:4a:01:35:15:ae:ef:6b:ba:31:32:c6:cf:22: 81:52:3e:a3:4e:a5:6c:74:98:ef:67:38:35:b3:f3: 62:71:9e:31:6b:38:c2:79:b0:bd:8b:0c:cb:f1:da: 7b:a8:cc:12:b2:bd:26:58:07:12:da:26:e2:8e:23: 73:8f:6b:7d:fe:81:8d:d9:b2:ed:00:dd:fa:1f:75: 73:b1:4a:a1:21:26:3d:9e:89:43:7f:47:92:5f:d3: 27:dc:b4:ac:e1:d2:b5:6e:3c:80:22:9f:20:c0:77: 08:90:39:bb:9b:bb:a1:f5:86:d0:8a:ba:12:c2:6e: 57:8e:a8:82:d1:63:7e:15:98:b4:b8:6c:6f:77:74: 11:60:e3:fa:a8:ce:71:37:26:4a:dd:a1:17:94:9e: d7:e8:ca:96:85:bf:94:54:e7:34:65:5d:46:11:d7: 2f:15:5e:55:c1:56:43:72:27:c4:85:7d:9e:88:04: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:23:D2:BE:7B:14:66:EF:42:00:51:23:30:DB:23:4A:13:23:7A:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5578dd2-9eb6-4669-a9f0-d17c0a75dd58/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5578dd2-9eb6-4669-a9f0-d17c0a75dd58/e5578dd2-9eb6-4669-a9f0-d17c0a75dd58.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 167.94.116.0/23 IPv6: 2604:2a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398170 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:40:f6:a4:fb:be:4b:8e:10:f4:57:23:37:ef:eb:3a:f2:cb: 36:21:db:e1:f8:08:8e:94:53:ef:a5:a4:77:77:fc:e9:4c:f1: ae:ff:f8:27:c6:fa:f8:90:5b:9e:3d:df:12:f2:44:02:e8:ea: b4:f2:c1:23:de:d8:99:c0:e0:b3:4e:b4:28:45:75:77:50:ff: e3:74:62:26:ee:fe:57:0b:a5:6a:ee:6e:58:8d:81:e5:c0:ea: f4:d3:fc:41:ff:06:7e:ab:d5:fa:7c:e4:47:ba:a5:ec:d0:13: 28:24:bf:a0:e3:29:af:2b:97:d8:22:3e:de:c2:1f:c6:93:cd: 00:3c:a7:c9:10:89:52:8c:26:d4:a8:42:30:9d:f3:d6:ba:98: 17:0a:aa:21:f9:b1:07:f6:ee:f0:56:c8:cd:01:63:c6:c7:8f: 95:1a:67:ca:d9:af:d0:54:a0:63:fc:90:da:87:78:c0:b3:db: 2f:7c:ad:bd:23:cd:c4:6f:8d:3a:d7:8d:1a:f8:7b:66:1c:3d: fb:2f:2a:bf:ea:88:00:bf:2a:82:2e:40:ac:31:35:21:a6:19: 87:df:f2:84:28:2e:18:cf:5f:cb:2f:1c:ee:54:66:68:33:63: f3:6c:83:55:7b:ac:06:96:7e:23:5d:9b:33:13:96:f3:7b:a3: d5:c9:cf:26 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE42NtJ6B6u77iA6MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxODEwNTIzN1oXDTI4MDkyMDEwNTIzN1owLzEtMCsGA1UEAxMk ZTU1NzhkZDItOWViNi00NjY5LWE5ZjAtZDE3YzBhNzVkZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s9BWloABWW4897A4ILVboQx0euHHcTFCfzP jIAAaEbv/Z18/niK1Z39V6hWDpjdptjF0IQekPYduH/gy6UW1fgbXfN03NazBFZU RkoBNRWu72u6MTLGzyKBUj6jTqVsdJjvZzg1s/NicZ4xazjCebC9iwzL8dp7qMwS sr0mWAcS2ibijiNzj2t9/oGN2bLtAN36H3VzsUqhISY9nolDf0eSX9Mn3LSs4dK1 bjyAIp8gwHcIkDm7m7uh9YbQiroSwm5XjqiC0WN+FZi0uGxvd3QRYOP6qM5xNyZK 3aEXlJ7X6MqWhb+UVOc0ZV1GEdcvFV5VwVZDcifEhX2eiAQoSQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPQj0r57FGbvQgBRIzDbI0oTI3qNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l NTU3OGRkMi05ZWI2LTQ2NjktYTlmMC1kMTdjMGE3NWRkNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U1NTc4ZGQyLTllYjYtNDY2OS1h OWYwLWQxN2MwYTc1ZGQ1OC9lNTU3OGRkMi05ZWI2LTQ2NjktYTlmMC1kMTdjMGE3 NWRkNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAGnXnQwDQQCAAIwBwMFACYEAqAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhNaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKxA9qT7vkuOEPRXIzfv6zryyzYh 2+H4CI6UU++lpHd3/OlM8a7/+CfG+viQW5493xLyRALo6rTywSPe2JnA4LNOtChF dXdQ/+N0Yibu/lcLpWrubliNgeXA6vTT/EH/Bn6r1fp85Ee6pezQEygkv6DjKa8r l9giPt7CH8aTzQA8p8kQiVKMJtSoQjCd89a6mBcKqiH5sQf27vBWyM0BY8bHj5Ua Z8rZr9BUoGP8kNqHeMCz2y98rb0jzcRvjTrXjRr4e2YcPfsvKr/qiAC/KoIuQKwx NSGmGYff8oQoLhjPX8svHO5UZmgzY/Nsg1V7rAaWfiNdmzMTlvN7o9XJzyY= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:44 2026 by rpki-client