$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer File: f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer (raw, json) Hash identifier: s0Jq/WbA/79xYt8MXYrshtKByKIIx23hS9bgH9+uhfk= Subject key identifier: 37:71:46:B7:1B:96:9B:81:E7:E2:92:EE:46:4C:C1:CF:E8:12:9E:36 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6906DCFFA9484BF8CFF8E900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 15:42:13 +0000 Certificate not after: Sun 08 Oct 2028 15:42:13 +0000 Subordinate resources: IP: 165.110.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:06:dc:ff:a9:48:4b:f8:cf:f8:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 6 15:42:13 2026 GMT Not After : Oct 8 15:42:13 2028 GMT Subject: CN=f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:86:41:a6:94:b7:69:76:0f:f8:6c:4a:bd: f4:d7:c0:a1:2f:b2:df:f7:83:47:6a:a6:c9:15:48: 68:1b:9e:cc:2a:ff:d2:63:04:9d:c4:df:af:8c:45: b1:bc:59:6b:8d:4d:48:c3:9c:dc:e4:1f:89:19:8f: ee:5e:ed:5f:13:39:b3:30:59:49:29:9e:5c:1a:12: 9e:2f:5d:94:ac:94:a3:a0:d9:02:97:9c:95:e6:61: f6:c4:4c:76:fc:31:f4:ed:05:16:b5:a8:5d:3f:eb: 26:b1:ee:0b:7f:f2:2e:91:de:07:bf:3a:ce:a2:c6: 8e:e1:1c:49:09:f1:20:8c:ae:3a:fa:46:37:d3:25: 84:2f:31:c3:31:8a:0c:66:34:cf:f1:b7:b0:22:a3: 23:b9:3c:d7:14:8e:f9:5a:be:08:03:c3:3e:83:93: 36:5f:4b:8c:6a:ef:22:2c:fc:12:0b:63:7c:2a:be: 21:8f:e6:99:5d:66:56:c1:7c:cd:aa:5d:22:e3:b3: f4:d8:33:fe:71:04:d1:60:0a:6b:5b:8a:2e:de:c4: d9:4b:e1:73:6a:44:16:07:f9:e0:4f:c1:3e:fe:01: ff:86:e8:43:8d:94:98:97:22:e0:74:50:70:d3:74: 6f:b8:c4:5c:f7:d2:b3:4f:a5:67:50:63:69:c4:08: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:71:46:B7:1B:96:9B:81:E7:E2:92:EE:46:4C:C1:CF:E8:12:9E:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 165.110.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:75:7e:16:24:a5:64:c3:de:60:1f:31:6f:b7:ed:dd:b6:8e: 9a:03:ab:cb:17:3d:c9:0f:1e:b8:61:4d:95:50:8f:b5:29:16: f5:71:78:71:ed:28:32:60:c5:73:50:52:e4:65:0c:57:a2:1c: f2:dc:26:43:cd:de:93:25:d6:46:bf:d0:28:df:a3:29:9d:8a: d6:08:ad:2b:5a:26:b9:40:e4:a0:32:d7:c2:c3:2b:5c:3a:e7: 50:4a:84:f1:d3:45:5e:e4:c1:ce:08:b5:8a:7a:25:64:b5:db: 43:18:d4:53:21:97:f0:e2:2f:f1:2f:97:d9:30:50:7f:a7:a3: 64:1d:84:57:9c:d0:c0:cd:ad:4d:62:a1:58:fb:8f:1d:db:c6: 6b:81:68:61:ad:b9:f1:39:ee:d8:65:02:7b:84:90:3d:56:c1: 4a:6c:87:74:a4:eb:1f:af:b5:e4:a0:99:6a:cb:e1:88:d4:32: e3:4d:fb:6b:66:f5:19:40:ba:c5:fb:9d:55:4c:2b:4e:7d:5b: df:a5:a5:96:8b:6a:9a:fb:eb:ec:2f:05:3e:1f:e8:7d:40:db: d1:f2:2c:0c:96:85:96:7f:89:4e:85:17:70:66:56:68:02:eb: c0:ec:7f:17:7a:4b:a9:9e:a1:8f:7f:cb:73:17:31:ec:93:13: 05:31:ad:ee -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE5pBtz/qUhL+M/46QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNjE1NDIxM1oXDTI4MTAwODE1NDIxM1owLzEtMCsGA1UEAxMk ZjJhM2NkODQtNDdiNy00YTdkLWIxNmQtMDFhOGY0Y2M3MDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTaGQaaUt2l2D/hsSr3018ChL7Lf94NHaqbJ FUhoG57MKv/SYwSdxN+vjEWxvFlrjU1Iw5zc5B+JGY/uXu1fEzmzMFlJKZ5cGhKe L12UrJSjoNkCl5yV5mH2xEx2/DH07QUWtahdP+smse4Lf/Iukd4HvzrOosaO4RxJ CfEgjK46+kY30yWELzHDMYoMZjTP8bewIqMjuTzXFI75Wr4IA8M+g5M2X0uMau8i LPwSC2N8Kr4hj+aZXWZWwXzNql0i47P02DP+cQTRYAprW4ou3sTZS+FzakQWB/ng T8E+/gH/huhDjZSYlyLgdFBw03RvuMRc99KzT6VnUGNpxAiwxQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFDdxRrcblpuB5+KS7kZMwc/oEp42MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m MmEzY2Q4NC00N2I3LTRhN2QtYjE2ZC0wMWE4ZjRjYzcwMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2YyYTNjZDg0LTQ3YjctNGE3ZC1i MTZkLTAxYThmNGNjNzAwNC9mMmEzY2Q4NC00N2I3LTRhN2QtYjE2ZC0wMWE4ZjRj YzcwMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwClbjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbdX4WJKVkw95gHzFvt+3d to6aA6vLFz3JDx64YU2VUI+1KRb1cXhx7SgyYMVzUFLkZQxXohzy3CZDzd6TJdZG v9Ao36MpnYrWCK0rWia5QOSgMtfCwytcOudQSoTx00Ve5MHOCLWKeiVktdtDGNRT IZfw4i/xL5fZMFB/p6NkHYRXnNDAza1NYqFY+48d28ZrgWhhrbnxOe7YZQJ7hJA9 VsFKbId0pOsfr7XkoJlqy+GI1DLjTftrZvUZQLrF+51VTCtOfVvfpaWWi2qa++vs LwU+H+h9QNvR8iwMloWWf4lOhRdwZlZoAuvA7H8XekupnqGPf8tzFzHskxMFMa3u -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:35 2026 by rpki-client