$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf.cer File: f70f0f89-991a-443d-8967-db60c9e20dcf.cer (raw, json) Hash identifier: Z7o2ws+5t4YWtXUvrmGPXYzIM8u1/y8ZeDL5myVsiGs= Subject key identifier: FA:37:86:18:99:0E:B4:ED:05:F6:C0:10:36:26:7D:A2:40:3D:0E:96 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6F15B7B3474FD74C14D9C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jul 2026 19:47:00 +0000 Certificate not after: Tue 10 Oct 2028 19:47:00 +0000 Subordinate resources: AS: 25841 IP: 134.195.71.0/24 IP: 2607:6600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:15:b7:b3:47:4f:d7:4c:14:d9:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 8 19:47:00 2026 GMT Not After : Oct 10 19:47:00 2028 GMT Subject: CN=f70f0f89-991a-443d-8967-db60c9e20dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8f:e0:f7:82:03:97:d5:fe:94:c9:a7:2c:48: b6:47:b6:14:53:55:8f:81:c1:f8:24:a4:8e:c9:3d: 08:0c:b0:48:76:2c:98:50:54:c0:e6:c8:66:7f:e8: ce:5b:df:b7:e4:d4:c7:20:b7:37:4d:3b:2f:55:b7: 61:64:ec:b1:a6:31:6b:b7:93:39:1c:85:13:c6:83: e5:75:62:4f:fb:1e:c8:c9:39:42:db:46:e3:d7:05: eb:6f:ef:ff:47:d9:04:7f:a4:48:b4:e8:76:79:95: 1a:fe:ba:18:0b:73:53:ac:66:6f:9f:ee:ad:c1:ea: a5:b6:2e:7c:ba:eb:99:49:11:d5:0e:f5:11:c4:24: 1f:4b:c1:45:90:70:a2:29:50:a0:2e:f5:2b:f8:29: 8c:9b:9d:dc:fc:91:92:6e:f5:7d:52:1f:2a:f0:19: c1:2e:1d:18:0d:d3:b9:4b:56:87:d3:55:fd:81:2b: 9a:98:80:6b:04:39:f7:cc:03:57:65:84:03:f6:45: e0:08:04:6f:fd:0d:fc:d4:2f:c6:8d:ca:e4:93:f7: 26:5d:72:73:68:04:c4:e7:e6:81:2e:3a:c7:f1:b3: 17:b9:22:a1:49:6e:53:5a:ce:ba:e5:79:d4:d3:20: 49:e4:6f:45:da:b1:17:62:e8:41:1b:b0:d4:78:ce: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:37:86:18:99:0E:B4:ED:05:F6:C0:10:36:26:7D:A2:40:3D:0E:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f70f0f89-991a-443d-8967-db60c9e20dcf/f70f0f89-991a-443d-8967-db60c9e20dcf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 134.195.71.0/24 IPv6: 2607:6600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:aa:3d:6e:25:6d:9d:8e:97:78:5a:27:9d:83:e9:cf:a4:94: 20:1c:2f:79:38:71:33:7b:7a:0d:26:f4:f9:4a:e0:c6:65:e2: 42:d4:73:cd:24:17:85:95:b1:4e:5a:f5:ac:f1:80:a1:a9:5b: 81:22:c9:26:73:8f:ca:4e:18:fe:30:ff:1f:eb:1e:ed:fa:33: 12:0d:66:0a:53:ca:46:d2:43:bd:39:89:67:16:f1:62:fe:1a: fb:42:5d:8d:0f:b7:91:b0:dd:bf:a2:87:b6:2a:ce:3b:45:d3: 1f:d1:04:68:4c:f6:41:53:53:b4:dd:ca:da:2b:cd:d3:32:11: 9f:6e:5d:40:5c:b0:45:a4:87:c1:8e:60:9a:4b:37:3e:5c:d9: 05:ed:b8:3f:be:95:7b:3d:11:e7:cb:34:81:85:99:15:98:f9: 91:0c:ad:a5:b2:eb:e4:35:ea:81:1a:da:29:c7:59:62:50:16: 59:e9:39:c1:6c:86:50:34:72:77:b7:cf:72:1f:97:b7:78:da: 62:f4:02:bc:a6:db:fa:92:dd:1e:73:0a:98:28:14:db:f3:5e: 4f:04:62:66:51:a9:d7:fd:f9:69:f9:e9:78:c9:42:ae:88:9a: ff:e9:12:7c:da:0e:b5:c6:fe:df:0e:24:bc:d8:07:b1:84:c1: 12:fd:af:80 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE5vFbezR0/XTBTZyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwODE5NDcwMFoXDTI4MTAxMDE5NDcwMFowLzEtMCsGA1UEAxMk ZjcwZjBmODktOTkxYS00NDNkLTg5NjctZGI2MGM5ZTIwZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y/g94IDl9X+lMmnLEi2R7YUU1WPgcH4JKSO yT0IDLBIdiyYUFTA5shmf+jOW9+35NTHILc3TTsvVbdhZOyxpjFrt5M5HIUTxoPl dWJP+x7IyTlC20bj1wXrb+//R9kEf6RItOh2eZUa/roYC3NTrGZvn+6tweqlti58 uuuZSRHVDvURxCQfS8FFkHCiKVCgLvUr+CmMm53c/JGSbvV9Uh8q8BnBLh0YDdO5 S1aH01X9gSuamIBrBDn3zANXZYQD9kXgCARv/Q381C/Gjcrkk/cmXXJzaATE5+aB LjrH8bMXuSKhSW5TWs665XnU0yBJ5G9F2rEXYuhBG7DUeM5F2wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFPo3hhiZDrTtBfbAEDYmfaJAPQ6WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m NzBmMGY4OS05OTFhLTQ0M2QtODk2Ny1kYjYwYzllMjBkY2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y3MGYwZjg5LTk5MWEtNDQzZC04 OTY3LWRiNjBjOWUyMGRjZi9mNzBmMGY4OS05OTFhLTQ0M2QtODk2Ny1kYjYwYzll MjBkY2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBACGw0cwDQQCAAIwBwMFACYHZgAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZPEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAF6o9biVtnY6XeFonnYPpz6SUIBwv eThxM3t6DSb0+UrgxmXiQtRzzSQXhZWxTlr1rPGAoalbgSLJJnOPyk4Y/jD/H+se 7fozEg1mClPKRtJDvTmJZxbxYv4a+0JdjQ+3kbDdv6KHtirOO0XTH9EEaEz2QVNT tN3K2ivN0zIRn25dQFywRaSHwY5gmks3PlzZBe24P76Vez0R58s0gYWZFZj5kQyt pbLr5DXqgRraKcdZYlAWWek5wWyGUDRyd7fPch+Xt3jaYvQCvKbb+pLdHnMKmCgU 2/NeTwRiZlGp1/35afnpeMlCroia/+kSfNoOtcb+3w4kvNgHsYTBEv2vgA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:02 2026 by rpki-client