$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025.cer File: f90e28e6-da06-4a5c-8fb6-c3d235623025.cer (raw, json) Hash identifier: oLC4fXlusAGX29ZYSPZgtiQYfzZcsW4XB0nxHf3hHzA= Subject key identifier: 27:05:D6:51:87:0F:1C:B0:7F:B5:1B:D1:A5:2E:F3:F1:F6:95:56:99 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6C00377753DE21E934332330 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/f90e28e6-da06-4a5c-8fb6-c3d235623025.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 17:16:15 +0000 Certificate not after: Mon 09 Oct 2028 17:16:15 +0000 Subordinate resources: AS: 12001 IP: 192.126.80.0/21 IP: 192.126.92.0/22 IP: 2605:d740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:00:37:77:53:de:21:e9:34:33:23:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 17:16:15 2026 GMT Not After : Oct 9 17:16:15 2028 GMT Subject: CN=f90e28e6-da06-4a5c-8fb6-c3d235623025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:5b:41:92:f6:c9:a1:f6:38:ce:c6:e4:54: bc:42:c5:91:6e:49:67:93:b9:2c:0b:a9:ac:99:c1: 18:15:32:56:29:4e:81:fa:3d:1f:97:c3:ea:80:04: 4b:46:95:07:a1:ef:2e:48:ab:02:b1:21:28:67:85: 92:a8:10:ec:ae:85:0f:cd:eb:a5:56:0d:ff:09:e9: ce:69:e9:1a:26:bb:53:86:25:31:70:cb:43:5a:c5: 1a:07:06:0b:e1:7a:c7:a2:e8:74:a1:57:bf:7e:01: c9:97:fe:e6:54:8e:95:97:9b:7e:03:ce:72:85:5d: 25:26:5e:40:56:e8:8c:76:d8:a5:dc:80:9f:6e:4d: ae:f5:85:5f:d3:f4:f4:85:c8:53:79:d9:a4:15:ac: 12:d4:11:e1:dd:67:09:28:23:c3:1b:eb:a4:0a:74: ee:92:4b:b1:40:fb:b4:e1:2c:6b:7c:45:02:e5:03: 37:22:36:66:09:ae:9e:b9:a5:f6:b3:b9:11:ee:d3: 46:89:ee:d0:68:49:df:4c:08:46:fe:6a:ec:80:07: f6:15:38:1f:7e:f6:a6:4e:7a:f0:31:ea:ae:0a:a0: 19:32:a5:2e:3c:1d:f0:21:52:49:e4:1f:bf:7c:1f: c8:86:99:12:49:34:e4:67:0b:3d:45:71:87:02:1d: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:05:D6:51:87:0F:1C:B0:7F:B5:1B:D1:A5:2E:F3:F1:F6:95:56:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f90e28e6-da06-4a5c-8fb6-c3d235623025/f90e28e6-da06-4a5c-8fb6-c3d235623025.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.126.80.0/21 192.126.92.0/22 IPv6: 2605:d740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12001 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:21:1e:9d:19:df:26:d8:a3:16:a7:68:89:bd:d1:81:91:03: d5:c1:6e:41:74:05:87:e8:ce:ca:78:90:88:32:b2:cf:9c:14: 5c:10:c4:e6:13:e2:a7:9c:ba:8d:6c:33:c5:dd:8f:2b:48:65: 59:70:0c:db:f0:7f:7e:a4:fd:c2:f0:3a:84:58:4a:83:61:66: 36:d3:2b:31:38:dd:39:37:37:25:b9:d0:62:5e:49:ef:2a:21: bd:a9:6a:6b:24:0b:cb:24:cc:5f:45:77:fc:ec:b9:50:24:11: 7d:cc:a7:7b:08:af:23:b1:e1:b8:7c:23:88:56:cc:f7:c1:0a: 56:23:82:45:36:25:c3:0a:71:e7:75:48:ec:9b:a1:4e:2b:80: eb:44:3d:9d:a4:bf:28:d5:bd:a7:04:7c:0b:3e:a6:01:53:38: c8:6b:e1:a8:72:c0:da:7d:f8:b8:f3:b8:11:a5:d1:f5:33:c7: ea:d4:b8:cd:bf:a4:08:95:52:7f:7b:80:84:43:15:e9:01:5c: c8:8e:ef:d4:8a:b0:6d:04:d9:5a:d2:06:8c:8c:06:2c:70:81: 86:b1:a1:39:eb:48:65:57:0e:97:0f:48:70:03:30:91:a8:f9: 73:a0:2a:98:68:df:d1:49:18:f8:ff:49:ae:02:08:59:d9:87: 9f:39:33:b4 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE5sADd3U94h6TQzIzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzE3MTYxNVoXDTI4MTAwOTE3MTYxNVowLzEtMCsGA1UEAxMk ZjkwZTI4ZTYtZGEwNi00YTVjLThmYjYtYzNkMjM1NjIzMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2FbQZL2yaH2OM7G5FS8QsWRbklnk7ksC6ms mcEYFTJWKU6B+j0fl8PqgARLRpUHoe8uSKsCsSEoZ4WSqBDsroUPzeulVg3/CenO aekaJrtThiUxcMtDWsUaBwYL4XrHouh0oVe/fgHJl/7mVI6Vl5t+A85yhV0lJl5A VuiMdtil3ICfbk2u9YVf0/T0hchTedmkFawS1BHh3WcJKCPDG+ukCnTukkuxQPu0 4SxrfEUC5QM3IjZmCa6euaX2s7kR7tNGie7QaEnfTAhG/mrsgAf2FTgffvamTnrw MequCqAZMqUuPB3wIVJJ5B+/fB/IhpkSSTTkZws9RXGHAh1dQQIDAQABo4IELzCC BCswHQYDVR0OBBYEFCcF1lGHDxywf7Ub0aUu8/H2lVaZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m OTBlMjhlNi1kYTA2LTRhNWMtOGZiNi1jM2QyMzU2MjMwMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y5MGUyOGU2LWRhMDYtNGE1Yy04 ZmI2LWMzZDIzNTYyMzAyNS9mOTBlMjhlNi1kYTA2LTRhNWMtOGZiNi1jM2QyMzU2 MjMwMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPAflADBALAflwwDQQCAAIwBwMFACYF10AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICLuEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASiEenRnfJtijFqdoib3R gZED1cFuQXQFh+jOyniQiDKyz5wUXBDE5hPip5y6jWwzxd2PK0hlWXAM2/B/fqT9 wvA6hFhKg2FmNtMrMTjdOTc3JbnQYl5J7yohvalqayQLyyTMX0V3/Oy5UCQRfcyn ewivI7HhuHwjiFbM98EKViOCRTYlwwpx53VI7JuhTiuA60Q9naS/KNW9pwR8Cz6m AVM4yGvhqHLA2n34uPO4EaXR9TPH6tS4zb+kCJVSf3uAhEMV6QFcyI7v1IqwbQTZ WtIGjIwGLHCBhrGhOetIZVcOlw9IcAMwkaj5c6AqmGjf0UkY+P9JrgIIWdmHnzkz tA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:59 2026 by rpki-client