$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer File: f9962fb0-221d-459e-957d-b8a95fae9d35.cer (raw, json) Hash identifier: ZXqx33hk3u2rhz/Prul+94R03Ugfmi9LD/EVe6fPduU= Subject key identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F66990949715240EF880FBDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 11:36:15 +0000 Certificate not after: Wed 20 Sep 2028 06:38:44 +0000 Subordinate resources: AS: 402654 IP: 192.207.102.0/24 IP: 2602:f382::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:99:09:49:71:52:40:ef:88:0f:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Oct 5 11:36:15 2026 GMT Not After : Sep 20 06:38:44 2028 GMT Subject: CN=f9962fb0-221d-459e-957d-b8a95fae9d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:e5:f6:16:20:b2:cd:2b:2e:0c:92:14:46: 54:b4:6b:25:a8:ff:1f:99:a6:6d:5a:00:45:27:b9: 87:7b:d3:77:44:8a:7a:9f:fa:2d:ac:4a:0a:5a:2b: 4f:5a:8c:e1:36:f5:3a:f4:28:52:26:f7:c3:0e:e2: d6:59:ad:f5:75:20:87:a2:b1:07:58:79:0f:af:b2: 46:e4:33:19:0f:dc:55:2b:95:a5:4a:d1:b9:6f:40: 97:95:21:67:52:df:70:08:c7:51:07:9b:b8:f9:1b: bb:1b:8a:67:47:db:d1:34:5d:23:d6:a4:50:1c:98: e9:99:9b:2a:7b:3a:1c:14:aa:43:ee:63:b9:0b:fb: 8a:42:df:76:31:ca:b2:b1:14:cf:26:2c:08:49:1d: a5:c7:ef:92:c2:32:88:65:a9:54:cc:b2:f3:9d:d2: 9f:48:06:e7:de:df:d9:cf:d5:49:90:85:57:7f:3b: 2d:dc:fb:26:af:42:ea:51:c7:15:fb:10:57:c5:52: a8:ee:e6:5a:da:b2:e6:d8:0b:c1:23:a0:b8:9e:44: 24:af:38:7e:4b:d7:c3:12:32:11:54:98:8b:d0:2d: 5a:3f:8f:71:1f:07:8d:ec:7f:a2:8e:59:33:7d:a1: dd:ae:eb:f2:d3:41:40:00:c1:f5:3e:14:9e:2a:6b: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 192.207.102.0/24 IPv6: 2602:f382::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402654 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a5:81:43:14:3c:cd:eb:ea:3b:1d:a9:70:87:44:f7:87:e4: a5:10:a9:3a:69:2d:c9:4b:02:26:3f:c0:ff:76:a4:88:8c:e8: 19:7f:7b:ed:49:ca:f3:e0:33:05:f7:35:3f:b5:8d:a7:06:16: 59:7d:43:e3:d5:69:c7:f4:39:dc:48:83:c4:35:54:03:66:b1: 7c:98:b9:f4:9e:a9:e1:d0:05:5c:56:f3:66:80:ee:7a:ce:0c: d2:c9:1d:df:cb:b0:b8:b3:0f:6d:7b:29:bb:52:7c:19:46:57: 56:a9:8c:c0:6b:b0:ea:b4:e8:e9:1e:4f:5b:7f:1c:52:7b:53: 9b:8e:43:97:cd:51:73:6c:72:c6:f3:a4:8f:ea:77:b4:eb:ac: 68:e4:95:66:79:12:c1:03:07:10:5b:2b:c3:b7:7a:80:1f:bb: 21:fd:a1:6e:24:b4:bd:61:ed:62:bb:8d:0f:2c:92:50:f1:bd: e0:c3:35:4a:0d:5c:e0:a8:01:13:22:90:f1:d9:be:41:13:b9: 1d:d5:19:fb:28:96:1a:14:de:0b:fe:fc:dc:28:24:7a:82:7b: 43:09:71:69:01:ee:e8:8a:d1:1a:d8:9e:1e:34:3c:5e:43:dc: cc:28:5a:37:5b:56:40:d6:d9:29:72:9f:bd:3b:d2:4c:88:57: 5a:39:eb:8a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9mmQlJcVJA74gPvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MTAwNTExMzYxNVoXDTI4MDkyMDA2Mzg0NFowLzEtMCsGA1UEAxMk Zjk5NjJmYjAtMjIxZC00NTllLTk1N2QtYjhhOTVmYWU5ZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNzl9hYgss0rLgySFEZUtGslqP8fmaZtWgBF J7mHe9N3RIp6n/otrEoKWitPWozhNvU69ChSJvfDDuLWWa31dSCHorEHWHkPr7JG 5DMZD9xVK5WlStG5b0CXlSFnUt9wCMdRB5u4+Ru7G4pnR9vRNF0j1qRQHJjpmZsq ezocFKpD7mO5C/uKQt92McqysRTPJiwISR2lx++SwjKIZalUzLLzndKfSAbn3t/Z z9VJkIVXfzst3Psmr0LqUccV+xBXxVKo7uZa2rLm2AvBI6C4nkQkrzh+S9fDEjIR VJiL0C1aP49xHweN7H+ijlkzfaHdruvy00FAAMH1PhSeKmvJ6wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKEAkvfvKhJMO5YT+Pci5G22a+LyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m OTk2MmZiMC0yMjFkLTQ1OWUtOTU3ZC1iOGE5NWZhZTlkMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y5OTYyZmIwLTIyMWQtNDU5ZS05 NTdkLWI4YTk1ZmFlOWQzNS9mOTk2MmZiMC0yMjFkLTQ1OWUtOTU3ZC1iOGE5NWZh ZTlkMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAz2YwDgQCAAIwCAMGACYC84IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYk3jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAupYFDFDzN6+o7Halwh0T3h+Sl EKk6aS3JSwImP8D/dqSIjOgZf3vtScrz4DMF9zU/tY2nBhZZfUPj1WnH9DncSIPE NVQDZrF8mLn0nqnh0AVcVvNmgO56zgzSyR3fy7C4sw9teym7UnwZRldWqYzAa7Dq tOjpHk9bfxxSe1ObjkOXzVFzbHLG86SP6ne066xo5JVmeRLBAwcQWyvDt3qAH7sh /aFuJLS9Ye1iu40PLJJQ8b3gwzVKDVzgqAETIpDx2b5BE7kd1Rn7KJYaFN4L/vzc KCR6gntDCXFpAe7oitEa2J4eNDxeQ9zMKFo3W1ZA1tkpcp+9O9JMiFdaOeuK -----END CERTIFICATE-----Generated at Wed Oct 21 04:46:22 2026 by rpki-client