$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00.cer File: fb6e7f06-7b17-42b7-8725-7e607bbacf00.cer (raw, json) Hash identifier: bqna2DAmO5bBpRl+tQpk2xoKGPE3Iu6eWM9fP1oKVww= Subject key identifier: B6:04:50:85:7C:43:8F:72:A5:AA:9D:0B:5E:B0:C9:11:81:A3:80:A5 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E372D1F2BBCFD4E0348FC2DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/fb6e7f06-7b17-42b7-8725-7e607bbacf00.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Jun 2026 19:08:53 +0000 Certificate not after: Wed 20 Sep 2028 19:08:53 +0000 Subordinate resources: IP: 216.41.144.0/20 IP: 2607:9580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:2d:1f:2b:bc:fd:4e:03:48:fc:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 18 19:08:53 2026 GMT Not After : Sep 20 19:08:53 2028 GMT Subject: CN=fb6e7f06-7b17-42b7-8725-7e607bbacf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d6:0e:66:3a:10:3a:6b:a2:05:8e:1e:f0:b5: 93:73:9d:43:8a:75:f9:c5:59:9e:9e:6d:b8:99:13: e4:5f:38:9e:f0:6d:57:84:d2:f6:38:66:ff:b9:e5: 19:57:30:a7:8b:58:4a:b9:6a:ec:ed:2c:bf:06:95: 2a:2c:01:f6:b7:8a:fc:b8:54:9a:14:3a:2c:3b:81: 19:ad:78:50:ac:00:a2:42:a9:c3:ee:9b:35:1e:25: ec:b5:8b:8e:a1:3d:ee:36:df:58:64:34:77:aa:b2: f9:2e:be:8d:3d:ca:65:51:44:26:72:b3:58:00:de: e6:cc:94:1a:8b:06:af:86:76:ad:79:28:95:9d:af: 06:c5:f4:b6:8b:02:b0:46:58:db:2f:9a:89:9e:e6: 36:87:03:a8:01:eb:6f:a1:c4:f4:4a:f1:45:08:2a: 85:79:e7:7d:01:f4:b0:bf:cd:f6:24:8e:76:01:2d: 8a:22:0b:b5:e3:0a:45:63:d1:d2:3a:f3:49:53:75: 8a:d6:71:a3:fb:9e:c3:82:b5:7e:16:45:e7:78:e0: f4:48:11:b9:41:2b:e5:cd:49:2b:34:2f:b3:d4:86: fc:90:be:bb:23:8d:f5:6c:82:51:20:bc:b7:3d:e6: 44:68:d6:af:4f:5b:9f:d2:f3:de:99:0c:63:b4:10: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:04:50:85:7C:43:8F:72:A5:AA:9D:0B:5E:B0:C9:11:81:A3:80:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fb6e7f06-7b17-42b7-8725-7e607bbacf00/fb6e7f06-7b17-42b7-8725-7e607bbacf00.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 216.41.144.0/20 IPv6: 2607:9580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f3:40:6c:74:b9:72:a1:6f:ed:b4:cb:43:6b:d8:f2:9e:85: 4b:2f:0d:cb:5f:b0:40:66:fa:5d:c9:23:d6:91:52:81:eb:77: 25:6c:3f:51:b8:f3:53:b8:fb:6d:d8:5d:74:60:0d:c9:90:83: 6a:f1:ec:63:89:d0:ed:de:a8:e0:1b:88:75:15:ab:bd:3f:67: 7f:60:35:88:07:ff:14:43:ff:e5:2a:7c:d8:ae:98:93:04:45: 05:dc:57:e2:7a:c8:bb:f0:01:04:bf:78:c4:d9:65:34:8b:22: 77:dd:cf:c7:38:42:80:11:2b:ae:68:99:49:f9:4e:af:46:aa: 1e:97:92:01:aa:f5:3f:96:86:3d:2f:87:5b:d4:6f:05:62:27: d1:e6:8a:bc:1c:06:e0:fa:d1:a2:39:c7:ae:ab:66:39:59:a8: 0f:79:9c:16:d2:c7:4b:1c:fc:5b:3c:0a:d5:c4:51:e7:9c:33: e1:6f:98:0e:fc:a5:7c:14:cd:35:bc:f2:62:01:4d:01:93:7b: ab:50:3b:f0:1e:ca:17:19:8a:33:94:21:24:ce:88:e1:41:f2: 95:33:03:31:3c:2c:29:7d:79:5e:e2:b8:78:76:d4:eb:84:c4: c8:91:1c:1d:6b:b2:70:ee:5d:98:f8:3c:af:76:bf:8c:0c:fc: f4:6d:57:93 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE43LR8rvP1OA0j8LeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxODE5MDg1M1oXDTI4MDkyMDE5MDg1M1owLzEtMCsGA1UEAxMk ZmI2ZTdmMDYtN2IxNy00MmI3LTg3MjUtN2U2MDdiYmFjZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtYOZjoQOmuiBY4e8LWTc51DinX5xVmenm24 mRPkXzie8G1XhNL2OGb/ueUZVzCni1hKuWrs7Sy/BpUqLAH2t4r8uFSaFDosO4EZ rXhQrACiQqnD7ps1HiXstYuOoT3uNt9YZDR3qrL5Lr6NPcplUUQmcrNYAN7mzJQa iwavhnateSiVna8GxfS2iwKwRljbL5qJnuY2hwOoAetvocT0SvFFCCqFeed9AfSw v832JI52AS2KIgu14wpFY9HSOvNJU3WK1nGj+57DgrV+FkXneOD0SBG5QSvlzUkr NC+z1Ib8kL67I431bIJRILy3PeZEaNavT1uf0vPemQxjtBAdQwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFLYEUIV8Q49ypaqdC16wyRGBo4ClMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m YjZlN2YwNi03YjE3LTQyYjctODcyNS03ZTYwN2JiYWNmMDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2ZiNmU3ZjA2LTdiMTctNDJiNy04 NzI1LTdlNjA3YmJhY2YwMC9mYjZlN2YwNi03YjE3LTQyYjctODcyNS03ZTYwN2Ji YWNmMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATYKZAwDQQCAAIwBwMFACYHlYAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA OfNAbHS5cqFv7bTLQ2vY8p6FSy8Ny1+wQGb6Xckj1pFSget3JWw/UbjzU7j7bdhd dGANyZCDavHsY4nQ7d6o4BuIdRWrvT9nf2A1iAf/FEP/5Sp82K6YkwRFBdxX4nrI u/ABBL94xNllNIsid93PxzhCgBErrmiZSflOr0aqHpeSAar1P5aGPS+HW9RvBWIn 0eaKvBwG4PrRojnHrqtmOVmoD3mcFtLHSxz8WzwK1cRR55wz4W+YDvylfBTNNbzy YgFNAZN7q1A78B7KFxmKM5QhJM6I4UHylTMDMTwsKX15XuK4eHbU64TEyJEcHWuy cO5dmPg8r3a/jAz89G1Xkw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:12 2026 by rpki-client