$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer File: 5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.cer (raw, json) Hash identifier: lpttbc71vmb/mVIJsRiGwdPsCdEKhfyMItb5JsTRiLE= Subject key identifier: 00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E93331307F5336F77A1E35B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jul 2026 18:15:15 +0000 Certificate not after: Wed 02 Aug 2028 18:03:32 +0000 Subordinate resources: AS: 36824 IP: 208.88.16.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:33:13:07:f5:33:6f:77:a1:e3:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 21 18:15:15 2026 GMT Not After : Aug 2 18:03:32 2028 GMT Subject: CN=5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:a0:09:b2:f3:0e:1c:2f:bd:2a:54:93:4e: 12:e2:60:27:0b:cb:9e:1e:80:1d:2f:cb:af:54:0b: ad:bb:49:e9:9a:79:fa:2d:0d:a8:10:d0:7f:32:f9: a3:6f:01:3f:f9:7f:ad:b1:2d:34:7b:36:4b:fe:5f: af:ce:12:ab:2a:ef:43:e3:55:77:97:bb:90:71:c7: b4:74:ae:cb:20:cf:fa:8f:e4:bb:5c:ef:42:5f:cd: c2:98:82:56:98:5c:01:c4:bb:45:c8:df:c5:9f:98: a3:59:4f:0b:da:49:a3:01:8b:2c:5b:89:33:46:72: 45:1b:d6:a0:89:3b:c5:36:ff:20:16:46:1b:cf:6f: a5:e4:0b:cc:cf:6d:d6:a1:de:e0:5d:91:89:f7:44: 6a:3a:5f:bf:2d:10:0d:32:a7:da:fd:92:37:28:e8: a0:c6:fb:2b:e6:30:ec:96:60:5e:18:35:f0:d4:ce: 1c:48:ea:fe:b9:60:42:e2:55:88:90:cd:e6:80:f4: e9:f7:55:bb:18:be:59:1b:2f:0f:e6:4f:f8:3d:4a: b4:73:ad:c4:3d:7f:96:12:2c:51:53:9e:e4:44:e3: e6:f9:5b:3e:22:0b:8e:4f:59:55:17:d5:e9:1a:2d: 88:3c:52:6a:46:3f:6b:89:80:92:34:62:d4:ba:6b: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:DC:B9:5F:0B:35:0C:26:C0:5F:1E:01:76:4D:DE:51:29:3B:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0/5d4f70c8-9ea5-4dc4-9e9a-ed6e2564e7c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 208.88.16.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36824 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5f:dc:9a:06:6d:00:c2:21:68:60:be:ec:bc:e9:55:62:a3: 55:da:2c:4b:2a:60:2e:b2:0f:eb:60:19:77:42:d2:51:43:49: 7a:c8:40:06:7d:6d:23:0b:7a:af:b8:63:e0:92:e0:69:f6:1a: 51:3b:f3:88:81:39:a3:15:98:6e:88:4a:15:2b:6f:e5:9e:e0: da:7b:98:23:1f:99:27:72:fe:23:04:c8:0a:9f:fd:08:ed:b8: bb:5a:e6:b1:dc:bb:13:9f:26:d7:da:88:2c:b6:09:85:93:3c: f7:90:de:1c:48:50:ba:f8:df:00:bc:40:3c:54:82:e4:9a:b3: 97:cf:79:e0:c6:0b:93:8d:00:92:08:ff:a5:ac:7d:7a:87:2d: d0:de:7b:4e:34:00:45:28:16:6f:cb:ec:ea:df:a8:bd:b0:6c: ad:11:51:5b:75:09:66:92:56:b6:1d:64:b0:54:b5:1d:25:66: ed:4e:de:6d:06:c4:c5:7c:68:94:6b:83:84:dd:f6:6e:ad:17: 71:47:97:cd:f0:48:7b:4e:b3:de:53:09:79:8f:a6:44:85:7b: a0:67:d6:86:81:cf:a8:16:3e:cd:3e:10:5a:49:ad:d4:07:90: ce:8e:74:c3:12:1b:a0:39:c3:e3:ab:3b:4a:13:1c:fc:14:d9: f3:a8:5d:65 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE6TMxMH9TNvd6HjWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcyMTE4MTUxNVoXDTI4MDgwMjE4MDMzMlowLzEtMCsGA1UEAxMk NWQ0ZjcwYzgtOWVhNS00ZGM0LTllOWEtZWQ2ZTI1NjRlN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl26gCbLzDhwvvSpUk04S4mAnC8ueHoAdL8uv VAutu0npmnn6LQ2oENB/MvmjbwE/+X+tsS00ezZL/l+vzhKrKu9D41V3l7uQcce0 dK7LIM/6j+S7XO9CX83CmIJWmFwBxLtFyN/Fn5ijWU8L2kmjAYssW4kzRnJFG9ag iTvFNv8gFkYbz2+l5AvMz23Wod7gXZGJ90RqOl+/LRANMqfa/ZI3KOigxvsr5jDs lmBeGDXw1M4cSOr+uWBC4lWIkM3mgPTp91W7GL5ZGy8P5k/4PUq0c63EPX+WEixR U57kROPm+Vs+IguOT1lVF9XpGi2IPFJqRj9riYCSNGLUumuuPwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAAh3LlfCzUMJsBfHgF2Td5RKTsJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 ZDRmNzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZlMjU2NGU3YzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVkNGY3MGM4LTllYTUtNGRjNC05 ZTlhLWVkNmUyNTY0ZTdjMC81ZDRmNzBjOC05ZWE1LTRkYzQtOWU5YS1lZDZlMjU2 NGU3YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQWBAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI/YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIFf3JoGbQDCIWhgvuy86VVio1XaLEsqYC6yD+tgGXdC0lFD SXrIQAZ9bSMLeq+4Y+CS4Gn2GlE784iBOaMVmG6IShUrb+We4Np7mCMfmSdy/iME yAqf/QjtuLta5rHcuxOfJtfaiCy2CYWTPPeQ3hxIULr43wC8QDxUguSas5fPeeDG C5ONAJII/6WsfXqHLdDee040AEUoFm/L7OrfqL2wbK0RUVt1CWaSVrYdZLBUtR0l Zu1O3m0GxMV8aJRrg4Td9m6tF3FHl83wSHtOs95TCXmPpkSFe6Bn1oaBz6gWPs0+ EFpJrdQHkM6OdMMSG6A5w+OrO0oTHPwU2fOoXWU= -----END CERTIFICATE-----Generated at Thu Jul 23 22:53:46 2026 by rpki-client