$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be.cer File: a1ff4338-4c9d-4606-914c-3240a23a01be.cer (raw, json) Hash identifier: +1TmxNhSUl/TQGgqYYLX576J4+JAR8uLPjjf9KUC7SE= Subject key identifier: B5:73:4C:62:C9:2F:CE:4B:95:B6:04:5F:B2:5F:29:F6:A2:C9:F3:DF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E933EFA72B4D0CB6167B217C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/a1ff4338-4c9d-4606-914c-3240a23a01be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jul 2026 18:39:14 +0000 Certificate not after: Wed 11 Oct 2028 17:19:13 +0000 Subordinate resources: AS: 402789 IP: 23.161.44.0/24 IP: 2604:d890::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:3e:fa:72:b4:d0:cb:61:67:b2:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 21 18:39:14 2026 GMT Not After : Oct 11 17:19:13 2028 GMT Subject: CN=a1ff4338-4c9d-4606-914c-3240a23a01be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:99:1b:2c:b6:db:46:0e:c0:9a:80:6d:dd: 80:7f:9f:da:02:cb:68:d5:05:d3:8d:7a:50:53:95: bd:67:99:dc:14:b5:3c:16:6c:83:82:6a:49:7e:c0: c9:3c:66:00:c2:6f:0c:60:91:7b:e3:c9:ff:d8:b5: c3:e9:88:ec:63:27:01:5e:58:ad:22:4d:4e:46:c1: 9e:a9:a6:2a:84:36:0a:de:67:f0:68:35:68:ea:19: 5d:a9:90:e0:13:2f:d3:c0:0d:64:e9:01:c5:64:c5: 9a:b0:ea:63:d1:81:76:41:97:1a:f7:cb:59:68:c6: d7:9c:32:3a:e5:c1:5b:d4:54:f5:5b:d6:f6:bd:da: c3:3d:d3:9f:99:2c:a1:f3:25:e4:4d:60:74:ed:c0: 8f:ea:70:c7:ad:3f:0a:92:90:d9:64:90:7a:61:e4: 22:74:0e:ed:a0:96:2a:ea:02:34:e8:73:2b:0a:57: 68:14:bb:45:d1:c7:8f:90:76:65:4e:69:f3:9b:1e: 53:48:b8:e7:77:99:48:c1:40:9d:65:52:d4:37:c7: 9d:7e:e7:e9:ab:87:e0:70:cd:e0:d6:70:30:36:70: bf:aa:ac:10:d3:d9:06:7d:76:73:9c:ba:a5:9b:8b: a5:a3:34:b2:55:86:5f:63:2c:8d:3f:12:ac:a3:be: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:4C:62:C9:2F:CE:4B:95:B6:04:5F:B2:5F:29:F6:A2:C9:F3:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a1ff4338-4c9d-4606-914c-3240a23a01be/a1ff4338-4c9d-4606-914c-3240a23a01be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.44.0/24 IPv6: 2604:d890::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402789 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:53:e5:aa:1f:e2:0c:17:84:87:08:fe:22:1f:dc:c5:2d:af: f8:f1:2d:2f:8b:e4:0d:56:ba:84:16:79:05:fa:bd:c0:08:ed: fb:97:e4:f3:9e:ac:88:64:f7:cb:2c:90:73:54:8c:90:05:21: 96:1a:07:85:1c:93:d1:68:e9:41:8f:db:93:3d:70:bd:e8:2c: 02:e0:cd:bf:dc:f1:da:89:4d:89:40:93:83:66:bf:ff:ab:d6: a0:15:2b:10:30:62:cc:d9:ba:13:05:66:41:17:ad:0a:87:8d: 6c:b6:d8:ff:70:10:00:96:5d:0e:a9:aa:50:9c:46:0e:8d:5f: a7:76:d3:ce:f8:e6:f7:e7:73:7a:b0:59:5a:44:c2:3d:d7:44: 07:f0:07:23:81:6d:94:24:6a:a5:dc:6a:ff:c9:d0:4c:33:45: f0:f1:fd:00:ea:4f:d9:67:2a:9e:7b:37:af:18:c6:9b:81:02: ea:27:52:b5:ff:8d:b9:62:67:18:bd:d5:42:72:30:10:b0:0c: d9:2b:40:9e:3d:83:7a:37:9c:f9:d1:d5:fa:76:77:6b:d7:c7: 7e:ed:4a:17:c7:fc:d0:91:53:22:d0:b8:5f:7d:b9:5d:99:31: 8c:34:8f:eb:90:a4:4c:6a:61:56:74:6b:98:1a:af:a6:6e:d1: 55:2c:da:43 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE6TPvpytNDLYWeyF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcyMTE4MzkxNFoXDTI4MTAxMTE3MTkxM1owLzEtMCsGA1UEAxMk YTFmZjQzMzgtNGM5ZC00NjA2LTkxNGMtMzI0MGEyM2EwMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOWZGyy220YOwJqAbd2Af5/aAsto1QXTjXpQ U5W9Z5ncFLU8FmyDgmpJfsDJPGYAwm8MYJF748n/2LXD6YjsYycBXlitIk1ORsGe qaYqhDYK3mfwaDVo6hldqZDgEy/TwA1k6QHFZMWasOpj0YF2QZca98tZaMbXnDI6 5cFb1FT1W9b2vdrDPdOfmSyh8yXkTWB07cCP6nDHrT8KkpDZZJB6YeQidA7toJYq 6gI06HMrCldoFLtF0cePkHZlTmnzmx5TSLjnd5lIwUCdZVLUN8edfufpq4fgcM3g 1nAwNnC/qqwQ09kGfXZznLqlm4ulozSyVYZfYyyNPxKso763pwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLVzTGLJL85LlbYEX7JfKfaiyfPfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h MWZmNDMzOC00YzlkLTQ2MDYtOTE0Yy0zMjQwYTIzYTAxYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2ExZmY0MzM4LTRjOWQtNDYwNi05 MTRjLTMyNDBhMjNhMDFiZS9hMWZmNDMzOC00YzlkLTQ2MDYtOTE0Yy0zMjQwYTIz YTAxYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXoSwwDQQCAAIwBwMFACYE2JAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiVlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJtT5aof4gwXhIcI/iIf3MUtr/jx LS+L5A1WuoQWeQX6vcAI7fuX5POerIhk98sskHNUjJAFIZYaB4Uck9Fo6UGP25M9 cL3oLALgzb/c8dqJTYlAk4Nmv/+r1qAVKxAwYszZuhMFZkEXrQqHjWy22P9wEACW XQ6pqlCcRg6NX6d208745vfnc3qwWVpEwj3XRAfwByOBbZQkaqXcav/J0EwzRfDx /QDqT9lnKp57N68YxpuBAuonUrX/jbliZxi91UJyMBCwDNkrQJ49g3o3nPnR1fp2 d2vXx37tShfH/NCRUyLQuF99uV2ZMYw0j+uQpExqYVZ0a5gar6Zu0VUs2kM= -----END CERTIFICATE-----Generated at Fri Jul 24 03:37:51 2026 by rpki-client