$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer File: c2636ba5-4fe0-4adf-aaa5-3572eda80148.cer (raw, json) Hash identifier: SfJNtsn6+IRbCzlgQ/MrdFWMVnLfd5qNLOr0pGiCDEI= Subject key identifier: E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E933714012476B6A267791240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jul 2026 18:23:19 +0000 Certificate not after: Mon 23 Oct 2028 18:23:19 +0000 Subordinate resources: AS: 21757 IP: 45.42.216.0/22 IP: 163.123.134.0/23 IP: 192.234.34.0/24 IP: 204.144.136.0/22 IP: 208.71.96.0/21 IP: 2602:ffcb::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:37:14:01:24:76:b6:a2:67:79:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 21 18:23:19 2026 GMT Not After : Oct 23 18:23:19 2028 GMT Subject: CN=c2636ba5-4fe0-4adf-aaa5-3572eda80148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:05:e4:16:ec:00:69:f4:23:99:8f:f8:e3:e1: 9a:1c:8f:18:cb:67:c7:89:25:ed:2d:cb:0d:d9:73: 22:7c:f9:57:1d:65:c0:fe:b8:b2:ed:b5:cc:3b:cb: 37:28:41:66:0d:0f:18:17:2d:56:7e:89:85:cd:99: 3d:28:33:20:d9:0e:ea:71:cd:9b:1a:6e:ba:b5:35: d7:61:d9:25:09:e7:30:55:84:b9:25:e5:88:70:a5: fb:2e:67:f0:eb:25:51:7f:23:4e:8f:80:b6:08:a3: cc:ee:5b:a9:64:ff:ee:10:00:c6:6a:8a:90:90:be: 15:39:00:95:12:3d:ba:8c:7f:cc:85:99:a7:49:c6: cd:9c:b9:35:c8:bb:72:73:59:74:7c:12:38:45:cd: f1:85:b1:ab:66:1c:cb:6e:3a:39:6d:da:15:ef:0a: 39:72:18:ec:f5:c7:56:d7:b1:8e:a8:8f:ea:19:ab: de:74:54:c2:f9:ca:b8:8a:ec:d4:e5:85:c0:09:b0: 24:fd:05:25:ad:8f:a3:73:9c:14:77:5e:89:c2:aa: 8f:37:b5:e1:cb:a6:98:2b:80:b4:da:63:67:67:34: 3d:04:01:e0:33:a1:07:b7:b9:5b:27:db:0a:27:1b: 75:fb:65:1e:5d:60:aa:40:20:2f:ee:08:f3:8f:95: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A6:5A:8C:87:A6:95:06:B6:76:D6:D1:81:D6:D0:7C:10:72:C7:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c2636ba5-4fe0-4adf-aaa5-3572eda80148/c2636ba5-4fe0-4adf-aaa5-3572eda80148.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 45.42.216.0/22 163.123.134.0/23 192.234.34.0/24 204.144.136.0/22 208.71.96.0/21 IPv6: 2602:ffcb::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21757 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:4c:06:25:03:ef:49:e6:c0:c6:c9:d3:01:8b:44:36:b1:66: 0a:b5:72:83:f7:0e:41:32:11:57:32:2f:25:07:37:4e:78:b1: 54:52:08:fb:51:09:7d:91:2b:82:82:7e:e2:5f:ee:ef:86:58: ea:a5:3a:bb:0d:ac:2e:b0:8e:45:bd:f0:80:9a:0e:f7:64:91: df:16:5a:23:81:27:4c:fe:26:59:a7:65:28:55:dd:68:fb:bf: 18:af:59:c2:30:cd:c5:04:7a:b8:e5:08:12:fc:93:98:66:78: a4:43:83:e0:e6:f3:5b:53:20:08:02:1a:92:82:1d:1f:68:48: bb:5c:6c:34:e6:f4:bc:de:7e:80:cb:de:60:88:9b:3e:2c:4a: b1:3d:c0:9d:11:34:2d:43:28:13:9b:37:92:98:27:58:d3:02: 14:fe:32:a7:9a:95:15:f6:c3:6c:bd:1b:06:8b:a5:12:af:e8: dc:ba:50:83:b4:a2:d6:f0:3b:eb:ca:7f:3a:7c:ae:b3:da:59: 99:8f:d9:a5:15:62:9e:f1:d7:ad:a1:cb:d3:35:43:98:97:14: c8:7a:a2:ec:25:3f:8a:c3:94:8b:27:ea:53:e8:d3:2e:cc:a7: 6a:50:e0:a3:1e:e2:de:ea:52:06:f1:4e:73:ea:9f:73:76:62: db:4e:25:bf -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWE6TNxQBJHa2omd5EkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcyMTE4MjMxOVoXDTI4MTAyMzE4MjMxOVowLzEtMCsGA1UEAxMk YzI2MzZiYTUtNGZlMC00YWRmLWFhYTUtMzU3MmVkYTgwMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AXkFuwAafQjmY/44+GaHI8Yy2fHiSXtLcsN 2XMifPlXHWXA/riy7bXMO8s3KEFmDQ8YFy1WfomFzZk9KDMg2Q7qcc2bGm66tTXX YdklCecwVYS5JeWIcKX7Lmfw6yVRfyNOj4C2CKPM7lupZP/uEADGaoqQkL4VOQCV Ej26jH/MhZmnScbNnLk1yLtyc1l0fBI4Rc3xhbGrZhzLbjo5bdoV7wo5chjs9cdW 17GOqI/qGavedFTC+cq4iuzU5YXACbAk/QUlrY+jc5wUd16JwqqPN7Xhy6aYK4C0 2mNnZzQ9BAHgM6EHt7lbJ9sKJxt1+2UeXWCqQCAv7gjzj5VjRQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFOemWoyHppUGtnbW0YHW0HwQcsdWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j MjYzNmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcyZWRhODAxNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2MyNjM2YmE1LTRmZTAtNGFkZi1h YWE1LTM1NzJlZGE4MDE0OC9jMjYzNmJhNS00ZmUwLTRhZGYtYWFhNS0zNTcyZWRh ODAxNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAItKtgDBAGje4YDBADA6iIDBALMkIgDBAPQR2Aw DQQCAAIwBwMFACYC/8swGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVP0wVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAokwGJQPvSebAxsnTAYtENrFmCrVyg/cOQTIRVzIvJQc3TnixVFII+1EJfZEr goJ+4l/u74ZY6qU6uw2sLrCORb3wgJoO92SR3xZaI4EnTP4mWadlKFXdaPu/GK9Z wjDNxQR6uOUIEvyTmGZ4pEOD4ObzW1MgCAIakoIdH2hIu1xsNOb0vN5+gMveYIib PixKsT3AnRE0LUMoE5s3kpgnWNMCFP4yp5qVFfbDbL0bBoulEq/o3LpQg7Si1vA7 68p/Onyus9pZmY/ZpRVinvHXraHL0zVDmJcUyHqi7CU/isOUiyfqU+jTLsynalDg ox7i3upSBvFOc+qfc3Zi204lvw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:26:31 2026 by rpki-client