$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030.cer File: df50907a-5dd1-4ef7-a109-30ae99771030.cer (raw, json) Hash identifier: XbftzuoMMJRzzWtho+WfxAr57oy/N5I9SglmYks2yCI= Subject key identifier: F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E9281E2E694E67448F1476600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Jul 2026 12:18:14 +0000 Certificate not after: Wed 04 Oct 2028 18:43:33 +0000 Subordinate resources: AS: 394857 IP: 199.202.154.0/24 IP: 2602:f33e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:81:e2:e6:94:e6:74:48:f1:47:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 21 12:18:14 2026 GMT Not After : Oct 4 18:43:33 2028 GMT Subject: CN=df50907a-5dd1-4ef7-a109-30ae99771030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:dc:03:b0:21:11:96:04:3a:d1:97:40:9f: 4b:63:0c:24:63:0c:45:07:f4:f5:25:b7:dc:59:77: 82:14:20:05:f7:9a:34:0a:91:e5:5e:d8:1c:72:f3: 8b:fd:c5:4c:cf:d1:7e:21:51:88:58:b0:5f:98:9f: 84:e6:f5:b0:c5:b2:74:25:27:41:18:de:8b:a7:b5: 87:c7:b2:f2:ae:87:87:c8:a2:2d:c8:59:f8:35:48: 52:14:0d:c3:37:97:86:2c:fe:90:57:23:d8:60:d4: 6f:85:f3:74:16:07:aa:d2:a1:05:4c:3d:43:68:97: 21:13:a5:7e:b1:05:f0:14:af:6c:6c:66:56:7c:03: 0c:bb:da:be:d4:8a:fd:77:e8:5a:54:c1:53:5c:2d: a9:1e:2a:77:9a:9a:19:9f:62:5f:37:ff:e1:60:0c: aa:20:b8:5f:7f:93:19:f2:b9:43:19:b2:c1:7d:9d: 74:db:a8:46:d2:23:9c:8c:45:4f:35:46:fe:05:7d: dd:d0:e0:6f:a5:e7:9c:e7:ee:34:1f:da:29:98:70: ef:47:6b:d7:f1:21:be:ad:64:3e:ae:3c:aa:d3:39: bb:fc:5c:47:83:35:1e:63:d8:52:29:dc:c0:a7:c7: 40:16:93:aa:75:e6:ad:b6:2a:73:b3:f3:f1:d7:06: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A8:A6:35:B1:72:68:FC:EF:45:7F:77:C7:3E:38:EE:B7:11:85:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df50907a-5dd1-4ef7-a109-30ae99771030/df50907a-5dd1-4ef7-a109-30ae99771030.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.202.154.0/24 IPv6: 2602:f33e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394857 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e4:07:0e:32:0e:f6:a5:70:96:01:90:cb:a1:14:f4:91:03: 44:fc:07:aa:55:c4:ed:8d:fd:d6:66:b6:ee:23:f2:9b:2d:05: c0:a2:21:b6:a5:99:27:6b:a8:ff:0e:84:6e:7a:a9:ce:c3:7a: 57:c7:96:83:65:c4:6d:22:2f:f6:45:6d:a4:98:97:16:7f:6a: 33:e0:ae:77:d0:26:73:7b:05:6f:b6:73:55:42:f0:a0:5e:7c: 91:f4:71:18:4f:ae:6f:8d:69:45:64:14:7e:86:d5:4e:6c:21: b8:8d:7d:85:8b:26:53:77:7e:6d:1f:d4:a1:19:f1:ba:18:b1: c7:81:f4:2a:bc:8b:f1:05:ce:f9:c4:32:39:47:61:7b:c6:af: 7c:5f:44:ab:4e:47:20:55:75:42:bc:b4:21:87:8d:da:2d:60: b7:5a:30:8e:05:f5:4e:37:a1:d9:a2:22:87:b4:77:0d:17:84: 58:a2:62:15:a4:1f:44:2e:0a:d7:86:69:f4:6e:1b:ee:d8:c1: 0a:5f:8e:9a:65:80:96:af:06:bf:20:b3:12:7d:47:9b:38:10: c1:83:35:30:6a:e0:27:ad:03:f6:53:f5:53:05:ab:84:99:32: 07:c8:04:9d:aa:2a:48:d3:4b:f5:0f:60:77:6e:72:8e:0e:90: a2:a3:96:6e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6SgeLmlOZ0SPFHZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcyMTEyMTgxNFoXDTI4MTAwNDE4NDMzM1owLzEtMCsGA1UEAxMk ZGY1MDkwN2EtNWRkMS00ZWY3LWExMDktMzBhZTk5NzcxMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0rcA7AhEZYEOtGXQJ9LYwwkYwxFB/T1Jbfc WXeCFCAF95o0CpHlXtgccvOL/cVMz9F+IVGIWLBfmJ+E5vWwxbJ0JSdBGN6Lp7WH x7LyroeHyKItyFn4NUhSFA3DN5eGLP6QVyPYYNRvhfN0Fgeq0qEFTD1DaJchE6V+ sQXwFK9sbGZWfAMMu9q+1Ir9d+haVMFTXC2pHip3mpoZn2JfN//hYAyqILhff5MZ 8rlDGbLBfZ1026hG0iOcjEVPNUb+BX3d0OBvpeec5+40H9opmHDvR2vX8SG+rWQ+ rjyq0zm7/FxHgzUeY9hSKdzAp8dAFpOqdeattipzs/Px1wa7ywIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPmopjWxcmj870V/d8c+OO63EYVtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ZjUwOTA3YS01ZGQxLTRlZjctYTEwOS0zMGFlOTk3NzEwMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RmNTA5MDdhLTVkZDEtNGVmNy1h MTA5LTMwYWU5OTc3MTAzMC9kZjUwOTA3YS01ZGQxLTRlZjctYTEwOS0zMGFlOTk3 NzEwMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHypowDgQCAAIwCAMGACYC8z4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGaTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBL5AcOMg72pXCWAZDLoRT0kQNE /AeqVcTtjf3WZrbuI/KbLQXAoiG2pZkna6j/DoRueqnOw3pXx5aDZcRtIi/2RW2k mJcWf2oz4K530CZzewVvtnNVQvCgXnyR9HEYT65vjWlFZBR+htVObCG4jX2FiyZT d35tH9ShGfG6GLHHgfQqvIvxBc75xDI5R2F7xq98X0SrTkcgVXVCvLQhh43aLWC3 WjCOBfVON6HZoiKHtHcNF4RYomIVpB9ELgrXhmn0bhvu2MEKX46aZYCWrwa/ILMS fUebOBDBgzUwauAnrQP2U/VTBauEmTIHyASdqipI00v1D2B3bnKODpCio5Zu -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:50 2026 by rpki-client