$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.cer File: 02ae6ad1-19bf-4926-8b00-6ce72efacb0f.cer (raw, json) Hash identifier: gM2nOD4/aPr3NpPDISYuyXYoMVvWkIkNNeXrE73CnW8= Subject key identifier: 0D:85:D4:6E:20:CC:CD:FC:CB:EC:1F:8F:F9:1C:23:A5:31:85:35:9E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584EA609B4343A351518E46D8510 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jul 2026 12:12:15 +0000 Certificate not after: Wed 11 Oct 2028 00:23:04 +0000 Subordinate resources: AS: 402721 IP: 199.245.205.0/24 IP: 2602:f338::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:09:b4:34:3a:35:15:18:e4:6d:85:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 28 12:12:15 2026 GMT Not After : Oct 11 00:23:04 2028 GMT Subject: CN=02ae6ad1-19bf-4926-8b00-6ce72efacb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:c1:70:34:60:b8:9f:30:ef:b2:e8:56:e9: 50:00:66:aa:6f:a4:82:b5:ae:e7:d1:ce:0e:f9:03: cc:69:e4:76:78:71:40:af:a5:84:b9:5a:81:5b:c9: 03:5e:be:fc:e7:49:6f:88:06:26:82:e6:1a:37:51: 37:68:c5:ff:05:cc:a2:49:91:d6:be:89:73:1f:60: 2f:77:c3:95:2b:05:79:89:2c:55:2c:75:d0:11:1d: ed:35:ea:92:1f:27:e8:df:03:b5:d7:78:f5:f5:37: 50:ee:61:50:3e:3a:5d:40:86:77:d1:eb:a0:6b:05: 6e:96:62:bf:52:dc:01:e8:e2:87:a0:66:28:29:f8: 53:40:36:6a:06:a4:79:dc:11:c7:70:d3:37:9f:4e: 6d:41:a8:13:7c:22:6b:9b:59:c8:07:a3:16:89:ba: 56:a2:37:f9:8a:68:c8:f3:15:b7:1a:4a:5d:1c:4a: 4f:3e:a7:1a:08:c5:f5:82:0f:4d:1b:3d:3c:8a:2d: 1a:91:ee:0e:bb:2c:9f:3e:db:49:01:dc:cd:33:8a: f1:24:03:c8:2c:ea:da:13:e7:f6:69:51:19:43:6e: 0a:79:f1:cc:c3:f1:5d:7b:fc:73:8a:2d:21:17:a8: 44:d1:16:61:22:d8:47:ba:73:ae:0f:cd:70:a9:20: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:85:D4:6E:20:CC:CD:FC:CB:EC:1F:8F:F9:1C:23:A5:31:85:35:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/02ae6ad1-19bf-4926-8b00-6ce72efacb0f/02ae6ad1-19bf-4926-8b00-6ce72efacb0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.245.205.0/24 IPv6: 2602:f338::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402721 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1d:6b:be:78:f0:fe:d1:a4:ab:42:b8:e8:36:be:44:91:b4: 3f:b5:a6:fe:99:d6:49:b4:5f:58:48:40:19:41:fd:4e:e4:59: 42:e0:04:63:8e:72:f2:5b:40:f9:c8:c7:de:fb:83:1f:55:c3: f8:45:b7:5f:82:61:9c:e0:e0:e0:45:21:4b:8c:6c:24:55:f2: 67:8e:0b:f8:f2:07:64:77:7d:95:1f:35:5d:ff:7e:ba:f2:9c: 12:40:10:f2:82:d0:0b:75:10:54:8b:95:3a:b1:83:30:0d:25: 97:70:8e:99:4a:54:6d:7d:b9:0e:8e:4d:a4:8b:73:fd:7d:97: e1:db:37:b0:36:3f:d1:fc:35:f0:a5:f6:3f:18:39:29:73:d7: 95:fc:7b:57:c6:ad:33:97:56:e2:48:05:43:ed:ca:f9:08:bd: f0:3c:0b:fc:36:ff:98:c3:10:71:28:58:98:04:50:77:87:68: 46:e6:ef:7d:6f:d2:54:91:5d:3d:07:80:f6:3d:cf:97:72:5a: 7a:85:b6:82:a2:4e:b9:83:7f:da:a8:09:5a:aa:c7:a3:87:5c: e7:7b:ff:9f:e6:dd:67:6d:a6:80:e0:2d:fd:cd:e4:3f:3c:76: 07:f5:12:7f:e3:52:fc:ba:20:0b:23:46:14:e7:dd:72:c7:4e: b9:88:33:cb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE6mCbQ0OjUVGORthRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcyODEyMTIxNVoXDTI4MTAxMTAwMjMwNFowLzEtMCsGA1UEAxMk MDJhZTZhZDEtMTliZi00OTI2LThiMDAtNmNlNzJlZmFjYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP3BcDRguJ8w77LoVulQAGaqb6SCta7n0c4O +QPMaeR2eHFAr6WEuVqBW8kDXr7850lviAYmguYaN1E3aMX/BcyiSZHWvolzH2Av d8OVKwV5iSxVLHXQER3tNeqSHyfo3wO113j19TdQ7mFQPjpdQIZ30eugawVulmK/ UtwB6OKHoGYoKfhTQDZqBqR53BHHcNM3n05tQagTfCJrm1nIB6MWibpWojf5imjI 8xW3GkpdHEpPPqcaCMX1gg9NGz08ii0ake4OuyyfPttJAdzNM4rxJAPILOraE+f2 aVEZQ24KefHMw/Fde/xzii0hF6hE0RZhIthHunOuD81wqSDLSQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA2F1G4gzM38y+wfj/kcI6UxhTWeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w MmFlNmFkMS0xOWJmLTQ5MjYtOGIwMC02Y2U3MmVmYWNiMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzAyYWU2YWQxLTE5YmYtNDkyNi04 YjAwLTZjZTcyZWZhY2IwZi8wMmFlNmFkMS0xOWJmLTQ5MjYtOGIwMC02Y2U3MmVm YWNiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADH9c0wDgQCAAIwCAMGACYC8zgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYlITBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgHWu+ePD+0aSrQrjoNr5EkbQ/ tab+mdZJtF9YSEAZQf1O5FlC4ARjjnLyW0D5yMfe+4MfVcP4RbdfgmGc4ODgRSFL jGwkVfJnjgv48gdkd32VHzVd/3668pwSQBDygtALdRBUi5U6sYMwDSWXcI6ZSlRt fbkOjk2ki3P9fZfh2zewNj/R/DXwpfY/GDkpc9eV/HtXxq0zl1biSAVD7cr5CL3w PAv8Nv+YwxBxKFiYBFB3h2hG5u99b9JUkV09B4D2Pc+Xclp6hbaCok65g3/aqAla qsejh1zne/+f5t1nbaaA4C39zeQ/PHYH9RJ/41L8uiALI0YU591yx065iDPL -----END CERTIFICATE-----Generated at Tue Jul 28 15:58:40 2026 by rpki-client