$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c.cer File: 99312974-b017-47b8-b12f-499e1d12472c.cer (raw, json) Hash identifier: VqR9GdxjZ5KDZ7XxgP/jtrdhA7j1C0Dr533HjWLDsso= Subject key identifier: 92:FF:9D:66:68:32:F0:23:DB:05:ED:4E:CE:63:C6:4D:98:AD:45:BF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F3727E2475AB21D1066A8F880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/99312974-b017-47b8-b12f-499e1d12472c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 11:45:16 +0000 Certificate not after: Wed 06 Sep 2028 05:30:51 +0000 Subordinate resources: AS: 397982 IP: 69.88.132.0/23 IP: 165.140.108.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:27:e2:47:5a:b2:1d:10:66:a8:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Sep 18 11:45:16 2026 GMT Not After : Sep 6 05:30:51 2028 GMT Subject: CN=99312974-b017-47b8-b12f-499e1d12472c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:59:02:25:61:9f:28:1a:43:cb:aa:14:35: fa:62:3d:09:39:c0:60:d9:04:78:1d:d4:f8:ac:25: c7:b1:e4:7d:a6:21:f6:f9:14:5e:4d:c5:e6:9e:a9: 0d:53:94:72:9e:6c:8a:9d:78:d0:db:79:3c:f7:53: b6:1e:fd:a9:6f:3f:6d:51:f7:74:3f:32:dc:a3:0a: 47:2e:11:09:12:77:83:16:12:32:1b:c6:a4:64:8a: a0:fb:b2:73:dd:83:03:77:e7:6b:3d:31:ee:3a:5d: 05:27:e6:6c:28:ff:9c:02:5b:d2:77:eb:e5:64:bd: 2d:53:28:d4:c9:a0:7d:b5:c0:81:32:54:5e:5f:41: d6:ac:9d:78:5a:d5:1e:44:41:ea:fc:38:05:63:7d: 28:aa:62:f4:2e:56:a8:e0:5c:18:47:72:6a:bb:64: 88:5e:8d:98:37:d8:37:fe:55:a7:c3:7c:87:1d:66: ce:13:40:3c:f7:68:79:9d:55:4f:80:34:02:7d:76: 9e:36:ee:8d:50:78:0e:75:c8:86:ec:01:0a:be:03: f3:89:65:23:86:a3:63:f1:ec:8e:df:1d:1e:cb:26: 4a:a5:42:0f:f2:d8:6e:09:7a:9d:30:25:bb:26:43: 48:7c:59:e5:ea:46:af:4a:b0:6e:a7:36:d4:a3:5e: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FF:9D:66:68:32:F0:23:DB:05:ED:4E:CE:63:C6:4D:98:AD:45:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/99312974-b017-47b8-b12f-499e1d12472c/99312974-b017-47b8-b12f-499e1d12472c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 69.88.132.0/23 165.140.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397982 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3b:63:eb:c5:e0:8c:bf:8c:2c:d9:ef:3b:f5:c3:c1:02:cf: 5b:97:99:0d:22:e1:29:1f:98:f9:23:d6:77:9e:03:f3:27:67: df:df:3f:12:a3:04:0d:48:78:83:6e:29:3f:cc:63:b6:c3:44: ed:8e:a1:43:f9:18:0e:3a:3a:d7:fa:55:42:d9:dd:4d:82:3a: bc:68:c6:b2:34:dd:f7:b1:8b:41:d3:f3:9b:ca:17:f3:77:12: 47:84:7e:72:04:2e:4f:6d:22:37:ea:56:c8:a1:12:da:6f:9c: 3c:11:36:c7:45:35:18:66:b4:c2:d8:fb:45:39:80:a4:23:b3: 61:44:f1:2f:f0:60:ed:34:1f:21:b1:7a:ba:66:5b:36:09:8b: e7:50:ca:19:35:40:ae:1b:0b:d3:91:41:32:94:d4:df:b4:3c: 59:88:18:6d:5f:80:5b:ab:a9:c1:da:77:da:c7:1f:70:44:de: b1:93:ba:c0:9d:8b:c5:d1:67:2f:9a:7c:e2:d1:f2:b9:43:ee: 83:19:a6:ce:20:f2:58:fa:0b:ed:bd:1e:70:d2:e4:e6:9f:26: be:ea:27:b1:b8:32:65:d5:c0:b8:49:cc:ed:2d:ff:8b:1d:c9: ce:9f:e6:b9:13:87:1e:99:41:43:56:1d:e0:50:e8:48:0b:a7: f4:8a:5a:3e -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE83J+JHWrIdEGao+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDkxODExNDUxNloXDTI4MDkwNjA1MzA1MVowLzEtMCsGA1UEAxMk OTkzMTI5NzQtYjAxNy00N2I4LWIxMmYtNDk5ZTFkMTI0NzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5xZAiVhnygaQ8uqFDX6Yj0JOcBg2QR4HdT4 rCXHseR9piH2+RReTcXmnqkNU5RynmyKnXjQ23k891O2Hv2pbz9tUfd0PzLcowpH LhEJEneDFhIyG8akZIqg+7Jz3YMDd+drPTHuOl0FJ+ZsKP+cAlvSd+vlZL0tUyjU yaB9tcCBMlReX0HWrJ14WtUeREHq/DgFY30oqmL0Llao4FwYR3Jqu2SIXo2YN9g3 /lWnw3yHHWbOE0A892h5nVVPgDQCfXaeNu6NUHgOdciG7AEKvgPziWUjhqNj8eyO 3x0eyyZKpUIP8thuCXqdMCW7JkNIfFnl6kavSrBupzbUo15ihQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFJL/nWZoMvAj2wXtTs5jxk2YrUW/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85 OTMxMjk3NC1iMDE3LTQ3YjgtYjEyZi00OTllMWQxMjQ3MmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzk5MzEyOTc0LWIwMTctNDdiOC1i MTJmLTQ5OWUxZDEyNDcyYy85OTMxMjk3NC1iMDE3LTQ3YjgtYjEyZi00OTllMWQx MjQ3MmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAFFWIQDBAKljGwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhKeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABQ7Y+vF4Iy/jCzZ7zv1w8ECz1uXmQ0i4SkfmPkj 1neeA/MnZ9/fPxKjBA1IeINuKT/MY7bDRO2OoUP5GA46Otf6VULZ3U2COrxoxrI0 3fexi0HT85vKF/N3EkeEfnIELk9tIjfqVsihEtpvnDwRNsdFNRhmtMLY+0U5gKQj s2FE8S/wYO00HyGxerpmWzYJi+dQyhk1QK4bC9ORQTKU1N+0PFmIGG1fgFurqcHa d9rHH3BE3rGTusCdi8XRZy+afOLR8rlD7oMZps4g8lj6C+29HnDS5OafJr7qJ7G4 MmXVwLhJzO0t/4sdyc6f5rkThx6ZQUNWHeBQ6EgLp/SKWj4= -----END CERTIFICATE-----Generated at Sun Sep 20 21:44:19 2026 by rpki-client