$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.cer File: cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.cer (raw, json) Hash identifier: friEAhHBj/iN7p4yjdxE9Z4ISppRer7jzsmXtMeevDg= Subject key identifier: 00:66:91:EE:39:EC:89:0B:B6:6C:BE:39:1D:87:30:3C:D8:37:F7:92 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F089A86475EACBD7230B8A180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Sep 2026 19:33:16 +0000 Certificate not after: Sun 13 Aug 2028 18:47:04 +0000 Subordinate resources: AS: 402694 IP: 69.46.38.0/24 IP: 142.228.36.0/22 IP: 142.228.60.0/22 IP: 2604:5a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:9a:86:47:5e:ac:bd:72:30:b8:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Sep 1 19:33:16 2026 GMT Not After : Aug 13 18:47:04 2028 GMT Subject: CN=cffcc184-95e8-40b1-9a9e-e4445e3b9bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:fe:79:eb:db:3b:2a:97:ca:4e:dd:fa:ad: b7:10:c0:b3:61:34:1a:6c:5a:2c:8b:85:88:76:11: d2:2e:e9:5b:ef:8e:6b:74:70:54:0f:dd:a5:7f:ca: 59:17:cd:35:19:fa:67:34:fa:1a:d0:67:83:c7:be: ba:d1:70:50:6c:fc:a8:59:ef:56:8f:b0:d6:b6:31: 2e:a4:b2:12:57:49:47:41:f3:6a:bd:4d:6d:94:5a: 27:65:9a:6e:fa:eb:2a:6b:1e:e6:36:8d:16:80:3b: 25:18:27:3c:de:27:0a:88:dc:4b:48:9a:b4:4f:6b: c5:d8:28:30:9d:b8:ad:3e:e6:14:6c:ff:2e:d5:7c: f7:5f:7d:43:7d:4e:55:05:e8:15:65:ea:c0:05:34: fd:38:59:3a:b8:21:cf:20:73:01:3c:1d:14:88:ac: c7:18:90:31:a1:0f:03:39:cf:e2:45:32:66:3c:e7: bd:c4:36:12:e5:ec:83:c8:f4:a5:57:b0:cc:1c:8c: fc:61:3c:2c:97:da:a5:ff:ba:a4:48:93:b4:bd:f4: ca:b8:b2:95:f4:b6:0d:51:51:ed:a8:bf:1b:07:a4: 00:cb:43:c7:48:9c:74:eb:8a:51:f1:84:5f:e3:e1: 28:88:9c:d2:41:d8:06:4c:8b:d3:22:13:8a:60:3c: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:91:EE:39:EC:89:0B:B6:6C:BE:39:1D:87:30:3C:D8:37:F7:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 69.46.38.0/24 142.228.36.0/22 142.228.60.0/22 IPv6: 2604:5a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402694 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:8c:0a:d6:d9:48:75:0f:b9:6a:75:cd:67:a9:f1:99:8b:66: 63:7f:7b:1e:ed:b8:88:db:51:a1:0a:a6:3b:87:d7:ec:1e:a1: 0e:7d:e7:aa:60:b4:6a:98:63:61:df:f0:26:d2:a5:03:a5:dc: 60:cc:46:39:8a:eb:ac:11:07:9a:6e:31:13:c9:59:72:3e:ac: 82:15:e1:56:74:28:66:dc:f1:b6:ac:7c:aa:5a:da:b4:91:cb: 46:b0:58:7c:70:d7:7f:67:fc:b0:90:b2:d0:a5:71:65:84:2b: 89:b3:fb:cf:04:dc:19:4c:e7:b7:a0:59:5a:c5:5a:1b:53:e3: 35:4e:b0:96:61:0c:84:d3:98:cb:c4:d0:d6:e9:13:e2:91:ae: 48:9b:31:74:79:f1:08:38:23:b1:be:85:46:8a:ae:72:a5:8e: c9:e2:e1:c8:da:af:5e:d7:0c:3d:39:4b:0b:e9:29:c5:77:78: 0c:c9:63:91:c6:4d:9d:40:c2:6f:3d:25:de:76:62:ca:50:4a: ad:da:f2:37:a0:48:6b:eb:1e:16:5b:8c:49:b7:f3:1b:5b:45: 9c:52:5f:8f:63:11:b0:55:99:68:97:66:8b:fc:7c:bc:29:8a: b0:c1:aa:b0:b9:d8:09:5f:da:d6:be:dc:21:24:3e:72:aa:12: 86:52:bb:83 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE8ImoZHXqy9cjC4oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDkwMTE5MzMxNloXDTI4MDgxMzE4NDcwNFowLzEtMCsGA1UEAxMk Y2ZmY2MxODQtOTVlOC00MGIxLTlhOWUtZTQ0NDVlM2I5YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApur+eevbOyqXyk7d+q23EMCzYTQabFosi4WI dhHSLulb745rdHBUD92lf8pZF801GfpnNPoa0GeDx7660XBQbPyoWe9Wj7DWtjEu pLISV0lHQfNqvU1tlFonZZpu+usqax7mNo0WgDslGCc83icKiNxLSJq0T2vF2Cgw nbitPuYUbP8u1Xz3X31DfU5VBegVZerABTT9OFk6uCHPIHMBPB0UiKzHGJAxoQ8D Oc/iRTJmPOe9xDYS5eyDyPSlV7DMHIz8YTwsl9ql/7qkSJO0vfTKuLKV9LYNUVHt qL8bB6QAy0PHSJx064pR8YRf4+EoiJzSQdgGTIvTIhOKYDykGQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFABmke457IkLtmy+OR2HMDzYN/eSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j ZmZjYzE4NC05NWU4LTQwYjEtOWE5ZS1lNDQ0NWUzYjliZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2NmZmNjMTg0LTk1ZTgtNDBiMS05 YTllLWU0NDQ1ZTNiOWJkNC9jZmZjYzE4NC05NWU4LTQwYjEtOWE5ZS1lNDQ0NWUz YjliZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBABFLiYDBAKO5CQDBAKO5DwwDQQCAAIwBwMFACYE WgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBiUGMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIWMCtbZSHUP uWp1zWep8ZmLZmN/ex7tuIjbUaEKpjuH1+weoQ5956pgtGqYY2Hf8CbSpQOl3GDM RjmK66wRB5puMRPJWXI+rIIV4VZ0KGbc8basfKpa2rSRy0awWHxw139n/LCQstCl cWWEK4mz+88E3BlM57egWVrFWhtT4zVOsJZhDITTmMvE0NbpE+KRrkibMXR58Qg4 I7G+hUaKrnKljsni4cjar17XDD05SwvpKcV3eAzJY5HGTZ1Awm89Jd52YspQSq3a 8jegSGvrHhZbjEm38xtbRZxSX49jEbBVmWiXZov8fLwpirDBqrC52Alf2ta+3CEk PnKqEoZSu4M= -----END CERTIFICATE-----Generated at Mon Sep 21 15:46:12 2026 by rpki-client