$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer File: df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer (raw, json) Hash identifier: +jxFG4AQQAt6YvJ86QCTf86oB7JmDVCbBh3kLsH5pK0= Subject key identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584F240FBB7BD735D1104A5276E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Sep 2026 15:36:15 +0000 Certificate not after: Wed 04 Oct 2028 20:35:35 +0000 Subordinate resources: AS: 62847 AS: 402698 IP: 134.49.228.0/22 IP: 2606:c250::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:0f:bb:7b:d7:35:d1:10:4a:52:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Sep 11 15:36:15 2026 GMT Not After : Oct 4 20:35:35 2028 GMT Subject: CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:78:31:22:c3:6d:89:ba:07:72:d6:d4:b4: e1:cb:01:1f:15:3c:ef:3d:97:ac:d3:dd:c6:b4:6d: 37:ea:43:53:73:74:75:4d:5c:24:b1:28:44:5a:12: 33:38:15:e7:c6:67:a5:31:19:e7:75:47:a1:09:2c: 16:76:7a:1e:e4:1c:54:f7:40:32:c1:13:51:ef:a8: 33:ae:17:ae:28:8f:22:1f:f1:b5:5a:10:ac:45:6f: 90:fe:72:6a:fb:ad:77:08:a8:75:1b:ab:d6:c8:11: c6:b2:c5:90:76:d1:29:19:ea:a9:44:4c:c6:f6:0e: 1d:18:17:07:33:e8:d9:4f:33:7d:24:68:53:c6:21: 83:eb:ae:c1:06:a8:57:7a:78:1f:57:1e:f7:a8:cb: ab:cc:4f:0f:be:67:26:64:aa:ed:8b:f9:e3:fb:70: 05:e3:e2:d4:b5:39:a1:da:69:65:f4:42:2d:a7:ca: ff:d2:e1:a3:d2:a1:91:d0:bc:e7:1b:62:14:34:2f: f6:e9:66:eb:08:20:2e:97:64:77:f4:07:2e:49:8e: 6e:f8:fd:ed:d6:21:d8:c6:f3:0d:df:d8:66:58:93: 3d:ea:53:38:5a:a2:fc:d6:83:9d:a6:4c:19:a9:43: ee:14:11:31:16:66:7e:23:84:b4:ed:23:5b:17:1e: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 134.49.228.0/22 IPv6: 2606:c250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62847 402698 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:52:83:f5:26:f7:98:69:2f:38:56:c7:c8:f0:c3:2b:db:3a: 00:8f:60:f9:01:61:cc:ed:c0:78:cd:35:f6:8e:3d:e9:d9:a4: 2d:bd:56:f5:94:60:e2:42:33:6c:5a:9a:eb:b0:c5:ae:50:cf: 3e:cc:b6:62:55:03:00:41:98:6b:c1:77:9d:4e:97:30:2e:28: bd:e3:a4:3d:f2:44:3e:18:b5:66:e1:2f:eb:19:1a:af:d1:04: 58:73:8c:da:2e:46:73:80:d8:55:43:de:de:2b:73:ca:b4:c9: 54:13:02:de:1f:88:3a:db:e2:ee:f6:a6:4c:a6:fd:bd:03:a8: 05:08:e0:c9:34:af:dc:35:bf:f8:2d:2e:49:3d:50:c6:3f:4c: e7:6d:5a:ff:fd:5b:d4:99:bf:5e:95:90:e6:ed:ea:b6:b2:09: 9c:f8:9a:01:4c:44:90:13:1c:a6:a0:b0:09:cb:ce:4d:43:ab: b6:82:b5:9b:b6:c6:f0:fc:48:e9:f7:c6:d3:4f:c0:ee:35:08: 7e:1c:12:3d:26:d8:f4:94:7b:40:cc:12:f9:ab:45:80:8a:81: 9f:04:f9:e3:3c:84:7b:bb:8a:f4:96:74:7f:cd:c5:53:9d:66: 84:41:ad:c5:4b:54:bf:47:e2:4d:08:88:c6:71:ee:e0:92:eb: 70:7f:39:1f -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE8kD7t71zXREEpSduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDkxMTE1MzYxNVoXDTI4MTAwNDIwMzUzNVowLzEtMCsGA1UEAxMk ZGY2YmMzYjItZTYyMS00MjcyLWI2MDQtMTBlZDVkYmI0ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTp4MSLDbYm6B3LW1LThywEfFTzvPZes093G tG036kNTc3R1TVwksShEWhIzOBXnxmelMRnndUehCSwWdnoe5BxU90AywRNR76gz rheuKI8iH/G1WhCsRW+Q/nJq+613CKh1G6vWyBHGssWQdtEpGeqpREzG9g4dGBcH M+jZTzN9JGhTxiGD667BBqhXengfVx73qMurzE8PvmcmZKrti/nj+3AF4+LUtTmh 2mll9EItp8r/0uGj0qGR0LznG2IUNC/26WbrCCAul2R39AcuSY5u+P3t1iHYxvMN 39hmWJM96lM4WqL81oOdpkwZqUPuFBExFmZ+I4S07SNbFx6WQwIDAQABo4IELzCC BCswHQYDVR0OBBYEFB287s9n82l1YIIWi0b88YuOLwmnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k ZjZiYzNiMi1lNjIxLTQyNzItYjYwNC0xMGVkNWRiYjRlYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RmNmJjM2IyLWU2MjEtNDI3Mi1i NjA0LTEwZWQ1ZGJiNGVjMS9kZjZiYzNiMi1lNjIxLTQyNzItYjYwNC0xMGVkNWRi YjRlYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKGMeQwDQQCAAIwBwMFACYGwlAwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDAPV/AgMGJQowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAT1KD9Sb3mGkvOFbHyPDD K9s6AI9g+QFhzO3AeM019o496dmkLb1W9ZRg4kIzbFqa67DFrlDPPsy2YlUDAEGY a8F3nU6XMC4oveOkPfJEPhi1ZuEv6xkar9EEWHOM2i5Gc4DYVUPe3itzyrTJVBMC 3h+IOtvi7vamTKb9vQOoBQjgyTSv3DW/+C0uST1Qxj9M521a//1b1Jm/XpWQ5u3q trIJnPiaAUxEkBMcpqCwCcvOTUOrtoK1m7bG8PxI6ffG00/A7jUIfhwSPSbY9JR7 QMwS+atFgIqBnwT54zyEe7uK9JZ0f83FU51mhEGtxUtUv0fiTQiIxnHu4JLrcH85 Hw== -----END CERTIFICATE-----Generated at Sun Sep 20 16:50:32 2026 by rpki-client