$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372.cer File: 2c35905f-57c3-4d9b-b8e3-408f1d9da372.cer (raw, json) Hash identifier: ZtkJOd5fXpl3KGO4Dmp0ZNJfGBEALbOCtLZP8QOjLfU= Subject key identifier: 95:33:A3:43:3E:CD:56:59:E5:BF:82:F6:DB:22:4A:91:4D:A6:CA:F4 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EA00D90E47628B00AF3B71320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/2c35905f-57c3-4d9b-b8e3-408f1d9da372.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jul 2026 08:45:11 +0000 Certificate not after: Sat 28 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 11038 IP: 69.57.164.0 -- 69.57.171.255 IP: 74.112.52.0/22 IP: 162.253.48.0/22 IP: 199.30.248.0/21 IP: 208.71.160.0/22 IP: 208.83.56.0/22 IP: 2604:b6c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:0d:90:e4:76:28:b0:0a:f3:b7:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 26 08:45:11 2026 GMT Not After : Oct 28 08:45:11 2028 GMT Subject: CN=2c35905f-57c3-4d9b-b8e3-408f1d9da372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:ee:27:45:6a:b7:ec:7e:9d:2c:f1:fb:65: 15:ab:e4:3d:c5:ca:11:fc:2d:4d:56:34:0e:d5:2b: e0:90:02:e1:98:1b:36:6b:c4:bd:1e:7f:0a:5d:fe: d7:53:01:7a:0a:c0:26:62:5b:b6:1e:77:e0:d9:4b: c6:b2:7a:72:71:b4:a5:f1:31:ec:d1:e6:f4:3b:9c: 4e:ec:04:4d:e7:cd:ca:da:3e:85:93:79:3f:8b:0b: d1:9a:5b:b1:e7:a4:82:1c:8a:4a:9f:2f:0d:3f:1f: fa:aa:02:e0:c8:3f:ab:26:ca:d8:50:8e:84:4a:ed: f1:4d:51:70:09:54:27:c0:bd:ed:a1:76:7f:90:c2: dd:db:71:e9:ea:d5:d9:6a:ee:66:c4:67:50:bf:cc: 59:71:d9:99:a7:07:8d:08:53:3b:0e:4a:00:bc:c4: 4e:5c:5a:2e:99:fb:16:0d:88:9c:25:3e:49:34:3a: 86:d4:07:32:d3:55:bf:12:06:7e:b5:21:53:37:53: 36:17:f9:c1:2c:b1:e8:cc:ee:7b:ab:ce:90:60:56: 17:4d:eb:83:3d:3a:41:13:a3:19:ec:16:34:55:51: 00:53:0a:d7:f5:47:1b:96:5a:62:b4:e3:f1:48:b7: 70:11:a9:0f:21:83:bc:19:99:86:87:e1:1d:f0:d9: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:33:A3:43:3E:CD:56:59:E5:BF:82:F6:DB:22:4A:91:4D:A6:CA:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2c35905f-57c3-4d9b-b8e3-408f1d9da372/2c35905f-57c3-4d9b-b8e3-408f1d9da372.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 69.57.164.0-69.57.171.255 74.112.52.0/22 162.253.48.0/22 199.30.248.0/21 208.71.160.0/22 208.83.56.0/22 IPv6: 2604:b6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11038 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:22:33:22:c6:ff:7e:35:1c:7e:4f:00:62:ed:95:37:31:81: d5:a7:97:62:86:bd:ed:b5:52:a6:43:32:aa:45:38:73:b7:bd: 27:65:af:9c:03:51:4e:f3:27:ad:cd:a1:1b:7f:91:24:f3:86: 62:db:2e:1c:4e:3f:d7:51:41:28:49:c4:2b:60:e1:6b:23:1f: a5:2f:91:5e:53:62:3f:83:7a:f6:7e:ea:ec:f5:95:e7:16:b4: 7a:11:ae:a6:7d:6c:cb:fd:4b:d2:24:50:9f:5e:b1:32:29:70: f1:ba:d6:27:97:33:12:12:a9:63:62:c5:16:3e:fe:82:74:c8: a6:88:81:5e:15:4e:5a:13:41:4d:4d:f2:c9:2d:63:92:57:b6: 4f:94:ef:b6:94:48:5e:88:75:cd:43:32:f7:09:c7:1c:d2:8c: 26:60:05:a2:cf:28:2f:b2:c9:85:37:31:55:46:36:34:13:a6: 75:38:32:0e:01:0b:e1:2b:a1:a9:9c:e7:d6:39:99:68:15:4f: d2:b6:76:66:ce:57:d6:b5:2f:9f:e9:79:8e:31:f8:29:91:77: 9c:fb:ba:ef:c4:90:57:f1:58:b5:7f:70:f3:98:00:0a:91:05: 71:96:c5:5c:46:ba:44:a9:bf:d9:ec:d9:fb:0d:3e:0d:c9:1f: a5:07:a4:01 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWE6gDZDkdiiwCvO3EyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyNjA4NDUxMVoXDTI4MTAyODA4NDUxMVowLzEtMCsGA1UEAxMk MmMzNTkwNWYtNTdjMy00ZDliLWI4ZTMtNDA4ZjFkOWRhMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK7uJ0Vqt+x+nSzx+2UVq+Q9xcoR/C1NVjQO 1SvgkALhmBs2a8S9Hn8KXf7XUwF6CsAmYlu2Hnfg2UvGsnpycbSl8THs0eb0O5xO 7ARN583K2j6Fk3k/iwvRmlux56SCHIpKny8NPx/6qgLgyD+rJsrYUI6ESu3xTVFw CVQnwL3toXZ/kMLd23Hp6tXZau5mxGdQv8xZcdmZpweNCFM7DkoAvMROXFoumfsW DYicJT5JNDqG1Acy01W/EgZ+tSFTN1M2F/nBLLHozO57q86QYFYXTeuDPTpBE6MZ 7BY0VVEAUwrX9UcbllpitOPxSLdwEakPIYO8GZmGh+Ed8NmjUwIDAQABo4IETzCC BEswHQYDVR0OBBYEFJUzo0M+zVZZ5b+C9tsiSpFNpsr0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y YzM1OTA1Zi01N2MzLTRkOWItYjhlMy00MDhmMWQ5ZGEzNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJjMzU5MDVmLTU3YzMtNGQ5Yi1i OGUzLTQwOGYxZDlkYTM3Mi8yYzM1OTA1Zi01N2MzLTRkOWItYjhlMy00MDhmMWQ5 ZGEzNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMDIEAgABMCwwDAMEAkU5pAMEAkU5qAMEAkpwNAMEAqL9MAMEA8ce +AMEAtBHoAMEAtBTODANBAIAAjAHAwUAJgS2wDAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgIrHjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAvIjMixv9+NRx+TwBi7ZU3MYHVp5dihr3ttVKmQzKq RThzt70nZa+cA1FO8yetzaEbf5Ek84Zi2y4cTj/XUUEoScQrYOFrIx+lL5FeU2I/ g3r2furs9ZXnFrR6Ea6mfWzL/UvSJFCfXrEyKXDxutYnlzMSEqljYsUWPv6CdMim iIFeFU5aE0FNTfLJLWOSV7ZPlO+2lEheiHXNQzL3Cccc0owmYAWizygvssmFNzFV RjY0E6Z1ODIOAQvhK6GpnOfWOZloFU/StnZmzlfWtS+f6XmOMfgpkXec+7rvxJBX 8Vi1f3DzmAAKkQVxlsVcRrpEqb/Z7Nn7DT4NyR+lB6QB -----END CERTIFICATE-----Generated at Tue Jul 28 22:10:52 2026 by rpki-client