$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd.cer File: 3d677108-5bec-47ac-8782-e1b85707e0dd.cer (raw, json) Hash identifier: dtKAmrZeEf7WiVKPz78pGn4l8vvki8HmGTz1o4mJDSY= Subject key identifier: C3:96:08:F5:A0:63:43:E1:0D:84:7B:50:F8:8D:D5:4E:31:23:1B:A3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DE88974DBDF1E90602444C388 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/3d677108-5bec-47ac-8782-e1b85707e0dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 May 2026 15:06:04 +0000 Certificate not after: Wed 23 Aug 2028 15:06:04 +0000 Subordinate resources: AS: 402537 IP: 2602:f3b5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:89:74:db:df:1e:90:60:24:44:c3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 21 15:06:04 2026 GMT Not After : Aug 23 15:06:04 2028 GMT Subject: CN=3d677108-5bec-47ac-8782-e1b85707e0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:0b:36:dd:d6:62:c5:e2:18:7b:9a:74:f0: a0:ee:a2:64:66:c9:d4:0f:57:e0:da:0f:9a:ea:87: 74:bd:c7:83:d0:69:b4:c3:91:60:e3:e6:a7:38:42: e1:e9:a4:75:0a:c8:a5:4f:c9:a3:69:0e:2d:9c:d0: 7a:b1:69:d9:41:e4:d3:0c:57:75:0e:8b:a1:4c:ac: 74:ba:8a:1f:28:34:66:8b:2f:92:f8:e1:e9:b1:e8: 61:38:98:2b:83:d0:a3:cc:d6:39:35:f4:15:a0:e6: 32:57:94:1c:d7:1b:ba:84:51:9c:1d:bf:0b:8b:c0: ff:7c:4e:33:dd:07:28:9c:21:d7:7a:ec:11:61:9b: 96:ed:9e:91:3c:02:ae:86:7d:76:f2:00:a9:1a:bb: e3:37:6a:cd:dc:d6:56:cf:c8:9e:b2:09:ac:8f:dc: 41:f6:98:4b:47:31:36:37:36:a8:75:e9:3b:6d:15: e3:88:c4:2c:b7:03:5e:ff:db:67:39:be:7f:0e:cf: 88:6a:2e:ea:5b:49:52:14:85:7c:02:67:db:c6:f4: 4e:07:2d:f7:ef:2c:73:ed:38:ee:63:11:54:16:72: f0:65:56:ff:67:2f:d3:31:73:89:6b:96:d3:f1:da: aa:ef:34:b8:fd:f0:58:a6:eb:a0:07:ba:e3:44:b6: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:08:F5:A0:63:43:E1:0D:84:7B:50:F8:8D:D5:4E:31:23:1B:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d677108-5bec-47ac-8782-e1b85707e0dd/3d677108-5bec-47ac-8782-e1b85707e0dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3b5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402537 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5c:32:c0:69:6e:01:e8:0c:56:a7:78:f3:9f:49:5c:e0:45: b5:77:b2:16:ea:e7:59:c0:eb:bb:6f:6c:d0:79:dc:0e:b2:0b: bb:42:76:17:ea:cc:65:ef:44:6d:4b:63:0a:03:65:1c:9b:59: ce:eb:66:d6:91:e2:6c:d5:1a:e0:e0:37:cf:35:8d:88:06:ba: 9e:f7:79:0f:97:93:5a:3b:35:84:11:83:b7:be:8d:8c:13:8e: 70:5c:9d:02:4d:f8:7e:b8:6a:83:f3:80:78:6c:59:b5:28:73: b5:d8:6f:a3:24:00:d4:b3:e8:e5:37:cd:1f:78:7f:60:9c:37: 3e:bd:2d:b5:f0:a9:4e:26:2f:54:f9:d5:87:74:09:a2:1f:ad: a2:58:6a:8a:88:66:d6:aa:eb:a3:a0:50:e9:09:a2:3b:9b:6d: 1d:36:2a:bf:54:86:86:dc:a4:f9:00:4f:7d:a8:e2:5e:09:c4: e3:e3:99:55:8d:71:49:25:8e:62:05:2f:8e:f0:a5:0d:be:96: d7:dc:98:9b:5c:ec:8b:e9:ec:29:d3:b0:fb:55:f1:6c:44:60: 52:11:b9:e0:a2:63:fd:8c:e5:3f:94:f5:d9:0a:07:ce:57:98: 99:9f:ad:47:b9:5e:61:33:f3:8f:f2:4a:fe:9b:bb:4d:7a:82: f0:2d:a6:a9 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE3oiXTb3x6QYCREw4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyMTE1MDYwNFoXDTI4MDgyMzE1MDYwNFowLzEtMCsGA1UEAxMk M2Q2NzcxMDgtNWJlYy00N2FjLTg3ODItZTFiODU3MDdlMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs4LNt3WYsXiGHuadPCg7qJkZsnUD1fg2g+a 6od0vceD0Gm0w5Fg4+anOELh6aR1CsilT8mjaQ4tnNB6sWnZQeTTDFd1DouhTKx0 uoofKDRmiy+S+OHpsehhOJgrg9CjzNY5NfQVoOYyV5Qc1xu6hFGcHb8Li8D/fE4z 3QconCHXeuwRYZuW7Z6RPAKuhn128gCpGrvjN2rN3NZWz8iesgmsj9xB9phLRzE2 Nzaodek7bRXjiMQstwNe/9tnOb5/Ds+Iai7qW0lSFIV8AmfbxvROBy337yxz7Tju YxFUFnLwZVb/Zy/TMXOJa5bT8dqq7zS4/fBYpuugB7rjRLY2ZQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFMOWCPWgY0PhDYR7UPiN1U4xIxujMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z ZDY3NzEwOC01YmVjLTQ3YWMtODc4Mi1lMWI4NTcwN2UwZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzNkNjc3MTA4LTViZWMtNDdhYy04 NzgyLWUxYjg1NzA3ZTBkZC8zZDY3NzEwOC01YmVjLTQ3YWMtODc4Mi1lMWI4NTcw N2UwZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvO1ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGJGkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAbFwywGluAegMVqd4859JXOBFtXeyFurnWcDru29s0Hnc DrILu0J2F+rMZe9EbUtjCgNlHJtZzutm1pHibNUa4OA3zzWNiAa6nvd5D5eTWjs1 hBGDt76NjBOOcFydAk34frhqg/OAeGxZtShztdhvoyQA1LPo5TfNH3h/YJw3Pr0t tfCpTiYvVPnVh3QJoh+tolhqiohm1qrro6BQ6QmiO5ttHTYqv1SGhtyk+QBPfaji XgnE4+OZVY1xSSWOYgUvjvClDb6W19yYm1zsi+nsKdOw+1XxbERgUhG54KJj/Yzl P5T12QoHzleYmZ+tR7leYTPzj/JK/pu7TXqC8C2mqQ== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:35 2026 by rpki-client