$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/561b44e8-b6f4-4bf1-bc32-1b2719ee12fb.cer File: 561b44e8-b6f4-4bf1-bc32-1b2719ee12fb.cer (raw, json) Hash identifier: 7l7sullSlSH6IcGR8rPjrn6CxwDGd+r0v8J1GMvbtDw= Subject key identifier: 45:A8:7D:84:7F:19:DE:81:11:47:F9:0A:FC:28:9A:F4:C6:3D:C5:30 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E7213326B033FC271749D7A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/561b44e8-b6f4-4bf1-bc32-1b2719ee12fb/561b44e8-b6f4-4bf1-bc32-1b2719ee12fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/561b44e8-b6f4-4bf1-bc32-1b2719ee12fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jul 2026 21:29:21 +0000 Certificate not after: Wed 11 Oct 2028 21:29:21 +0000 Subordinate resources: AS: 402732 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:13:32:6b:03:3f:c2:71:74:9d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 9 21:29:21 2026 GMT Not After : Oct 11 21:29:21 2028 GMT Subject: CN=561b44e8-b6f4-4bf1-bc32-1b2719ee12fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:de:c8:57:00:21:91:9b:36:85:a6:ea:61: 3a:58:44:bc:12:ea:5d:12:21:9c:56:a9:6d:91:68: ce:39:5e:73:bc:dd:5a:f4:10:93:dd:c5:75:f1:15: 3a:e8:86:4f:74:3d:47:6c:0f:2e:bb:df:3d:db:d2: 9d:3e:7e:ab:7f:7c:6f:a8:c3:ea:be:6a:ed:16:07: 3b:e4:4e:5c:18:84:f2:2b:3e:f0:d1:57:6a:bb:12: 1e:d8:f4:4e:c8:da:00:97:1f:d9:01:23:01:36:76: 2f:d6:c0:0b:f3:c8:0c:07:81:e0:58:40:ca:aa:27: e1:30:33:ba:c2:0d:f4:3d:d4:d0:0c:37:8d:2f:4a: be:fb:84:7d:66:d7:8e:3e:d1:14:c1:04:f3:19:f9: d7:a8:fb:72:0d:fa:37:86:0c:c9:32:46:77:27:9f: 30:0c:c7:14:d4:70:f4:bd:5e:6c:db:9a:d8:8c:7b: 41:1a:a9:0a:45:33:0c:b7:0a:f8:b5:db:51:2a:3c: 31:6c:9f:f3:dd:3f:23:a9:20:ca:02:c1:11:19:ae: 51:86:72:36:49:31:f2:2f:80:d8:0a:1d:06:5e:c7: 3a:28:69:35:3a:59:c6:72:1b:b7:7b:67:c4:a9:50: 58:50:2f:d9:f6:ce:56:a0:44:6d:0e:72:cd:23:73: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A8:7D:84:7F:19:DE:81:11:47:F9:0A:FC:28:9A:F4:C6:3D:C5:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/561b44e8-b6f4-4bf1-bc32-1b2719ee12fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/561b44e8-b6f4-4bf1-bc32-1b2719ee12fb/561b44e8-b6f4-4bf1-bc32-1b2719ee12fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402732 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:44:d2:3a:80:ef:b9:ea:ae:d5:65:59:59:cf:0f:64:dd:ab: b4:fe:d5:3f:c0:ad:b5:0b:e0:ee:43:5e:1d:0e:31:cb:8d:d4: 4f:24:d8:ff:28:bc:9c:20:8a:9c:d1:d8:10:e7:b0:a4:df:e9: fb:a0:d8:08:45:21:3d:ce:7e:e7:a9:80:16:c5:ce:54:b3:11: 14:5a:a7:38:d9:92:c4:e0:1f:fc:1c:2b:d5:eb:ea:e2:f9:74: 9a:9c:f5:80:a3:6b:b8:bf:20:88:3c:45:65:6a:90:2a:b9:2d: b9:1e:d9:1b:d3:9e:24:76:81:0e:37:e7:91:26:78:84:95:eb: 17:60:19:d5:09:42:77:9a:19:8b:49:2d:c3:1f:83:1e:75:6f: 80:e3:f7:ea:0b:ee:f6:cf:00:2d:df:49:21:1a:9f:ef:ad:da: 3a:39:1a:b1:1c:be:56:55:41:15:aa:ec:08:56:90:bc:08:10: a0:1e:23:f4:8f:03:9c:a7:82:f5:e2:f0:5c:98:7f:93:cd:a0: 25:6c:0b:84:5b:eb:0b:d1:ad:0c:2d:e5:01:d8:e8:6a:ff:4c: 48:19:d6:38:70:f1:5d:20:d3:e4:cd:0f:3d:79:31:39:40:bb: 3f:73:08:51:7d:c6:eb:aa:24:c6:ca:92:39:f2:59:ad:c0:f7: 42:38:4c:84 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE5yEzJrAz/CcXSdegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwOTIxMjkyMVoXDTI4MTAxMTIxMjkyMVowLzEtMCsGA1UEAxMk NTYxYjQ0ZTgtYjZmNC00YmYxLWJjMzItMWIyNzE5ZWUxMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhfeyFcAIZGbNoWm6mE6WES8EupdEiGcVqlt kWjOOV5zvN1a9BCT3cV18RU66IZPdD1HbA8uu98929KdPn6rf3xvqMPqvmrtFgc7 5E5cGITyKz7w0VdquxIe2PROyNoAlx/ZASMBNnYv1sAL88gMB4HgWEDKqifhMDO6 wg30PdTQDDeNL0q++4R9ZteOPtEUwQTzGfnXqPtyDfo3hgzJMkZ3J58wDMcU1HD0 vV5s25rYjHtBGqkKRTMMtwr4tdtRKjwxbJ/z3T8jqSDKAsERGa5RhnI2STHyL4DY Ch0GXsc6KGk1OlnGchu3e2fEqVBYUC/Z9s5WoERtDnLNI3N3TQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFEWofYR/Gd6BEUf5CvwomvTGPcUwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 NjFiNDRlOC1iNmY0LTRiZjEtYmMzMi0xYjI3MTllZTEyZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzU2MWI0NGU4LWI2ZjQtNGJmMS1i YzMyLTFiMjcxOWVlMTJmYi81NjFiNDRlOC1iNmY0LTRiZjEtYmMzMi0xYjI3MTll ZTEyZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiUsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACZE0jqA77nqrtVlWVnPD2Tdq7T+ 1T/ArbUL4O5DXh0OMcuN1E8k2P8ovJwgipzR2BDnsKTf6fug2AhFIT3OfuepgBbF zlSzERRapzjZksTgH/wcK9Xr6uL5dJqc9YCja7i/IIg8RWVqkCq5Lbke2RvTniR2 gQ4355EmeISV6xdgGdUJQneaGYtJLcMfgx51b4Dj9+oL7vbPAC3fSSEan++t2jo5 GrEcvlZVQRWq7AhWkLwIEKAeI/SPA5yngvXi8FyYf5PNoCVsC4Rb6wvRrQwt5QHY 6Gr/TEgZ1jhw8V0g0+TNDz15MTlAuz9zCFF9xuuqJMbKkjnyWa3A90I4TIQ= -----END CERTIFICATE-----Generated at Tue Jul 21 14:27:03 2026 by rpki-client