$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64ab9f7b-d488-40d2-bacb-3d8071cd9d6c.cer File: 64ab9f7b-d488-40d2-bacb-3d8071cd9d6c.cer (raw, json) Hash identifier: GPxEXKk39zTuihQcO/iavHC9RoBvxzHr2F/RfkdUi0M= Subject key identifier: 9B:D9:D3:C0:82:01:C9:E5:B5:C4:E4:98:8E:FA:5E:0C:E3:0A:B0:AD Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DFC5A577305BE47D829017C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64ab9f7b-d488-40d2-bacb-3d8071cd9d6c/64ab9f7b-d488-40d2-bacb-3d8071cd9d6c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64ab9f7b-d488-40d2-bacb-3d8071cd9d6c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 May 2026 17:27:18 +0000 Certificate not after: Wed 30 Aug 2028 17:27:18 +0000 Subordinate resources: AS: 399004 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fc:5a:57:73:05:be:47:d8:29:01:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 28 17:27:18 2026 GMT Not After : Aug 30 17:27:18 2028 GMT Subject: CN=64ab9f7b-d488-40d2-bacb-3d8071cd9d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:86:e0:6f:3e:f6:53:75:c0:29:da:11:36: 1e:a7:9f:7c:81:2e:57:63:9e:f9:b2:40:bb:f2:f9: 1c:de:bd:e1:2f:f9:74:c2:ae:b2:23:fb:a4:18:a7: ba:a9:6e:69:52:9d:c9:34:92:32:45:ae:25:e3:7c: 13:4a:3b:8c:91:e5:66:08:ee:ff:dd:5a:91:33:2c: c5:97:5e:0f:3b:a7:19:06:ef:c6:87:ab:d3:f0:42: f6:81:ef:96:5d:d2:7a:60:b4:c2:79:7f:16:6c:96: e6:14:c0:64:86:af:ef:8d:c7:ef:c1:86:b2:6f:14: 65:ea:83:35:e0:75:4a:ac:f4:3a:22:c9:44:a8:b1: e9:c0:b5:80:6d:9c:4c:f5:82:12:f8:8a:cf:05:3d: a2:d5:e8:72:8c:24:09:31:f7:63:92:99:7c:3e:27: a6:90:e4:ad:53:93:76:73:1b:cf:63:b7:32:c6:7b: 13:09:60:fe:e5:69:4f:d3:5f:83:48:05:b8:aa:ab: a5:31:b9:d6:0f:17:73:fc:ff:e5:0b:ce:70:52:44: 17:aa:e6:61:9e:a1:82:07:7b:1c:06:5e:42:d5:7b: 26:55:5e:ed:bf:4b:9b:66:af:30:40:f7:37:47:dc: 33:f3:74:14:b6:31:c5:da:f3:32:b7:0f:09:df:b2: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D9:D3:C0:82:01:C9:E5:B5:C4:E4:98:8E:FA:5E:0C:E3:0A:B0:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64ab9f7b-d488-40d2-bacb-3d8071cd9d6c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64ab9f7b-d488-40d2-bacb-3d8071cd9d6c/64ab9f7b-d488-40d2-bacb-3d8071cd9d6c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399004 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0a:16:22:3b:d7:84:8a:69:4b:8f:aa:f4:0f:3a:0c:04:57: e5:8e:58:c6:11:79:c1:d0:6f:50:09:a5:e0:73:ea:c7:96:dc: 8d:2f:54:b2:7f:ea:a3:15:e1:b9:82:bb:d8:12:96:8a:b4:b0: 24:83:ce:ff:4a:cf:e3:57:70:cb:ac:13:bd:6a:a6:b7:3d:58: 79:b6:13:2c:8c:63:9a:89:ec:1e:07:a7:f9:b7:96:35:71:b4: ba:10:06:a1:b9:bc:b4:4c:22:00:59:5f:3a:27:ab:94:86:6b: e4:ba:da:7c:38:99:80:be:c7:19:f2:e5:c5:46:bb:32:25:10: de:a3:fa:b1:0a:cc:03:b8:84:ed:ab:0b:c2:0e:a2:50:c5:05: aa:3d:33:51:44:98:d9:74:33:4f:b5:3c:de:16:6b:5d:7f:64: c6:50:1f:04:62:86:19:2d:d4:c3:8d:4f:c6:22:f5:53:c7:bc: b1:8a:da:78:6f:d5:d6:44:1d:69:7f:99:30:7a:2c:48:18:25: e4:2c:20:3d:6a:cb:8f:62:0b:c6:3d:dc:d0:f2:ff:04:16:ab: 35:28:cd:b9:8c:d2:a1:cf:8d:b6:61:b2:3c:8b:4e:a6:23:0d: ee:38:db:68:37:f1:a1:16:73:8b:c1:1b:52:3d:6f:d6:52:da: 46:ee:43:86 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE38WldzBb5H2CkBfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyODE3MjcxOFoXDTI4MDgzMDE3MjcxOFowLzEtMCsGA1UEAxMk NjRhYjlmN2ItZDQ4OC00MGQyLWJhY2ItM2Q4MDcxY2Q5ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVyG4G8+9lN1wCnaETYep598gS5XY575skC7 8vkc3r3hL/l0wq6yI/ukGKe6qW5pUp3JNJIyRa4l43wTSjuMkeVmCO7/3VqRMyzF l14PO6cZBu/Gh6vT8EL2ge+WXdJ6YLTCeX8WbJbmFMBkhq/vjcfvwYaybxRl6oM1 4HVKrPQ6IslEqLHpwLWAbZxM9YIS+IrPBT2i1ehyjCQJMfdjkpl8PiemkOStU5N2 cxvPY7cyxnsTCWD+5WlP01+DSAW4qqulMbnWDxdz/P/lC85wUkQXquZhnqGCB3sc Bl5C1XsmVV7tv0ubZq8wQPc3R9wz83QUtjHF2vMytw8J37IqfQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJvZ08CCAcnltcTkmI76XgzjCrCtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 NGFiOWY3Yi1kNDg4LTQwZDItYmFjYi0zZDgwNzFjZDlkNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY0YWI5ZjdiLWQ0ODgtNDBkMi1i YWNiLTNkODA3MWNkOWQ2Yy82NGFiOWY3Yi1kNDg4LTQwZDItYmFjYi0zZDgwNzFj ZDlkNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhacMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACQKFiI714SKaUuPqvQPOgwEV+WO WMYRecHQb1AJpeBz6seW3I0vVLJ/6qMV4bmCu9gSloq0sCSDzv9Kz+NXcMusE71q prc9WHm2EyyMY5qJ7B4Hp/m3ljVxtLoQBqG5vLRMIgBZXzonq5SGa+S62nw4mYC+ xxny5cVGuzIlEN6j+rEKzAO4hO2rC8IOolDFBao9M1FEmNl0M0+1PN4Wa11/ZMZQ HwRihhkt1MONT8Yi9VPHvLGK2nhv1dZEHWl/mTB6LEgYJeQsID1qy49iC8Y93NDy /wQWqzUozbmM0qHPjbZhsjyLTqYjDe4422g38aEWc4vBG1I9b9ZS2kbuQ4Y= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:41 2026 by rpki-client