$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/721bb5f8-4b80-4e3e-94b6-d57a6884c685.cer File: 721bb5f8-4b80-4e3e-94b6-d57a6884c685.cer (raw, json) Hash identifier: 0ZjfeK9P4QWf5rrP5cM5gjQO6Z3uIQ1bqQmdDGS5+mw= Subject key identifier: 1D:2F:3B:29:D3:0B:F0:3E:8F:62:A9:3F:33:D2:4D:CF:B6:2E:7F:ED Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D95C70FDB8B80247FA1D06480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/721bb5f8-4b80-4e3e-94b6-d57a6884c685/721bb5f8-4b80-4e3e-94b6-d57a6884c685.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/721bb5f8-4b80-4e3e-94b6-d57a6884c685/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 23:38:06 +0000 Certificate not after: Mon 24 Jul 2028 23:38:06 +0000 Subordinate resources: AS: 402327 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:c7:0f:db:8b:80:24:7f:a1:d0:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 21 23:38:06 2026 GMT Not After : Jul 24 23:38:06 2028 GMT Subject: CN=721bb5f8-4b80-4e3e-94b6-d57a6884c685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1b:43:7e:88:55:54:53:9c:8b:f7:22:a6:04: 1f:62:7a:3a:33:ab:2c:16:cd:ba:09:b2:84:00:49: 2b:2f:79:65:3f:c2:60:47:b1:b5:61:4e:1d:53:29: aa:18:a5:41:b3:8b:e2:95:c0:54:65:3e:66:37:cf: 84:a7:6f:82:54:3c:67:82:ab:04:77:42:91:db:3b: fe:c6:3a:72:c1:30:86:e5:af:ef:96:d2:7e:5c:a5: 65:8a:f2:47:45:45:0e:6a:70:2b:62:a7:d8:3e:60: a0:4b:7c:28:07:34:67:e3:d1:3a:34:51:9c:e2:39: 8b:0d:29:81:0e:9e:1d:50:3b:89:fe:6f:65:89:24: 05:72:84:cd:7e:6d:17:d6:29:83:cb:d0:22:58:02: 69:77:30:02:c0:9a:74:e2:aa:1d:49:f7:2f:78:25: 5a:48:3c:e1:37:b7:9b:7b:3f:79:45:4e:f6:6d:ca: 12:c9:43:e2:2e:3d:df:72:9d:9e:38:e5:d8:f3:8f: 6b:9d:e1:06:63:e2:9f:44:c2:7d:d7:db:01:97:f7: 67:73:a9:d6:a8:47:8a:8a:08:20:f1:0b:c7:06:4c: 34:55:fe:fc:c2:35:50:ae:7e:64:f9:21:fa:0f:b4: 0e:d7:30:66:49:c1:19:c8:e1:ad:f0:07:6c:5b:17: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:3B:29:D3:0B:F0:3E:8F:62:A9:3F:33:D2:4D:CF:B6:2E:7F:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/721bb5f8-4b80-4e3e-94b6-d57a6884c685/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/721bb5f8-4b80-4e3e-94b6-d57a6884c685/721bb5f8-4b80-4e3e-94b6-d57a6884c685.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402327 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:98:b1:8a:7f:22:e6:31:c6:6f:d7:5e:6b:d1:80:c9:2c:50: 54:74:36:06:ba:df:99:0c:45:2c:d2:97:3a:3c:d2:21:2c:5a: 65:89:db:98:e4:4f:90:cb:0d:cb:1a:56:b6:ba:27:ea:84:1f: 4c:9b:1b:08:1b:6e:5d:96:0f:f8:9a:ba:9b:09:87:27:2e:18: 74:cb:2a:44:3b:65:99:98:f3:63:d3:d3:05:10:0c:54:81:a9: ba:a5:e8:38:cc:7a:9e:c7:f1:a2:e1:c6:68:90:c4:50:83:37: 53:fb:17:f7:fc:08:5f:2b:93:84:50:c9:7b:b5:7c:70:21:66: a5:c3:df:a5:f2:e0:94:cf:4c:10:07:0e:bd:34:18:32:a5:04: f2:c5:20:b8:11:e7:8b:ea:bb:39:31:a0:8a:02:62:ff:19:74: b4:73:04:29:5a:38:07:d9:b9:1f:1e:96:f7:87:99:93:98:03: 70:b6:8b:f0:60:f3:60:56:b5:11:93:0f:87:ee:e5:b3:04:d4: 87:b7:f8:0e:de:1c:10:30:ac:13:aa:1c:92:22:a3:be:4f:ed: 4c:7a:2b:df:f9:92:86:2f:ea:f3:be:c1:99:ea:a8:bc:d5:50: 4c:8a:84:17:82:15:fb:42:78:69:49:05:23:9d:af:37:9c:0d: ed:fb:24:66 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE2Vxw/bi4Akf6HQZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMTIzMzgwNloXDTI4MDcyNDIzMzgwNlowLzEtMCsGA1UEAxMk NzIxYmI1ZjgtNGI4MC00ZTNlLTk0YjYtZDU3YTY4ODRjNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RtDfohVVFOci/cipgQfYno6M6ssFs26CbKE AEkrL3llP8JgR7G1YU4dUymqGKVBs4vilcBUZT5mN8+Ep2+CVDxngqsEd0KR2zv+ xjpywTCG5a/vltJ+XKVlivJHRUUOanArYqfYPmCgS3woBzRn49E6NFGc4jmLDSmB Dp4dUDuJ/m9liSQFcoTNfm0X1imDy9AiWAJpdzACwJp04qodSfcveCVaSDzhN7eb ez95RU72bcoSyUPiLj3fcp2eOOXY849rneEGY+KfRMJ919sBl/dnc6nWqEeKiggg 8QvHBkw0Vf78wjVQrn5k+SH6D7QO1zBmScEZyOGt8AdsWxctPQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFB0vOynTC/A+j2KpPzPSTc+2Ln/tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MjFiYjVmOC00YjgwLTRlM2UtOTRiNi1kNTdhNjg4NGM2ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzcyMWJiNWY4LTRiODAtNGUzZS05 NGI2LWQ1N2E2ODg0YzY4NS83MjFiYjVmOC00YjgwLTRlM2UtOTRiNi1kNTdhNjg4 NGM2ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiOXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAACYsYp/IuYxxm/XXmvRgMksUFR0 Nga635kMRSzSlzo80iEsWmWJ25jkT5DLDcsaVra6J+qEH0ybGwgbbl2WD/iaupsJ hycuGHTLKkQ7ZZmY82PT0wUQDFSBqbql6DjMep7H8aLhxmiQxFCDN1P7F/f8CF8r k4RQyXu1fHAhZqXD36Xy4JTPTBAHDr00GDKlBPLFILgR54vquzkxoIoCYv8ZdLRz BClaOAfZuR8elveHmZOYA3C2i/Bg82BWtRGTD4fu5bME1Ie3+A7eHBAwrBOqHJIi o75P7Ux6K9/5koYv6vO+wZnqqLzVUEyKhBeCFftCeGlJBSOdrzecDe37JGY= -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:58 2026 by rpki-client