$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5b8018d-d543-4aec-a8c6-3a4d9aa13103.cer File: a5b8018d-d543-4aec-a8c6-3a4d9aa13103.cer (raw, json) Hash identifier: 2MEoITMMFcvwBTuh2hJ2fDz8W3rABkxfPi1w3+VAEiE= Subject key identifier: 7A:C7:EC:45:AA:B7:B8:3D:B4:13:A2:0C:0F:D1:D8:A2:39:0B:F1:B7 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E5C9C0A4A23EA1D05FDCB3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5b8018d-d543-4aec-a8c6-3a4d9aa13103/a5b8018d-d543-4aec-a8c6-3a4d9aa13103.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5b8018d-d543-4aec-a8c6-3a4d9aa13103/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jul 2026 04:57:17 +0000 Certificate not after: Wed 04 Oct 2028 04:57:17 +0000 Subordinate resources: AS: 32531 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5c:9c:0a:4a:23:ea:1d:05:fd:cb:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 2 04:57:17 2026 GMT Not After : Oct 4 04:57:17 2028 GMT Subject: CN=a5b8018d-d543-4aec-a8c6-3a4d9aa13103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:cd:fc:4d:ad:d7:79:88:fd:7d:91:45:53: da:96:62:55:3f:9a:b8:b0:1a:c3:58:f0:c0:fc:72: 5f:3c:bd:03:90:98:e9:9e:df:56:12:9b:83:39:d7: b7:86:8f:81:d0:dc:ba:72:0c:5f:67:eb:d6:48:8e: b4:66:49:f0:e2:d9:bc:aa:4e:5e:c1:68:e5:e6:27: a3:70:0a:20:c7:d0:77:66:8d:8b:e3:fb:47:73:4f: 35:2c:7d:07:cc:c7:53:8f:3c:76:4f:7e:20:a4:96: ed:d7:9b:2a:ea:c0:ad:1b:15:93:06:23:81:2b:fd: 48:d6:60:64:8e:8f:eb:21:b1:d2:e1:3c:96:f2:09: 3a:cb:42:f1:45:13:4e:dd:ef:73:58:94:08:c5:bb: 0b:dd:c5:83:97:10:54:88:ec:8f:85:f3:21:ba:1e: 6e:7f:f7:ac:13:29:18:35:cb:5c:a0:06:66:12:fb: 97:b7:fd:85:7c:53:e1:11:41:b6:76:a0:9a:2b:28: 3e:33:0d:88:b2:de:e7:2e:4a:e4:27:4c:5d:b3:d1: f4:d6:27:63:85:7b:08:2d:83:a3:b4:0d:29:24:be: bd:7a:ce:a0:a5:8f:dc:16:5a:81:b6:6a:43:71:59: c0:66:94:57:d9:f9:de:a7:6e:66:f0:8b:ce:e8:86: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:EC:45:AA:B7:B8:3D:B4:13:A2:0C:0F:D1:D8:A2:39:0B:F1:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5b8018d-d543-4aec-a8c6-3a4d9aa13103/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5b8018d-d543-4aec-a8c6-3a4d9aa13103/a5b8018d-d543-4aec-a8c6-3a4d9aa13103.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32531 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:10:59:e1:77:40:24:d4:7f:46:cc:c7:20:a2:8e:b7:48:ef: 67:69:9e:0d:1b:fa:23:3e:94:29:9f:be:6b:99:86:18:63:14: 2a:29:31:1d:38:36:b2:7e:9c:9b:85:4b:02:e5:87:27:8d:7f: d7:bf:9b:a3:3e:9a:bb:81:a6:63:4c:bb:2d:fb:a3:f3:bf:46: 07:e1:a0:61:ba:c8:94:4d:a9:ba:26:da:93:20:e2:2f:fa:d7: a6:e4:9e:d9:0b:f1:60:17:c5:3e:2f:1a:8c:5d:9f:9b:6e:e4: 13:65:be:f8:4f:16:af:6b:83:3a:5d:53:22:de:8f:07:d6:08: 9b:a6:4d:b1:b3:09:f7:cd:62:f1:7f:ea:2a:fa:23:eb:a4:81: 03:1f:b6:c4:2c:5d:ba:9b:98:f5:13:56:02:b9:37:e5:26:47: 28:44:44:c5:b8:0a:ee:9a:40:86:18:92:3d:71:af:c4:c3:1e: 38:3b:cd:a6:01:47:14:0d:23:6a:73:cc:5d:2f:09:95:80:c4: 38:51:45:1d:1d:6a:e4:ef:73:93:3a:0d:bc:dd:e8:7e:f7:46: ea:75:f7:95:a0:1c:6a:d6:88:3f:f0:e1:cb:ec:da:ea:0d:30: f4:1a:8d:90:c9:98:20:99:70:ad:1f:af:be:83:c0:77:6e:c0: e8:73:c4:0b -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE5cnApKI+odBf3LM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwMjA0NTcxN1oXDTI4MTAwNDA0NTcxN1owLzEtMCsGA1UEAxMk YTViODAxOGQtZDU0My00YWVjLWE4YzYtM2E0ZDlhYTEzMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWPN/E2t13mI/X2RRVPalmJVP5q4sBrDWPDA /HJfPL0DkJjpnt9WEpuDOde3ho+B0Ny6cgxfZ+vWSI60Zknw4tm8qk5ewWjl5iej cAogx9B3Zo2L4/tHc081LH0HzMdTjzx2T34gpJbt15sq6sCtGxWTBiOBK/1I1mBk jo/rIbHS4TyW8gk6y0LxRRNO3e9zWJQIxbsL3cWDlxBUiOyPhfMhuh5uf/esEykY NctcoAZmEvuXt/2FfFPhEUG2dqCaKyg+Mw2Ist7nLkrkJ0xds9H01idjhXsILYOj tA0pJL69es6gpY/cFlqBtmpDcVnAZpRX2fnep25m8IvO6IYQDQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHrH7EWqt7g9tBOiDA/R2KI5C/G3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h NWI4MDE4ZC1kNTQzLTRhZWMtYThjNi0zYTRkOWFhMTMxMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2E1YjgwMThkLWQ1NDMtNGFlYy1h OGM2LTNhNGQ5YWExMzEwMy9hNWI4MDE4ZC1kNTQzLTRhZWMtYThjNi0zYTRkOWFh MTMxMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfxMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAtBBZ4XdAJNR/RszHIKKOt0jvZ2me DRv6Iz6UKZ++a5mGGGMUKikxHTg2sn6cm4VLAuWHJ41/17+boz6au4GmY0y7Lfuj 879GB+GgYbrIlE2puibakyDiL/rXpuSe2QvxYBfFPi8ajF2fm27kE2W++E8Wr2uD Ol1TIt6PB9YIm6ZNsbMJ981i8X/qKvoj66SBAx+2xCxdupuY9RNWArk35SZHKERE xbgK7ppAhhiSPXGvxMMeODvNpgFHFA0janPMXS8JlYDEOFFFHR1q5O9zkzoNvN3o fvdG6nX3laAcataIP/Dhy+za6g0w9BqNkMmYIJlwrR+vvoPAd27A6HPECw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:43 2026 by rpki-client