$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee.cer File: afc941ae-9449-4fd9-82b8-9ae5867887ee.cer (raw, json) Hash identifier: JFtfMUdXXd1yI2eIyex19HWYFbxK8tMtawc1aPifV4U= Subject key identifier: 17:83:36:B3:0E:DC:5A:AE:96:BA:E1:7A:72:05:10:6E:A0:CE:E1:6F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D94B8C0DF3DA4C0A41313E840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/afc941ae-9449-4fd9-82b8-9ae5867887ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 14:33:28 +0000 Certificate not after: Mon 24 Jul 2028 14:33:28 +0000 Subordinate resources: AS: 19065 IP: 2602:802:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:b8:c0:df:3d:a4:c0:a4:13:13:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 21 14:33:28 2026 GMT Not After : Jul 24 14:33:28 2028 GMT Subject: CN=afc941ae-9449-4fd9-82b8-9ae5867887ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:9d:bd:a3:cc:7c:91:bd:29:1e:8b:b5:08: d6:4c:29:1f:1b:a4:17:5c:08:56:0d:52:6c:0e:14: 45:73:8b:a1:ca:de:12:87:aa:4c:13:07:fd:ab:64: b0:9e:e2:9d:23:d2:e2:ee:c1:9c:14:12:c7:3c:14: 46:ba:8f:95:46:25:8e:24:d6:56:46:e2:29:8c:01: 2a:da:ef:06:bc:5a:c7:60:66:5d:52:3e:10:61:7e: bd:a1:a6:c3:94:dd:de:aa:4c:7f:4a:61:d4:8c:28: 91:81:af:a9:a8:ce:8b:de:53:c3:1c:6c:ee:0e:6b: d8:61:57:aa:7d:f8:38:96:99:9e:a1:1d:ea:06:c9: 5b:e5:07:af:3e:73:4d:ae:71:ff:db:c2:f3:1c:47: da:af:64:a1:69:b7:4f:d5:e7:ae:3d:eb:66:49:54: da:54:9f:05:0f:fb:4f:4c:d9:9b:49:76:2d:d1:8a: f0:9d:c6:ca:a4:6e:85:e1:6f:b6:01:5a:c6:74:09: b5:e2:c8:58:07:71:02:06:a7:4d:b0:d5:15:ba:b0: f5:8f:38:f9:de:eb:86:3d:ad:cc:58:e6:7b:1e:f3: 66:33:7d:97:cf:60:e0:8b:72:24:0b:12:8e:ad:da: 23:50:29:e4:fa:6e:e5:75:b6:49:2b:e6:4e:c8:49: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:83:36:B3:0E:DC:5A:AE:96:BA:E1:7A:72:05:10:6E:A0:CE:E1:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/afc941ae-9449-4fd9-82b8-9ae5867887ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2602:802:5000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19065 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8d:19:29:6c:66:f2:21:d5:59:da:ca:f7:02:c1:a5:d7:1d: ae:84:5b:25:e9:c5:bb:f4:e8:ed:33:7d:36:11:85:94:7f:06: 44:46:01:d6:cd:35:a4:95:21:5f:c2:4a:01:ee:ce:07:c0:50: 9b:5b:a2:0c:02:c7:16:1c:10:10:c0:c7:ab:f2:ab:c8:c0:da: 95:8a:4a:d5:be:f0:6b:f6:66:0f:f5:0d:d8:c7:1b:4a:0d:87: c4:f6:49:fe:9d:e1:b6:55:3d:cd:39:92:a5:d6:3b:5a:6b:23: 3e:a3:67:b8:7b:b2:11:30:3f:20:34:3c:c3:b4:66:33:83:0d: f6:1d:c2:a3:de:20:5a:fa:c2:b3:70:b5:5f:d9:f1:42:99:0b: 83:58:ea:a7:4a:ca:ac:ab:28:a1:2e:55:cb:9e:da:15:af:66: 92:52:34:14:c3:d7:f9:02:e0:ab:13:a0:c2:fe:c2:28:15:e2: 73:9e:b7:69:e8:11:0b:8c:aa:74:cc:5b:a5:ef:fb:e5:da:c5: fd:bd:ae:1c:26:60:95:ed:88:72:b5:16:16:54:5c:3f:44:96: d3:70:41:d6:90:86:3d:0e:0a:bd:bd:a0:a6:89:40:a0:3d:eb: ec:d9:50:be:06:a1:e9:54:35:9c:76:5a:bf:ae:b4:d8:2c:86: ea:72:70:1d -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE2UuMDfPaTApBMT6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMTE0MzMyOFoXDTI4MDcyNDE0MzMyOFowLzEtMCsGA1UEAxMk YWZjOTQxYWUtOTQ0OS00ZmQ5LTgyYjgtOWFlNTg2Nzg4N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsidvaPMfJG9KR6LtQjWTCkfG6QXXAhWDVJs DhRFc4uhyt4Sh6pMEwf9q2SwnuKdI9Li7sGcFBLHPBRGuo+VRiWOJNZWRuIpjAEq 2u8GvFrHYGZdUj4QYX69oabDlN3eqkx/SmHUjCiRga+pqM6L3lPDHGzuDmvYYVeq ffg4lpmeoR3qBslb5QevPnNNrnH/28LzHEfar2ShabdP1eeuPetmSVTaVJ8FD/tP TNmbSXYt0YrwncbKpG6F4W+2AVrGdAm14shYB3ECBqdNsNUVurD1jzj53uuGPa3M WOZ7HvNmM32Xz2Dgi3IkCxKOrdojUCnk+m7ldbZJK+ZOyEkMvwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFBeDNrMO3FqulrrhenIFEG6gzuFvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h ZmM5NDFhZS05NDQ5LTRmZDktODJiOC05YWU1ODY3ODg3ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2FmYzk0MWFlLTk0NDktNGZkOS04 MmI4LTlhZTU4Njc4ODdlZS9hZmM5NDFhZS05NDQ5LTRmZDktODJiOC05YWU1ODY3 ODg3ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAggCUDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJKeTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAijRkpbGbyIdVZ2sr3AsGl1x2uhFsl6cW79OjtM302EYWU fwZERgHWzTWklSFfwkoB7s4HwFCbW6IMAscWHBAQwMer8qvIwNqVikrVvvBr9mYP 9Q3YxxtKDYfE9kn+neG2VT3NOZKl1jtaayM+o2e4e7IRMD8gNDzDtGYzgw32HcKj 3iBa+sKzcLVf2fFCmQuDWOqnSsqsqyihLlXLntoVr2aSUjQUw9f5AuCrE6DC/sIo FeJznrdp6BELjKp0zFul7/vl2sX9va4cJmCV7YhytRYWVFw/RJbTcEHWkIY9Dgq9 vaCmiUCgPevs2VC+BqHpVDWcdlq/rrTYLIbqcnAd -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:56 2026 by rpki-client