$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bf7114d7-dfd6-4a82-9339-1e55c82d8b0e.cer File: bf7114d7-dfd6-4a82-9339-1e55c82d8b0e.cer (raw, json) Hash identifier: TEj/EX1VMbOprt7luoZkfe2kJzZYYUuu9xqQs4y0lb0= Subject key identifier: 16:92:BF:E2:88:67:01:46:ED:FB:B9:38:49:D2:E5:15:B1:0D:BC:54 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E690660F3EBE286BC346D6700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bf7114d7-dfd6-4a82-9339-1e55c82d8b0e/bf7114d7-dfd6-4a82-9339-1e55c82d8b0e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bf7114d7-dfd6-4a82-9339-1e55c82d8b0e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 15:41:14 +0000 Certificate not after: Sun 08 Oct 2028 15:41:14 +0000 Subordinate resources: AS: 401953 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:06:60:f3:eb:e2:86:bc:34:6d:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 6 15:41:14 2026 GMT Not After : Oct 8 15:41:14 2028 GMT Subject: CN=bf7114d7-dfd6-4a82-9339-1e55c82d8b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:2d:b5:11:2b:43:4d:d2:b8:d7:53:a0:ea: 1f:72:b3:7b:52:c1:18:88:07:af:58:88:e2:7c:66: 49:d4:0f:d3:8f:f0:64:bb:b2:1b:38:8b:6f:e8:2f: 27:9b:a4:d0:38:25:59:e9:53:3a:95:b1:ed:af:e4: ee:c7:f7:eb:9b:a3:cc:d0:d4:23:fd:4f:16:a6:02: 2f:de:d9:e1:91:3d:d8:b3:f3:51:a0:95:4d:33:c6: 8b:53:f8:14:20:ee:3a:b6:ef:a9:c3:ea:e7:3a:18: 61:a6:fc:aa:3b:73:3d:0e:f3:44:54:1c:26:be:64: 58:3c:16:6a:0c:d8:e6:e2:40:1f:c3:d3:25:08:a3: 9e:c5:5a:5e:3c:b0:0b:85:1c:c4:0d:58:02:b4:58: dd:f0:0c:3b:ac:de:25:62:68:9c:92:94:c8:4f:34: 8d:f5:70:fd:b3:28:82:33:7e:0c:cb:3e:e8:a6:0f: 8f:45:0a:c0:42:0a:18:ef:82:46:fd:a9:0f:35:28: 31:0f:20:0b:f4:6c:a9:ac:e7:b7:5c:d7:fa:40:5e: 81:02:e8:16:d2:ff:a2:2f:5f:c9:46:5c:8f:8c:24: 8d:6d:28:c6:aa:e1:d0:ab:cd:bf:cc:67:58:97:dd: 9a:a7:0b:b7:ef:8a:b8:6b:ea:43:df:ee:33:a0:08: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:92:BF:E2:88:67:01:46:ED:FB:B9:38:49:D2:E5:15:B1:0D:BC:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bf7114d7-dfd6-4a82-9339-1e55c82d8b0e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bf7114d7-dfd6-4a82-9339-1e55c82d8b0e/bf7114d7-dfd6-4a82-9339-1e55c82d8b0e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401953 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:19:05:35:eb:7d:c3:dc:09:4f:99:2a:2d:17:bc:d5:c1:10: c5:e6:06:57:d7:56:da:6b:67:9b:5f:2e:d1:97:b3:5c:ee:f8: 22:58:e2:58:80:4e:87:93:5c:1a:a2:24:6d:1f:e3:07:0a:a1: b1:7a:1f:dc:41:7d:09:43:fa:ec:32:0a:a2:3e:7f:ef:6e:eb: 85:68:8a:83:4a:be:bc:ae:89:56:8c:65:d0:74:88:57:93:54: 27:2b:37:be:95:fb:65:20:a9:6b:84:fa:07:a2:df:af:8a:89: 1c:92:ba:94:f6:70:c2:02:d9:36:1c:b6:f7:32:fc:93:f3:b9: 0a:88:9b:07:82:73:e8:4c:07:c6:66:ff:d0:de:e2:e4:bc:bf: 10:bf:e7:ea:38:67:a6:21:19:14:fc:82:11:4f:34:09:3e:83: a2:27:0d:02:15:e7:36:c1:42:20:05:ec:22:a5:a2:3b:2c:8a: cf:f4:77:b2:0c:da:35:1a:fb:f5:e7:12:2a:24:99:e0:be:e8: 20:44:c4:7d:1b:a2:ff:9f:92:a3:6e:dd:63:c4:3f:f7:83:40: 6e:06:e0:b9:3a:4b:c4:ce:2f:2a:ad:4a:ed:3c:21:74:9b:0e: 56:07:95:8a:b4:f6:92:c9:c7:5d:17:ab:7d:b2:32:d1:3e:13: 45:0e:7e:0e -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE5pBmDz6+KGvDRtZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNjE1NDExNFoXDTI4MTAwODE1NDExNFowLzEtMCsGA1UEAxMk YmY3MTE0ZDctZGZkNi00YTgyLTkzMzktMWU1NWM4MmQ4YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdYttRErQ03SuNdToOofcrN7UsEYiAevWIji fGZJ1A/Tj/Bku7IbOItv6C8nm6TQOCVZ6VM6lbHtr+Tux/frm6PM0NQj/U8WpgIv 3tnhkT3Ys/NRoJVNM8aLU/gUIO46tu+pw+rnOhhhpvyqO3M9DvNEVBwmvmRYPBZq DNjm4kAfw9MlCKOexVpePLALhRzEDVgCtFjd8Aw7rN4lYmickpTITzSN9XD9syiC M34Myz7opg+PRQrAQgoY74JG/akPNSgxDyAL9GyprOe3XNf6QF6BAugW0v+iL1/J RlyPjCSNbSjGquHQq82/zGdYl92apwu374q4a+pD3+4zoAg8DQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFBaSv+KIZwFG7fu5OEnS5RWxDbxUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9i ZjcxMTRkNy1kZmQ2LTRhODItOTMzOS0xZTU1YzgyZDhiMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2JmNzExNGQ3LWRmZDYtNGE4Mi05 MzM5LTFlNTVjODJkOGIwZS9iZjcxMTRkNy1kZmQ2LTRhODItOTMzOS0xZTU1Yzgy ZDhiMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiIhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF0ZBTXrfcPcCU+ZKi0XvNXBEMXm BlfXVtprZ5tfLtGXs1zu+CJY4liAToeTXBqiJG0f4wcKobF6H9xBfQlD+uwyCqI+ f+9u64VoioNKvryuiVaMZdB0iFeTVCcrN76V+2UgqWuE+gei36+KiRySupT2cMIC 2TYctvcy/JPzuQqImweCc+hMB8Zm/9De4uS8vxC/5+o4Z6YhGRT8ghFPNAk+g6In DQIV5zbBQiAF7CKlojssis/0d7IM2jUa+/XnEiokmeC+6CBExH0bov+fkqNu3WPE P/eDQG4G4Lk6S8TOLyqtSu08IXSbDlYHlYq09pLJx10Xq32yMtE+E0UOfg4= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:49 2026 by rpki-client