$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer File: c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.cer (raw, json) Hash identifier: QN2ySlQ1oyqjBgEj0vFJApRMB0aM1QcN32nSEk+4UXg= Subject key identifier: DA:8F:98:3B:1E:53:F2:63:08:50:A0:00:B9:BE:71:B3:14:FC:21:91 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E346742F784A67DC9E4B08340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Jun 2026 19:18:36 +0000 Certificate not after: Tue 19 Sep 2028 19:18:36 +0000 Subordinate resources: AS: 402646 IP: 2620:35:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:34:67:42:f7:84:a6:7d:c9:e4:b0:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 17 19:18:36 2026 GMT Not After : Sep 19 19:18:36 2028 GMT Subject: CN=c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:3f:76:a2:3f:a6:eb:8b:ee:d8:57:1e:fd: c1:c1:b5:6d:53:d6:fd:44:9b:3a:9a:36:1b:8b:b4: 4c:43:a1:bd:b5:ea:ac:d2:9c:77:e5:cc:53:ab:8c: bd:75:07:e2:0b:56:eb:ef:72:22:16:19:15:31:5a: 58:8c:eb:e0:86:13:a6:be:a6:3d:28:57:6a:d9:f6: 8c:c3:70:a9:71:00:65:35:57:cd:d0:20:94:1d:af: ba:a4:ff:30:cc:e3:91:c3:39:9a:d7:4e:77:c6:ee: f7:09:8b:f5:36:92:26:04:cc:80:da:19:fb:2d:b0: 40:81:99:03:bc:16:b4:98:0f:04:02:72:53:c8:36: da:1a:be:0d:52:5e:6b:f0:6b:3b:eb:ec:9b:fb:55: 1d:4b:f4:71:4e:77:c2:d2:9d:3c:e6:61:67:be:ae: e5:3c:43:0f:80:aa:31:be:01:9b:28:c5:b4:dd:67: ea:1c:aa:dd:58:87:83:39:47:7f:a6:06:4d:54:51: 22:fc:3d:5e:3c:d4:9a:39:a0:3d:bb:8e:24:d9:c9: 51:ad:89:3d:c0:56:14:b8:39:ab:46:65:b0:25:60: 16:f7:09:a3:a9:df:8c:6e:09:84:ff:4c:04:f1:4a: a6:6e:4a:3a:bc:83:f0:59:00:10:35:e9:60:90:67: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8F:98:3B:1E:53:F2:63:08:50:A0:00:B9:BE:71:B3:14:FC:21:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a/c4a98e7a-66eb-49d8-b9c2-9b3baa8c593a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2620:35:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402646 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9a:d9:71:87:6f:44:5e:04:9b:59:c1:62:37:99:d2:88:7e: 8b:e5:1d:c4:90:4f:a6:b8:6c:89:23:2e:47:c2:7a:c0:5f:96: f9:14:0a:23:e2:86:1f:b3:c7:57:3d:86:9a:76:24:46:be:69: 96:65:c3:bc:cd:41:a5:7e:26:d0:73:19:28:26:f2:91:de:69: 58:fb:a8:39:b3:ea:53:38:41:f1:f8:fc:6d:b6:3c:f9:95:e3: f0:c8:2a:9d:32:e3:74:1b:85:cc:25:22:83:c3:ec:fb:0c:e7: a6:bb:42:0f:fd:f1:5b:84:98:f1:65:b6:c0:f2:34:d3:ee:26: d9:a2:4e:03:84:7f:20:5c:58:9e:c8:bb:f2:f6:af:a7:da:28: 90:04:24:36:7f:34:01:21:07:e2:18:cc:99:58:28:d7:cf:c3: ed:93:a7:f7:bc:8a:d8:cb:c8:81:c2:f3:37:d8:b3:8f:a5:32: 01:49:a6:39:a9:6a:78:07:be:a9:fa:91:02:26:3b:1a:0d:c3: a5:61:35:1b:fe:ca:17:f4:da:de:14:bc:0b:4d:73:66:dc:d1: 42:ae:22:ca:31:dd:f4:34:2a:c7:fc:ac:e4:53:29:6f:7a:6d: 7a:67:bd:58:1f:ce:13:6e:3d:30:59:36:75:e9:e7:3b:67:e0: 8d:8d:76:12 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE40Z0L3hKZ9yeSwg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxNzE5MTgzNloXDTI4MDkxOTE5MTgzNlowLzEtMCsGA1UEAxMk YzRhOThlN2EtNjZlYi00OWQ4LWI5YzItOWIzYmFhOGM1OTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwo/dqI/puuL7thXHv3BwbVtU9b9RJs6mjYb i7RMQ6G9teqs0px35cxTq4y9dQfiC1br73IiFhkVMVpYjOvghhOmvqY9KFdq2faM w3CpcQBlNVfN0CCUHa+6pP8wzOORwzma1053xu73CYv1NpImBMyA2hn7LbBAgZkD vBa0mA8EAnJTyDbaGr4NUl5r8Gs76+yb+1UdS/RxTnfC0p085mFnvq7lPEMPgKox vgGbKMW03WfqHKrdWIeDOUd/pgZNVFEi/D1ePNSaOaA9u44k2clRrYk9wFYUuDmr RmWwJWAW9wmjqd+MbgmE/0wE8Uqmbko6vIPwWQAQNelgkGejswIDAQABo4IEHjCC BBowHQYDVR0OBBYEFNqPmDseU/JjCFCgALm+cbMU/CGRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j NGE5OGU3YS02NmViLTQ5ZDgtYjljMi05YjNiYWE4YzU5M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2M0YTk4ZTdhLTY2ZWItNDlkOC1i OWMyLTliM2JhYThjNTkzYS9jNGE5OGU3YS02NmViLTQ5ZDgtYjljMi05YjNiYWE4 YzU5M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAA1oAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiTWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEKa2XGHb0ReBJtZwWI3mdKIfovlHcSQT6a4bIkjLkfC esBflvkUCiPihh+zx1c9hpp2JEa+aZZlw7zNQaV+JtBzGSgm8pHeaVj7qDmz6lM4 QfH4/G22PPmV4/DIKp0y43QbhcwlIoPD7PsM56a7Qg/98VuEmPFltsDyNNPuJtmi TgOEfyBcWJ7Iu/L2r6faKJAEJDZ/NAEhB+IYzJlYKNfPw+2Tp/e8itjLyIHC8zfY s4+lMgFJpjmpangHvqn6kQImOxoNw6VhNRv+yhf02t4UvAtNc2bc0UKuIsox3fQ0 Ksf8rORTKW96bXpnvVgfzhNuPTBZNnXp5ztn4I2NdhI= -----END CERTIFICATE-----Generated at Mon Jul 13 13:47:04 2026 by rpki-client