$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d1e85d08-d090-4bf9-80e7-344ff5dfee06.cer File: d1e85d08-d090-4bf9-80e7-344ff5dfee06.cer (raw, json) Hash identifier: O093OHxjI40hxsVeiU+9pWUmGv1B9IAyd2NSVCkea0I= Subject key identifier: 7E:1A:CC:33:BC:0B:8E:B0:69:A5:90:BC:E9:7D:DA:3B:11:E7:23:21 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD5603786C7D0387D00E73180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d1e85d08-d090-4bf9-80e7-344ff5dfee06/d1e85d08-d090-4bf9-80e7-344ff5dfee06.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d1e85d08-d090-4bf9-80e7-344ff5dfee06/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 May 2026 18:22:37 +0000 Certificate not after: Wed 16 Aug 2028 18:22:37 +0000 Subordinate resources: AS: 399486 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d5:60:37:86:c7:d0:38:7d:00:e7:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 14 18:22:37 2026 GMT Not After : Aug 16 18:22:37 2028 GMT Subject: CN=d1e85d08-d090-4bf9-80e7-344ff5dfee06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:af:07:6a:7b:18:4d:df:9b:39:8e:7b:74: d8:2b:cd:a7:56:b2:ea:20:ea:5b:36:39:ee:d9:91: 98:67:9f:5d:bc:52:f2:40:c2:b8:a5:f8:dd:6e:1b: 88:d7:37:04:cc:89:bf:cf:77:9f:95:d4:f7:f3:1d: 5a:87:07:72:51:63:cf:61:13:9f:09:b3:b8:38:36: 7e:b8:b7:1a:41:c2:ee:20:26:4b:70:7f:61:5d:93: ab:85:db:40:95:a3:07:34:3f:34:b8:f8:11:ad:44: 5c:aa:bf:cb:f9:cc:ea:5c:46:81:ad:00:41:49:a5: 2d:7d:f8:2f:d0:5c:17:38:67:8c:c7:b0:85:71:6b: ca:9b:ea:60:14:01:bd:27:72:91:c1:6c:07:a4:4c: 92:86:9d:9b:9e:c0:e6:bc:c8:89:38:da:ed:af:57: 48:4b:a5:49:fc:53:51:1f:51:6d:2d:9f:e2:8e:f6: 11:60:71:c2:cb:18:c7:d6:ff:c4:1d:85:03:d6:9a: e9:3b:82:3e:2f:f1:b2:c8:33:82:7b:87:93:f4:6e: f8:83:4f:2b:fb:b1:65:bc:f4:77:c8:ba:93:b8:39: a9:0e:43:59:fe:4c:28:e4:db:0e:fe:bb:a7:5d:7f: e7:ee:79:10:58:b9:7f:15:54:10:b1:bc:33:56:9c: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1A:CC:33:BC:0B:8E:B0:69:A5:90:BC:E9:7D:DA:3B:11:E7:23:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d1e85d08-d090-4bf9-80e7-344ff5dfee06/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d1e85d08-d090-4bf9-80e7-344ff5dfee06/d1e85d08-d090-4bf9-80e7-344ff5dfee06.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399486 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ed:94:89:54:37:4d:d8:1a:e2:79:54:fb:c7:21:b2:f1:ea: 57:3a:8b:fd:be:34:04:f2:9a:f4:21:d9:1f:f4:89:9f:bd:b6: 86:24:c9:b5:f4:2e:cd:32:c8:5c:a8:85:b7:1a:c1:a6:85:dc: 38:6a:7a:e5:3e:2f:6b:f3:b5:06:34:a2:f8:c2:24:99:28:3f: bb:4b:76:ea:79:b2:cb:8d:74:ac:38:be:8d:a2:37:7b:ef:c0: 3b:b8:06:d4:20:b4:d6:c8:fa:ad:87:fd:97:35:d8:24:64:6e: 3f:f6:46:29:d7:4f:80:ed:e4:7f:10:50:53:e7:80:ee:8a:e3: 2c:d5:b7:a8:ad:b2:dd:9f:14:58:e4:da:26:ef:ed:0e:44:f5: 74:2f:28:7a:79:49:5b:52:76:40:43:89:53:6c:41:c4:9d:13: 8c:75:7e:74:06:d6:aa:eb:be:2e:58:67:22:a3:32:3d:83:94: 3a:4d:a6:c1:54:b5:5f:b0:d6:ad:94:42:20:20:cc:08:8b:25: b9:48:92:4e:56:f5:85:bb:71:59:7a:5d:63:7d:16:d5:cf:05: 31:05:4e:58:72:21:72:17:56:e4:f7:fc:7e:63:71:cc:13:5d: f0:0b:2c:10:df:d5:58:cd:0c:2b:be:cb:c0:8e:41:52:fd:3e: 66:9b:8d:03 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE3VYDeGx9A4fQDnMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxNDE4MjIzN1oXDTI4MDgxNjE4MjIzN1owLzEtMCsGA1UEAxMk ZDFlODVkMDgtZDA5MC00YmY5LTgwZTctMzQ0ZmY1ZGZlZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBevB2p7GE3fmzmOe3TYK82nVrLqIOpbNjnu 2ZGYZ59dvFLyQMK4pfjdbhuI1zcEzIm/z3efldT38x1ahwdyUWPPYROfCbO4ODZ+ uLcaQcLuICZLcH9hXZOrhdtAlaMHND80uPgRrURcqr/L+czqXEaBrQBBSaUtffgv 0FwXOGeMx7CFcWvKm+pgFAG9J3KRwWwHpEyShp2bnsDmvMiJONrtr1dIS6VJ/FNR H1FtLZ/ijvYRYHHCyxjH1v/EHYUD1prpO4I+L/GyyDOCe4eT9G74g08r+7FlvPR3 yLqTuDmpDkNZ/kwo5NsO/runXX/n7nkQWLl/FVQQsbwzVpygPwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFH4azDO8C46waaWQvOl92jsR5yMhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k MWU4NWQwOC1kMDkwLTRiZjktODBlNy0zNDRmZjVkZmVlMDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2QxZTg1ZDA4LWQwOTAtNGJmOS04 MGU3LTM0NGZmNWRmZWUwNi9kMWU4NWQwOC1kMDkwLTRiZjktODBlNy0zNDRmZjVk ZmVlMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhh+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKLtlIlUN03YGuJ5VPvHIbLx6lc6 i/2+NATymvQh2R/0iZ+9toYkybX0Ls0yyFyohbcawaaF3DhqeuU+L2vztQY0ovjC JJkoP7tLdup5ssuNdKw4vo2iN3vvwDu4BtQgtNbI+q2H/Zc12CRkbj/2RinXT4Dt 5H8QUFPngO6K4yzVt6itst2fFFjk2ibv7Q5E9XQvKHp5SVtSdkBDiVNsQcSdE4x1 fnQG1qrrvi5YZyKjMj2DlDpNpsFUtV+w1q2UQiAgzAiLJblIkk5W9YW7cVl6XWN9 FtXPBTEFTlhyIXIXVuT3/H5jccwTXfALLBDf1VjNDCu+y8COQVL9PmabjQM= -----END CERTIFICATE-----Generated at Fri May 15 06:14:40 2026 by rpki-client