$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2de01bc-ce80-40ca-b6d7-246afc21cf3f.cer File: d2de01bc-ce80-40ca-b6d7-246afc21cf3f.cer (raw, json) Hash identifier: UcfVYZnQsucR6Nng8lJ1P5lcp3Egf5p0tz8CSkFLNA4= Subject key identifier: BC:E0:50:9B:94:85:2F:2E:EB:43:B2:31:4A:84:44:0E:B1:BE:EC:CB Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E0A3C059AA99CD1BAFE4EBE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2de01bc-ce80-40ca-b6d7-246afc21cf3f/d2de01bc-ce80-40ca-b6d7-246afc21cf3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2de01bc-ce80-40ca-b6d7-246afc21cf3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Jun 2026 16:47:32 +0000 Certificate not after: Mon 04 Sep 2028 16:47:32 +0000 Subordinate resources: AS: 46268 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:3c:05:9a:a9:9c:d1:ba:fe:4e:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 2 16:47:32 2026 GMT Not After : Sep 4 16:47:32 2028 GMT Subject: CN=d2de01bc-ce80-40ca-b6d7-246afc21cf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:ae:10:74:71:d8:06:ae:d9:b3:0a:c2:d3: 9e:ba:41:93:12:2d:4d:76:cf:cd:48:86:94:7d:9f: 23:31:33:c2:30:5c:bf:5b:46:1e:fb:a1:0b:ce:f4: 6b:31:d5:be:8b:44:de:36:3e:7c:10:da:f0:43:79: e1:5e:d9:06:18:c0:34:3e:93:1c:be:60:86:f8:dd: e4:5b:22:1a:b1:cc:b9:6f:5b:3f:8b:35:a7:d7:fb: 2a:73:2e:d4:31:93:5b:39:28:18:c2:3a:ff:5b:cf: 8c:20:29:5b:e5:be:f5:2c:18:5c:fd:7f:34:15:38: 34:12:2f:be:95:4b:3c:0c:7c:0e:14:c2:bf:35:c5: 16:0f:ff:5e:e9:15:c3:f1:37:b4:63:e0:0a:73:83: f7:f9:d3:e9:0c:37:16:df:3c:be:38:e9:2c:f8:62: 80:3a:e4:f6:3d:af:37:97:19:42:b5:2c:e8:7f:a2: 64:34:3e:27:69:04:69:9a:42:39:ab:98:5c:5b:fd: 1a:b5:4d:b7:6e:1e:cf:87:8a:47:72:a2:e8:a6:35: 3b:42:1e:af:8b:08:f2:82:73:b1:fd:46:61:18:73: 7b:9c:ed:65:68:17:d6:ee:3c:5f:84:c6:31:54:b1: 38:0e:ea:a9:49:2a:42:a2:04:6e:1e:2b:e8:cd:20: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:50:9B:94:85:2F:2E:EB:43:B2:31:4A:84:44:0E:B1:BE:EC:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2de01bc-ce80-40ca-b6d7-246afc21cf3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d2de01bc-ce80-40ca-b6d7-246afc21cf3f/d2de01bc-ce80-40ca-b6d7-246afc21cf3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 46268 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:1b:8d:ee:f0:32:29:0d:d5:7c:73:eb:ad:39:96:4f:78:d3: 52:a7:24:38:a0:e6:4d:0b:57:33:09:7a:7d:bc:39:23:d9:d3: 8c:df:4c:1b:85:90:0b:71:d4:64:41:2d:57:4c:10:17:65:e1: 4c:4a:a3:99:6f:f1:a4:dc:95:c3:4c:0d:b5:92:e0:f4:25:cd: 9e:e7:81:d3:4b:d6:c9:c5:27:00:5c:71:3b:2a:82:6b:21:65: fd:8f:a8:8e:87:d3:74:9f:90:20:7e:a3:cb:20:ea:f6:ca:29: 84:6b:3b:78:26:50:8d:ba:6a:8b:ee:97:79:f1:77:57:ef:f8: 1d:da:ce:21:36:1e:4d:78:82:7c:e0:6c:59:57:81:2d:ce:9e: 03:05:57:7f:f4:cf:4d:a4:96:99:ee:ff:02:38:d4:e2:6b:b5: 09:cd:fa:35:e1:c2:48:a4:ba:18:31:01:08:0b:41:bf:24:08: 6a:8f:bd:1d:94:ab:41:d8:71:af:16:94:36:55:e4:af:17:19: 63:79:25:8d:76:cf:d9:d4:8f:a9:3c:5f:6e:88:ef:2c:a4:53: 42:ba:d4:02:b5:ed:b1:c2:4d:ff:6e:bb:91:bb:ff:1b:29:61: 6c:25:31:e8:9f:38:5a:f8:3a:aa:28:bc:6b:eb:16:68:fc:96: e1:a2:f0:a9 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE4KPAWaqZzRuv5OvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwMjE2NDczMloXDTI4MDkwNDE2NDczMlowLzEtMCsGA1UEAxMk ZDJkZTAxYmMtY2U4MC00MGNhLWI2ZDctMjQ2YWZjMjFjZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAauEHRx2Aau2bMKwtOeukGTEi1Nds/NSIaU fZ8jMTPCMFy/W0Ye+6ELzvRrMdW+i0TeNj58ENrwQ3nhXtkGGMA0PpMcvmCG+N3k WyIascy5b1s/izWn1/sqcy7UMZNbOSgYwjr/W8+MIClb5b71LBhc/X80FTg0Ei++ lUs8DHwOFMK/NcUWD/9e6RXD8Te0Y+AKc4P3+dPpDDcW3zy+OOks+GKAOuT2Pa83 lxlCtSzof6JkND4naQRpmkI5q5hcW/0atU23bh7Ph4pHcqLopjU7Qh6viwjygnOx /UZhGHN7nO1laBfW7jxfhMYxVLE4DuqpSSpCogRuHivozSCIEQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFLzgUJuUhS8u60OyMUqERA6xvuzLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k MmRlMDFiYy1jZTgwLTQwY2EtYjZkNy0yNDZhZmMyMWNmM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2QyZGUwMWJjLWNlODAtNDBjYS1i NmQ3LTI0NmFmYzIxY2YzZi9kMmRlMDFiYy1jZTgwLTQwY2EtYjZkNy0yNDZhZmMy MWNmM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALS8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMMbje7wMikN1Xxz6605lk9401Kn JDig5k0LVzMJen28OSPZ04zfTBuFkAtx1GRBLVdMEBdl4UxKo5lv8aTclcNMDbWS 4PQlzZ7ngdNL1snFJwBccTsqgmshZf2PqI6H03SfkCB+o8sg6vbKKYRrO3gmUI26 aovul3nxd1fv+B3aziE2Hk14gnzgbFlXgS3OngMFV3/0z02klpnu/wI41OJrtQnN +jXhwkikuhgxAQgLQb8kCGqPvR2Uq0HYca8WlDZV5K8XGWN5JY12z9nUj6k8X26I 7yykU0K61AK17bHCTf9uu5G7/xspYWwlMeifOFr4OqoovGvrFmj8luGi8Kk= -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:40 2026 by rpki-client