$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dbb9d61e-7f64-4437-9981-350b17dfa8d8.cer File: dbb9d61e-7f64-4437-9981-350b17dfa8d8.cer (raw, json) Hash identifier: CCgBmiRZ1Njt54EmGnfKQD4TDZLlRS5bkS46FXYcRCc= Subject key identifier: F1:11:87:6C:D3:F0:42:75:95:4B:95:2B:CE:C1:55:9E:41:D0:76:12 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DD2AD74812E087A5E8AA65CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dbb9d61e-7f64-4437-9981-350b17dfa8d8/dbb9d61e-7f64-4437-9981-350b17dfa8d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dbb9d61e-7f64-4437-9981-350b17dfa8d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 19:10:49 +0000 Certificate not after: Tue 15 Aug 2028 19:10:49 +0000 Subordinate resources: AS: 20058 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:ad:74:81:2e:08:7a:5e:8a:a6:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 13 19:10:49 2026 GMT Not After : Aug 15 19:10:49 2028 GMT Subject: CN=dbb9d61e-7f64-4437-9981-350b17dfa8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:43:5a:12:1f:ab:99:67:08:79:be:16:44:64: 2e:a5:ab:55:05:60:1e:3e:3d:71:25:f8:2c:f5:a5: b8:31:bc:15:2e:32:ff:3b:d6:dc:c3:5d:6d:a1:88: 08:6f:3d:2f:8a:7e:55:f0:90:91:4f:27:45:4a:86: 35:06:39:e6:ef:4b:ae:90:2a:df:4c:86:e8:a3:69: d4:a7:04:6b:a3:75:85:34:2f:1b:d4:a3:ea:fa:a6: ec:13:f9:39:eb:1b:cf:34:30:5d:5c:a1:4f:92:3f: ee:fc:22:a9:8c:57:3f:c4:9c:45:76:65:0c:4e:3b: 41:f5:75:17:03:f4:de:e4:b7:ba:b3:82:40:25:cb: 22:73:69:89:44:30:1f:da:1c:b3:52:f3:57:f4:85: 56:35:f0:d8:2f:8b:d0:db:35:98:ee:98:97:18:41: e3:cb:f7:22:b5:47:00:05:b8:0a:7a:85:39:bb:d0: 11:86:a9:cb:00:81:c5:09:a8:85:69:bb:6b:c8:8a: 23:f7:b3:d8:28:2c:cc:03:4c:48:fe:56:ea:98:59: 94:01:0d:69:15:b2:95:8e:2d:7d:bc:5a:57:63:b5: ff:7f:19:a8:af:5b:17:c3:dc:3a:f7:2f:4d:9b:af: 52:85:70:77:c3:02:29:d2:cb:90:f9:a6:51:41:2d: de:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:11:87:6C:D3:F0:42:75:95:4B:95:2B:CE:C1:55:9E:41:D0:76:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dbb9d61e-7f64-4437-9981-350b17dfa8d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dbb9d61e-7f64-4437-9981-350b17dfa8d8/dbb9d61e-7f64-4437-9981-350b17dfa8d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 20058 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:d0:23:1f:98:bb:d1:3e:e0:ca:b6:c9:37:22:44:b4:80:c0: fc:0a:7d:07:c0:0b:b1:c4:ae:cc:d0:60:c6:7e:20:ab:1f:70: f3:1e:be:2d:29:e1:23:78:37:8f:26:9e:64:4c:ed:a8:b1:95: c4:78:f0:57:eb:36:d9:dd:d1:d6:bc:06:7c:27:d0:c9:a3:3b: 0e:59:0a:37:90:1d:1e:46:2d:ca:8b:3c:c5:82:90:8a:d5:8d: 72:c9:55:a9:9b:5f:fb:67:77:e4:68:e4:d8:2a:55:07:76:76: 37:ed:0f:da:3d:6f:92:20:55:89:44:e7:f4:ee:02:74:9e:d2: 50:b7:78:4c:01:95:2b:36:9f:1e:1d:ab:e5:c8:e0:f4:4e:5c: c3:d8:50:87:92:1f:32:d4:93:46:2e:a2:9c:95:66:3b:8b:cf: 8f:d6:3b:33:48:a7:ab:f7:0c:a1:ee:e5:32:f4:9e:05:6e:5f: 8c:b6:fe:d7:0f:26:d4:b7:fe:ee:75:41:d7:af:8b:99:f1:08: cd:f5:5e:4d:5d:ab:df:6f:1f:09:b7:94:cd:f7:5f:1a:df:2e: 35:4c:70:d1:9c:90:67:04:42:51:fe:4f:28:a4:52:51:a2:22: d5:36:33:00:e1:16:b2:18:2c:18:15:f3:fc:32:98:22:5c:4c: 90:e5:cc:5e -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE3SrXSBLgh6XoqmXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUxMzE5MTA0OVoXDTI4MDgxNTE5MTA0OVowLzEtMCsGA1UEAxMk ZGJiOWQ2MWUtN2Y2NC00NDM3LTk5ODEtMzUwYjE3ZGZhOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kNaEh+rmWcIeb4WRGQupatVBWAePj1xJfgs 9aW4MbwVLjL/O9bcw11toYgIbz0vin5V8JCRTydFSoY1Bjnm70uukCrfTIboo2nU pwRro3WFNC8b1KPq+qbsE/k56xvPNDBdXKFPkj/u/CKpjFc/xJxFdmUMTjtB9XUX A/Te5Le6s4JAJcsic2mJRDAf2hyzUvNX9IVWNfDYL4vQ2zWY7piXGEHjy/citUcA BbgKeoU5u9ARhqnLAIHFCaiFabtryIoj97PYKCzMA0xI/lbqmFmUAQ1pFbKVji19 vFpXY7X/fxmor1sXw9w69y9Nm69ShXB3wwIp0suQ+aZRQS3eIwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPERh2zT8EJ1lUuVK87BVZ5B0HYSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k YmI5ZDYxZS03ZjY0LTQ0MzctOTk4MS0zNTBiMTdkZmE4ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RiYjlkNjFlLTdmNjQtNDQzNy05 OTgxLTM1MGIxN2RmYThkOC9kYmI5ZDYxZS03ZjY0LTQ0MzctOTk4MS0zNTBiMTdk ZmE4ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICTlowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAuNAjH5i70T7gyrbJNyJEtIDA/Ap9 B8ALscSuzNBgxn4gqx9w8x6+LSnhI3g3jyaeZEztqLGVxHjwV+s22d3R1rwGfCfQ yaM7DlkKN5AdHkYtyos8xYKQitWNcslVqZtf+2d35Gjk2CpVB3Z2N+0P2j1vkiBV iUTn9O4CdJ7SULd4TAGVKzafHh2r5cjg9E5cw9hQh5IfMtSTRi6inJVmO4vPj9Y7 M0inq/cMoe7lMvSeBW5fjLb+1w8m1Lf+7nVB16+LmfEIzfVeTV2r328fCbeUzfdf Gt8uNUxw0ZyQZwRCUf5PKKRSUaIi1TYzAOEWshgsGBXz/DKYIlxMkOXMXg== -----END CERTIFICATE-----Generated at Fri May 15 06:14:36 2026 by rpki-client