$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d.cer File: e4485525-7b77-4aaa-bb61-d9be3796d78d.cer (raw, json) Hash identifier: xA0LpHo7n936ItXCJ/Mr5ZHy6hFSbUgW7lHIdCzh1oI= Subject key identifier: 44:AF:E8:AF:62:B6:65:A5:B5:4D:F2:04:E9:7F:C8:1A:0E:3C:5A:FE Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D95A76EAD8F32DCB390791500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/e4485525-7b77-4aaa-bb61-d9be3796d78d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 22:34:22 +0000 Certificate not after: Mon 24 Jul 2028 22:34:22 +0000 Subordinate resources: AS: 402430 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:a7:6e:ad:8f:32:dc:b3:90:79:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 21 22:34:22 2026 GMT Not After : Jul 24 22:34:22 2028 GMT Subject: CN=e4485525-7b77-4aaa-bb61-d9be3796d78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:12:ea:78:f3:4a:60:ef:30:2f:ba:52:79: a7:2c:10:ec:0f:62:d2:59:bd:97:d5:85:3a:a1:ea: 4e:90:35:d0:d1:e1:df:32:6e:32:6b:20:1e:e1:15: 60:6e:20:74:80:b7:42:f3:7f:e7:1c:05:99:30:69: d9:3f:a3:f9:03:37:90:3b:b2:8e:20:2c:dc:24:7a: b4:09:3f:f4:89:ea:df:74:3c:f0:95:7f:6c:47:ae: e9:22:24:df:c8:b0:f7:aa:fb:a1:ba:e2:ce:8f:29: 35:40:b9:b4:18:95:b8:95:c5:d3:b8:0f:f4:9e:58: 99:a0:48:25:b9:68:93:c7:b2:63:22:e9:b6:99:12: a1:28:5f:02:02:93:e3:51:39:4f:c6:8b:62:16:b4: bc:11:ba:1d:f9:74:51:09:82:0b:c6:49:1e:a0:59: 23:12:bd:de:7d:77:47:fe:f0:95:2b:d0:c1:e9:50: 14:c0:f4:38:44:a8:2d:00:df:5e:18:f1:46:27:1a: 45:94:86:cc:a8:dc:f3:d2:bf:1b:c1:8a:bd:cd:16: 59:06:4c:a9:9c:86:8f:63:27:65:13:8a:df:f2:d0: 28:d7:5e:38:21:1c:26:d0:7f:4f:5f:7e:41:c7:ea: 65:8a:0f:ea:39:b6:02:94:12:3c:31:21:a3:d8:83: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AF:E8:AF:62:B6:65:A5:B5:4D:F2:04:E9:7F:C8:1A:0E:3C:5A:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/e4485525-7b77-4aaa-bb61-d9be3796d78d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402430 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ed:67:4b:9d:85:cc:8d:8d:be:95:c5:ec:5a:12:c9:d8:75: 3f:51:a5:9b:71:0a:9b:6e:61:49:df:2d:98:29:2c:b2:bf:29: af:9d:21:0f:ed:07:cc:1d:c2:e9:3d:9b:d0:7b:33:eb:32:52: 94:bc:42:a3:86:03:c4:a8:22:2e:64:68:54:8c:1d:24:fc:66: c9:1b:b5:71:a5:ed:b0:ac:4e:8c:eb:67:06:53:8f:65:c5:cc: 7c:6c:60:ad:30:6f:f2:be:d1:ba:69:2a:25:64:a4:d2:00:2a: ed:8b:41:b1:59:87:c7:2b:9a:c6:4a:90:61:07:60:4e:13:04: 65:6b:21:70:86:3d:e9:80:ad:d0:76:4e:4b:01:13:19:7c:23: c9:6b:0a:f4:22:26:ff:ed:4e:96:b0:46:a9:95:f1:d6:d7:1f: f2:d9:65:f1:9e:33:5b:73:f6:71:b4:11:00:52:05:53:84:80: 1d:ec:9f:49:85:83:19:0a:09:30:13:60:cf:42:aa:cb:ee:62: 42:09:f6:55:e1:52:77:4c:e8:e4:59:b2:7f:53:25:9e:7e:ec: 1e:12:5d:9f:32:4d:21:87:8d:d2:b6:73:be:28:e1:d3:4d:20: 19:63:ed:95:76:e1:31:69:bc:1c:01:d4:d9:c7:df:24:49:91: 97:f6:23:41 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE2Vp26tjzLcs5B5FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMTIyMzQyMloXDTI4MDcyNDIyMzQyMlowLzEtMCsGA1UEAxMk ZTQ0ODU1MjUtN2I3Ny00YWFhLWJiNjEtZDliZTM3OTZkNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHkS6njzSmDvMC+6UnmnLBDsD2LSWb2X1YU6 oepOkDXQ0eHfMm4yayAe4RVgbiB0gLdC83/nHAWZMGnZP6P5AzeQO7KOICzcJHq0 CT/0ierfdDzwlX9sR67pIiTfyLD3qvuhuuLOjyk1QLm0GJW4lcXTuA/0nliZoEgl uWiTx7JjIum2mRKhKF8CApPjUTlPxotiFrS8Ebod+XRRCYILxkkeoFkjEr3efXdH /vCVK9DB6VAUwPQ4RKgtAN9eGPFGJxpFlIbMqNzz0r8bwYq9zRZZBkypnIaPYydl E4rf8tAo1144IRwm0H9PX35Bx+plig/qObYClBI8MSGj2IPtWQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFESv6K9itmWltU3yBOl/yBoOPFr+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l NDQ4NTUyNS03Yjc3LTRhYWEtYmI2MS1kOWJlMzc5NmQ3OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U0NDg1NTI1LTdiNzctNGFhYS1i YjYxLWQ5YmUzNzk2ZDc4ZC9lNDQ4NTUyNS03Yjc3LTRhYWEtYmI2MS1kOWJlMzc5 NmQ3OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiP+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG/tZ0udhcyNjb6VxexaEsnYdT9R pZtxCptuYUnfLZgpLLK/Ka+dIQ/tB8wdwuk9m9B7M+syUpS8QqOGA8SoIi5kaFSM HST8ZskbtXGl7bCsTozrZwZTj2XFzHxsYK0wb/K+0bppKiVkpNIAKu2LQbFZh8cr msZKkGEHYE4TBGVrIXCGPemArdB2TksBExl8I8lrCvQiJv/tTpawRqmV8dbXH/LZ ZfGeM1tz9nG0EQBSBVOEgB3sn0mFgxkKCTATYM9CqsvuYkIJ9lXhUndM6ORZsn9T JZ5+7B4SXZ8yTSGHjdK2c74o4dNNIBlj7ZV24TFpvBwB1NnH3yRJkZf2I0E= -----END CERTIFICATE-----Generated at Wed Apr 22 04:03:58 2026 by rpki-client