$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4cc3345-714b-4c04-a52e-25677d40e686.cer File: e4cc3345-714b-4c04-a52e-25677d40e686.cer (raw, json) Hash identifier: HWvYq81tcWGC9cbDngKuD1SvKy0V7FDTZ2YALhBQOyI= Subject key identifier: D7:CA:33:F6:0B:2A:8C:E8:51:0F:FC:EB:12:85:C5:44:4B:C0:23:E8 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E6C5D5B2049799D74A4E66880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4cc3345-714b-4c04-a52e-25677d40e686/e4cc3345-714b-4c04-a52e-25677d40e686.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4cc3345-714b-4c04-a52e-25677d40e686/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jul 2026 20:23:55 +0000 Certificate not after: Mon 09 Oct 2028 20:23:55 +0000 Subordinate resources: AS: 6955 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:5d:5b:20:49:79:9d:74:a4:e6:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jul 7 20:23:55 2026 GMT Not After : Oct 9 20:23:55 2028 GMT Subject: CN=e4cc3345-714b-4c04-a52e-25677d40e686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:9e:99:3d:9b:d5:2f:14:d5:92:00:c0:0b: b7:e9:b7:45:f2:7c:3d:58:7b:24:95:cb:d1:d7:f8: f9:30:d9:00:d8:eb:77:ab:60:30:ec:b4:06:77:c4: 6c:23:89:88:5d:05:68:77:ad:07:ee:d2:f2:f3:ad: 59:de:ad:a0:e1:f5:03:86:00:63:9d:ee:00:d8:98: 07:e3:dc:0a:dd:4e:db:5a:96:a8:98:b6:72:26:9e: d3:a2:36:e6:35:07:bb:09:49:f2:db:23:fb:ca:95: 74:a0:29:20:6d:4d:8c:30:04:2b:02:5a:ae:e8:6d: 41:01:fb:93:48:c1:40:b1:4d:c8:4e:24:22:29:d8: 9e:ae:de:45:55:9a:85:79:0a:e9:38:78:a3:7e:1e: 20:e9:3c:45:6b:af:21:2f:0c:f3:4d:7b:94:dd:df: e9:b0:79:5f:e3:c2:8a:ec:0a:1e:e1:89:a4:e3:52: 96:f7:f4:fa:ec:c7:70:e4:3f:5b:5d:c2:bc:c7:58: ea:c3:27:ad:51:18:eb:e3:f3:51:2a:75:a1:57:94: a8:de:c1:32:58:d2:80:fb:83:09:34:28:cd:70:6b: 10:60:1f:a8:c9:18:21:84:a9:25:e7:2d:a4:aa:7d: 35:bc:bb:dc:07:17:8b:35:28:d8:d8:3a:34:bb:68: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CA:33:F6:0B:2A:8C:E8:51:0F:FC:EB:12:85:C5:44:4B:C0:23:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4cc3345-714b-4c04-a52e-25677d40e686/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4cc3345-714b-4c04-a52e-25677d40e686/e4cc3345-714b-4c04-a52e-25677d40e686.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 6955 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1b:68:fd:9f:b0:92:2e:f8:5b:4b:2a:ea:01:ba:8c:32:0a: 6b:c4:16:12:6e:59:80:a8:47:54:b3:6c:45:c7:a1:c4:64:76: e2:78:81:54:43:57:ca:dc:d2:c2:e2:bd:98:f3:79:ab:44:48: c7:3f:7c:bf:8f:79:f0:0a:8a:e5:9e:ed:e8:d6:4b:08:88:d4: d4:13:be:23:02:d1:65:35:d6:1d:92:35:79:37:74:82:da:6c: 0b:51:ca:20:2c:c3:63:d1:f8:ab:c8:b3:5d:61:02:9e:5b:68: 3b:c2:da:77:8a:cf:d2:15:66:4c:b4:ea:c5:c5:7f:7c:6d:79: 1b:ae:bc:d5:ec:c6:c1:b6:74:44:a3:3d:27:35:82:8c:75:4c: 07:ea:83:cd:a3:d1:85:54:09:ef:91:24:93:8b:9e:53:d9:9a: 61:23:59:b6:b6:ab:5a:b7:f0:c9:13:d1:de:47:8c:40:af:65: 89:85:45:97:8a:7a:c1:fc:83:fd:96:67:ce:c4:34:b3:98:1b: 0a:29:f6:e2:88:24:2c:df:3a:ea:55:ca:be:1f:0c:ae:e6:10: c2:03:3a:90:38:5c:13:ef:f4:bd:85:12:db:47:e8:ac:41:a1: cd:2b:94:07:fe:31:21:14:0e:37:1f:2c:54:7f:42:84:8c:52: 9f:44:8e:27 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE5sXVsgSXmddKTmaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDcwNzIwMjM1NVoXDTI4MTAwOTIwMjM1NVowLzEtMCsGA1UEAxMk ZTRjYzMzNDUtNzE0Yi00YzA0LWE1MmUtMjU2NzdkNDBlNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnqemT2b1S8U1ZIAwAu36bdF8nw9WHsklcvR 1/j5MNkA2Ot3q2Aw7LQGd8RsI4mIXQVod60H7tLy861Z3q2g4fUDhgBjne4A2JgH 49wK3U7bWpaomLZyJp7TojbmNQe7CUny2yP7ypV0oCkgbU2MMAQrAlqu6G1BAfuT SMFAsU3ITiQiKdiert5FVZqFeQrpOHijfh4g6TxFa68hLwzzTXuU3d/psHlf48KK 7Aoe4Ymk41KW9/T67Mdw5D9bXcK8x1jqwyetURjr4/NRKnWhV5So3sEyWNKA+4MJ NCjNcGsQYB+oyRghhKkl5y2kqn01vLvcBxeLNSjY2Do0u2jomQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFNfKM/YLKozoUQ/86xKFxURLwCPoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l NGNjMzM0NS03MTRiLTRjMDQtYTUyZS0yNTY3N2Q0MGU2ODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U0Y2MzMzQ1LTcxNGItNGMwNC1h NTJlLTI1Njc3ZDQwZTY4Ni9lNGNjMzM0NS03MTRiLTRjMDQtYTUyZS0yNTY3N2Q0 MGU2ODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICGyswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmBto/Z+wki74W0sq6gG6jDIKa8QW Em5ZgKhHVLNsRcehxGR24niBVENXytzSwuK9mPN5q0RIxz98v4958AqK5Z7t6NZL CIjU1BO+IwLRZTXWHZI1eTd0gtpsC1HKICzDY9H4q8izXWECnltoO8Lad4rP0hVm TLTqxcV/fG15G6681ezGwbZ0RKM9JzWCjHVMB+qDzaPRhVQJ75Ekk4ueU9maYSNZ trarWrfwyRPR3keMQK9liYVFl4p6wfyD/ZZnzsQ0s5gbCin24ogkLN866lXKvh8M ruYQwgM6kDhcE+/0vYUS20forEGhzSuUB/4xIRQONx8sVH9ChIxSn0SOJw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:43 2026 by rpki-client