$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f568c622-409a-4be4-b8df-7784a0d150e2.cer File: f568c622-409a-4be4-b8df-7784a0d150e2.cer (raw, json) Hash identifier: jvGgX6ocm2mpHEsC2JGZtIFuxXRzLNZmqFMVRFmSXbs= Subject key identifier: 3E:6F:CD:E7:15:95:43:0A:69:D3:68:40:E8:35:08:EF:1C:C5:0D:13 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E43D485ABA16294D81E2D90C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f568c622-409a-4be4-b8df-7784a0d150e2/f568c622-409a-4be4-b8df-7784a0d150e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f568c622-409a-4be4-b8df-7784a0d150e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Jun 2026 07:55:53 +0000 Certificate not after: Mon 25 Sep 2028 07:55:53 +0000 Subordinate resources: AS: 21656 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:43:d4:85:ab:a1:62:94:d8:1e:2d:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 23 07:55:53 2026 GMT Not After : Sep 25 07:55:53 2028 GMT Subject: CN=f568c622-409a-4be4-b8df-7784a0d150e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:1d:88:06:5b:9a:65:8c:31:1c:f6:80:64: f0:4b:33:ff:3c:f6:ae:5b:c0:bf:04:ad:cc:10:a9: cb:71:95:71:19:47:da:55:93:44:24:6f:f3:1f:2f: 60:0f:c4:55:42:c4:52:4b:40:36:de:a7:5d:fd:38: a5:1a:15:55:81:c1:2f:40:a4:b1:a4:08:a9:74:30: 87:cf:66:a8:a8:8a:2e:7a:cb:6c:89:da:9f:73:b9: ba:5d:be:ec:03:0b:1b:bc:bf:8e:11:a7:f9:51:7d: d4:5f:5a:4c:41:39:eb:59:a3:30:f8:f3:2d:c1:9e: 05:5a:5c:8a:9a:3d:00:2d:16:b5:b1:6c:ca:c8:ad: f7:16:5d:31:5c:c8:bf:5c:9e:4d:ca:9b:8e:97:76: aa:5d:15:03:f7:e6:d1:76:bd:b0:99:6c:2f:59:8b: bc:b1:57:30:01:68:0b:1d:a1:ca:4c:5e:7e:aa:3c: 31:81:a9:c4:91:60:06:3b:96:fb:19:cb:b4:67:fa: 9f:fe:0e:2b:62:71:f8:f3:ad:df:1a:ab:f4:9c:6b: ab:f1:0d:5d:1b:4c:41:5f:63:61:d3:49:2a:3d:0c: c2:77:34:b4:05:8c:40:d4:23:53:e7:8c:1c:ca:18: 4d:07:6e:be:43:22:fb:fb:48:08:11:96:f3:42:28: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6F:CD:E7:15:95:43:0A:69:D3:68:40:E8:35:08:EF:1C:C5:0D:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f568c622-409a-4be4-b8df-7784a0d150e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f568c622-409a-4be4-b8df-7784a0d150e2/f568c622-409a-4be4-b8df-7784a0d150e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 21656 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e7:63:ff:61:52:f6:eb:bb:82:44:d8:ef:bc:2b:9a:a9:2d: 7e:cd:5d:a3:c5:e5:73:08:58:45:68:24:8c:25:36:05:4d:39: 0d:1f:fe:a7:47:ba:5c:c8:10:7a:58:a5:82:66:17:5f:be:d5: 9c:7a:2c:40:4a:39:e5:e5:3c:d1:b8:69:d8:f7:b5:f0:5e:e0: 8f:8f:3f:f8:f9:40:39:f3:2d:76:52:8f:5f:40:c0:aa:f7:32: 58:89:a4:b1:08:8a:24:f8:fd:a8:22:fb:16:f6:fe:99:96:90: 25:49:b9:88:dd:f5:ad:98:2b:dd:88:02:7e:c9:6f:eb:38:86: b0:c4:65:fa:f8:27:80:cb:00:be:f9:88:cc:0b:1a:93:e7:e8: ee:7f:7c:53:85:5b:ee:02:a3:8d:a7:18:db:b0:f6:af:eb:9f: a3:29:5b:d1:31:47:4b:35:fd:45:20:e0:8e:cb:a7:06:50:f9: c9:a5:4e:3e:69:97:0f:0b:9c:45:bb:87:a9:50:f5:fd:24:70: 52:54:15:1b:15:6e:76:95:e3:8e:ba:e0:db:12:ba:f2:4a:f8: 60:e1:d0:5e:1c:46:bd:36:0c:bc:77:e0:9c:a4:0b:56:39:de: bb:e2:c4:6f:79:dd:e8:b5:00:09:5e:9f:b7:68:80:bb:36:08: b9:ea:4c:5c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE5D1IWroWKU2B4tkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYyMzA3NTU1M1oXDTI4MDkyNTA3NTU1M1owLzEtMCsGA1UEAxMk ZjU2OGM2MjItNDA5YS00YmU0LWI4ZGYtNzc4NGEwZDE1MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjIdiAZbmmWMMRz2gGTwSzP/PPauW8C/BK3M EKnLcZVxGUfaVZNEJG/zHy9gD8RVQsRSS0A23qdd/TilGhVVgcEvQKSxpAipdDCH z2aoqIouestsidqfc7m6Xb7sAwsbvL+OEaf5UX3UX1pMQTnrWaMw+PMtwZ4FWlyK mj0ALRa1sWzKyK33Fl0xXMi/XJ5NypuOl3aqXRUD9+bRdr2wmWwvWYu8sVcwAWgL HaHKTF5+qjwxganEkWAGO5b7Gcu0Z/qf/g4rYnH4863fGqv0nGur8Q1dG0xBX2Nh 00kqPQzCdzS0BYxA1CNT54wcyhhNB26+QyL7+0gIEZbzQiiPuwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFD5vzecVlUMKadNoQOg1CO8cxQ0TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m NTY4YzYyMi00MDlhLTRiZTQtYjhkZi03Nzg0YTBkMTUwZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2Y1NjhjNjIyLTQwOWEtNGJlNC1i OGRmLTc3ODRhMGQxNTBlMi9mNTY4YzYyMi00MDlhLTRiZTQtYjhkZi03Nzg0YTBk MTUwZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVJgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkudj/2FS9uu7gkTY77wrmqktfs1d o8XlcwhYRWgkjCU2BU05DR/+p0e6XMgQelilgmYXX77VnHosQEo55eU80bhp2Pe1 8F7gj48/+PlAOfMtdlKPX0DAqvcyWImksQiKJPj9qCL7Fvb+mZaQJUm5iN31rZgr 3YgCfslv6ziGsMRl+vgngMsAvvmIzAsak+fo7n98U4Vb7gKjjacY27D2r+ufoylb 0TFHSzX9RSDgjsunBlD5yaVOPmmXDwucRbuHqVD1/SRwUlQVGxVudpXjjrrg2xK6 8kr4YOHQXhxGvTYMvHfgnKQLVjneu+LEb3nd6LUACV6ft2iAuzYIuepMXA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:58 2026 by rpki-client