$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer File: 35fbc5b3-479b-405d-8578-f7c792a1f375.cer (raw, json) Hash identifier: LBh4KQxeY2K7xNjBAEOUaejdSz8tf8kGm+gFE6SLbPw= Subject key identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F761604C81FC072739BFC54C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 00:45:12 +0000 Certificate not after: Sat 13 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 397071 IP: 130.51.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:16:04:c8:1f:c0:72:73:9b:fc:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 11 00:45:12 2026 GMT Not After : Jan 13 01:45:12 2029 GMT Subject: CN=35fbc5b3-479b-405d-8578-f7c792a1f375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:83:77:c0:54:20:6c:72:1a:b3:8c:a9:a2: de:f6:2a:db:2d:80:69:0b:12:7d:cf:cc:9e:41:b3: 9a:4e:94:04:75:f6:d5:73:e6:ab:59:92:2d:36:96: 50:43:fb:96:0b:e7:57:ac:f5:39:42:01:68:33:af: 51:a0:8a:76:75:4f:63:c2:fc:e5:a5:31:93:47:38: e3:ea:c5:0a:79:8b:7b:12:c8:b9:c1:b1:cd:38:51: 98:70:4a:5f:1c:54:b7:00:d6:08:b0:01:ce:7e:06: 47:3a:70:c8:b8:2c:91:48:52:01:de:09:b4:9f:6d: 48:6a:d2:b3:4c:43:e4:fd:95:90:ca:2c:25:4d:2a: 6a:86:1f:0c:08:02:91:c9:b0:44:a9:8b:80:3e:bb: 92:41:3c:49:c0:37:d9:84:56:41:54:c4:9e:f1:9b: 01:33:97:54:0a:41:be:18:d2:a2:e6:d0:3d:d2:b4: cf:df:26:0b:78:a3:c5:04:2b:78:f9:3e:ac:00:c2: 23:cc:64:2c:f8:96:29:fd:7b:02:fe:04:97:e1:95: ca:aa:09:7b:7f:8d:66:94:f3:5c:f4:aa:aa:6b:c3: 33:a8:6b:48:7a:d1:48:be:d0:65:13:c3:4f:5c:65: 4f:35:9f:5d:55:f0:9e:7f:2d:d7:aa:3c:ce:ca:fa: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 130.51.100.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:39:40:a2:7f:0f:87:2a:06:d6:95:1f:2b:db:43:8e:de:fd: 45:48:db:8e:48:7b:2f:d2:be:ad:d5:8a:3a:57:f4:8a:0e:4d: b1:5c:c9:0c:dd:50:5a:cd:53:89:0c:78:3d:0d:5e:f7:57:03: 87:45:58:d4:59:a8:48:df:77:32:d4:3d:4a:67:af:a4:28:4e: d1:4c:29:5c:d5:29:61:3e:6f:a3:07:e6:48:de:15:84:5d:67: 2d:ff:b4:a7:00:83:e5:be:73:13:92:d9:48:34:ee:28:ac:bd: 01:ee:b0:e5:0b:f3:1e:02:8b:37:e7:40:ed:75:35:19:3e:70: 84:38:fb:8a:d9:5e:78:9a:75:c7:91:c1:53:bb:29:ae:71:8b: e5:a8:c6:98:d4:61:51:66:49:7d:aa:2b:fa:a3:1f:db:b2:94: a4:28:81:bd:77:3e:06:ad:28:48:6e:b8:b6:62:90:75:a0:18: 5d:09:29:ad:02:b7:49:e8:81:14:3f:c8:ec:2a:9e:dd:a7:31: dd:37:c0:25:94:5d:04:de:c9:3c:4e:52:a1:9e:7e:a3:66:87: 9c:8a:8f:ee:f8:79:f4:0c:c7:5e:c0:bc:79:48:51:79:d8:11: 67:08:f6:24:a4:6a:e9:ed:fc:1f:8f:79:b4:7f:f1:eb:42:37: a0:96:7a:ef -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE92FgTIH8Byc5v8VMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAxMTAwNDUxMloXDTI5MDExMzAxNDUxMlowLzEtMCsGA1UEAxMk MzVmYmM1YjMtNDc5Yi00MDVkLTg1NzgtZjdjNzkyYTFmMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFuDd8BUIGxyGrOMqaLe9irbLYBpCxJ9z8ye QbOaTpQEdfbVc+arWZItNpZQQ/uWC+dXrPU5QgFoM69RoIp2dU9jwvzlpTGTRzjj 6sUKeYt7Esi5wbHNOFGYcEpfHFS3ANYIsAHOfgZHOnDIuCyRSFIB3gm0n21IatKz TEPk/ZWQyiwlTSpqhh8MCAKRybBEqYuAPruSQTxJwDfZhFZBVMSe8ZsBM5dUCkG+ GNKi5tA90rTP3yYLeKPFBCt4+T6sAMIjzGQs+JYp/XsC/gSX4ZXKqgl7f41mlPNc 9Kqqa8MzqGtIetFIvtBlE8NPXGVPNZ9dVfCefy3XqjzOyvoYoQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAyWVjAHLhmyuUxcFvcifiyGxG+IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJhMWYzNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM1ZmJjNWIzLTQ3OWItNDA1ZC04 NTc4LWY3Yzc5MmExZjM3NS8zNWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJh MWYzNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKCM2QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bg8PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABY5QKJ/D4cqBtaVHyvbQ47e/UVI245Iey/Svq3VijpX9IoO TbFcyQzdUFrNU4kMeD0NXvdXA4dFWNRZqEjfdzLUPUpnr6QoTtFMKVzVKWE+b6MH 5kjeFYRdZy3/tKcAg+W+cxOS2Ug07iisvQHusOUL8x4CizfnQO11NRk+cIQ4+4rZ XniadceRwVO7Ka5xi+WoxpjUYVFmSX2qK/qjH9uylKQogb13PgatKEhuuLZikHWg GF0JKa0Ct0nogRQ/yOwqnt2nMd03wCWUXQTeyTxOUqGefqNmh5yKj+74efQMx17A vHlIUXnYEWcI9iSkaunt/B+PebR/8etCN6CWeu8= -----END CERTIFICATE-----Generated at Sat Oct 31 02:19:44 2026 by rpki-client