$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9.cer File: 0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9.cer (raw, json) Hash identifier: QDMeAlPwkw90ec6LtnqxEb3MrSNleMfx4fbC/Ig86rs= Subject key identifier: 70:2B:2B:EC:63:6B:77:36:29:62:53:81:5F:54:DF:2B:5D:2A:FB:0C Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DBC0315B28C44C3C244876800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9/0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 May 2026 16:19:46 +0000 Certificate not after: Mon 07 Aug 2028 16:19:46 +0000 Subordinate resources: AS: 40925 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bc:03:15:b2:8c:44:c3:c2:44:87:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 5 16:19:46 2026 GMT Not After : Aug 7 16:19:46 2028 GMT Subject: CN=0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:50:46:e1:2d:dd:6c:ce:8b:dc:0d:85:db:8e: fd:33:ad:33:2f:53:51:d9:bf:79:a9:fd:ed:4c:83: 1d:e3:3e:84:82:18:48:00:80:fb:93:24:c5:31:76: 4f:7a:70:dd:dd:28:1c:f6:23:f6:5e:be:4f:fe:2e: 0a:6d:1d:21:b8:19:1d:36:e8:ba:82:1d:81:5b:d5: 7d:29:e3:7c:85:a4:42:3a:d3:96:fe:5e:21:c3:1b: 6e:47:e0:8c:df:24:80:8a:05:c6:68:62:86:f5:c7: fe:a1:7e:d0:dc:15:a3:e4:32:84:f3:e7:b2:c6:b4: c4:28:84:bd:61:f1:72:19:6f:43:23:63:f5:26:27: 23:56:eb:d1:6b:26:69:cc:53:f8:e5:f8:45:28:31: ac:c9:48:67:5b:3f:53:65:78:21:90:f1:90:8e:5e: 92:18:56:a9:58:8d:51:ef:af:3d:ed:50:a4:b9:0f: c1:52:4b:db:7f:36:ff:42:3c:fa:59:64:24:a2:da: 1d:05:1c:2d:2f:77:fc:72:ce:5d:d7:2f:a3:f8:41: 51:b7:a3:99:86:c6:00:47:01:e3:f8:c4:7b:12:e6: 1b:a5:c6:40:15:74:10:94:47:57:3b:e6:63:6c:ed: 3e:89:38:59:83:45:b0:a4:76:61:18:3c:2c:c9:c4: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2B:2B:EC:63:6B:77:36:29:62:53:81:5F:54:DF:2B:5D:2A:FB:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9/0e4bd2e3-5848-41f1-9cf9-d0b8f7f79be9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 40925 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f5:49:99:b5:fb:bd:b0:6b:00:65:62:cc:27:36:05:bd:74: 71:85:be:4b:99:a4:da:8d:d6:93:db:20:96:0d:90:a4:6b:4c: 62:16:a7:2c:7a:43:93:69:85:54:54:92:2f:8b:3a:4d:63:81: 02:8f:59:87:0b:6e:6e:e6:bd:97:1b:af:e1:b1:aa:87:79:58: 98:9d:fd:34:12:a0:86:9f:4d:a1:42:38:e4:23:b3:ef:6c:2b: 50:f9:6a:80:80:46:95:eb:4f:57:4e:82:ce:25:c5:54:10:41: 03:93:2f:d0:88:bb:31:35:07:6c:2c:bf:eb:b6:f8:36:0e:99: d3:8b:12:0f:b4:6a:a9:15:f7:c1:5c:ab:4a:b4:a3:0b:eb:36: 93:7c:d7:eb:4b:08:7e:ee:c6:2e:20:fb:60:e6:cb:8c:90:90: 21:a2:f2:2d:1c:49:0a:0c:32:92:19:68:5d:88:ee:33:42:2e: fd:6e:fd:90:87:c4:e1:1e:7e:34:86:82:d2:27:e2:a7:de:b4: e8:0c:ed:99:9c:a7:33:2e:79:d5:27:c0:81:d7:f0:b6:6a:12: 8a:4b:5a:34:70:9c:1e:e3:06:bb:82:9c:6d:b4:a6:98:ef:e7: f9:9f:72:b1:33:a6:c4:d4:97:7f:4b:4d:44:aa:7c:04:0c:0c: 7b:74:52:31 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE28AxWyjETDwkSHaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNTE2MTk0NloXDTI4MDgwNzE2MTk0NlowLzEtMCsGA1UEAxMk MGU0YmQyZTMtNTg0OC00MWYxLTljZjktZDBiOGY3Zjc5YmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1BG4S3dbM6L3A2F2479M60zL1NR2b95qf3t TIMd4z6EghhIAID7kyTFMXZPenDd3Sgc9iP2Xr5P/i4KbR0huBkdNui6gh2BW9V9 KeN8haRCOtOW/l4hwxtuR+CM3ySAigXGaGKG9cf+oX7Q3BWj5DKE8+eyxrTEKIS9 YfFyGW9DI2P1JicjVuvRayZpzFP45fhFKDGsyUhnWz9TZXghkPGQjl6SGFapWI1R 76897VCkuQ/BUkvbfzb/Qjz6WWQkotodBRwtL3f8cs5d1y+j+EFRt6OZhsYARwHj +MR7EuYbpcZAFXQQlEdXO+ZjbO0+iThZg0WwpHZhGDwsycQRRQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFHArK+xja3c2KWJTgV9U3ytdKvsMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w ZTRiZDJlMy01ODQ4LTQxZjEtOWNmOS1kMGI4ZjdmNzliZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBlNGJkMmUzLTU4NDgtNDFmMS05 Y2Y5LWQwYjhmN2Y3OWJlOS8wZTRiZDJlMy01ODQ4LTQxZjEtOWNmOS1kMGI4Zjdm NzliZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJ/dMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEH1SZm1+72wawBlYswnNgW9dHGF vkuZpNqN1pPbIJYNkKRrTGIWpyx6Q5NphVRUki+LOk1jgQKPWYcLbm7mvZcbr+Gx qod5WJid/TQSoIafTaFCOOQjs+9sK1D5aoCARpXrT1dOgs4lxVQQQQOTL9CIuzE1 B2wsv+u2+DYOmdOLEg+0aqkV98Fcq0q0owvrNpN81+tLCH7uxi4g+2Dmy4yQkCGi 8i0cSQoMMpIZaF2I7jNCLv1u/ZCHxOEefjSGgtIn4qfetOgM7ZmcpzMuedUnwIHX 8LZqEopLWjRwnB7jBruCnG20ppjv5/mfcrEzpsTUl39LTUSqfAQMDHt0UjE= -----END CERTIFICATE-----Generated at Wed May 13 02:48:26 2026 by rpki-client