$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/19b543bb-41c1-49f2-a5fb-7ed0efb65ab9.cer File: 19b543bb-41c1-49f2-a5fb-7ed0efb65ab9.cer (raw, json) Hash identifier: 9//R2wLtHPO4orMmO090dxB4GLhoudP7gc2FFM0hWaE= Subject key identifier: DB:B4:77:DB:3D:0E:74:76:40:74:D8:1E:5C:14:F9:A7:8B:12:C5:9F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAEF40D39D500FD51AF1FEA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/19b543bb-41c1-49f2-a5fb-7ed0efb65ab9/19b543bb-41c1-49f2-a5fb-7ed0efb65ab9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/19b543bb-41c1-49f2-a5fb-7ed0efb65ab9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 May 2026 00:03:58 +0000 Certificate not after: Thu 03 Aug 2028 00:03:58 +0000 Subordinate resources: AS: 402337 IP: 131.162.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:f4:0d:39:d5:00:fd:51:af:1f:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 1 00:03:58 2026 GMT Not After : Aug 3 00:03:58 2028 GMT Subject: CN=19b543bb-41c1-49f2-a5fb-7ed0efb65ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:7c:30:ce:57:6f:2e:c9:7f:b2:3d:50:09: 22:eb:b0:ab:d1:ab:cb:b9:7c:12:18:e3:6f:05:71: ac:fa:90:1f:17:90:fe:ee:8f:58:ed:81:a2:cd:7f: 68:69:f0:e5:94:93:63:85:ec:96:14:0d:d8:79:b8: cb:f5:84:16:e0:0a:ca:71:8e:fc:8d:db:54:6b:e6: aa:87:e8:a1:2c:f2:fa:ce:11:2c:88:9d:3a:c3:e3: 97:b9:b7:04:f8:64:1a:00:cb:48:9e:7b:a0:48:55: db:ef:e3:d7:60:ab:cd:7b:df:4f:21:46:b5:a1:9a: 41:06:fe:c0:a4:9d:4d:c0:c4:29:fb:4f:1a:d4:a0: ea:ae:9b:b4:aa:23:72:ab:cf:bd:23:94:20:21:49: 5a:35:a8:1e:fc:58:e7:30:17:e2:60:c5:0e:26:db: 0f:2a:85:6a:62:30:96:2f:ee:94:f0:00:c0:e8:3f: fc:4e:81:7c:9e:05:e2:e4:3f:e7:da:87:d4:54:c7: ba:f7:1c:2e:75:c3:5c:2b:1e:e0:f7:3d:d5:71:00: a4:3d:5c:75:8d:e6:0f:2e:90:f7:5f:82:42:c0:67: 83:1f:91:2f:d5:bd:7d:5b:1f:89:25:e5:6d:5c:10: 72:9c:e7:42:94:a0:e4:bd:2a:d7:b0:96:54:7a:bc: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B4:77:DB:3D:0E:74:76:40:74:D8:1E:5C:14:F9:A7:8B:12:C5:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/19b543bb-41c1-49f2-a5fb-7ed0efb65ab9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/19b543bb-41c1-49f2-a5fb-7ed0efb65ab9/19b543bb-41c1-49f2-a5fb-7ed0efb65ab9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 131.162.232.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402337 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4a:d2:f0:a0:b2:ad:75:ce:f8:88:2f:ff:d4:c3:46:d0:0c: 12:3b:d7:64:ab:36:35:11:1c:54:68:2b:8b:93:c0:70:61:15: 32:e6:c6:59:7a:58:99:8c:9e:30:8e:d5:78:92:b3:8d:f2:f8: 54:40:1f:00:07:b9:77:24:a6:0d:52:1c:ca:d4:16:ae:2f:8d: 7d:cf:47:6e:2b:f4:2f:ed:00:5d:2e:ae:10:7e:f4:09:7f:67: 3c:88:c7:56:36:e8:f1:dd:58:a3:a8:12:c5:b2:be:c8:24:85: 9c:08:b6:a3:27:5e:7a:28:9b:f9:84:25:1f:6b:80:f5:52:0d: b4:0c:44:04:bd:ff:82:f0:33:7d:1f:e1:11:b5:7a:f1:29:0d: 04:10:91:7d:6a:83:42:74:a6:a8:9f:d6:9e:f3:f6:3b:4b:83: 02:74:65:8e:73:c8:52:1c:03:ed:16:76:40:55:c0:0e:c2:26: 8b:a0:88:e8:91:e5:07:bf:ad:02:d5:e3:69:d4:c3:fe:74:28: 96:3b:64:29:1c:88:e7:ac:67:f4:d4:f5:c2:3c:59:9a:45:0b: a2:d7:fd:ae:a2:4f:a8:59:31:25:69:54:d8:96:0a:66:11:d9: ad:43:a8:71:4e:d8:fa:7a:67:4e:67:44:12:10:ae:00:e9:f2: 3e:09:f7:7c -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2u9A051QD9Ua8f6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwMTAwMDM1OFoXDTI4MDgwMzAwMDM1OFowLzEtMCsGA1UEAxMk MTliNTQzYmItNDFjMS00OWYyLWE1ZmItN2VkMGVmYjY1YWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWd8MM5Xby7Jf7I9UAki67Cr0avLuXwSGONv BXGs+pAfF5D+7o9Y7YGizX9oafDllJNjheyWFA3YebjL9YQW4ArKcY78jdtUa+aq h+ihLPL6zhEsiJ06w+OXubcE+GQaAMtInnugSFXb7+PXYKvNe99PIUa1oZpBBv7A pJ1NwMQp+08a1KDqrpu0qiNyq8+9I5QgIUlaNage/FjnMBfiYMUOJtsPKoVqYjCW L+6U8ADA6D/8ToF8ngXi5D/n2ofUVMe69xwudcNcKx7g9z3VcQCkPVx1jeYPLpD3 X4JCwGeDH5Ev1b19Wx+JJeVtXBBynOdClKDkvSrXsJZUerxygwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNu0d9s9DnR2QHTYHlwU+aeLEsWfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8x OWI1NDNiYi00MWMxLTQ5ZjItYTVmYi03ZWQwZWZiNjVhYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzE5YjU0M2JiLTQxYzEtNDlmMi1h NWZiLTdlZDBlZmI2NWFiOS8xOWI1NDNiYi00MWMxLTQ5ZjItYTVmYi03ZWQwZWZi NjVhYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKDougwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiOhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADJK0vCgsq11zviIL//Uw0bQDBI712SrNjURHFRoK4uTwHBh FTLmxll6WJmMnjCO1XiSs43y+FRAHwAHuXckpg1SHMrUFq4vjX3PR24r9C/tAF0u rhB+9Al/ZzyIx1Y26PHdWKOoEsWyvsgkhZwItqMnXnoom/mEJR9rgPVSDbQMRAS9 /4LwM30f4RG1evEpDQQQkX1qg0J0pqif1p7z9jtLgwJ0ZY5zyFIcA+0WdkBVwA7C JougiOiR5Qe/rQLV42nUw/50KJY7ZCkciOesZ/TU9cI8WZpFC6LX/a6iT6hZMSVp VNiWCmYR2a1DqHFO2Pp6Z05nRBIQrgDp8j4J93w= -----END CERTIFICATE-----Generated at Wed May 13 02:48:25 2026 by rpki-client