$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179.cer File: 280cbf0c-0cae-414d-8451-5942a3d8b179.cer (raw, json) Hash identifier: ju1hkTzeZbzE43VVJTpaaOuhNus0cUWER+q2fGYMRAU= Subject key identifier: 7F:DD:A3:5B:47:55:D3:98:D5:D3:4B:C0:E1:49:9B:CF:CB:55:B5:45 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9911F0EEE977534727B1A7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/280cbf0c-0cae-414d-8451-5942a3d8b179.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Apr 2026 03:56:24 +0000 Certificate not after: Wed 26 Jul 2028 03:56:24 +0000 Subordinate resources: AS: 46232 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:99:11:f0:ee:e9:77:53:47:27:b1:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 23 03:56:24 2026 GMT Not After : Jul 26 03:56:24 2028 GMT Subject: CN=280cbf0c-0cae-414d-8451-5942a3d8b179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:e9:f9:5b:6b:d6:d1:c7:af:b2:89:95:25: af:c2:55:5a:b4:f6:a5:57:63:d3:4d:2e:55:a3:42: 27:16:d6:7f:9a:c6:90:34:24:03:ea:22:09:0b:1d: 61:eb:76:4c:a7:99:44:2c:8a:4a:18:78:c5:41:22: 91:25:96:bf:0b:e5:26:17:d8:64:58:e4:48:e6:88: f2:88:de:85:10:22:c2:3c:4e:0f:cc:7e:30:4a:7d: 2c:f9:91:e2:2c:d8:02:10:82:b3:4f:f9:bd:c7:01: d4:39:d6:02:7b:94:75:1e:28:de:27:1b:c6:f5:ec: 23:83:63:4e:41:e3:17:1f:4e:71:a3:2e:8f:6c:1c: 8f:1c:27:69:03:69:39:52:16:4c:e7:94:e2:73:a1: b7:c1:e9:44:c8:34:48:30:f3:ef:08:09:20:e5:a2: f5:a7:e1:1f:52:a8:c4:30:2e:f8:60:af:1a:d5:7e: e3:b9:eb:6b:b3:a8:20:cd:ad:1a:fc:e8:63:a7:66: 3a:12:3d:25:20:c3:d1:f9:5d:5b:5a:5a:2a:df:0d: 9d:93:67:42:76:ed:81:ca:5d:c6:55:7b:f9:4b:29: 9a:3a:37:8f:73:66:54:cc:6f:37:32:50:58:91:24: 8f:0c:85:43:f1:bb:30:5d:ab:02:8f:f5:da:74:93: ee:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DD:A3:5B:47:55:D3:98:D5:D3:4B:C0:E1:49:9B:CF:CB:55:B5:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/280cbf0c-0cae-414d-8451-5942a3d8b179/280cbf0c-0cae-414d-8451-5942a3d8b179.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 46232 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a0:35:59:a0:b8:9a:7c:15:a8:a7:60:23:6d:6a:5a:8e:d9: ba:d3:48:2b:1d:75:b2:6e:cb:c8:63:22:12:8e:d6:e7:27:31: b3:f9:02:95:43:24:4d:14:7d:4c:44:01:f9:67:9e:a9:84:c0: dc:38:b4:83:fb:41:0c:88:1d:a7:96:e3:7d:23:ce:e2:0a:75: e1:5d:25:5c:28:1a:47:0b:a3:d4:f6:99:5d:0a:e1:ff:25:e3: 7a:83:ea:2c:15:72:b7:2e:fb:0e:92:4f:9a:d7:56:83:e5:73: a0:4e:3e:f0:99:46:4b:90:36:59:53:e2:be:a4:90:67:6c:3a: 29:92:fb:f5:27:ee:e9:14:8b:60:ba:fa:f8:cb:d7:3e:71:21: 1a:64:94:c9:ec:ef:6d:9c:4a:dd:68:ae:0d:0f:99:69:7b:19: 11:21:cc:6c:b9:e2:30:49:75:08:27:98:53:b7:59:f4:2a:4a: ae:f6:66:2e:87:45:ab:01:c5:7b:6c:a6:80:c2:cd:bf:f7:0e: be:36:54:a0:80:c3:8d:57:15:3f:57:05:27:16:c2:f4:91:3f: 30:f9:de:41:b5:cb:d6:1f:d0:b0:b2:0b:c7:43:7b:8a:a7:53: bf:87:23:ea:5f:a1:b8:49:97:40:0e:d4:9f:e5:6c:be:26:0f: af:6c:43:2e -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE2ZEfDu6XdTRyexp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMzAzNTYyNFoXDTI4MDcyNjAzNTYyNFowLzEtMCsGA1UEAxMk MjgwY2JmMGMtMGNhZS00MTRkLTg0NTEtNTk0MmEzZDhiMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Xp+Vtr1tHHr7KJlSWvwlVatPalV2PTTS5V o0InFtZ/msaQNCQD6iIJCx1h63ZMp5lELIpKGHjFQSKRJZa/C+UmF9hkWORI5ojy iN6FECLCPE4PzH4wSn0s+ZHiLNgCEIKzT/m9xwHUOdYCe5R1HijeJxvG9ewjg2NO QeMXH05xoy6PbByPHCdpA2k5UhZM55Tic6G3welEyDRIMPPvCAkg5aL1p+EfUqjE MC74YK8a1X7juetrs6ggza0a/Ohjp2Y6Ej0lIMPR+V1bWloq3w2dk2dCdu2Byl3G VXv5SymaOjePc2ZUzG83MlBYkSSPDIVD8bswXasCj/XadJPuRQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFH/do1tHVdOY1dNLwOFJm8/LVbVFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8y ODBjYmYwYy0wY2FlLTQxNGQtODQ1MS01OTQyYTNkOGIxNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzI4MGNiZjBjLTBjYWUtNDE0ZC04 NDUxLTU5NDJhM2Q4YjE3OS8yODBjYmYwYy0wY2FlLTQxNGQtODQ1MS01OTQyYTNk OGIxNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALSYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKmgNVmguJp8FainYCNtalqO2brT SCsddbJuy8hjIhKO1ucnMbP5ApVDJE0UfUxEAflnnqmEwNw4tIP7QQyIHaeW430j zuIKdeFdJVwoGkcLo9T2mV0K4f8l43qD6iwVcrcu+w6ST5rXVoPlc6BOPvCZRkuQ NllT4r6kkGdsOimS+/Un7ukUi2C6+vjL1z5xIRpklMns722cSt1org0PmWl7GREh zGy54jBJdQgnmFO3WfQqSq72Zi6HRasBxXtspoDCzb/3Dr42VKCAw41XFT9XBScW wvSRPzD53kG1y9Yf0LCyC8dDe4qnU7+HI+pfobhJl0AO1J/lbL4mD69sQy4= -----END CERTIFICATE-----Generated at Wed May 13 03:51:39 2026 by rpki-client