$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3566d0fb-b007-4803-bb2e-b9629c2e93d9.cer File: 3566d0fb-b007-4803-bb2e-b9629c2e93d9.cer (raw, json) Hash identifier: faCOVwaMYuzOEA4Z4zvIP9zHr7O5QZmIgV/prDIPtug= Subject key identifier: DE:F2:4B:83:E5:BC:12:C2:3D:03:99:27:D0:03:5F:16:C7:11:CB:C9 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D975B3D8892B5BCC19AC1F588 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3566d0fb-b007-4803-bb2e-b9629c2e93d9/3566d0fb-b007-4803-bb2e-b9629c2e93d9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3566d0fb-b007-4803-bb2e-b9629c2e93d9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 13:12:28 +0000 Certificate not after: Tue 25 Jul 2028 13:12:28 +0000 Subordinate resources: AS: 402438 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:5b:3d:88:92:b5:bc:c1:9a:c1:f5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 22 13:12:28 2026 GMT Not After : Jul 25 13:12:28 2028 GMT Subject: CN=3566d0fb-b007-4803-bb2e-b9629c2e93d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:85:37:29:9b:19:07:1f:ce:85:16:f3:71:c6: 21:48:d9:d0:f4:a0:82:a8:d6:f8:c2:62:97:ae:71: e0:10:17:6d:42:43:25:e2:b2:1e:06:0b:a3:ca:bc: e1:f8:61:16:2a:17:1a:4b:39:e4:00:e3:5b:3c:90: 8e:9d:4d:4f:a1:cb:ef:db:51:99:f1:84:09:c7:74: 43:27:18:01:6b:f6:ee:99:85:36:56:ec:52:0b:8e: 61:c1:c2:79:f5:2b:0b:f2:3d:46:66:cb:d9:ef:01: ce:bd:f1:81:6f:6f:c7:bf:98:c5:7f:77:a6:20:e8: 52:f1:a9:34:e6:d7:50:56:58:43:94:bf:70:87:49: 1e:b1:a0:6a:10:42:0d:5e:86:48:c1:af:be:28:6f: 1b:7b:b7:9b:03:a1:d5:8a:c2:7e:fd:77:e7:1e:26: a9:27:06:a7:d4:f5:4d:97:18:6b:32:f5:9b:56:22: 07:b6:72:08:c6:b3:df:d1:3b:af:ad:aa:06:3f:3a: 43:2f:66:a0:ca:84:92:75:6f:8f:1d:e1:ab:5e:9e: 88:f4:a2:49:d8:b1:86:b1:04:0f:3b:79:fb:97:a6: 73:47:33:86:e6:37:81:86:db:f2:83:a5:3a:6f:e1: c9:00:fd:3e:13:b4:56:bf:3c:e5:3e:04:19:d6:54: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F2:4B:83:E5:BC:12:C2:3D:03:99:27:D0:03:5F:16:C7:11:CB:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3566d0fb-b007-4803-bb2e-b9629c2e93d9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3566d0fb-b007-4803-bb2e-b9629c2e93d9/3566d0fb-b007-4803-bb2e-b9629c2e93d9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402438 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:00:66:6c:6c:59:c0:29:4c:44:38:95:fe:32:58:f4:e5:c9: 4c:da:5d:8c:01:00:b8:94:ca:0c:ed:dd:ba:f7:93:71:c5:b5: 53:c1:b0:e2:19:ab:c3:41:aa:f1:45:84:45:29:99:cd:59:9c: e8:ef:dd:c6:40:f2:8f:ae:cd:cf:9f:23:50:ea:ca:49:b2:51: af:12:eb:16:98:13:10:ef:2a:4b:10:f3:46:7c:15:c0:fc:b6: d0:3e:13:43:15:4a:9f:42:23:44:cf:76:04:2f:4d:8b:41:89: 82:97:c0:9a:34:f0:19:c9:00:a2:cb:85:b3:4e:3a:24:f5:ab: b0:37:af:47:d0:00:a3:a5:8e:61:c1:21:76:32:10:ad:18:b5: 2e:af:e5:46:7b:fc:12:3e:f6:f6:fe:d0:de:e8:37:47:fc:c1: e4:31:e0:a3:07:a5:c7:33:af:2b:96:74:de:1a:b7:88:21:d9: 78:e5:47:f9:c2:1e:65:35:74:db:80:ea:60:5b:21:7d:91:b2: 85:f7:e9:b4:e6:20:38:c9:36:10:31:61:fc:27:43:9c:a1:60: 27:7b:25:0a:63:cf:a7:c7:01:b3:b6:57:f4:7c:f6:d2:8f:c9: 1e:97:38:0c:85:bc:14:1b:84:45:16:8a:4d:9d:db:bd:0e:25: f6:9d:0a:31 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE2XWz2IkrW8wZrB9YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMjEzMTIyOFoXDTI4MDcyNTEzMTIyOFowLzEtMCsGA1UEAxMk MzU2NmQwZmItYjAwNy00ODAzLWJiMmUtYjk2MjljMmU5M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4U3KZsZBx/OhRbzccYhSNnQ9KCCqNb4wmKX rnHgEBdtQkMl4rIeBgujyrzh+GEWKhcaSznkAONbPJCOnU1Pocvv21GZ8YQJx3RD JxgBa/bumYU2VuxSC45hwcJ59SsL8j1GZsvZ7wHOvfGBb2/Hv5jFf3emIOhS8ak0 5tdQVlhDlL9wh0kesaBqEEINXoZIwa++KG8be7ebA6HVisJ+/XfnHiapJwan1PVN lxhrMvWbViIHtnIIxrPf0TuvraoGPzpDL2agyoSSdW+PHeGrXp6I9KJJ2LGGsQQP O3n7l6ZzRzOG5jeBhtvyg6U6b+HJAP0+E7RWvzzlPgQZ1lQCWwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFN7yS4PlvBLCPQOZJ9ADXxbHEcvJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z NTY2ZDBmYi1iMDA3LTQ4MDMtYmIyZS1iOTYyOWMyZTkzZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzM1NjZkMGZiLWIwMDctNDgwMy1i YjJlLWI5NjI5YzJlOTNkOS8zNTY2ZDBmYi1iMDA3LTQ4MDMtYmIyZS1iOTYyOWMy ZTkzZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiQGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADMAZmxsWcApTEQ4lf4yWPTlyUza XYwBALiUygzt3br3k3HFtVPBsOIZq8NBqvFFhEUpmc1ZnOjv3cZA8o+uzc+fI1Dq ykmyUa8S6xaYExDvKksQ80Z8FcD8ttA+E0MVSp9CI0TPdgQvTYtBiYKXwJo08BnJ AKLLhbNOOiT1q7A3r0fQAKOljmHBIXYyEK0YtS6v5UZ7/BI+9vb+0N7oN0f8weQx 4KMHpcczryuWdN4at4gh2XjlR/nCHmU1dNuA6mBbIX2RsoX36bTmIDjJNhAxYfwn Q5yhYCd7JQpjz6fHAbO2V/R89tKPyR6XOAyFvBQbhEUWik2d270OJfadCjE= -----END CERTIFICATE-----Generated at Wed May 13 02:48:29 2026 by rpki-client