$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e.cer File: 681d813c-8566-4f01-b8f3-989dcf8d983e.cer (raw, json) Hash identifier: 0jDQZrrwlHocx+N7+yHm6Ng0qWxwANnpfma16EdlNWk= Subject key identifier: 99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DBF03727E7AE1F00BD7430A89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 18:07:55 +0000 Certificate not after: Tue 08 Aug 2028 18:07:55 +0000 Subordinate resources: AS: 399263 IP: 199.33.227.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:03:72:7e:7a:e1:f0:0b:d7:43:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 6 18:07:55 2026 GMT Not After : Aug 8 18:07:55 2028 GMT Subject: CN=681d813c-8566-4f01-b8f3-989dcf8d983e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:ea:11:95:3d:b8:f4:5f:50:c3:52:9f:5a: b6:9b:97:d5:13:2d:01:d8:b2:7e:8f:1b:ca:df:5f: 2c:15:f9:69:4f:46:ec:25:29:91:ce:0e:30:9f:31: 91:f3:6e:e4:f4:0b:c4:65:67:f9:94:49:ea:e1:7b: 41:d9:af:fd:43:ff:a6:68:5a:42:72:a5:b8:93:2e: 74:46:70:d0:0b:94:9b:57:b4:77:79:39:f7:f1:7a: fe:21:92:aa:3b:3b:26:68:ea:c7:33:29:69:95:f4: 41:2c:ac:f8:b8:5c:d0:0e:cd:db:fc:0a:2b:73:bf: fc:2e:c9:91:c4:02:57:b5:1e:9f:89:93:05:e6:47: ea:6d:3f:ab:b8:4a:0c:57:76:0f:62:0a:e4:d4:cd: 4d:bc:3e:ce:d1:94:c1:09:d7:4b:55:bc:6d:94:a6: c5:0e:71:e2:30:bb:d8:5b:f3:fe:ca:b8:b2:e4:db: 77:55:e6:bc:43:75:8c:f8:47:62:a0:50:4a:3a:c3: 48:80:2e:2e:31:7d:bb:c1:4a:44:79:79:25:32:09: 69:a7:cf:fb:61:bb:a0:fa:f0:a2:d8:0f:7b:2d:43: 78:12:90:44:28:b9:05:e7:46:c8:88:6e:fa:5f:ff: 48:a0:0c:8f:32:10:5f:20:73:07:cd:8a:81:34:8b: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A5:0D:75:63:4A:1E:EF:E7:CD:0B:9D:7A:DA:64:0F:FD:82:38:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/681d813c-8566-4f01-b8f3-989dcf8d983e/681d813c-8566-4f01-b8f3-989dcf8d983e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.33.227.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399263 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:34:6f:4d:c3:fb:24:4f:30:a2:22:b0:36:05:be:1d:d2:14: 8a:d2:a4:77:73:e5:72:e0:03:1c:94:c1:e3:fc:38:f9:de:f0: c8:65:f6:49:0b:2c:a7:a1:4e:e7:1e:41:88:8d:6e:fb:4a:ee: 1d:73:d1:49:5c:ee:6f:64:56:28:24:5b:2b:40:8e:d2:1e:a1: f6:93:b3:b8:97:75:bf:36:e9:07:f5:bd:7b:75:26:b3:f4:16: a9:c2:2d:8a:f6:ba:f8:ad:c3:d7:1a:11:9e:1e:e1:90:d1:ff: 98:d2:9f:ae:f2:e4:fd:ea:65:3c:98:79:3f:76:9d:bc:19:73: 46:ea:62:12:1f:ea:07:96:97:28:40:f5:01:28:c0:ef:9f:76: b8:a7:89:25:90:24:a3:e8:5b:90:09:56:34:49:0e:c4:21:23: d6:36:05:12:93:0d:7b:34:92:a5:81:fb:9b:8f:38:94:09:a2: d2:93:8a:69:9e:b2:4c:cd:eb:6a:c9:a1:01:74:05:c5:77:de: 9d:2a:99:fd:c2:69:64:42:48:5b:eb:65:b9:60:a8:61:e5:e4: 64:00:3a:8a:22:15:93:b3:2d:1d:f0:f5:cc:c6:c1:d6:29:9b: 16:85:02:59:b2:d4:61:d9:4f:f7:16:b9:6c:07:ef:96:01:2d: 77:cb:37:55 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2/A3J+euHwC9dDCokwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNjE4MDc1NVoXDTI4MDgwODE4MDc1NVowLzEtMCsGA1UEAxMk NjgxZDgxM2MtODU2Ni00ZjAxLWI4ZjMtOTg5ZGNmOGQ5ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkLqEZU9uPRfUMNSn1q2m5fVEy0B2LJ+jxvK 318sFflpT0bsJSmRzg4wnzGR827k9AvEZWf5lEnq4XtB2a/9Q/+maFpCcqW4ky50 RnDQC5SbV7R3eTn38Xr+IZKqOzsmaOrHMylplfRBLKz4uFzQDs3b/Aorc7/8LsmR xAJXtR6fiZMF5kfqbT+ruEoMV3YPYgrk1M1NvD7O0ZTBCddLVbxtlKbFDnHiMLvY W/P+yriy5Nt3Vea8Q3WM+EdioFBKOsNIgC4uMX27wUpEeXklMglpp8/7Ybug+vCi 2A97LUN4EpBEKLkF50bIiG76X/9IoAyPMhBfIHMHzYqBNIujTwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJmlDXVjSh7v580LnXraZA/9gjhxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 ODFkODEzYy04NTY2LTRmMDEtYjhmMy05ODlkY2Y4ZDk4M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY4MWQ4MTNjLTg1NjYtNGYwMS1i OGYzLTk4OWRjZjhkOTgzZS82ODFkODEzYy04NTY2LTRmMDEtYjhmMy05ODlkY2Y4 ZDk4M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHIeMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhefMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGc0b03D+yRPMKIisDYFvh3SFIrSpHdz5XLgAxyUweP8OPne 8Mhl9kkLLKehTuceQYiNbvtK7h1z0Ulc7m9kVigkWytAjtIeofaTs7iXdb826Qf1 vXt1JrP0FqnCLYr2uvitw9caEZ4e4ZDR/5jSn67y5P3qZTyYeT92nbwZc0bqYhIf 6geWlyhA9QEowO+fdriniSWQJKPoW5AJVjRJDsQhI9Y2BRKTDXs0kqWB+5uPOJQJ otKTimmeskzN62rJoQF0BcV33p0qmf3CaWRCSFvrZblgqGHl5GQAOooiFZOzLR3w 9czGwdYpmxaFAlmy1GHZT/cWuWwH75YBLXfLN1U= -----END CERTIFICATE-----Generated at Wed May 13 02:48:17 2026 by rpki-client