$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7625480b-7dca-4d1f-921d-fea1ee98955b.cer File: 7625480b-7dca-4d1f-921d-fea1ee98955b.cer (raw, json) Hash identifier: Brbx6EIPc/X970TSTTNWb9bdi+MxCuxPTmSdiojPvuA= Subject key identifier: 59:AA:88:1B:12:25:A2:0E:42:13:E9:B3:B6:7F:3B:67:47:06:03:73 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9AB8EBAD577A0F7B2765A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7625480b-7dca-4d1f-921d-fea1ee98955b/7625480b-7dca-4d1f-921d-fea1ee98955b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7625480b-7dca-4d1f-921d-fea1ee98955b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Apr 2026 18:08:39 +0000 Certificate not after: Wed 26 Jul 2028 18:08:39 +0000 Subordinate resources: AS: 11685 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:b8:eb:ad:57:7a:0f:7b:27:65:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 23 18:08:39 2026 GMT Not After : Jul 26 18:08:39 2028 GMT Subject: CN=7625480b-7dca-4d1f-921d-fea1ee98955b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:6d:8a:4b:cc:7f:84:9d:c0:56:e0:dc:d8: 65:3c:69:ec:a6:ef:5e:89:ab:8a:ca:39:fb:98:11: 0d:3d:53:48:e2:58:c9:bb:41:90:f4:ab:8b:9e:89: 05:82:eb:cc:9d:c9:b6:49:60:6d:36:ae:36:05:d4: bd:f6:98:34:b7:38:11:79:d6:71:1e:41:30:28:f1: 42:b5:52:24:9d:70:c9:78:0f:a5:af:7b:53:ef:51: 95:ba:da:76:c8:8f:0b:d3:86:80:6f:88:b9:c9:11: ce:ec:14:59:ea:3c:69:c5:cc:28:ff:42:b8:71:99: bd:1b:61:d6:11:ec:66:ea:ab:a7:18:a3:79:ce:47: 9c:e6:bf:50:79:64:d7:29:a1:c4:47:01:d3:b5:9c: 08:c1:24:8c:9f:e4:40:89:df:51:f9:5e:69:1f:6d: ea:c0:81:0c:cf:b7:ca:7a:26:88:6e:93:9c:3f:f0: 61:39:0b:f4:a7:f1:4b:af:8f:b1:77:49:43:5d:ff: a7:70:7b:a5:f7:3a:ef:30:d5:5a:9b:8b:26:d3:34: ea:06:a3:22:e6:a1:97:c4:9b:b8:ff:3c:fe:5e:99: 23:8b:f4:4d:3e:75:28:75:81:b0:61:ea:c6:46:2b: 2a:a6:47:1f:cc:89:42:ec:6c:31:cc:2d:24:15:b5: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:88:1B:12:25:A2:0E:42:13:E9:B3:B6:7F:3B:67:47:06:03:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7625480b-7dca-4d1f-921d-fea1ee98955b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7625480b-7dca-4d1f-921d-fea1ee98955b/7625480b-7dca-4d1f-921d-fea1ee98955b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11685 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:56:e3:83:e6:ac:0f:c9:cc:17:0f:be:da:bc:5f:83:32:aa: 51:70:96:99:24:99:3f:c0:19:4a:29:fd:cf:ee:2a:d0:cf:23: 8c:d6:0a:b6:96:99:cb:47:a9:96:79:a2:d4:44:e4:81:e3:a3: 04:8e:4f:fb:71:65:04:a2:66:f2:82:62:f4:31:2a:d0:6e:2e: af:73:94:84:c7:09:69:c7:7b:d9:94:34:1d:ad:6e:eb:0e:fb: 9f:db:66:9a:0d:bc:cf:eb:53:39:54:e2:e3:2c:c3:15:83:ed: 87:c6:d9:c4:6a:14:47:19:22:6f:e7:89:1e:0f:3f:cc:79:ed: d8:6a:6b:c3:0c:26:b7:8a:9c:e6:ad:31:6a:a5:57:8a:08:cb: 4c:9c:91:2f:1e:56:07:ff:74:cb:58:1d:2e:47:1d:37:a7:f3: 43:a3:7e:12:cc:e5:9e:cb:55:65:f4:f4:62:e9:89:0f:37:92: 47:f1:a7:28:81:b1:8a:41:e8:d2:4a:1b:4b:89:21:e9:ab:4c: a7:e6:98:e3:1a:86:54:6d:32:b5:2e:76:43:f8:3d:d0:c0:ae: ac:1b:74:a9:7f:e5:dc:11:52:26:94:f9:13:70:65:d3:e3:4a: ba:53:60:5b:2b:28:98:6f:e6:28:67:fa:f3:ab:ed:6c:99:99: e5:bf:36:f6 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE2auOutV3oPeydlpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMzE4MDgzOVoXDTI4MDcyNjE4MDgzOVowLzEtMCsGA1UEAxMk NzYyNTQ4MGItN2RjYS00ZDFmLTkyMWQtZmVhMWVlOTg5NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TVtikvMf4SdwFbg3NhlPGnspu9eiauKyjn7 mBENPVNI4ljJu0GQ9KuLnokFguvMncm2SWBtNq42BdS99pg0tzgRedZxHkEwKPFC tVIknXDJeA+lr3tT71GVutp2yI8L04aAb4i5yRHO7BRZ6jxpxcwo/0K4cZm9G2HW Eexm6qunGKN5zkec5r9QeWTXKaHERwHTtZwIwSSMn+RAid9R+V5pH23qwIEMz7fK eiaIbpOcP/BhOQv0p/FLr4+xd0lDXf+ncHul9zrvMNVam4sm0zTqBqMi5qGXxJu4 /zz+Xpkji/RNPnUodYGwYerGRisqpkcfzIlC7GwxzC0kFbXVawIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFFmqiBsSJaIOQhPps7Z/O2dHBgNzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 NjI1NDgwYi03ZGNhLTRkMWYtOTIxZC1mZWExZWU5ODk1NWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzc2MjU0ODBiLTdkY2EtNGQxZi05 MjFkLWZlYTFlZTk4OTU1Yi83NjI1NDgwYi03ZGNhLTRkMWYtOTIxZC1mZWExZWU5 ODk1NWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLaUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXlbjg+asD8nMFw++2rxfgzKqUXCW mSSZP8AZSin9z+4q0M8jjNYKtpaZy0eplnmi1ETkgeOjBI5P+3FlBKJm8oJi9DEq 0G4ur3OUhMcJacd72ZQ0Ha1u6w77n9tmmg28z+tTOVTi4yzDFYPth8bZxGoURxki b+eJHg8/zHnt2Gprwwwmt4qc5q0xaqVXigjLTJyRLx5WB/90y1gdLkcdN6fzQ6N+ EszlnstVZfT0YumJDzeSR/GnKIGxikHo0kobS4kh6atMp+aY4xqGVG0ytS52Q/g9 0MCurBt0qX/l3BFSJpT5E3Bl0+NKulNgWysomG/mKGf686vtbJmZ5b829g== -----END CERTIFICATE-----Generated at Wed May 13 02:48:22 2026 by rpki-client