$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee.cer File: afc941ae-9449-4fd9-82b8-9ae5867887ee.cer (raw, json) Hash identifier: qJ16tb27u6igR5Q3+mk51hc8kAm4gly+lQs4VhvTsq4= Subject key identifier: 17:83:36:B3:0E:DC:5A:AE:96:BA:E1:7A:72:05:10:6E:A0:CE:E1:6F Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D9D20231E1BC4FE150541E1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/afc941ae-9449-4fd9-82b8-9ae5867887ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Apr 2026 14:48:14 +0000 Certificate not after: Mon 24 Jul 2028 14:33:28 +0000 Subordinate resources: AS: 19065 IP: 199.96.0.0 -- 199.96.9.255 IP: 2602:802:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9d:20:23:1e:1b:c4:fe:15:05:41:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 24 14:48:14 2026 GMT Not After : Jul 24 14:33:28 2028 GMT Subject: CN=afc941ae-9449-4fd9-82b8-9ae5867887ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:9d:bd:a3:cc:7c:91:bd:29:1e:8b:b5:08: d6:4c:29:1f:1b:a4:17:5c:08:56:0d:52:6c:0e:14: 45:73:8b:a1:ca:de:12:87:aa:4c:13:07:fd:ab:64: b0:9e:e2:9d:23:d2:e2:ee:c1:9c:14:12:c7:3c:14: 46:ba:8f:95:46:25:8e:24:d6:56:46:e2:29:8c:01: 2a:da:ef:06:bc:5a:c7:60:66:5d:52:3e:10:61:7e: bd:a1:a6:c3:94:dd:de:aa:4c:7f:4a:61:d4:8c:28: 91:81:af:a9:a8:ce:8b:de:53:c3:1c:6c:ee:0e:6b: d8:61:57:aa:7d:f8:38:96:99:9e:a1:1d:ea:06:c9: 5b:e5:07:af:3e:73:4d:ae:71:ff:db:c2:f3:1c:47: da:af:64:a1:69:b7:4f:d5:e7:ae:3d:eb:66:49:54: da:54:9f:05:0f:fb:4f:4c:d9:9b:49:76:2d:d1:8a: f0:9d:c6:ca:a4:6e:85:e1:6f:b6:01:5a:c6:74:09: b5:e2:c8:58:07:71:02:06:a7:4d:b0:d5:15:ba:b0: f5:8f:38:f9:de:eb:86:3d:ad:cc:58:e6:7b:1e:f3: 66:33:7d:97:cf:60:e0:8b:72:24:0b:12:8e:ad:da: 23:50:29:e4:fa:6e:e5:75:b6:49:2b:e6:4e:c8:49: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:83:36:B3:0E:DC:5A:AE:96:BA:E1:7A:72:05:10:6E:A0:CE:E1:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc941ae-9449-4fd9-82b8-9ae5867887ee/afc941ae-9449-4fd9-82b8-9ae5867887ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 199.96.0.0-199.96.9.255 IPv6: 2602:802:5000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19065 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:21:ce:55:b3:49:05:51:96:ff:42:fd:80:a9:8a:51:cc:56: d9:9d:8b:f0:f0:e9:a7:e2:91:71:30:9e:c1:14:2a:10:f6:96: 33:0e:76:e2:aa:bf:97:7d:72:da:59:db:ec:ba:16:54:e5:ea: c4:92:65:ef:31:13:65:95:3d:f5:1f:d3:64:9e:22:93:b6:6c: 52:71:4e:0d:19:c0:ed:9c:b1:be:a5:fb:dc:33:47:2f:1e:7f: 27:a1:45:4d:ca:68:8d:87:0a:63:cd:7e:e5:0a:14:d3:26:bf: 1c:4c:35:ba:50:fd:47:18:b8:9e:bd:10:a1:2a:df:18:d9:f8: 09:d8:28:8e:f8:88:06:17:a0:db:07:c2:00:aa:62:31:07:dc: 94:5f:93:bb:12:f5:6b:0f:37:a6:19:17:16:39:9c:06:2d:35: 07:0a:b1:bf:42:08:fd:7f:56:1a:f0:53:21:46:7f:3f:5c:8e: d1:a7:4d:db:91:4d:4b:da:d5:a3:fd:75:e9:b1:0a:50:aa:ea: 16:da:f9:a0:3b:34:87:9e:40:92:e3:e5:44:5a:92:98:95:0c: 88:b3:40:9c:ac:67:d4:41:ad:ca:16:41:72:5f:5c:1a:0a:25: 22:5f:c2:91:31:c6:f3:36:22:be:51:55:fa:b1:62:39:5b:4c: be:38:6c:27 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE2dICMeG8T+FQVB4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNDE0NDgxNFoXDTI4MDcyNDE0MzMyOFowLzEtMCsGA1UEAxMk YWZjOTQxYWUtOTQ0OS00ZmQ5LTgyYjgtOWFlNTg2Nzg4N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsidvaPMfJG9KR6LtQjWTCkfG6QXXAhWDVJs DhRFc4uhyt4Sh6pMEwf9q2SwnuKdI9Li7sGcFBLHPBRGuo+VRiWOJNZWRuIpjAEq 2u8GvFrHYGZdUj4QYX69oabDlN3eqkx/SmHUjCiRga+pqM6L3lPDHGzuDmvYYVeq ffg4lpmeoR3qBslb5QevPnNNrnH/28LzHEfar2ShabdP1eeuPetmSVTaVJ8FD/tP TNmbSXYt0YrwncbKpG6F4W+2AVrGdAm14shYB3ECBqdNsNUVurD1jzj53uuGPa3M WOZ7HvNmM32Xz2Dgi3IkCxKOrdojUCnk+m7ldbZJK+ZOyEkMvwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBeDNrMO3FqulrrhenIFEG6gzuFvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h ZmM5NDFhZS05NDQ5LTRmZDktODJiOC05YWU1ODY3ODg3ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2FmYzk0MWFlLTk0NDktNGZkOS04 MmI4LTlhZTU4Njc4ODdlZS9hZmM5NDFhZS05NDQ5LTRmZDktODJiOC05YWU1ODY3 ODg3ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBMEAgABMA0wCwMDBcdgAwQBx2AIMA4EAgACMAgDBgAmAggCUDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJKeTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0Ic5Vs0kFUZb/Qv2A qYpRzFbZnYvw8Omn4pFxMJ7BFCoQ9pYzDnbiqr+XfXLaWdvsuhZU5erEkmXvMRNl lT31H9NkniKTtmxScU4NGcDtnLG+pfvcM0cvHn8noUVNymiNhwpjzX7lChTTJr8c TDW6UP1HGLievRChKt8Y2fgJ2CiO+IgGF6DbB8IAqmIxB9yUX5O7EvVrDzemGRcW OZwGLTUHCrG/Qgj9f1Ya8FMhRn8/XI7Rp03bkU1L2tWj/XXpsQpQquoW2vmgOzSH nkCS4+VEWpKYlQyIs0CcrGfUQa3KFkFyX1waCiUiX8KRMcbzNiK+UVX6sWI5W0y+ OGwn -----END CERTIFICATE-----Generated at Wed May 13 02:59:55 2026 by rpki-client