$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d.cer File: e4485525-7b77-4aaa-bb61-d9be3796d78d.cer (raw, json) Hash identifier: D3JROhNI2pCFOLCCqWovkC76Kv+ds93Qa/aPXix20Cw= Subject key identifier: 44:AF:E8:AF:62:B6:65:A5:B5:4D:F2:04:E9:7F:C8:1A:0E:3C:5A:FE Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584D97A298FB099DFC43617CD1D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/e4485525-7b77-4aaa-bb61-d9be3796d78d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 15:36:15 +0000 Certificate not after: Mon 24 Jul 2028 22:34:22 +0000 Subordinate resources: AS: 402430 IP: 2602:f3e5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:a2:98:fb:09:9d:fc:43:61:7c:d1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 22 15:36:15 2026 GMT Not After : Jul 24 22:34:22 2028 GMT Subject: CN=e4485525-7b77-4aaa-bb61-d9be3796d78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:12:ea:78:f3:4a:60:ef:30:2f:ba:52:79: a7:2c:10:ec:0f:62:d2:59:bd:97:d5:85:3a:a1:ea: 4e:90:35:d0:d1:e1:df:32:6e:32:6b:20:1e:e1:15: 60:6e:20:74:80:b7:42:f3:7f:e7:1c:05:99:30:69: d9:3f:a3:f9:03:37:90:3b:b2:8e:20:2c:dc:24:7a: b4:09:3f:f4:89:ea:df:74:3c:f0:95:7f:6c:47:ae: e9:22:24:df:c8:b0:f7:aa:fb:a1:ba:e2:ce:8f:29: 35:40:b9:b4:18:95:b8:95:c5:d3:b8:0f:f4:9e:58: 99:a0:48:25:b9:68:93:c7:b2:63:22:e9:b6:99:12: a1:28:5f:02:02:93:e3:51:39:4f:c6:8b:62:16:b4: bc:11:ba:1d:f9:74:51:09:82:0b:c6:49:1e:a0:59: 23:12:bd:de:7d:77:47:fe:f0:95:2b:d0:c1:e9:50: 14:c0:f4:38:44:a8:2d:00:df:5e:18:f1:46:27:1a: 45:94:86:cc:a8:dc:f3:d2:bf:1b:c1:8a:bd:cd:16: 59:06:4c:a9:9c:86:8f:63:27:65:13:8a:df:f2:d0: 28:d7:5e:38:21:1c:26:d0:7f:4f:5f:7e:41:c7:ea: 65:8a:0f:ea:39:b6:02:94:12:3c:31:21:a3:d8:83: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AF:E8:AF:62:B6:65:A5:B5:4D:F2:04:E9:7F:C8:1A:0E:3C:5A:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4485525-7b77-4aaa-bb61-d9be3796d78d/e4485525-7b77-4aaa-bb61-d9be3796d78d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3e5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402430 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:36:d4:cd:7e:12:b7:08:0f:85:99:0a:09:c3:f5:ac:50:65: a0:6e:d5:8b:dc:dd:8a:e3:dd:24:4e:ea:5e:98:0f:17:9e:29: 90:7e:75:32:aa:ae:58:c5:da:e6:90:9c:8e:8b:23:86:f5:9f: 4b:0e:a2:73:fa:2b:5b:f3:dd:8c:04:01:6a:7c:9f:cc:95:cd: c9:10:d7:1a:08:41:29:bd:b5:45:0f:39:52:f1:0f:88:5b:87: 59:9a:82:47:3a:8b:14:79:2c:90:ad:61:be:d0:a1:ba:96:d1: fb:43:ce:65:8a:82:cc:c9:96:94:48:26:3f:1e:1f:15:c3:02: 5a:96:cb:6f:7b:3c:7e:56:7f:ca:15:6b:51:80:e7:a3:f7:9e: 9d:a3:20:e3:2f:17:72:4b:83:09:49:27:1c:40:01:14:b0:aa: d9:da:f1:f9:56:11:8c:ea:26:33:6d:79:60:87:05:ec:a5:97: 91:9b:64:c5:e0:b9:bb:b7:50:eb:d4:78:30:10:4e:5b:cf:ac: 04:dd:24:51:8f:b8:20:a3:1f:52:44:3f:ef:4c:fd:8c:20:96: ce:22:d3:d0:71:a6:0c:5e:58:81:d5:2d:18:1f:1d:5e:8f:c7: 14:b1:20:92:9f:84:fc:8b:05:b7:1f:4f:f6:8b:99:3c:23:10: 90:7a:36:73 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE2Xopj7CZ38Q2F80dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyMjE1MzYxNVoXDTI4MDcyNDIyMzQyMlowLzEtMCsGA1UEAxMk ZTQ0ODU1MjUtN2I3Ny00YWFhLWJiNjEtZDliZTM3OTZkNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHkS6njzSmDvMC+6UnmnLBDsD2LSWb2X1YU6 oepOkDXQ0eHfMm4yayAe4RVgbiB0gLdC83/nHAWZMGnZP6P5AzeQO7KOICzcJHq0 CT/0ierfdDzwlX9sR67pIiTfyLD3qvuhuuLOjyk1QLm0GJW4lcXTuA/0nliZoEgl uWiTx7JjIum2mRKhKF8CApPjUTlPxotiFrS8Ebod+XRRCYILxkkeoFkjEr3efXdH /vCVK9DB6VAUwPQ4RKgtAN9eGPFGJxpFlIbMqNzz0r8bwYq9zRZZBkypnIaPYydl E4rf8tAo1144IRwm0H9PX35Bx+plig/qObYClBI8MSGj2IPtWQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFESv6K9itmWltU3yBOl/yBoOPFr+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l NDQ4NTUyNS03Yjc3LTRhYWEtYmI2MS1kOWJlMzc5NmQ3OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U0NDg1NTI1LTdiNzctNGFhYS1i YjYxLWQ5YmUzNzk2ZDc4ZC9lNDQ4NTUyNS03Yjc3LTRhYWEtYmI2MS1kOWJlMzc5 NmQ3OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvPlADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGI/4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAqDbUzX4StwgPhZkKCcP1rFBloG7Vi9zdiuPdJE7qXpgP F54pkH51MqquWMXa5pCcjosjhvWfSw6ic/orW/PdjAQBanyfzJXNyRDXGghBKb21 RQ85UvEPiFuHWZqCRzqLFHkskK1hvtChupbR+0POZYqCzMmWlEgmPx4fFcMCWpbL b3s8flZ/yhVrUYDno/eenaMg4y8XckuDCUknHEABFLCq2drx+VYRjOomM215YIcF 7KWXkZtkxeC5u7dQ69R4MBBOW8+sBN0kUY+4IKMfUkQ/70z9jCCWziLT0HGmDF5Y gdUtGB8dXo/HFLEgkp+E/IsFtx9P9ouZPCMQkHo2cw== -----END CERTIFICATE-----Generated at Wed May 13 02:48:27 2026 by rpki-client