$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a.cer File: e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a.cer (raw, json) Hash identifier: F4cNfaihjqEU9kohuaURdXvSuFen/dS/87UApxwPKdI= Subject key identifier: 6F:6A:A6:F1:22:D6:A2:ED:82:43:2B:90:C6:32:2A:E5:9D:4F:2B:2E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DB5EA9364434914691C656600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a/e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 May 2026 11:55:32 +0000 Certificate not after: Sat 05 Aug 2028 11:55:32 +0000 Subordinate resources: AS: 402245 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b5:ea:93:64:43:49:14:69:1c:65:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 3 11:55:32 2026 GMT Not After : Aug 5 11:55:32 2028 GMT Subject: CN=e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:f4:73:a0:3b:b0:bd:e7:a0:10:a4:f2:41: a2:85:f8:65:e2:07:ed:25:20:d3:e1:54:29:f9:f3: 70:10:1e:06:ff:0d:dc:c7:75:9e:62:aa:23:ad:15: 20:0d:a2:88:96:0e:9f:01:d2:f5:ad:bc:f9:db:13: 84:d6:a8:2f:8d:b5:97:fc:1d:6c:7f:17:1e:a4:0e: bf:57:a5:14:5e:e2:19:4b:04:11:6a:8f:de:c0:21: 33:82:36:bf:80:7b:df:ff:30:b3:f1:05:8f:2d:d1: ac:70:83:a4:02:83:3b:9f:31:72:b9:b8:1c:d9:82: 59:56:4c:cc:5e:f7:c3:4e:b9:98:aa:3b:8a:4c:85: c0:eb:36:52:c8:a3:6f:60:01:43:46:f4:9d:34:d3: 2a:39:35:61:d7:31:68:74:9e:73:89:4c:65:56:6b: c4:56:05:a9:3f:20:84:40:bf:0b:83:87:57:fb:6c: ee:02:db:da:43:b9:12:5c:8e:ff:8b:fa:08:cd:43: 4c:95:b3:46:fa:06:60:19:b9:5c:45:fb:2d:b1:38: b9:ab:e6:4b:d1:bc:92:88:b2:93:04:43:75:e4:d0: e1:cc:ca:99:02:98:e4:71:7d:35:da:a3:c1:ae:66: bb:1a:d8:29:58:21:5f:fb:20:00:fd:88:ad:f3:cb: dd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6A:A6:F1:22:D6:A2:ED:82:43:2B:90:C6:32:2A:E5:9D:4F:2B:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a/e5871a9a-3a67-40b0-86f7-0eb4dbfe4f1a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 402245 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8c:a5:28:79:ca:2e:d0:75:eb:06:2d:f8:be:44:51:22:4f: 10:98:12:2c:de:1d:ff:cd:87:a8:bb:f1:3d:ff:e7:52:ec:05: 97:19:5b:ca:92:02:5d:9f:1d:2d:f4:03:b9:7f:5d:5b:e9:af: 88:fd:02:95:87:83:fc:fe:b7:92:f3:aa:35:12:f7:c1:4f:64: 10:7e:aa:19:ed:f4:24:1d:24:3d:cd:6f:87:d7:fe:95:a8:49: 37:54:c4:28:60:25:ca:5a:4b:d6:89:79:47:65:cc:83:88:5d: 34:d7:53:53:98:68:28:15:4c:d6:5e:01:55:29:5c:ee:d6:51: a5:32:95:bb:36:b1:c3:91:9f:de:a1:0c:1f:ba:20:64:9c:91: 2a:a6:bf:06:0b:38:27:7c:54:b7:4b:55:46:ba:0e:9c:cc:13: 0b:83:89:b2:18:ce:aa:7f:60:66:0a:6f:11:f9:8e:21:7a:9a: 65:98:6f:32:c1:28:97:3a:b7:e7:c6:48:0f:4c:81:29:fa:ce: 11:b9:d2:6f:a8:5d:d9:3b:ee:be:2c:b5:82:45:45:3c:1e:96: 9d:7a:ba:bd:8e:14:80:d8:a5:98:df:9a:8a:3a:18:95:a0:76: 62:da:5a:be:76:5f:d9:45:34:a8:78:d4:e1:a5:c0:39:51:d3: d8:06:13:ed -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE216pNkQ0kUaRxlZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwMzExNTUzMloXDTI4MDgwNTExNTUzMlowLzEtMCsGA1UEAxMk ZTU4NzFhOWEtM2E2Ny00MGIwLTg2ZjctMGViNGRiZmU0ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTj0c6A7sL3noBCk8kGihfhl4gftJSDT4VQp +fNwEB4G/w3cx3WeYqojrRUgDaKIlg6fAdL1rbz52xOE1qgvjbWX/B1sfxcepA6/ V6UUXuIZSwQRao/ewCEzgja/gHvf/zCz8QWPLdGscIOkAoM7nzFyubgc2YJZVkzM XvfDTrmYqjuKTIXA6zZSyKNvYAFDRvSdNNMqOTVh1zFodJ5ziUxlVmvEVgWpPyCE QL8Lg4dX+2zuAtvaQ7kSXI7/i/oIzUNMlbNG+gZgGblcRfstsTi5q+ZL0bySiLKT BEN15NDhzMqZApjkcX012qPBrma7GtgpWCFf+yAA/Yit88vduwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFG9qpvEi1qLtgkMrkMYyKuWdTysuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9l NTg3MWE5YS0zYTY3LTQwYjAtODZmNy0wZWI0ZGJmZTRmMWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2U1ODcxYTlhLTNhNjctNDBiMC04 NmY3LTBlYjRkYmZlNGYxYS9lNTg3MWE5YS0zYTY3LTQwYjAtODZmNy0wZWI0ZGJm ZTRmMWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiNFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABiMpSh5yi7QdesGLfi+RFEiTxCY EizeHf/Nh6i78T3/51LsBZcZW8qSAl2fHS30A7l/XVvpr4j9ApWHg/z+t5LzqjUS 98FPZBB+qhnt9CQdJD3Nb4fX/pWoSTdUxChgJcpaS9aJeUdlzIOIXTTXU1OYaCgV TNZeAVUpXO7WUaUylbs2scORn96hDB+6IGSckSqmvwYLOCd8VLdLVUa6DpzMEwuD ibIYzqp/YGYKbxH5jiF6mmWYbzLBKJc6t+fGSA9MgSn6zhG50m+oXdk77r4stYJF RTwelp16ur2OFIDYpZjfmoo6GJWgdmLaWr52X9lFNKh41OGlwDlR09gGE+0= -----END CERTIFICATE-----Generated at Wed May 13 02:48:30 2026 by rpki-client