$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2aba72b-4e56-4abb-b5c1-27cce5c81a1e.cer File: f2aba72b-4e56-4abb-b5c1-27cce5c81a1e.cer (raw, json) Hash identifier: eZRjRXDLfacdBsz7n6rHfGadVQuREFFVh+LwKU0JFSI= Subject key identifier: E8:BC:DF:9A:7F:D8:8A:A0:F6:F9:A7:3B:07:9F:15:A1:F3:75:A0:E1 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA578939262024D00163CC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2aba72b-4e56-4abb-b5c1-27cce5c81a1e/f2aba72b-4e56-4abb-b5c1-27cce5c81a1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2aba72b-4e56-4abb-b5c1-27cce5c81a1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 14:32:54 +0000 Certificate not after: Sun 30 Jul 2028 14:32:54 +0000 Subordinate resources: AS: 27293 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:78:93:92:62:02:4d:00:16:3c:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 27 14:32:54 2026 GMT Not After : Jul 30 14:32:54 2028 GMT Subject: CN=f2aba72b-4e56-4abb-b5c1-27cce5c81a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:c8:c8:17:80:35:50:7d:3b:a2:9e:62:be: a3:49:3a:8e:0f:0f:83:18:6c:ff:db:31:0a:d3:44: 2c:95:10:e5:4b:f3:07:2b:5f:50:09:04:5b:23:70: 5d:a1:16:36:bb:f3:81:10:6e:9d:8b:16:f0:be:59: 40:65:b1:b8:19:ec:79:b4:42:db:c5:eb:85:b9:fc: 37:68:e7:28:cb:e7:a7:5c:08:6b:51:e9:81:dd:dc: b6:a8:b6:3b:0b:b9:4b:1b:bc:2c:ac:77:be:d3:c7: 9f:a0:29:dd:58:34:91:bb:2d:b9:26:d5:35:7a:98: 90:74:ee:30:d7:66:73:3c:c2:47:9b:ca:af:e9:91: 90:32:91:63:6a:cd:62:6a:6f:57:fe:68:5c:99:2b: 9d:29:2d:4b:37:8c:91:9d:9d:25:2c:64:64:12:31: 89:f9:e8:77:a8:e0:0d:ac:b9:77:2c:db:d0:72:7d: fa:f7:88:7f:9e:66:8e:b1:c5:3c:2d:6b:eb:2b:b5: 4d:16:d5:91:58:a5:9a:8c:f5:cf:76:12:a3:0e:b1: 57:06:c9:09:ea:8f:c3:64:ac:db:88:a4:a9:a1:4d: ef:2b:bd:39:59:90:84:63:a9:c3:4e:d4:c6:a4:2e: 5c:13:01:f6:5c:8d:45:ca:a1:41:6a:99:e6:ae:eb: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:DF:9A:7F:D8:8A:A0:F6:F9:A7:3B:07:9F:15:A1:F3:75:A0:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2aba72b-4e56-4abb-b5c1-27cce5c81a1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2aba72b-4e56-4abb-b5c1-27cce5c81a1e/f2aba72b-4e56-4abb-b5c1-27cce5c81a1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27293 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b9:e8:f1:8b:b0:bb:cc:18:15:39:2e:76:bd:ab:b0:c7:ca: 9b:29:bb:22:0c:9b:2f:e9:0d:9e:53:aa:1d:63:3e:80:1b:ff: a3:44:f9:ad:eb:0e:87:38:37:ca:6e:6b:65:f7:8b:90:7f:e1: bd:c1:6b:1d:e7:19:ca:2b:ef:e1:36:17:7b:89:53:b9:da:c5: 69:de:87:dc:98:7f:ab:47:a1:e7:86:18:a7:9e:7e:f8:94:fb: d9:be:49:04:08:fc:65:48:d4:9e:13:95:fe:2e:53:6b:9a:94: 8e:af:bf:10:a3:28:96:e0:9c:34:21:df:2e:c4:c0:57:19:48: a6:67:c5:87:4e:30:94:4f:c1:6a:5f:65:cb:98:b2:20:39:93: a8:7b:f0:26:39:c9:9d:db:f4:c6:cf:42:cf:9a:fc:7d:95:10: 53:61:b6:43:33:4a:5a:1e:58:d7:91:22:00:60:35:33:7c:ad: ab:f7:94:96:70:7a:88:fd:40:55:f6:af:74:ec:b9:e1:8e:da: d2:eb:d8:43:96:51:63:07:75:5e:b6:02:fb:eb:1e:94:a2:b6: ce:08:08:f6:c9:4b:19:28:b2:e2:05:d2:6e:a4:05:8f:51:ff: 13:e9:08:b9:9c:d0:c5:ff:84:90:5d:90:59:c7:7a:c3:7e:d5: 52:b6:44:b0 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE2leJOSYgJNABY8yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNzE0MzI1NFoXDTI4MDczMDE0MzI1NFowLzEtMCsGA1UEAxMk ZjJhYmE3MmItNGU1Ni00YWJiLWI1YzEtMjdjY2U1YzgxYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5bIyBeANVB9O6KeYr6jSTqODw+DGGz/2zEK 00QslRDlS/MHK19QCQRbI3BdoRY2u/OBEG6dixbwvllAZbG4Gex5tELbxeuFufw3 aOcoy+enXAhrUemB3dy2qLY7C7lLG7wsrHe+08efoCndWDSRuy25JtU1epiQdO4w 12ZzPMJHm8qv6ZGQMpFjas1iam9X/mhcmSudKS1LN4yRnZ0lLGRkEjGJ+eh3qOAN rLl3LNvQcn3694h/nmaOscU8LWvrK7VNFtWRWKWajPXPdhKjDrFXBskJ6o/DZKzb iKSpoU3vK705WZCEY6nDTtTGpC5cEwH2XI1FyqFBapnmrus+LwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFOi835p/2Iqg9vmnOwefFaHzdaDhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m MmFiYTcyYi00ZTU2LTRhYmItYjVjMS0yN2NjZTVjODFhMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2YyYWJhNzJiLTRlNTYtNGFiYi1i NWMxLTI3Y2NlNWM4MWExZS9mMmFiYTcyYi00ZTU2LTRhYmItYjVjMS0yN2NjZTVj ODFhMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICap0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXrno8Yuwu8wYFTkudr2rsMfKmym7 IgybL+kNnlOqHWM+gBv/o0T5resOhzg3ym5rZfeLkH/hvcFrHecZyivv4TYXe4lT udrFad6H3Jh/q0eh54YYp55++JT72b5JBAj8ZUjUnhOV/i5Ta5qUjq+/EKMoluCc NCHfLsTAVxlIpmfFh04wlE/Bal9ly5iyIDmTqHvwJjnJndv0xs9Cz5r8fZUQU2G2 QzNKWh5Y15EiAGA1M3ytq/eUlnB6iP1AVfavdOy54Y7a0uvYQ5ZRYwd1XrYC++se lKK2zggI9slLGSiy4gXSbqQFj1H/E+kIuZzQxf+EkF2QWcd6w37VUrZEsA== -----END CERTIFICATE-----Generated at Wed May 13 02:48:34 2026 by rpki-client