$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff859342-1a0a-44b6-8601-25305acf7178.cer File: ff859342-1a0a-44b6-8601-25305acf7178.cer (raw, json) Hash identifier: oXOhR9y7JWulaVEX6WYAwyHUf6tcotXlTXUy/KDAd8U= Subject key identifier: DB:08:7E:2D:16:DA:AD:36:B6:5A:33:13:BE:44:55:4F:AF:E2:B2:BC Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DA6280D3201F2AA1951BABA10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff859342-1a0a-44b6-8601-25305acf7178/ff859342-1a0a-44b6-8601-25305acf7178.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff859342-1a0a-44b6-8601-25305acf7178/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 20:26:28 +0000 Certificate not after: Sun 30 Jul 2028 20:26:28 +0000 Subordinate resources: AS: 22921 AS: 401499 IP: 64.136.64.0/19 IP: 2602:ffa3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:28:0d:32:01:f2:aa:19:51:ba:ba:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 27 20:26:28 2026 GMT Not After : Jul 30 20:26:28 2028 GMT Subject: CN=ff859342-1a0a-44b6-8601-25305acf7178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:cc:77:ae:38:75:63:06:0c:a5:cd:5a:58: 46:e3:b8:b7:19:c6:93:54:f4:d6:dc:3d:19:48:8b: 97:ef:06:47:1f:25:eb:62:29:03:fe:ec:4e:47:af: 3d:cb:ab:16:80:48:91:b4:42:97:8a:27:eb:75:ac: 7d:09:31:7e:a6:4b:e3:fc:b5:ca:d6:a4:7f:7f:de: 2b:dd:30:06:b9:75:c2:d8:b3:00:3c:6f:b8:d8:0b: aa:27:dd:c4:f1:cf:46:ea:a7:d2:e9:e1:b6:52:98: 1e:55:95:9c:c6:d1:ac:d2:1c:e4:27:03:4a:bf:88: 54:4c:7e:b8:ff:3c:09:a7:ca:92:ae:58:b6:42:26: 44:aa:0e:4c:e3:89:a4:f5:ff:31:f2:3f:05:d7:a4: fc:80:a0:16:a1:d9:59:eb:7f:f9:58:61:8c:22:8d: 5b:c8:4e:c1:e9:be:52:7f:33:a1:c1:bb:90:ee:32: 53:af:22:62:03:cd:14:f7:d6:ee:32:b2:e1:e4:49: 16:6a:fd:e6:4a:76:38:7e:b3:9c:01:8f:1b:16:42: 62:ab:0e:24:91:cd:cc:bc:5a:5d:26:04:7d:6b:4f: 8a:03:82:a4:ed:65:80:63:8e:dd:8a:de:0c:00:fb: 75:8e:a8:0b:fc:67:a1:b3:b0:99:07:a1:44:7d:55: ae:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:7E:2D:16:DA:AD:36:B6:5A:33:13:BE:44:55:4F:AF:E2:B2:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff859342-1a0a-44b6-8601-25305acf7178/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff859342-1a0a-44b6-8601-25305acf7178/ff859342-1a0a-44b6-8601-25305acf7178.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 64.136.64.0/19 IPv6: 2602:ffa3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22921 401499 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6b:32:76:2d:89:c5:57:d8:37:48:61:47:1c:9a:27:0c:66: 35:45:e8:8a:94:27:fd:7e:3b:30:db:94:f0:db:90:9c:34:bb: 99:7e:e4:a5:f3:fa:5f:41:db:8c:f3:97:0d:3c:7e:43:b5:20: f7:f3:a9:8c:a2:13:2e:13:e1:41:95:7e:39:34:8c:1b:71:94: 24:17:f3:49:12:25:ca:8d:67:0f:9c:94:ec:aa:d5:87:27:08: 35:64:ab:ad:7e:11:e6:e8:46:19:c2:08:37:f7:75:fd:ad:b3: d4:58:b7:ac:49:e4:d7:8d:56:1b:56:c0:f5:d6:30:41:df:ab: 20:0b:14:5c:41:c3:93:50:9c:58:e5:eb:e0:22:bd:6f:18:fc: 0f:b6:6f:89:1e:b5:d3:e6:a3:05:e8:a8:5d:66:7e:24:5f:0a: c5:3f:c4:65:67:d4:f2:a8:92:49:2c:02:a5:3e:f8:b1:8c:4c: 33:9c:55:e5:14:99:c2:36:34:5b:db:bf:48:89:99:3f:88:1a: eb:3d:f1:d2:45:7f:33:f9:7a:b9:e1:cc:c3:d3:70:ec:58:dd: 4d:4e:c6:83:0a:af:48:1a:69:69:8a:f5:c4:a5:f0:8b:4f:98: fb:7f:9b:64:ff:23:39:4f:6a:62:7f:4f:cb:89:40:fb:08:32: 01:00:a2:bc -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE2mKA0yAfKqGVG6uhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyNzIwMjYyOFoXDTI4MDczMDIwMjYyOFowLzEtMCsGA1UEAxMk ZmY4NTkzNDItMWEwYS00NGI2LTg2MDEtMjUzMDVhY2Y3MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3TMd644dWMGDKXNWlhG47i3GcaTVPTW3D0Z SIuX7wZHHyXrYikD/uxOR689y6sWgEiRtEKXiifrdax9CTF+pkvj/LXK1qR/f94r 3TAGuXXC2LMAPG+42AuqJ93E8c9G6qfS6eG2UpgeVZWcxtGs0hzkJwNKv4hUTH64 /zwJp8qSrli2QiZEqg5M44mk9f8x8j8F16T8gKAWodlZ63/5WGGMIo1byE7B6b5S fzOhwbuQ7jJTryJiA80U99buMrLh5EkWav3mSnY4frOcAY8bFkJiqw4kkc3MvFpd JgR9a0+KA4Kk7WWAY47dit4MAPt1jqgL/Gehs7CZB6FEfVWuAwIDAQABo4IELzCC BCswHQYDVR0OBBYEFNsIfi0W2q02tlozE75EVU+v4rK8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9m Zjg1OTM0Mi0xYTBhLTQ0YjYtODYwMS0yNTMwNWFjZjcxNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2ZmODU5MzQyLTFhMGEtNDRiNi04 NjAxLTI1MzA1YWNmNzE3OC9mZjg1OTM0Mi0xYTBhLTQ0YjYtODYwMS0yNTMwNWFj ZjcxNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAVAiEAwDgQCAAIwCAMGBCYC/6MAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAlmJAgMGIFswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAp2sydi2JxVfYN0hhRxya JwxmNUXoipQn/X47MNuU8NuQnDS7mX7kpfP6X0HbjPOXDTx+Q7Ug9/OpjKITLhPh QZV+OTSMG3GUJBfzSRIlyo1nD5yU7KrVhycINWSrrX4R5uhGGcIIN/d1/a2z1Fi3 rEnk141WG1bA9dYwQd+rIAsUXEHDk1CcWOXr4CK9bxj8D7ZviR610+ajBeioXWZ+ JF8KxT/EZWfU8qiSSSwCpT74sYxMM5xV5RSZwjY0W9u/SImZP4ga6z3x0kV/M/l6 ueHMw9Nw7FjdTU7GgwqvSBppaYr1xKXwi0+Y+3+bZP8jOU9qYn9Py4lA+wgyAQCi vA== -----END CERTIFICATE-----Generated at Wed May 13 07:01:16 2026 by rpki-client