$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer File: 35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer (raw, json) Hash identifier: EUf7Q+z8fd7+P+3mUU9cRf5foWgkBMxw/s9zAnyvk7U= Subject key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D5245CFBD2D3694E9CEC4DC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Mar 2026 19:18:31 +0000 Certificate not after: Fri 30 Jun 2028 19:18:31 +0000 Subordinate resources: AS: 3402 IP: 64.239.32.0/22 IP: 64.239.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:45:cf:bd:2d:36:94:e9:ce:c4:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 28 19:18:31 2026 GMT Not After : Jun 30 19:18:31 2028 GMT Subject: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:d1:64:a7:2d:4e:56:bc:89:6a:a9:3d:41: 45:d6:37:c7:87:8b:bc:62:33:c0:24:ad:9c:d1:d5: 6d:d8:bb:88:5c:d0:30:9d:c8:0e:84:2d:e2:54:cf: 08:72:2f:32:e1:37:9c:6c:cf:0a:e5:d9:db:e6:36: 12:25:4d:38:8d:8e:a9:0a:a6:6a:bd:2a:34:18:2e: a1:09:2f:d1:7c:f5:ea:e8:cb:49:f8:80:e5:2b:fe: 2e:b1:fd:d4:a8:7e:b8:7a:55:b6:84:f6:e9:63:5c: 88:0b:29:60:35:49:7d:7a:93:69:c0:fa:1c:05:19: 1e:0a:db:d2:db:3e:f1:76:76:7e:43:f9:b6:1b:bd: 45:e8:27:73:00:ac:e8:1f:e7:b0:70:52:6e:e6:ae: e6:f6:ec:cc:49:e1:c3:08:ed:76:68:dc:8a:38:e1: 09:98:38:e2:d6:18:96:e0:f2:fe:e5:d8:6a:b9:9c: 5b:f7:3b:db:f4:11:03:0d:77:ae:9d:7e:b9:64:34: 7e:65:f8:80:05:a2:20:f2:61:c9:0b:d8:21:56:3e: 5a:82:e6:34:24:88:d3:bd:37:d8:16:12:b1:70:a8: 08:b7:05:77:bb:8c:34:9c:5f:47:4a:5f:67:b2:3a: 26:ef:eb:40:81:9f:24:8c:49:80:a8:b5:ad:bb:e2: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 64.239.32.0/22 64.239.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a7:73:e4:45:1a:39:b7:32:f1:fd:e9:5e:c7:47:95:d1:7f: 82:0c:64:ed:90:90:b5:4f:cf:69:02:a6:89:b0:1c:89:52:2b: 83:35:f5:52:91:cb:cb:67:56:ff:08:f3:5d:43:f2:0e:89:12: 32:86:e8:55:47:e1:20:77:1c:41:64:2e:7c:66:ab:6d:67:5d: 7a:17:23:eb:ed:32:f0:0c:9b:5c:e7:2c:fe:6c:7e:0a:83:ec: c1:69:27:e6:3d:29:87:44:fc:10:ed:c8:d4:7a:7c:45:ec:19: 9b:0c:61:e6:3d:62:4b:ad:1a:44:9d:93:2d:82:01:14:90:5b: 76:03:30:f5:40:21:ed:29:25:04:7c:ec:67:17:37:1d:4c:60: 23:32:ae:a0:30:56:df:da:42:91:db:38:ec:e0:a3:8f:dd:2c: b4:46:d7:b8:1f:d5:19:be:6a:c9:d6:ab:28:d0:48:ee:64:63: df:fd:6c:91:62:d4:0c:5c:a3:da:08:ce:eb:06:26:7d:c2:f5: b8:c7:2e:eb:0e:b5:79:c4:c1:1b:db:da:69:a2:a5:5c:80:65: fc:74:27:37:c3:7f:6f:ea:4c:a6:3d:86:5b:fb:91:01:d9:52: c9:de:db:1c:a8:b8:75:93:b5:30:dc:68:67:75:58:41:2f:ed: d9:8c:ad:45 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE1SRc+9LTaU6c7E3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMyODE5MTgzMVoXDTI4MDYzMDE5MTgzMVowLzEtMCsGA1UEAxMk MzVhMTEzYmYtMmE1ZC00ZTk3LTlhM2MtMzEzNjYyZjVhNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnzRZKctTla8iWqpPUFF1jfHh4u8YjPAJK2c 0dVt2LuIXNAwncgOhC3iVM8Ici8y4TecbM8K5dnb5jYSJU04jY6pCqZqvSo0GC6h CS/RfPXq6MtJ+IDlK/4usf3UqH64elW2hPbpY1yICylgNUl9epNpwPocBRkeCtvS 2z7xdnZ+Q/m2G71F6CdzAKzoH+ewcFJu5q7m9uzMSeHDCO12aNyKOOEJmDji1hiW 4PL+5dhquZxb9zvb9BEDDXeunX65ZDR+ZfiABaIg8mHJC9ghVj5aguY0JIjTvTfY FhKxcKgItwV3u4w0nF9HSl9nsjom7+tAgZ8kjEmAqLWtu+IbYQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFHPyZJqWDkTuQZPoi/5MOepI3tjWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z NWExMTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2NjJmNWE1OGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzM1YTExM2JmLTJhNWQtNGU5Ny05 YTNjLTMxMzY2MmY1YTU4Yy8zNWExMTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2NjJm NWE1OGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJA7yADBAJA73QwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICDUowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEALqdz5EUaObcy8f3pXsdHldF/ggxk7ZCQtU/PaQKm ibAciVIrgzX1UpHLy2dW/wjzXUPyDokSMoboVUfhIHccQWQufGarbWddehcj6+0y 8AybXOcs/mx+CoPswWkn5j0ph0T8EO3I1Hp8RewZmwxh5j1iS60aRJ2TLYIBFJBb dgMw9UAh7SklBHzsZxc3HUxgIzKuoDBW39pCkds47OCjj90stEbXuB/VGb5qydar KNBI7mRj3/1skWLUDFyj2gjO6wYmfcL1uMcu6w61ecTBG9vaaaKlXIBl/HQnN8N/ b+pMpj2GW/uRAdlSyd7bHKi4dZO1MNxoZ3VYQS/t2YytRQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:17:28 2026 by rpki-client