$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer File: d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer (raw, json) Hash identifier: std3/3wXJ+D2ft1gt7dwnCRenniHsThme7e6FBW+Tyg= Subject key identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584EEBE5269A0D2E3988539480C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Aug 2026 12:45:11 +0000 Certificate not after: Fri 24 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 2605:3c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:e5:26:9a:0d:2e:39:88:53:94:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 22 12:45:11 2026 GMT Not After : Nov 24 13:45:11 2028 GMT Subject: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:7c:73:9c:4d:8d:08:88:d6:ee:bc:dc:53: b5:34:fb:9b:f8:1d:be:a6:9f:fd:b4:9b:14:97:92: 60:e6:2f:be:8a:03:66:82:5c:7a:18:a9:e1:39:00: b7:7a:3f:7c:b1:01:99:78:d3:6b:63:83:cb:99:a0: 7f:e2:6e:ab:d2:d6:fa:ab:87:81:71:1e:4c:26:0c: bb:b2:f9:e1:18:f6:2e:1e:d3:75:17:f2:3b:ac:91: af:b6:62:4e:9b:5f:8d:3b:3d:90:11:b6:60:d8:90: 5b:96:a9:8c:f1:9a:66:5f:39:fb:96:0b:92:1a:09: 18:ee:1f:12:9b:15:fc:13:dd:c4:f7:87:e4:24:d0: 9f:e6:93:7f:f9:9a:cf:a6:d6:ca:59:2c:24:4a:4c: 69:9e:a2:f7:74:fa:69:8a:5c:92:dd:d0:74:e2:27: 67:ae:20:0a:d3:5e:17:32:27:3f:08:f7:1e:1e:af: 33:64:aa:d8:0a:d3:d3:a5:6d:c2:09:a4:80:3d:2b: 0c:94:5e:53:a4:a5:8d:c7:36:70:95:12:0a:18:c3: b9:83:09:37:c3:14:85:07:cb:9a:ed:e6:36:d1:8c: 5d:1c:62:96:7c:97:93:1c:64:5f:66:e1:45:ed:c4: ec:5c:06:c9:e7:0d:a3:ce:1c:8e:0c:bb:4b:cc:c4: eb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2605:3c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b2:2d:15:50:aa:0e:14:de:85:c1:fb:f5:51:19:44:cc:c7: 01:ad:c2:57:b1:e1:6d:d3:ca:09:53:bb:49:54:50:1c:95:78: f6:ff:52:f1:68:64:94:15:46:3b:19:53:15:b1:1d:a5:7a:a0: 95:be:ec:71:c9:36:09:a1:77:17:a0:95:01:5d:27:87:81:0c: 09:b5:12:34:30:40:98:73:86:45:22:b8:da:cb:be:24:46:20: 28:ce:20:03:8e:ee:b1:19:ec:32:2a:52:37:bd:73:f9:cb:0f: 3b:ea:ff:fb:2a:2e:f3:48:91:89:e3:98:6c:2c:c8:da:bb:31: 77:82:e1:f9:0d:9a:11:2f:85:fc:55:d5:86:08:e7:6b:41:8d: b1:cf:25:85:4d:1e:92:b0:69:d3:b0:da:03:2a:d0:57:16:eb: 18:9f:59:95:8c:b4:f9:a7:b7:f6:21:30:74:ac:37:92:4f:7a: b8:6f:a0:45:ad:5e:ae:11:e3:70:13:33:d1:45:ae:01:09:25: e0:75:ff:bd:74:42:de:37:d5:6f:17:30:84:da:4f:f3:cc:96: ba:32:39:07:db:a1:dc:b0:e6:68:f9:94:11:c3:98:15:0c:23: dc:7c:e8:ff:cf:60:21:46:d1:d9:82:e1:80:b9:8d:48:79:6c: 4e:46:76:0f -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE7r5SaaDS45iFOUgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDgyMjEyNDUxMVoXDTI4MTEyNDEzNDUxMVowLzEtMCsGA1UEAxMk ZDY3MWU5NWMtZTQ4NC00YjUzLTkxZmYtZTE0ZDMzZWFhMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb98c5xNjQiI1u683FO1NPub+B2+pp/9tJsU l5Jg5i++igNmglx6GKnhOQC3ej98sQGZeNNrY4PLmaB/4m6r0tb6q4eBcR5MJgy7 svnhGPYuHtN1F/I7rJGvtmJOm1+NOz2QEbZg2JBblqmM8ZpmXzn7lguSGgkY7h8S mxX8E93E94fkJNCf5pN/+ZrPptbKWSwkSkxpnqL3dPppilyS3dB04idnriAK014X Mic/CPceHq8zZKrYCtPTpW3CCaSAPSsMlF5TpKWNxzZwlRIKGMO5gwk3wxSFB8ua 7eY20YxdHGKWfJeTHGRfZuFF7cTsXAbJ5w2jzhyODLtLzMTrfQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFEfbG6XLT45EXMJsLFnXYrfsqTFvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k NjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNlYWEyYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2Q2NzFlOTVjLWU0ODQtNGI1My05 MWZmLWUxNGQzM2VhYTJhNi9kNjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNl YWEyYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBTyAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHmyLRVQqg4U3oXB+/VR GUTMxwGtwlex4W3TyglTu0lUUByVePb/UvFoZJQVRjsZUxWxHaV6oJW+7HHJNgmh dxeglQFdJ4eBDAm1EjQwQJhzhkUiuNrLviRGICjOIAOO7rEZ7DIqUje9c/nLDzvq //sqLvNIkYnjmGwsyNq7MXeC4fkNmhEvhfxV1YYI52tBjbHPJYVNHpKwadOw2gMq 0FcW6xifWZWMtPmnt/YhMHSsN5JPerhvoEWtXq4R43ATM9FFrgEJJeB1/710Qt43 1W8XMITaT/PMlroyOQfbodyw5mj5lBHDmBUMI9x86P/PYCFG0dmC4YC5jUh5bE5G dg8= -----END CERTIFICATE-----Generated at Thu Sep 10 21:56:46 2026 by rpki-client