$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer File: cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer (raw, json) Hash identifier: DpbEX1iR/dli1X8aTN7DbqT99aHZfhbz65/yf3IwgqA= Subject key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584E5A42761BF267693C0CA43300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 08:45:10 +0000 Certificate not after: Tue 03 Oct 2028 08:45:10 +0000 Subordinate resources: AS: 22594 IP: 2620:5b:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:42:76:1b:f2:67:69:3c:0c:a4:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 1 08:45:10 2026 GMT Not After : Oct 3 08:45:10 2028 GMT Subject: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:dc:42:7d:49:68:02:b2:0c:74:89:64:6a: 19:0c:3b:13:96:3d:0e:fd:47:fa:e1:f9:da:83:4e: 60:27:ad:11:26:17:ab:6a:d6:e4:36:2f:f6:c2:49: ff:16:9a:c7:aa:95:8d:65:4d:04:8f:c0:62:0c:46: 0e:9c:b9:c5:6e:d3:b2:ee:3a:17:53:73:20:6d:2a: bd:fb:ec:22:25:9e:0d:a3:fa:ab:c3:c7:e2:50:4e: 63:28:48:2b:66:b1:70:ab:f2:6c:a1:55:76:bb:2f: 5d:42:21:2c:10:97:c0:2e:84:96:22:31:ca:2a:ec: 28:85:e0:4c:86:15:f8:af:8e:a3:cb:d5:27:67:7b: 0c:43:e9:06:1c:7a:4c:74:7e:de:68:58:bc:cd:56: 02:b9:9f:80:15:b2:72:04:f0:b7:3c:06:89:d8:6e: 35:66:19:20:e1:24:90:ab:68:e9:d1:46:6d:33:c3: f6:15:52:bf:b4:f4:fe:39:72:0b:4b:35:cd:cb:e3: 76:64:1a:51:81:6f:bf:10:04:fc:20:e5:15:d5:a4: ea:8b:9a:4c:17:96:d4:8c:fb:f7:02:09:2e:8e:92: 45:2b:40:61:cc:fd:50:57:4e:c4:45:bf:bb:e7:13: fc:e2:06:85:d3:b8:f4:12:55:99:5d:e2:47:19:6a: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22594 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e9:e4:6b:0a:9d:b6:35:b8:f5:63:38:93:86:24:fa:01:48: 17:64:95:6c:f2:12:fa:5d:5b:4f:ac:0c:63:d4:af:18:00:48: 43:14:19:3a:f7:51:a3:0a:e6:ce:18:df:0e:b3:dd:0e:d6:8d: 50:f8:92:9c:75:e9:86:22:61:f2:97:a0:96:96:ac:d0:46:c3: 71:e4:97:08:6b:15:e9:4a:1c:18:74:33:47:fd:01:9a:fd:53: 02:3e:b3:78:03:21:23:75:a7:10:8f:0e:7a:19:78:be:d1:20: 39:f3:56:80:ed:c5:e0:28:22:b8:30:7b:27:59:b6:62:2c:0b: fc:a9:ac:87:01:80:7b:4a:70:e2:78:7a:b3:33:47:36:5f:ef: f5:b7:23:11:08:a9:6e:98:36:1a:ea:c9:f6:d4:fb:01:92:00: c2:7f:53:7c:7a:b8:81:84:78:4e:06:06:95:c1:19:e9:70:de: a0:9f:2e:01:91:59:98:6a:10:ec:0f:86:e6:b5:79:e6:c2:c5: 18:a6:77:1e:13:02:59:f6:f0:0a:fa:cd:84:a8:db:2c:89:e6: 6a:d3:44:32:21:fc:65:b4:d4:06:ec:28:33:c4:33:0a:6e:3b: ce:97:cc:4f:49:8e:6b:5e:c2:97:cc:4c:84:08:1d:d6:80:78: 5b:8f:12:85 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE5aQnYb8mdpPAykMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDcwMTA4NDUxMFoXDTI4MTAwMzA4NDUxMFowLzEtMCsGA1UEAxMk Y2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0ZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVDcQn1JaAKyDHSJZGoZDDsTlj0O/Uf64fna g05gJ60RJheratbkNi/2wkn/FprHqpWNZU0Ej8BiDEYOnLnFbtOy7joXU3MgbSq9 ++wiJZ4No/qrw8fiUE5jKEgrZrFwq/JsoVV2uy9dQiEsEJfALoSWIjHKKuwoheBM hhX4r46jy9UnZ3sMQ+kGHHpMdH7eaFi8zVYCuZ+AFbJyBPC3PAaJ2G41Zhkg4SSQ q2jp0UZtM8P2FVK/tPT+OXILSzXNy+N2ZBpRgW+/EAT8IOUV1aTqi5pMF5bUjPv3 AgkujpJFK0BhzP1QV07ERb+75xP84gaF07j0ElWZXeJHGWqNrQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFHb51oAWZrqwHMP5KhxwechDwrRUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NmNWI5ZWY2LTNiN2MtNDg1ZS05 ODA0LWUzYWQ2NWM1NGY2NC9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVj NTRmNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABbQAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICWEIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAb+nkawqdtjW49WM4k4Yk+gFIF2SVbPIS+l1bT6wMY9Sv GABIQxQZOvdRowrmzhjfDrPdDtaNUPiSnHXphiJh8peglpas0EbDceSXCGsV6Uoc GHQzR/0Bmv1TAj6zeAMhI3WnEI8Oehl4vtEgOfNWgO3F4CgiuDB7J1m2YiwL/Kms hwGAe0pw4nh6szNHNl/v9bcjEQipbpg2GurJ9tT7AZIAwn9TfHq4gYR4TgYGlcEZ 6XDeoJ8uAZFZmGoQ7A+G5rV55sLFGKZ3HhMCWfbwCvrNhKjbLInmatNEMiH8ZbTU BuwoM8QzCm47zpfMT0mOa17Cl8xMhAgd1oB4W48ShQ== -----END CERTIFICATE-----Generated at Tue Jul 7 17:59:53 2026 by rpki-client