$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5.cer File: 0cee6afc-a72f-490d-85d1-9417465106f5.cer (raw, json) Hash identifier: AKwSBLAxFkeR09GIqh6tizx1NU744QIMbRVLI7Jw3zE= Subject key identifier: 4B:D9:BC:BE:74:19:6F:0F:FB:3F:47:13:A4:CC:38:55:57:25:35:94 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E2F6C92546A8BE2D8CC616480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/0cee6afc-a72f-490d-85d1-9417465106f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jun 2026 00:30:16 +0000 Certificate not after: Wed 30 Aug 2028 17:54:39 +0000 Subordinate resources: AS: 402567 IP: 2602:f38b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2f:6c:92:54:6a:8b:e2:d8:cc:61:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 16 00:30:16 2026 GMT Not After : Aug 30 17:54:39 2028 GMT Subject: CN=0cee6afc-a72f-490d-85d1-9417465106f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:8e:2f:97:e2:dc:7f:ef:df:dc:80:3b:e8: 4f:90:b5:ab:f0:f9:4e:02:8a:05:68:4e:15:e7:4b: ed:13:d0:34:f1:2d:c3:c8:56:d1:8f:d9:16:d0:0c: d3:3b:ee:ae:71:ab:54:20:af:ab:2c:54:f5:2d:69: 72:19:34:29:e9:91:35:70:33:1f:76:5d:31:27:e8: a0:62:b8:84:97:ab:0b:72:3f:f0:38:18:82:c1:4f: a5:68:02:83:b6:30:99:15:f8:64:4c:22:22:f5:cf: 06:da:38:83:0f:30:d9:6e:f0:0a:ed:61:75:28:c8: 63:86:33:78:6f:cc:85:80:92:81:08:c4:fb:fc:fb: f3:5a:9e:9e:4a:f9:a1:1b:24:79:ec:02:35:09:f8: be:34:2a:bf:7f:5f:85:de:f9:d7:a7:09:0b:a8:49: 28:f5:30:ea:ef:b5:e6:7c:fa:b9:51:21:67:ab:46: a9:a0:0f:e7:77:7e:a0:72:6f:e1:db:e7:00:65:03: 81:a1:d0:06:3a:86:86:9a:7e:4e:3e:6f:7b:34:ea: 70:b7:2e:04:63:d9:36:16:87:86:79:c2:f5:68:b5: a8:91:1e:0d:8a:13:0d:12:54:36:9e:f4:28:5a:10: 29:79:b3:73:e1:96:14:b7:e6:67:47:00:8d:57:bf: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:BC:BE:74:19:6F:0F:FB:3F:47:13:A4:CC:38:55:57:25:35:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/0cee6afc-a72f-490d-85d1-9417465106f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2602:f38b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402567 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8e:40:bd:3b:75:a7:2d:3f:f2:56:d1:59:8b:25:1c:9b:78: fb:7e:ab:20:2e:5b:f7:59:90:52:7d:a8:d4:b9:34:7f:02:46: b6:c1:6e:de:a1:73:fd:a1:2a:ab:67:ee:f0:28:af:52:74:51: 5b:4e:e3:ec:b6:a5:31:a9:5f:f5:b5:ab:40:c7:65:ee:7f:d6: a7:a1:7c:a1:0f:b8:16:7e:56:d8:65:31:0d:0a:92:29:4a:20: fc:a4:f8:5f:84:e3:73:68:8f:0d:eb:56:2b:c1:95:c4:f9:e3: d8:59:a2:72:97:40:c4:7b:89:c4:a2:e2:30:2b:74:c3:86:5f: 27:51:f1:53:fc:60:9e:c8:26:44:18:e8:2f:cc:fa:e4:cb:00: 25:60:00:72:cc:60:c4:6d:b5:29:b9:0f:4d:54:c4:20:20:1e: 06:2f:5d:5c:8f:70:da:0c:5b:eb:1d:a4:f8:2e:48:c6:07:2f: ee:6f:28:10:f5:2a:72:e6:e7:e8:d7:2b:94:62:f4:be:5b:ac: 0c:31:09:03:d0:d1:8a:2f:35:a2:42:4d:df:d7:ef:d9:2f:bc: f6:78:ae:fe:33:8b:5d:9e:ed:71:92:bb:ad:1e:52:cc:be:b0: b7:8e:15:c7:02:99:63:25:28:59:14:fa:be:01:f6:1e:41:5f: 82:7a:90:9d -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE4vbJJUaovi2MxhZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxNjAwMzAxNloXDTI4MDgzMDE3NTQzOVowLzEtMCsGA1UEAxMk MGNlZTZhZmMtYTcyZi00OTBkLTg1ZDEtOTQxNzQ2NTEwNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV2OL5fi3H/v39yAO+hPkLWr8PlOAooFaE4V 50vtE9A08S3DyFbRj9kW0AzTO+6ucatUIK+rLFT1LWlyGTQp6ZE1cDMfdl0xJ+ig YriEl6sLcj/wOBiCwU+laAKDtjCZFfhkTCIi9c8G2jiDDzDZbvAK7WF1KMhjhjN4 b8yFgJKBCMT7/PvzWp6eSvmhGyR57AI1Cfi+NCq/f1+F3vnXpwkLqEko9TDq77Xm fPq5USFnq0apoA/nd36gcm/h2+cAZQOBodAGOoaGmn5OPm97NOpwty4EY9k2FoeG ecL1aLWokR4NihMNElQ2nvQoWhApebNz4ZYUt+ZnRwCNV7/zDwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFEvZvL50GW8P+z9HE6TMOFVXJTWUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8w Y2VlNmFmYy1hNzJmLTQ5MGQtODVkMS05NDE3NDY1MTA2ZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzBjZWU2YWZjLWE3MmYtNDkwZC04 NWQxLTk0MTc0NjUxMDZmNS8wY2VlNmFmYy1hNzJmLTQ5MGQtODVkMS05NDE3NDY1 MTA2ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvOLADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGJIcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnY5AvTt1py0/8lbRWYslHJt4+36rIC5b91mQUn2o1Lk0 fwJGtsFu3qFz/aEqq2fu8CivUnRRW07j7LalMalf9bWrQMdl7n/Wp6F8oQ+4Fn5W 2GUxDQqSKUog/KT4X4Tjc2iPDetWK8GVxPnj2FmicpdAxHuJxKLiMCt0w4ZfJ1Hx U/xgnsgmRBjoL8z65MsAJWAAcsxgxG21KbkPTVTEICAeBi9dXI9w2gxb6x2k+C5I xgcv7m8oEPUqcubn6NcrlGL0vlusDDEJA9DRii81okJN39fv2S+89niu/jOLXZ7t cZK7rR5SzL6wt44VxwKZYyUoWRT6vgH2HkFfgnqQnQ== -----END CERTIFICATE-----Generated at Tue Jul 21 14:32:05 2026 by rpki-client