$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/38fb03e5-5a02-4cab-b955-cbe5a001919b.cer File: 38fb03e5-5a02-4cab-b955-cbe5a001919b.cer (raw, json) Hash identifier: 1GGZhSGqj19KNJDuAVMvhFFDAAY+s5U3g0y+GEKWomQ= Subject key identifier: F6:86:66:30:D2:1D:85:04:C0:C3:4F:0E:AE:CB:DE:FF:09:CA:98:64 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E0D9181C8E5B900B554B43B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/38fb03e5-5a02-4cab-b955-cbe5a001919b/38fb03e5-5a02-4cab-b955-cbe5a001919b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/38fb03e5-5a02-4cab-b955-cbe5a001919b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jun 2026 21:27:12 +0000 Certificate not after: Tue 05 Sep 2028 21:27:12 +0000 Subordinate resources: AS: 1289 IP: 2602:819:1000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:91:81:c8:e5:b9:00:b5:54:b4:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 3 21:27:12 2026 GMT Not After : Sep 5 21:27:12 2028 GMT Subject: CN=38fb03e5-5a02-4cab-b955-cbe5a001919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:fa:ae:2e:51:57:e0:d0:32:80:a2:52:98: b9:39:5b:b8:c9:5d:ea:41:43:13:02:81:18:ca:fd: 0f:95:2d:1e:35:4f:64:d0:81:ef:53:62:62:a6:a1: 9e:e3:c4:12:16:41:08:ac:66:a0:82:b1:44:b9:14: 7a:97:0c:cb:8e:f5:5e:60:9e:11:d5:89:23:55:2e: 2d:48:db:ae:d6:2a:ed:5b:46:f6:82:40:1d:5c:b7: b2:e9:d6:6e:b9:ef:7e:ef:96:9e:30:df:ba:cc:e8: 55:69:d5:d6:fd:b2:d9:3b:a4:51:79:e7:48:67:27: 72:95:f3:02:38:06:00:b8:fe:d6:be:63:ba:87:6f: 7a:7a:e8:cf:64:a2:55:fe:cf:19:f5:0f:57:d3:3e: 92:87:48:f7:4a:7f:dc:44:fc:a1:58:74:6f:e2:7d: 47:48:75:bf:95:2a:a5:d9:35:b7:c2:3d:c1:f9:73: 9b:4d:37:9f:f5:6b:26:9e:ed:e9:09:a2:20:3b:ab: b1:e8:6c:ed:b0:d0:88:02:ec:a4:72:2c:de:95:6e: f1:fb:68:1d:70:cc:b6:fe:fc:92:9c:67:38:25:3d: 7e:13:33:78:ae:9c:d8:de:3e:54:51:29:a6:03:56: 9a:7b:f9:b6:01:8a:f9:5e:a5:3f:1f:84:cd:d7:d3: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:86:66:30:D2:1D:85:04:C0:C3:4F:0E:AE:CB:DE:FF:09:CA:98:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/38fb03e5-5a02-4cab-b955-cbe5a001919b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/38fb03e5-5a02-4cab-b955-cbe5a001919b/38fb03e5-5a02-4cab-b955-cbe5a001919b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2602:819:1000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:05:36:41:12:83:24:d2:35:b9:1c:be:87:75:9e:8c:89:58: 97:c5:09:30:4d:9e:6c:f5:70:64:36:f9:95:d3:da:71:5b:0d: b3:9b:46:49:4f:3f:b5:53:6d:e5:a9:da:1c:57:d8:23:10:dc: 86:b5:1c:4f:51:ff:97:60:8d:bb:d6:28:e4:31:b4:65:24:da: bf:94:73:c6:de:b4:36:69:0f:bc:5d:00:16:79:d8:c3:18:8d: 31:fe:ae:f3:1e:5f:35:51:4e:34:0e:55:5e:ee:cb:fa:9f:2e: 03:f8:cd:5a:60:17:8e:2e:6f:7b:aa:6f:86:e1:b5:22:8c:ad: 3d:6c:10:12:04:88:a3:6c:b6:dd:99:d3:d7:91:b9:67:18:b5: 7a:d2:7c:18:98:ab:1e:41:8d:29:fa:e5:3a:75:87:a0:01:c8: 5c:70:e3:09:83:69:24:81:fc:e1:c6:f0:cb:cc:47:42:cc:ec: 4f:63:1e:42:8a:b1:09:9c:9a:4e:e3:1f:88:63:3c:60:07:8b: 58:26:d0:ff:9b:30:15:77:20:d0:9d:c7:09:37:1a:16:cf:4c: d7:f9:58:57:f9:92:2d:d5:61:a7:eb:cf:f6:f9:a9:ac:dd:2d: e0:a7:40:f8:2e:b7:b5:d3:91:45:56:10:91:88:81:95:77:9b: a5:30:da:22 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE4NkYHI5bkAtVS0O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwMzIxMjcxMloXDTI4MDkwNTIxMjcxMlowLzEtMCsGA1UEAxMk MzhmYjAzZTUtNWEwMi00Y2FiLWI5NTUtY2JlNWEwMDE5MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO76ri5RV+DQMoCiUpi5OVu4yV3qQUMTAoEY yv0PlS0eNU9k0IHvU2JipqGe48QSFkEIrGaggrFEuRR6lwzLjvVeYJ4R1YkjVS4t SNuu1irtW0b2gkAdXLey6dZuue9+75aeMN+6zOhVadXW/bLZO6RReedIZydylfMC OAYAuP7WvmO6h296eujPZKJV/s8Z9Q9X0z6Sh0j3Sn/cRPyhWHRv4n1HSHW/lSql 2TW3wj3B+XObTTef9Wsmnu3pCaIgO6ux6GztsNCIAuykcizelW7x+2gdcMy2/vyS nGc4JT1+EzN4rpzY3j5UUSmmA1aae/m2AYr5XqU/H4TN19PfWQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFPaGZjDSHYUEwMNPDq7L3v8JyphkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8z OGZiMDNlNS01YTAyLTRjYWItYjk1NS1jYmU1YTAwMTkxOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzM4ZmIwM2U1LTVhMDItNGNhYi1i OTU1LWNiZTVhMDAxOTE5Yi8zOGZiMDNlNS01YTAyLTRjYWItYjk1NS1jYmU1YTAw MTkxOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAggZEDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIFCTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCkBTZBEoMk0jW5HL6HdZ6MiViXxQkwTZ5s9XBkNvmV09px Ww2zm0ZJTz+1U23lqdocV9gjENyGtRxPUf+XYI271ijkMbRlJNq/lHPG3rQ2aQ+8 XQAWedjDGI0x/q7zHl81UU40DlVe7sv6ny4D+M1aYBeOLm97qm+G4bUijK09bBAS BIijbLbdmdPXkblnGLV60nwYmKseQY0p+uU6dYegAchccOMJg2kkgfzhxvDLzEdC zOxPYx5CirEJnJpO4x+IYzxgB4tYJtD/mzAVdyDQnccJNxoWz0zX+VhX+ZIt1WGn 68/2+ams3S3gp0D4Lre105FFVhCRiIGVd5ulMNoi -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:38 2026 by rpki-client