$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641.cer File: 456dae9d-cba8-4008-b6b7-2c9b9407b641.cer (raw, json) Hash identifier: T+1PiaGpoF0l5Dk4T9ygc+6HfF4qdtw82tuFa/YMbOc= Subject key identifier: 0C:E5:3F:63:97:90:50:DD:93:80:A9:F0:61:6C:15:AA:48:27:38:33 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E101689D4B1BB28620962F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/456dae9d-cba8-4008-b6b7-2c9b9407b641.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jun 2026 19:06:51 +0000 Certificate not after: Wed 06 Sep 2028 19:06:51 +0000 Subordinate resources: AS: 53959 IP: 2606:9980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:16:89:d4:b1:bb:28:62:09:62:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 4 19:06:51 2026 GMT Not After : Sep 6 19:06:51 2028 GMT Subject: CN=456dae9d-cba8-4008-b6b7-2c9b9407b641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:b2:f1:ca:c6:ae:6e:5b:ec:3d:6b:7c:25: 98:ab:a5:ba:21:5e:36:26:74:32:30:4b:ec:e1:8f: 89:99:d4:8d:46:ac:df:53:b1:93:05:11:31:92:e3: 78:1c:45:c5:69:6d:26:6b:9f:f0:9b:63:cb:88:ed: cf:ae:02:06:10:8c:df:b3:e9:6b:fd:c6:f6:87:13: 83:6c:a8:12:3f:51:85:f7:c8:80:2a:c1:ad:4a:49: 4e:56:a2:e8:95:98:7e:5b:b8:14:ab:d1:dd:b5:75: 88:d0:79:66:1a:d3:df:8b:ab:ad:8d:60:6f:f2:5d: c5:8d:57:b9:67:43:7a:e7:86:1d:99:cd:b5:a2:8b: bf:92:e0:8b:27:08:01:99:7f:01:8e:26:44:93:73: c7:00:f7:8c:03:fc:6f:50:35:3d:9a:cf:16:c1:32: 8f:ae:f0:9c:8a:b3:9b:03:bb:5f:41:bf:37:a5:1f: db:51:90:f3:dc:34:ee:59:47:0d:da:fb:73:3f:2c: 22:60:95:05:50:a8:5c:51:e5:8c:e6:75:a3:7e:fb: 1e:43:7d:92:2e:96:42:c9:22:3d:10:fe:26:02:a5: 55:07:36:be:14:a1:a0:ca:65:29:f6:ec:90:0c:93: 72:40:ee:c9:00:7a:6e:d1:41:bf:66:89:5c:d3:a0: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:3F:63:97:90:50:DD:93:80:A9:F0:61:6C:15:AA:48:27:38:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/456dae9d-cba8-4008-b6b7-2c9b9407b641/456dae9d-cba8-4008-b6b7-2c9b9407b641.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2606:9980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53959 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:47:ad:9c:2b:52:89:81:87:4b:f9:27:ca:69:d2:f5:70:76: d7:f3:ea:2f:ce:dd:fc:39:ed:50:4c:4f:1e:5b:b4:57:35:94: ef:73:69:90:04:f3:67:66:95:b3:6d:0b:30:37:48:24:4c:26: 41:55:d0:f3:6f:ab:89:69:b2:70:a2:32:71:3a:7a:9d:4f:e1: 10:6f:3b:17:d9:a9:84:02:65:fc:72:21:b7:be:0c:46:58:89: 21:2a:79:68:73:d7:f1:d1:38:5d:40:cc:cf:f3:e1:d2:48:61: 5b:83:44:a6:ab:17:12:1d:10:e9:fb:f8:eb:97:a7:40:97:2c: 3b:1c:98:4c:41:65:f7:ac:ae:51:7b:b5:fa:bb:1c:12:b6:7f: 31:b1:55:c2:01:c5:2a:fb:39:fa:ef:e5:42:08:90:0a:c5:e0: c6:4f:93:d6:4b:96:5e:dd:9b:c9:3b:d0:d1:82:15:19:4b:88: ed:d2:e0:86:c1:09:9a:03:b9:e2:72:ec:76:be:af:28:ae:1b: 0f:d9:31:74:32:c1:45:19:c7:92:41:ea:26:62:c9:43:d3:ae: ad:d1:3a:c4:13:7e:04:e2:e0:2f:95:ae:9e:59:45:93:88:92: e4:32:4e:6f:a6:1e:f2:a2:bd:0c:c9:3c:4c:47:c2:1b:39:56: e7:b8:ae:3f -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE4QFonUsbsoYgli+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwNDE5MDY1MVoXDTI4MDkwNjE5MDY1MVowLzEtMCsGA1UEAxMk NDU2ZGFlOWQtY2JhOC00MDA4LWI2YjctMmM5Yjk0MDdiNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xyy8crGrm5b7D1rfCWYq6W6IV42JnQyMEvs 4Y+JmdSNRqzfU7GTBRExkuN4HEXFaW0ma5/wm2PLiO3PrgIGEIzfs+lr/cb2hxOD bKgSP1GF98iAKsGtSklOVqLolZh+W7gUq9HdtXWI0HlmGtPfi6utjWBv8l3FjVe5 Z0N654Ydmc21oou/kuCLJwgBmX8BjiZEk3PHAPeMA/xvUDU9ms8WwTKPrvCcirOb A7tfQb83pR/bUZDz3DTuWUcN2vtzPywiYJUFUKhcUeWM5nWjfvseQ32SLpZCySI9 EP4mAqVVBza+FKGgymUp9uyQDJNyQO7JAHpu0UG/Zolc06A7kwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFAzlP2OXkFDdk4Cp8GFsFapIJzgzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80 NTZkYWU5ZC1jYmE4LTQwMDgtYjZiNy0yYzliOTQwN2I2NDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzQ1NmRhZTlkLWNiYTgtNDAwOC1i NmI3LTJjOWI5NDA3YjY0MS80NTZkYWU5ZC1jYmE4LTQwMDgtYjZiNy0yYzliOTQw N2I2NDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBpmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDSxzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQC4R62cK1KJgYdL+SfKadL1cHbX8+ovzt38Oe1QTE8eW7RX NZTvc2mQBPNnZpWzbQswN0gkTCZBVdDzb6uJabJwojJxOnqdT+EQbzsX2amEAmX8 ciG3vgxGWIkhKnloc9fx0ThdQMzP8+HSSGFbg0SmqxcSHRDp+/jrl6dAlyw7HJhM QWX3rK5Re7X6uxwStn8xsVXCAcUq+zn67+VCCJAKxeDGT5PWS5Ze3ZvJO9DRghUZ S4jt0uCGwQmaA7nicux2vq8orhsP2TF0MsFFGceSQeomYslD066t0TrEE34E4uAv la6eWUWTiJLkMk5vph7yor0MyTxMR8IbOVbnuK4/ -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:32 2026 by rpki-client