$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.cer File: 5dfc19b2-15c9-4fcd-9fee-64d61bd31357.cer (raw, json) Hash identifier: NUSytKUt16rn60cRfSZ7H+2ilfdQCgu+Cz5GgnXSHfw= Subject key identifier: 3A:54:9D:17:D2:86:C6:59:65:02:F0:6B:02:1C:6C:11:A8:A3:A3:C3 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E36D60AFC3DF1C77D5E5741C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Jun 2026 16:13:26 +0000 Certificate not after: Wed 20 Sep 2028 16:13:26 +0000 Subordinate resources: AS: 402630 IP: 2620:36:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:d6:0a:fc:3d:f1:c7:7d:5e:57:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 18 16:13:26 2026 GMT Not After : Sep 20 16:13:26 2028 GMT Subject: CN=5dfc19b2-15c9-4fcd-9fee-64d61bd31357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:8d:f5:2f:cd:ab:3d:51:c3:85:49:a2:10: 9c:43:68:46:b6:da:22:03:37:b0:c7:55:b6:f7:30: dc:ae:81:22:39:2a:81:b5:43:1a:52:b4:dc:f9:39: 70:48:eb:7a:3d:ea:db:39:3b:ed:7d:8a:7e:74:96: ed:4a:1d:7c:9b:1a:ed:77:4a:fe:d1:9b:98:03:91: 1f:63:cf:46:5c:b4:b5:40:0f:c6:f0:8d:66:7b:ab: c9:85:d1:a7:9b:00:11:21:f7:dc:f9:4c:09:ee:aa: dc:7b:a7:da:8a:8a:b8:ab:1f:fb:ee:9e:01:42:de: dc:e3:c8:44:e5:ae:1d:44:65:3e:16:9a:ae:92:9b: e6:84:2b:dc:d0:fd:6c:b6:30:9f:73:ff:da:6d:f9: e0:84:bd:6c:8d:15:4d:9c:70:f9:14:63:77:c2:a3: 51:8c:90:ec:55:f4:cb:ae:02:23:87:ff:df:4c:3f: 63:a6:f7:68:2b:f1:3c:93:14:48:32:f2:6c:00:3f: 14:c7:35:e4:37:8c:82:a3:eb:66:c0:a4:14:60:84: 86:71:d4:ee:82:91:e1:39:09:50:69:ba:cf:1d:9b: b8:9c:79:1b:03:9c:ec:a4:e4:01:8c:17:3c:dc:53: 8b:09:25:14:d7:d9:e8:fa:7f:e7:71:19:8f:b0:ca: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:9D:17:D2:86:C6:59:65:02:F0:6B:02:1C:6C:11:A8:A3:A3:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5dfc19b2-15c9-4fcd-9fee-64d61bd31357/5dfc19b2-15c9-4fcd-9fee-64d61bd31357.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2620:36:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402630 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:80:6c:7e:1d:28:b4:81:c5:e8:b9:a3:d5:09:b2:b0:e5:56: 7e:1b:0d:2b:19:b1:0b:d0:57:38:a5:f5:1f:c3:6a:b4:30:75: 3b:4b:4f:a6:59:e5:17:b0:b2:1d:d7:bf:31:bf:24:dc:ef:41: 60:36:b3:8e:c2:4d:f0:ae:b1:24:15:b9:ba:12:a7:2a:6a:6c: 8a:ce:66:65:c9:aa:58:ff:bb:3c:a4:a8:f8:c6:60:43:9c:3d: 40:9a:71:dc:60:5c:bc:b8:68:67:68:bb:bf:cb:2b:d7:57:4c: 71:f1:54:b5:84:d8:ba:99:e6:7b:d6:bf:45:0f:62:6f:9d:ba: b0:43:e9:80:82:20:11:3d:bd:5d:78:10:28:4b:2a:b6:2e:ac: 42:94:de:16:aa:9a:b2:c1:d3:cf:23:84:fe:b7:40:f7:36:87: 90:35:9c:c7:70:b0:62:05:bf:a1:f0:39:13:3d:85:04:f0:07: 18:fd:57:5c:97:77:36:9d:d7:66:dc:ed:f1:d3:18:e8:10:fc: 56:02:df:82:88:ed:ab:af:86:de:d8:56:a9:5d:12:52:89:7e: 14:f2:7d:14:16:b0:f3:00:87:9e:f4:1d:cc:cf:93:e5:1a:45: 36:95:03:04:79:42:91:6c:ac:4e:62:48:85:8e:f2:48:41:74: d3:32:ea:22 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE421gr8PfHHfV5XQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYxODE2MTMyNloXDTI4MDkyMDE2MTMyNlowLzEtMCsGA1UEAxMk NWRmYzE5YjItMTVjOS00ZmNkLTlmZWUtNjRkNjFiZDMxMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsuN9S/Nqz1Rw4VJohCcQ2hGttoiAzewx1W2 9zDcroEiOSqBtUMaUrTc+TlwSOt6PerbOTvtfYp+dJbtSh18mxrtd0r+0ZuYA5Ef Y89GXLS1QA/G8I1me6vJhdGnmwARIffc+UwJ7qrce6faioq4qx/77p4BQt7c48hE 5a4dRGU+FpqukpvmhCvc0P1stjCfc//abfnghL1sjRVNnHD5FGN3wqNRjJDsVfTL rgIjh//fTD9jpvdoK/E8kxRIMvJsAD8UxzXkN4yCo+tmwKQUYISGcdTugpHhOQlQ abrPHZu4nHkbA5zspOQBjBc83FOLCSUU19no+n/ncRmPsMqbgwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFDpUnRfShsZZZQLwawIcbBGoo6PDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 ZGZjMTliMi0xNWM5LTRmY2QtOWZlZS02NGQ2MWJkMzEzNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVkZmMxOWIyLTE1YzktNGZjZC05 ZmVlLTY0ZDYxYmQzMTM1Ny81ZGZjMTliMi0xNWM5LTRmY2QtOWZlZS02NGQ2MWJk MzEzNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAA2IAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiTGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBABaAbH4dKLSBxei5o9UJsrDlVn4bDSsZsQvQVzil9R/D arQwdTtLT6ZZ5Rewsh3XvzG/JNzvQWA2s47CTfCusSQVuboSpypqbIrOZmXJqlj/ uzykqPjGYEOcPUCacdxgXLy4aGdou7/LK9dXTHHxVLWE2LqZ5nvWv0UPYm+durBD 6YCCIBE9vV14EChLKrYurEKU3haqmrLB088jhP63QPc2h5A1nMdwsGIFv6HwORM9 hQTwBxj9V1yXdzad12bc7fHTGOgQ/FYC34KI7auvht7YVqldElKJfhTyfRQWsPMA h570HczPk+UaRTaVAwR5QpFsrE5iSIWO8khBdNMy6iI= -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:37 2026 by rpki-client