$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.cer File: 5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.cer (raw, json) Hash identifier: oNMRg6VAOn+jtUa+VZ0dqetk2aEWtwicTc1kRSJtgxU= Subject key identifier: E9:EF:5A:B7:ED:15:75:F5:FB:D9:50:89:34:C9:46:28:8B:61:26:8E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DFBC14852DA24CC7FF4511280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 May 2026 12:18:55 +0000 Certificate not after: Wed 30 Aug 2028 12:18:55 +0000 Subordinate resources: AS: 40831 IP: 2620:191::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:c1:48:52:da:24:cc:7f:f4:51:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 28 12:18:55 2026 GMT Not After : Aug 30 12:18:55 2028 GMT Subject: CN=5ee41791-1f3e-4a65-b25c-ee2d1bbdd908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:73:88:a4:82:69:5c:fd:62:4b:46:64:12: 03:ec:7c:23:98:a4:51:dd:f7:96:37:ba:9e:e2:bc: db:2f:c9:2a:1f:9c:0c:34:47:0e:ca:bb:b3:73:97: e6:0c:76:cf:3f:3e:ab:c5:b5:4c:91:82:be:92:a8: 5c:69:6e:99:53:56:85:0a:4f:11:47:c7:3f:4e:90: cd:23:68:06:61:78:29:cd:e0:01:a6:83:2b:7f:b6: e6:83:88:71:29:0f:22:54:9f:d0:b8:38:ca:97:b2: d4:12:6d:4e:4f:25:13:fd:cd:ef:58:34:b1:cc:0d: 49:9d:bd:2b:4f:c1:8e:ef:b4:40:fb:b0:04:1d:11: f9:cb:ba:d9:a6:ae:6f:22:b4:d9:34:9b:86:30:31: 13:05:1b:c6:46:30:92:08:a5:9c:2f:a8:62:e5:de: 91:89:df:c6:f8:19:9c:26:90:e3:e4:51:bd:4a:91: 99:79:5e:01:64:fd:b9:4a:53:02:38:47:7e:b0:06: 14:62:30:3a:fe:93:f0:cc:87:55:d3:d1:8d:69:81: 0e:f6:9d:7c:be:78:29:e7:9b:ac:3d:c8:e5:6f:33: 91:8a:01:a0:fd:05:2f:f4:aa:91:62:22:83:fc:72: be:4a:68:d1:db:67:02:c5:75:28:56:e4:8d:19:5d: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EF:5A:B7:ED:15:75:F5:FB:D9:50:89:34:C9:46:28:8B:61:26:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908/5ee41791-1f3e-4a65-b25c-ee2d1bbdd908.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2620:191::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40831 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:72:25:ec:fb:b7:f4:af:51:ae:cd:19:0d:c1:27:b5:6b:02: 74:5a:85:54:7c:1e:ea:c7:10:4a:2e:94:ab:82:f2:f8:02:7c: 0c:60:38:62:cd:b5:62:44:fe:20:0d:d9:34:36:3d:fe:30:0d: 00:1a:f5:ee:d3:6b:8b:cb:c5:fd:a9:7a:83:39:ed:72:d9:a1: a8:0d:16:ed:31:c4:a8:98:55:22:a7:a6:23:21:69:9a:1a:d7: 17:95:47:8e:62:68:e5:0b:48:80:24:80:ab:4c:c2:ce:83:ac: 47:09:d4:ae:7e:3d:aa:05:c4:38:54:42:90:2e:2b:f0:75:ee: 33:0e:6c:30:a5:55:f9:fd:cb:1b:d2:a6:29:ba:c8:96:e7:c2: cf:ca:81:7c:67:1d:5d:10:3f:b5:1e:c0:48:ba:bc:fd:e8:dd: 5c:dd:23:ed:a7:9b:8a:00:e7:68:ed:2a:51:b9:1f:49:8e:f5: 34:34:03:87:36:b3:a1:41:f5:0a:77:92:ae:de:5d:f5:cf:ec: 9c:12:96:60:04:f2:f4:ed:ac:80:8d:34:8f:7a:ce:be:e1:18: 8b:ea:b7:3d:ca:40:4d:24:67:9c:15:ba:d5:f3:ae:a7:6f:33: 9d:d9:cf:c0:33:79:f2:d4:13:f4:68:37:0a:2c:8d:0d:18:6b: 1c:91:a4:a2 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE37wUhS2iTMf/RREoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUyODEyMTg1NVoXDTI4MDgzMDEyMTg1NVowLzEtMCsGA1UEAxMk NWVlNDE3OTEtMWYzZS00YTY1LWIyNWMtZWUyZDFiYmRkOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ1ziKSCaVz9YktGZBID7HwjmKRR3feWN7qe 4rzbL8kqH5wMNEcOyruzc5fmDHbPPz6rxbVMkYK+kqhcaW6ZU1aFCk8RR8c/TpDN I2gGYXgpzeABpoMrf7bmg4hxKQ8iVJ/QuDjKl7LUEm1OTyUT/c3vWDSxzA1Jnb0r T8GO77RA+7AEHRH5y7rZpq5vIrTZNJuGMDETBRvGRjCSCKWcL6hi5d6Rid/G+Bmc JpDj5FG9SpGZeV4BZP25SlMCOEd+sAYUYjA6/pPwzIdV09GNaYEO9p18vngp55us PcjlbzORigGg/QUv9KqRYiKD/HK+SmjR22cCxXUoVuSNGV15pQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFOnvWrftFXX1+9lQiTTJRiiLYSaOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81 ZWU0MTc5MS0xZjNlLTRhNjUtYjI1Yy1lZTJkMWJiZGQ5MDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzVlZTQxNzkxLTFmM2UtNGE2NS1i MjVjLWVlMmQxYmJkZDkwOC81ZWU0MTc5MS0xZjNlLTRhNjUtYjI1Yy1lZTJkMWJi ZGQ5MDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAGRADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAn38wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACnIl7Pu39K9Rrs0ZDcEntWsCdFqFVHwe6scQSi6Uq4Ly +AJ8DGA4Ys21YkT+IA3ZNDY9/jANABr17tNri8vF/al6gzntctmhqA0W7THEqJhV IqemIyFpmhrXF5VHjmJo5QtIgCSAq0zCzoOsRwnUrn49qgXEOFRCkC4r8HXuMw5s MKVV+f3LG9KmKbrIlufCz8qBfGcdXRA/tR7ASLq8/ejdXN0j7aebigDnaO0qUbkf SY71NDQDhzazoUH1CneSrt5d9c/snBKWYATy9O2sgI00j3rOvuEYi+q3PcpATSRn nBW61fOup28zndnPwDN58tQT9Gg3CiyNDRhrHJGkog== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:40 2026 by rpki-client