$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2.cer File: 709a4541-fc5b-40cd-b9fe-c967d885ead2.cer (raw, json) Hash identifier: WPmyl/09clzJzVWuVjThxS3jRoMxvZiOJfNt018iVQs= Subject key identifier: 5A:C1:BE:54:3C:91:F3:64:EC:18:D8:AE:A7:9A:6C:43:19:50:30:DF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E0DFE594E620D28BBAC1BEC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/709a4541-fc5b-40cd-b9fe-c967d885ead2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Jun 2026 01:06:30 +0000 Certificate not after: Wed 06 Sep 2028 01:06:30 +0000 Subordinate resources: AS: 402591 IP: 2602:f39f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:fe:59:4e:62:0d:28:bb:ac:1b:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 4 01:06:30 2026 GMT Not After : Sep 6 01:06:30 2028 GMT Subject: CN=709a4541-fc5b-40cd-b9fe-c967d885ead2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:10:4c:df:bd:61:d2:62:7d:21:10:2f:03: dc:9d:75:23:33:92:47:5b:e8:cd:88:58:21:75:10: 0a:d3:f8:3c:e9:e3:b7:73:0b:ff:9e:98:d3:a2:93: 84:91:4b:58:14:bc:7c:21:9e:bd:f7:58:11:c8:ba: 3d:00:26:e0:28:b9:fe:8e:d3:f2:52:1a:fd:31:33: 2f:01:8d:a0:e7:93:f7:92:ff:28:77:6e:b9:84:2b: e1:93:b7:91:fc:e1:86:c9:a4:8f:64:fe:9b:7e:3b: a4:3a:ea:2e:b8:87:f7:ba:c8:f2:34:ac:9d:52:3d: ec:7c:77:19:2a:28:90:50:e4:6f:49:cc:aa:03:47: 93:11:8e:de:72:56:31:fb:d8:8a:d8:c3:dd:d4:d9: 94:da:06:99:46:ae:84:08:71:c1:99:f6:76:d9:7e: 43:6f:76:29:98:6a:4e:07:4b:8e:a4:a5:91:0f:7e: 01:46:ec:ed:32:9b:75:6f:25:96:7c:07:7b:aa:d6: 93:31:62:c7:20:b5:e4:60:36:30:ad:dd:f1:b8:b8: c0:d3:21:51:94:55:6f:5f:06:d5:58:14:fa:c6:61: 67:12:a3:c2:aa:c4:ad:26:e7:32:92:6d:38:e3:5d: b6:3b:a4:87:a4:d5:6f:1e:96:7f:b2:d5:ed:fc:97: fc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C1:BE:54:3C:91:F3:64:EC:18:D8:AE:A7:9A:6C:43:19:50:30:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/709a4541-fc5b-40cd-b9fe-c967d885ead2/709a4541-fc5b-40cd-b9fe-c967d885ead2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2602:f39f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402591 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:71:e4:3d:92:09:61:3e:ec:1a:fd:f9:9c:26:b3:a8:6f:66: 11:0c:06:54:61:51:36:d2:eb:4e:51:ff:42:7a:f2:4b:0f:ec: 02:64:8a:74:02:0a:1d:3a:87:51:ee:62:97:e3:24:06:fd:78: 84:97:19:8c:36:55:49:ee:0a:7e:c8:10:c7:b4:f9:f2:85:bd: d9:98:89:19:bd:c4:e6:c7:d2:0c:43:bb:a6:52:bf:42:ec:4a: bd:10:35:cf:90:d1:48:ea:8e:42:7b:71:36:7c:4e:61:56:a0: 23:84:70:f9:47:78:fa:cd:4c:c5:be:97:12:de:f9:da:5c:f6: bc:99:b2:63:cf:a2:7d:7c:a5:4d:71:59:3a:ee:97:f5:a5:0b: 2b:a2:a7:cb:93:b9:43:05:8e:6f:e3:83:52:12:a9:ac:09:83: 87:03:69:df:2b:7e:c1:b2:d0:09:a5:1b:1b:bd:0c:08:c4:f7: 80:cf:a4:a1:a4:e6:2b:69:0c:b1:48:b4:88:c1:a3:f3:9b:65: 0e:19:37:01:d6:dd:41:15:bb:02:40:9e:9a:cd:a6:a3:68:bb: d7:e4:4f:05:47:91:b0:89:a1:42:7e:4a:38:2a:93:a7:f9:28: 27:90:0b:d0:44:e3:0b:e7:c9:f2:70:33:4d:2f:70:36:d1:94: 46:9a:3a:8e -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE4N/llOYg0ou6wb7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwNDAxMDYzMFoXDTI4MDkwNjAxMDYzMFowLzEtMCsGA1UEAxMk NzA5YTQ1NDEtZmM1Yi00MGNkLWI5ZmUtYzk2N2Q4ODVlYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fMQTN+9YdJifSEQLwPcnXUjM5JHW+jNiFgh dRAK0/g86eO3cwv/npjTopOEkUtYFLx8IZ6991gRyLo9ACbgKLn+jtPyUhr9MTMv AY2g55P3kv8od265hCvhk7eR/OGGyaSPZP6bfjukOuouuIf3usjyNKydUj3sfHcZ KiiQUORvScyqA0eTEY7eclYx+9iK2MPd1NmU2gaZRq6ECHHBmfZ22X5Db3YpmGpO B0uOpKWRD34BRuztMpt1byWWfAd7qtaTMWLHILXkYDYwrd3xuLjA0yFRlFVvXwbV WBT6xmFnEqPCqsStJucykm044122O6SHpNVvHpZ/stXt/Jf8jwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFFrBvlQ8kfNk7BjYrqeabEMZUDDfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83 MDlhNDU0MS1mYzViLTQwY2QtYjlmZS1jOTY3ZDg4NWVhZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzcwOWE0NTQxLWZjNWItNDBjZC1i OWZlLWM5NjdkODg1ZWFkMi83MDlhNDU0MS1mYzViLTQwY2QtYjlmZS1jOTY3ZDg4 NWVhZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvOfADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGJJ8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnHHkPZIJYT7sGv35nCazqG9mEQwGVGFRNtLrTlH/Qnry Sw/sAmSKdAIKHTqHUe5il+MkBv14hJcZjDZVSe4KfsgQx7T58oW92ZiJGb3E5sfS DEO7plK/QuxKvRA1z5DRSOqOQntxNnxOYVagI4Rw+Ud4+s1Mxb6XEt752lz2vJmy Y8+ifXylTXFZOu6X9aULK6Kny5O5QwWOb+ODUhKprAmDhwNp3yt+wbLQCaUbG70M CMT3gM+koaTmK2kMsUi0iMGj85tlDhk3AdbdQRW7AkCems2mo2i71+RPBUeRsImh Qn5KOCqTp/koJ5AL0ETjC+fJ8nAzTS9wNtGURpo6jg== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:24 2026 by rpki-client