$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer File: a3095f6b-9f71-441b-8acd-bc18272b938d.cer (raw, json) Hash identifier: QC/fRUAOoK0zbf36ZWD7Z9e/S/yL+yxqZReOJ3xd87Y= Subject key identifier: D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584E12969ED2D596867AE69BA080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jun 2026 16:36:33 +0000 Certificate not after: Thu 07 Sep 2028 16:36:33 +0000 Subordinate resources: IP: 2620:1d:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:12:96:9e:d2:d5:96:86:7a:e6:9b:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Jun 5 16:36:33 2026 GMT Not After : Sep 7 16:36:33 2028 GMT Subject: CN=a3095f6b-9f71-441b-8acd-bc18272b938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:64:60:6b:ed:70:a6:cf:22:0b:34:04:89: 5d:3d:7c:8e:7e:a7:13:15:32:ef:d4:5d:dc:f1:81: 0c:14:af:90:2e:37:4d:66:a5:45:01:a0:eb:83:47: e7:7a:45:bd:de:0f:36:fd:02:fe:c3:88:3f:2b:2f: 0c:cf:d7:bd:fa:5a:27:b2:f7:fe:17:58:bb:f3:1b: 78:4f:e5:9c:8e:6c:30:9e:5c:32:44:2e:96:d2:56: 23:5c:e5:d8:65:25:68:06:7c:74:b4:a4:ea:50:13: 80:e7:57:3e:f2:9c:68:77:23:5b:17:b6:19:33:c4: 12:c7:b0:be:e1:7a:c0:68:9b:c9:c8:65:8d:49:e3: 51:82:2c:80:ee:bb:48:19:a0:1b:27:af:2f:6a:e7: a0:38:8b:11:87:46:58:4c:ca:41:53:00:a6:24:44: ef:45:f1:95:5a:91:17:08:ed:66:c9:56:fc:65:fb: 1f:a8:91:d5:48:7f:86:43:f2:55:3f:67:0b:01:95: ed:9c:5a:7b:56:ce:a4:0f:27:8f:8f:9a:7f:ae:df: bc:85:55:57:ec:f2:52:49:95:a7:c8:65:c3:f6:e7: 58:75:81:ea:b8:1d:80:0f:42:cf:fc:17:25:a9:39: 7e:09:a7:ab:c0:b9:a2:a3:27:9e:2d:7d:e6:f0:c1: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d3:30:e0:f3:a0:50:a5:f0:68:8c:71:96:e2:67:62:5d:74: 4f:22:da:c7:ee:fb:31:5c:7b:a9:cd:15:fc:08:79:2c:58:6b: 17:b6:3a:0d:80:e6:bc:38:4c:ef:6c:f2:d9:6e:0a:c7:34:28: 9e:20:97:38:89:dd:cf:12:49:b7:be:05:cc:85:e8:31:bc:a9: f2:cb:0f:69:6d:66:b2:f7:af:35:3c:ad:c4:3e:3d:e4:e0:e2: d2:31:38:9f:e1:95:40:fd:3a:92:3c:0f:10:08:b5:9c:07:ab: 39:29:65:df:3f:f7:5c:30:0b:9f:70:ba:5c:ce:29:68:ce:71: 94:28:19:a5:e0:98:75:66:0e:d4:47:40:c1:ec:c7:6b:a3:54: 3a:71:ee:a7:9e:2b:09:c9:9c:a4:4e:53:6e:39:9f:8d:af:6a: 94:65:17:1d:c2:e5:57:09:2c:0f:b6:33:ef:a2:36:50:4f:35: 0e:9f:92:01:33:eb:39:2c:8a:1e:b9:59:89:b9:b0:d9:20:b1: 44:2b:59:72:28:e3:24:8f:03:ae:5b:a8:20:a1:a1:e1:c5:20: d3:6d:da:84:f0:f3:4f:84:8d:7b:12:54:e1:d9:2b:8e:ee:32: 14:3f:e6:10:a1:c0:7d:12:7b:c6:c8:8e:57:77:9d:c4:2a:b5: 9e:45:6b:fe -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE4Slp7S1ZaGeuaboIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDYwNTE2MzYzM1oXDTI4MDkwNzE2MzYzM1owLzEtMCsGA1UEAxMk YTMwOTVmNmItOWY3MS00NDFiLThhY2QtYmMxODI3MmI5MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFkYGvtcKbPIgs0BIldPXyOfqcTFTLv1F3c 8YEMFK+QLjdNZqVFAaDrg0fnekW93g82/QL+w4g/Ky8Mz9e9+lonsvf+F1i78xt4 T+WcjmwwnlwyRC6W0lYjXOXYZSVoBnx0tKTqUBOA51c+8pxodyNbF7YZM8QSx7C+ 4XrAaJvJyGWNSeNRgiyA7rtIGaAbJ68vauegOIsRh0ZYTMpBUwCmJETvRfGVWpEX CO1myVb8ZfsfqJHVSH+GQ/JVP2cLAZXtnFp7Vs6kDyePj5p/rt+8hVVX7PJSSZWn yGXD9udYdYHquB2AD0LP/BclqTl+CaerwLmioyeeLX3m8MGLewIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFNlrwcLpti5ojrrGEknMBufxwdODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h MzA5NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4MjcyYjkzOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2EzMDk1ZjZiLTlmNzEtNDQxYi04 YWNkLWJjMTgyNzJiOTM4ZC9hMzA5NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4Mjcy YjkzOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAdoAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc9Mw4POgUKXwaIxx luJnYl10TyLax+77MVx7qc0V/Ah5LFhrF7Y6DYDmvDhM72zy2W4KxzQoniCXOInd zxJJt74FzIXoMbyp8ssPaW1msvevNTytxD495ODi0jE4n+GVQP06kjwPEAi1nAer OSll3z/3XDALn3C6XM4paM5xlCgZpeCYdWYO1EdAwezHa6NUOnHup54rCcmcpE5T bjmfja9qlGUXHcLlVwksD7Yz76I2UE81Dp+SATPrOSyKHrlZibmw2SCxRCtZcijj JI8DrluoIKGh4cUg023ahPDzT4SNexJU4dkrju4yFD/mEKHAfRJ7xsiOV3edxCq1 nkVr/g== -----END CERTIFICATE-----Generated at Sat Jun 6 08:21:35 2026 by rpki-client