$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer File: e20283c0-db21-4d92-ac23-4da5857d3bfd.cer (raw, json) Hash identifier: Q3ubEG1Gh0siI+5WYoUtwTshDVikZVEUVz6BlSi1/ss= Subject key identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE0BA6B19D76D985384F102C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 12:45:11 +0000 Certificate not after: Mon 20 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 2604:1ec0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:ba:6b:19:d7:6d:98:53:84:f1:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 18 12:45:11 2026 GMT Not After : Nov 20 13:45:11 2028 GMT Subject: CN=e20283c0-db21-4d92-ac23-4da5857d3bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:33:36:01:21:b0:b8:34:48:73:12:4c:ab:e2: cf:c5:85:2d:f4:d7:97:95:27:51:18:fd:ad:e4:b7: a3:60:b6:c7:39:c7:0b:c9:63:48:cc:72:9c:aa:39: 89:a4:ab:4a:fd:2c:23:b1:3b:c8:8c:16:50:0a:ae: d6:45:48:0c:3d:ec:bf:1f:76:a1:22:4b:98:85:40: c0:40:b8:a7:18:c6:6e:c4:be:4e:c8:8b:5c:e6:96: 0a:13:a4:b2:62:7f:cc:64:ba:c5:15:4b:de:94:5b: 92:88:a1:5f:b6:aa:c2:41:ea:36:eb:b4:bc:57:fa: 8a:98:9e:90:ba:ed:1e:af:cc:4a:e9:2d:3d:04:36: 18:ff:a9:03:89:b0:da:39:4e:40:e2:a0:d0:c0:43: 27:a1:13:16:83:1e:2e:06:28:7e:17:c3:c4:3a:9c: be:d5:f6:fc:3b:9e:f9:ed:a1:e6:68:ec:bc:8f:5a: b1:0e:9a:c0:f6:2c:9f:21:bb:bb:02:92:0c:e2:f1: 1c:38:27:a8:8e:20:52:07:49:08:13:59:9d:be:36: b6:19:a0:92:a5:52:87:ed:8c:4b:e9:a5:03:50:68: 73:5a:bc:47:36:85:88:f7:9c:3a:99:54:02:7e:ad: fe:29:46:cb:2a:26:f5:7f:ac:6f:a5:94:09:59:99: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2604:1ec0::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9a:1a:b7:6c:64:cf:3e:d5:d9:b4:1d:2d:71:1f:57:2f:0c: 1b:0a:47:cb:5f:5a:27:77:46:ea:f2:f8:f9:ec:af:d5:83:ef: 3f:e2:37:be:49:fb:63:6a:78:66:f7:5f:e1:33:f9:08:fc:d4: 3e:48:37:3f:7a:03:e3:87:a6:3f:4c:53:f9:18:b0:3a:6d:f0: 2d:e4:e6:58:72:71:cc:6a:07:74:7c:6f:52:fb:22:40:f8:73: 2d:d9:75:08:30:07:5a:2d:0c:51:20:3d:93:92:74:c5:6e:de: 71:f8:85:e5:34:41:d0:b9:6e:eb:a1:e0:ec:c5:1f:8e:08:10: 45:cc:d0:d9:84:c0:4e:98:92:67:f6:78:9c:1b:1c:41:91:08: 5d:29:55:cb:1a:8a:0d:fe:44:34:64:a0:9d:b9:ed:46:56:7b: f5:00:b6:73:50:a7:9e:de:d6:15:7c:b3:f7:27:f1:92:c8:fc: 64:a2:5e:69:3c:9a:7e:1c:f0:5c:36:76:a1:2e:74:25:cc:76: 29:71:6d:b5:55:85:88:50:93:84:2e:98:88:41:67:68:ee:19: d7:9c:1d:08:22:43:a5:f7:71:dc:f9:e8:5b:7c:fa:a8:62:10: 4a:3c:12:cd:15:8f:70:06:02:8c:4e:86:b6:2e:f8:42:4a:06: 19:ed:8b:60 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE7gumsZ122YU4TxAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgxODEyNDUxMVoXDTI4MTEyMDEzNDUxMVowLzEtMCsGA1UEAxMk ZTIwMjgzYzAtZGIyMS00ZDkyLWFjMjMtNGRhNTg1N2QzYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTM2ASGwuDRIcxJMq+LPxYUt9NeXlSdRGP2t 5LejYLbHOccLyWNIzHKcqjmJpKtK/SwjsTvIjBZQCq7WRUgMPey/H3ahIkuYhUDA QLinGMZuxL5OyItc5pYKE6SyYn/MZLrFFUvelFuSiKFftqrCQeo267S8V/qKmJ6Q uu0er8xK6S09BDYY/6kDibDaOU5A4qDQwEMnoRMWgx4uBih+F8PEOpy+1fb8O575 7aHmaOy8j1qxDprA9iyfIbu7ApIM4vEcOCeojiBSB0kIE1mdvja2GaCSpVKH7YxL 6aUDUGhzWrxHNoWI95w6mVQCfq3+KUbLKib1f6xvpZQJWZlKjwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFCbSe+A/CkiqIa78SetlCDMXA4nPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l MjAyODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1ODU3ZDNiZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2UyMDI4M2MwLWRiMjEtNGQ5Mi1h YzIzLTRkYTU4NTdkM2JmZC9lMjAyODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1ODU3 ZDNiZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmBB7AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdmhq3bGTPPtXZtB0t cR9XLwwbCkfLX1ond0bq8vj57K/Vg+8/4je+Sftjanhm91/hM/kI/NQ+SDc/egPj h6Y/TFP5GLA6bfAt5OZYcnHMagd0fG9S+yJA+HMt2XUIMAdaLQxRID2TknTFbt5x +IXlNEHQuW7roeDsxR+OCBBFzNDZhMBOmJJn9nicGxxBkQhdKVXLGooN/kQ0ZKCd ue1GVnv1ALZzUKee3tYVfLP3J/GSyPxkol5pPJp+HPBcNnahLnQlzHYpcW21VYWI UJOELpiIQWdo7hnXnB0IIkOl93Hc+ehbfPqoYhBKPBLNFY9wBgKMToa2LvhCSgYZ 7Ytg -----END CERTIFICATE-----Generated at Sat Sep 5 14:14:03 2026 by rpki-client