$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f.cer File: cc16c3db-6181-4312-8911-054e81ccea5f.cer (raw, json) Hash identifier: n/KPgfXnRINVVZpkJi6sjszdJAe7W/qT1pqxv0tzzS0= Subject key identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D9CE31D4267B69F81D5AEE540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Apr 2026 12:45:17 +0000 Certificate not after: Thu 27 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 2620:101::/46 IP: 2620:10d:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:e3:1d:42:67:b6:9f:81:d5:ae:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 24 12:45:17 2026 GMT Not After : Jul 27 12:45:17 2028 GMT Subject: CN=cc16c3db-6181-4312-8911-054e81ccea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:2a:d9:64:1e:fc:91:3b:4c:f2:10:ea:69: 49:f9:2b:41:d3:eb:21:98:48:fc:18:50:a3:31:28: b1:22:5e:6e:57:23:79:35:82:96:d6:0c:74:da:e6: dd:38:75:f5:a1:b0:d5:3d:6e:d9:32:5a:05:34:c0: cc:ef:72:c0:25:1c:72:54:33:cb:97:0a:28:22:42: e7:60:5f:a8:9d:14:c9:6c:97:6d:7e:4c:bc:ee:e3: 28:14:6f:f0:97:3c:b5:40:0f:57:cb:b5:da:76:90: 75:26:ee:f1:10:44:ed:a2:b3:a9:55:1a:b3:cb:95: f0:a5:a1:c8:6f:32:8b:6a:8e:78:da:dd:63:28:e8: f6:22:5a:5b:ca:d9:83:2e:01:b2:12:e6:d7:eb:a4: 61:94:af:0a:65:f6:dc:47:f7:06:f7:42:16:85:39: 33:66:18:35:8b:3f:6d:49:d0:24:f2:0d:ac:aa:78: 71:78:16:f4:f2:e7:78:61:f4:ec:dd:f4:8e:5b:97: 48:87:28:82:5a:a0:af:b6:40:e4:c2:23:33:70:76: 02:d3:7e:09:36:a3:24:74:1f:1f:5a:ca:5d:29:c9: ee:58:65:ab:0d:6e:a4:e3:ab:7c:27:e5:14:2a:f0: 49:72:03:dd:29:62:84:87:b8:12:b6:aa:da:ef:93: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:54:FE:5A:59:38:81:AB:1B:4C:37:A0:FD:21:97:3C:E9:2D:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc16c3db-6181-4312-8911-054e81ccea5f/cc16c3db-6181-4312-8911-054e81ccea5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2620:101::/46 2620:10d:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:e5:41:86:a2:bb:53:ec:4f:4e:c0:54:d1:5c:05:13:7f: 9d:60:5d:d6:57:77:43:2f:12:6f:96:f9:5d:0c:47:90:2b:fb: c7:a5:11:df:cd:40:2a:f2:7a:9f:3d:11:f1:b6:c9:97:5c:4f: f5:2b:92:ad:40:54:de:72:79:34:53:05:93:70:94:bc:6d:e9: 18:77:22:8b:ca:81:dd:42:22:fc:74:ed:dc:6b:13:c8:f2:f7: fb:f3:33:20:74:29:df:04:55:70:bf:3f:c0:ad:48:50:7a:54: 67:f1:ef:88:13:a4:c7:3a:18:4f:4f:d3:4e:76:88:8a:15:21: e0:e3:21:1a:00:6d:bc:bf:08:ca:66:6d:ae:f0:17:d5:ff:82: 98:54:a8:ce:56:a5:fb:96:68:cc:f3:da:df:23:55:b5:ad:74: cd:d4:3e:5b:2e:6b:e4:ca:c7:7a:eb:8c:30:14:66:2e:d4:73: fa:49:d0:a7:07:c8:49:80:13:c6:94:5c:e3:df:d6:e4:68:a0: f1:93:27:3a:63:5c:e5:cc:6f:15:f4:03:73:74:2a:d6:93:e0: 7e:11:2a:17:93:3b:f9:03:c6:bf:4a:5c:4a:48:39:e1:e9:2f: 66:f4:2f:a1:dd:a3:0b:b1:fd:3a:11:c7:09:a8:5d:77:3e:0a: 34:cd:37:59 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE2c4x1CZ7afgdWu5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDQyNDEyNDUxN1oXDTI4MDcyNzEyNDUxN1owLzEtMCsGA1UEAxMk Y2MxNmMzZGItNjE4MS00MzEyLTg5MTEtMDU0ZTgxY2NlYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvAq2WQe/JE7TPIQ6mlJ+StB0+shmEj8GFCj MSixIl5uVyN5NYKW1gx02ubdOHX1obDVPW7ZMloFNMDM73LAJRxyVDPLlwooIkLn YF+onRTJbJdtfky87uMoFG/wlzy1QA9Xy7XadpB1Ju7xEETtorOpVRqzy5XwpaHI bzKLao542t1jKOj2IlpbytmDLgGyEubX66RhlK8KZfbcR/cG90IWhTkzZhg1iz9t SdAk8g2sqnhxeBb08ud4YfTs3fSOW5dIhyiCWqCvtkDkwiMzcHYC034JNqMkdB8f WspdKcnuWGWrDW6k46t8J+UUKvBJcgPdKWKEh7gStqra75NjdQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFNhxVP5aWTiBqxtMN6D9IZc86S1IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j YzE2YzNkYi02MTgxLTQzMTItODkxMS0wNTRlODFjY2VhNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NjMTZjM2RiLTYxODEtNDMxMi04 OTExLTA1NGU4MWNjZWE1Zi9jYzE2YzNkYi02MTgxLTQzMTItODkxMS0wNTRlODFj Y2VhNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgACMBIDBwImIAEBAAADBwQmIAENEAAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKWXl QYaiu1PsT07AVNFcBRN/nWBd1ld3Qy8Sb5b5XQxHkCv7x6UR381AKvJ6nz0R8bbJ l1xP9SuSrUBU3nJ5NFMFk3CUvG3pGHcii8qB3UIi/HTt3GsTyPL3+/MzIHQp3wRV cL8/wK1IUHpUZ/HviBOkxzoYT0/TTnaIihUh4OMhGgBtvL8IymZtrvAX1f+CmFSo zlal+5ZozPPa3yNVta10zdQ+Wy5r5MrHeuuMMBRmLtRz+knQpwfISYATxpRc49/W 5Gig8ZMnOmNc5cxvFfQDc3Qq1pPgfhEqF5M7+QPGv0pcSkg54ekvZvQvod2jC7H9 OhHHCahddz4KNM03WQ== -----END CERTIFICATE-----Generated at Fri May 1 15:08:28 2026 by rpki-client