$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b8827ee4-690b-44b3-9395-40a81a48d971.cer File: b8827ee4-690b-44b3-9395-40a81a48d971.cer (raw, json) Hash identifier: ZYZ9ywfgJL26orpbyaSgJpu4tIaiHsszbtjdePMYq1g= Subject key identifier: 1C:F5:9D:4E:6B:7A:18:D6:B4:8A:54:8D:4E:7B:A4:75:60:89:CE:D3 Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Certificate serial: 010D0C9F4328584ED328291C3638752BB354AB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b8827ee4-690b-44b3-9395-40a81a48d971/b8827ee4-690b-44b3-9395-40a81a48d971.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b8827ee4-690b-44b3-9395-40a81a48d971/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Aug 2026 16:05:00 +0000 Certificate not after: Wed 15 Nov 2028 17:05:00 +0000 Subordinate resources: IP: 2620:57::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d3:28:29:1c:36:38:75:2b:b3:54:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42 Validity Not Before: Aug 13 16:05:00 2026 GMT Not After : Nov 15 17:05:00 2028 GMT Subject: CN=b8827ee4-690b-44b3-9395-40a81a48d971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:cc:a1:17:dd:db:53:0c:06:a7:cf:f5:42: 6d:96:ff:62:cc:ee:ae:29:f4:ee:3b:a4:ab:97:2b: db:05:30:81:7b:1b:93:4f:32:c2:aa:64:5f:0c:1c: 53:06:3d:da:c1:e1:a3:74:d8:db:28:c1:19:4b:b9: 62:a1:4c:7b:fc:9d:7f:7d:9d:e9:1c:4d:34:7e:a4: 67:15:40:89:19:21:57:a1:e7:c3:9d:61:0c:3a:28: 5a:4c:28:f9:8d:54:7e:d8:15:28:a7:25:ee:b3:1f: 6e:8d:02:d0:ca:4a:e4:58:3b:29:97:32:ac:8c:bd: 52:11:9f:0e:8d:71:f8:dd:ef:5c:27:47:b5:50:df: 64:6b:8c:7d:47:b4:f4:b6:af:a0:bf:cb:26:26:71: fd:1e:9a:24:a9:4a:46:3e:b1:ab:be:2a:24:46:58: 84:5d:a1:22:40:ec:08:61:19:17:12:77:26:0b:3f: a9:e1:75:3d:0c:88:5c:a1:86:ef:7a:00:94:eb:a9: d2:ff:30:95:45:ab:d5:84:b9:86:a1:cd:cd:c0:87: 4d:6b:47:c1:80:fe:0e:43:03:66:84:8a:21:ad:c3: 70:1a:26:ec:b4:24:9f:bb:08:5b:1a:62:8a:7a:b9: 62:d6:6c:12:ec:54:c4:08:8e:9a:51:e9:83:32:f7: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F5:9D:4E:6B:7A:18:D6:B4:8A:54:8D:4E:7B:A4:75:60:89:CE:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b8827ee4-690b-44b3-9395-40a81a48d971/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b8827ee4-690b-44b3-9395-40a81a48d971/b8827ee4-690b-44b3-9395-40a81a48d971.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl X509v3 Authority Key Identifier: keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer sbgp-ipAddrBlock: critical IPv6: 2620:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:90:d1:09:e5:9f:a9:64:ea:05:af:0f:34:eb:df:50:b3:c9: 1a:35:11:bd:7e:b1:78:60:c9:c5:96:7d:39:4a:ea:3d:7e:af: c4:fa:56:07:9f:91:fd:b4:44:eb:26:12:67:ab:68:c1:e2:27: 79:c0:e6:de:27:e9:aa:95:54:d3:78:ce:0d:63:2c:d6:9e:1f: d8:1b:27:1a:5c:22:bf:e9:0f:c0:30:d5:b9:79:aa:78:54:34: cb:57:8b:25:a7:bc:69:75:ec:6e:89:0f:93:6d:09:56:08:25: e7:ab:69:80:1a:a7:e8:4b:15:c9:95:3e:91:ad:3f:61:38:02: 21:86:10:83:62:e5:32:13:31:75:05:5d:86:4b:29:5f:26:db: 9c:65:b9:5d:9a:4a:61:32:45:57:ba:0a:50:d8:4f:f1:bb:f1: 42:08:e4:94:7f:0c:c1:e1:9a:5f:5b:cc:c3:89:d4:b3:70:cc: bd:a0:f6:9a:e6:58:9d:b2:f8:e3:dd:d4:4c:b1:8f:41:7d:b9: 3a:63:1f:ef:51:97:84:72:d0:c4:0e:1e:5d:16:ff:ed:6d:95: a8:17:16:c4:11:ea:bd:28:4f:ae:06:e2:5a:18:48:e9:49:58: f4:70:d2:67:34:b9:b4:b7:7e:26:1c:cf:5d:1c:09:07:18:ee: 0a:a0:af:a2 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE7TKCkcNjh1K7NUq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz YzQyMB4XDTI2MDgxMzE2MDUwMFoXDTI4MTExNTE3MDUwMFowLzEtMCsGA1UEAxMk Yjg4MjdlZTQtNjkwYi00NGIzLTkzOTUtNDBhODFhNDhkOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ7MoRfd21MMBqfP9UJtlv9izO6uKfTuO6Sr lyvbBTCBexuTTzLCqmRfDBxTBj3aweGjdNjbKMEZS7lioUx7/J1/fZ3pHE00fqRn FUCJGSFXoefDnWEMOihaTCj5jVR+2BUopyXusx9ujQLQykrkWDsplzKsjL1SEZ8O jXH43e9cJ0e1UN9ka4x9R7T0tq+gv8smJnH9HpokqUpGPrGrviokRliEXaEiQOwI YRkXEncmCz+p4XU9DIhcoYbvegCU66nS/zCVRavVhLmGoc3NwIdNa0fBgP4OQwNm hIohrcNwGibstCSfuwhbGmKKerli1mwS7FTECI6aUemDMvcRMQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFBz1nU5rehjWtIpUjU57pHVgic7TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9i ODgyN2VlNC02OTBiLTQ0YjMtOTM5NS00MGE4MWE0OGQ5NzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2I4ODI3ZWU0LTY5MGItNDRiMy05 Mzk1LTQwYTgxYTQ4ZDk3MS9iODgyN2VlNC02OTBiLTQ0YjMtOTM5NS00MGE4MWE0 OGQ5NzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABXAAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARpDRCeWfqWTqBa8P NOvfULPJGjURvX6xeGDJxZZ9OUrqPX6vxPpWB5+R/bRE6yYSZ6toweInecDm3ifp qpVU03jODWMs1p4f2BsnGlwiv+kPwDDVuXmqeFQ0y1eLJae8aXXsbokPk20JVggl 56tpgBqn6EsVyZU+ka0/YTgCIYYQg2LlMhMxdQVdhkspXybbnGW5XZpKYTJFV7oK UNhP8bvxQgjklH8MweGaX1vMw4nUs3DMvaD2muZYnbL4493UTLGPQX25OmMf71GX hHLQxA4eXRb/7W2VqBcWxBHqvShPrgbiWhhI6UlY9HDSZzS5tLd+JhzPXRwJBxju CqCvog== -----END CERTIFICATE-----Generated at Tue Aug 25 07:55:48 2026 by rpki-client