$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer File: dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer (raw, json) Hash identifier: ZCfKVfXJQoXAbJzoBvQ/xJMFpkf72Y9RRx/B4L+4Ui8= Subject key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EB83F7EAF260A174738363280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Aug 2026 00:45:11 +0000 Certificate not after: Mon 06 Nov 2028 01:45:11 +0000 Subordinate resources: IP: 2607:9bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:3f:7e:af:26:0a:17:47:38:36:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 4 00:45:11 2026 GMT Not After : Nov 6 01:45:11 2028 GMT Subject: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:6f:4e:ed:83:10:1b:da:f2:8b:48:83:db: 11:b5:7d:cd:89:6f:42:0b:5f:b0:3e:27:0f:32:3c: 80:ba:49:b1:66:19:cc:75:66:c5:97:2b:5c:ff:d6: 42:37:34:06:ad:8e:9a:d3:e7:4d:20:9b:82:87:bc: 68:5d:57:27:f6:0f:d0:e8:1a:99:b4:cd:b0:f8:c6: 0a:72:0b:e7:4e:c3:61:22:77:f5:03:80:e8:ed:50: c3:9e:4f:16:e5:59:47:53:79:15:d8:6d:4c:8d:e9: d9:5b:f0:48:52:cc:b3:0f:69:ca:af:35:94:75:1c: 68:b0:87:b7:6f:65:91:25:33:ae:07:a8:84:89:a0: 6e:61:a7:9f:c4:3c:37:92:a2:f5:c6:30:29:a2:17: 5a:a0:d4:2e:5b:3f:4d:79:65:0e:18:cd:db:f0:cc: cf:7d:62:bf:de:b7:57:d6:91:88:5e:6c:38:f5:6a: ce:29:0a:f5:92:1b:ec:a9:fd:68:49:e4:93:0e:af: 9a:ad:3c:dc:c4:d0:5d:a4:34:17:00:4c:4c:d3:d3: 7e:1b:be:e8:1a:78:69:64:9e:bf:da:c0:37:6a:46: 44:c5:5a:22:47:09:85:80:63:f2:e1:ec:63:00:81: 09:48:ca:6e:f8:a8:48:21:4f:5e:04:5c:fc:73:91: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2607:9bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1c:9e:58:19:22:9c:75:a3:2e:e8:cb:5c:f4:d3:73:51:c3: ed:c4:3b:da:bf:4b:46:b0:ad:8f:c6:ed:44:64:d6:d3:13:70: ac:08:9e:88:77:15:da:fc:40:54:3c:1c:e4:f3:fa:e6:ad:f9: 0b:5f:3a:7f:72:55:52:1b:9d:2e:17:f2:39:9c:35:8d:1f:fc: c4:4e:fd:bd:59:d7:8c:00:af:54:54:c3:61:db:e0:4e:2c:f7: 5a:fc:3e:46:89:c2:c7:0c:36:b7:e4:0c:1c:2b:24:fa:68:7f: 7c:28:12:d6:6b:16:c8:39:aa:ec:27:be:43:2b:37:84:40:61: cb:13:54:f0:b2:09:e0:f5:66:40:8c:67:32:ab:dd:e2:95:6e: 05:39:fd:71:63:48:27:04:fc:3d:77:da:52:bd:df:59:22:64: d8:1c:ad:d3:10:94:25:66:bf:5b:f0:91:cc:fd:b2:74:55:e4: 6c:21:d1:2d:cf:a8:19:a6:5a:d4:49:25:05:28:f0:fc:2e:04: 8e:e6:24:94:66:86:22:51:1d:b1:de:81:e3:bd:70:11:c2:c2: 3a:3f:58:4f:49:48:ae:95:e3:f5:1d:f9:2b:6d:5f:ab:08:36: de:e7:24:16:75:9f:a0:32:d4:75:c9:a6:71:da:f6:8e:00:92: 61:12:83:f9 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE64P36vJgoXRzg2MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgwNDAwNDUxMVoXDTI4MTEwNjAxNDUxMVowLzEtMCsGA1UEAxMk ZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcxMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85vTu2DEBva8otIg9sRtX3NiW9CC1+wPicP MjyAukmxZhnMdWbFlytc/9ZCNzQGrY6a0+dNIJuCh7xoXVcn9g/Q6BqZtM2w+MYK cgvnTsNhInf1A4Do7VDDnk8W5VlHU3kV2G1MjenZW/BIUsyzD2nKrzWUdRxosIe3 b2WRJTOuB6iEiaBuYaefxDw3kqL1xjApohdaoNQuWz9NeWUOGM3b8MzPfWK/3rdX 1pGIXmw49WrOKQr1khvsqf1oSeSTDq+arTzcxNBdpDQXAExM09N+G77oGnhpZJ6/ 2sA3akZExVoiRwmFgGPy4exjAIEJSMpu+KhIIU9eBFz8c5HGQQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFK/8Oxx5eDE98/L+vk2kSyE6CF6lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k YmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RiZGE4ZWEyLWExNjgtNGE4Yi1i MDFiLTIxYTQyMWU3MTMwZS9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFl NzEzMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB5vAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIUcnlgZIpx1oy7oy1z0 03NRw+3EO9q/S0awrY/G7URk1tMTcKwInoh3Fdr8QFQ8HOTz+uat+QtfOn9yVVIb nS4X8jmcNY0f/MRO/b1Z14wAr1RUw2Hb4E4s91r8PkaJwscMNrfkDBwrJPpof3wo EtZrFsg5quwnvkMrN4RAYcsTVPCyCeD1ZkCMZzKr3eKVbgU5/XFjSCcE/D132lK9 31kiZNgcrdMQlCVmv1vwkcz9snRV5Gwh0S3PqBmmWtRJJQUo8PwuBI7mJJRmhiJR HbHegeO9cBHCwjo/WE9JSK6V4/Ud+SttX6sINt7nJBZ1n6Ay1HXJpnHa9o4AkmES g/k= -----END CERTIFICATE-----Generated at Thu Sep 10 21:03:19 2026 by rpki-client