$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer (raw, json) Hash identifier: rMSbRlyBWH4mrcyuVqrQH5469xYa1ZTmKg1URkHSwII= Subject key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E3FBCF89762E2754A33E5A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Jun 2026 20:45:11 +0000 Certificate not after: Sat 23 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 25968 IP: 2620:7b::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:bc:f8:97:62:e2:75:4a:33:e5:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 21 20:45:11 2026 GMT Not After : Sep 23 20:45:11 2028 GMT Subject: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:32:58:f5:99:3b:e4:24:0b:f5:e3:3a:e5: 79:39:4c:e7:02:2f:f6:af:c8:2e:d4:cf:37:f7:19: 46:a5:c8:f5:a9:b3:70:3b:85:f4:fc:23:a8:23:95: 0a:48:8c:ed:ec:da:71:3f:bf:f7:41:84:0c:4e:57: 70:61:a5:74:e8:39:32:f9:a0:b4:88:b3:ce:bb:67: f8:79:a3:0d:58:a5:f9:f0:26:e4:40:5e:a6:bd:38: b5:a0:1a:d8:37:34:93:c1:f3:fc:11:80:27:97:3a: a6:ff:b9:82:c6:0f:9d:23:9b:79:92:7d:a9:28:d8: 07:89:7e:4a:24:0e:16:3c:19:5a:c5:6f:67:97:77: 70:73:7f:26:01:d2:cd:9c:5c:9c:6a:09:b4:1d:64: a1:9f:03:c0:b7:c6:b2:8e:37:2c:d1:6e:83:56:71: 48:e1:cd:de:da:86:d3:a5:85:7a:7d:db:ed:bd:c2: 0c:e8:08:93:a5:84:9b:e1:44:cc:08:47:9f:bd:36: 31:95:64:21:10:fb:5a:8d:b6:92:3a:fe:3d:19:a7: ab:81:01:54:85:7b:ae:77:ff:94:2c:40:86:5c:c3: 95:5b:9e:2b:f6:3d:05:e7:63:8f:f8:31:b1:5d:ea: 4d:10:0d:66:57:6b:b4:1f:fa:08:68:e9:d4:f1:1a: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:7b::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25968 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6f:f9:70:84:31:57:71:fe:2e:75:e0:db:c0:4b:90:02:c6: 84:05:ac:f5:a6:3a:8a:d0:9f:7d:f3:9f:3b:3a:56:c0:c9:b1: a8:11:aa:66:5f:28:cd:9e:70:68:70:cd:1d:8c:93:b7:94:22: 81:6e:d4:2e:c2:0b:e8:fc:ce:ca:6f:bf:e5:a0:10:c2:b4:af: dc:e4:80:39:00:81:e5:89:92:d5:51:db:8e:bb:a1:95:58:e1: 67:2a:2c:05:2a:21:fe:f7:0d:cf:7d:ac:fd:df:03:14:25:6e: 51:c2:17:bc:ea:be:86:e0:94:09:51:38:8d:59:42:d1:83:3f: 5c:a8:f9:50:7b:43:d4:d3:2c:6d:ea:69:5f:e5:49:f8:05:73: 83:36:2d:1c:dc:04:46:c5:be:43:91:39:c9:dc:9a:e2:a9:93: d0:eb:9c:23:86:aa:92:10:a6:44:9f:4f:cc:fb:d2:0c:df:98: aa:7b:67:fb:4e:ff:45:2f:99:95:ac:3c:0f:7b:49:22:5f:ba: 80:39:5c:3f:c7:97:58:d1:3a:4c:0a:9a:12:37:fb:84:88:d6: 01:a2:36:71:35:43:72:1c:97:b6:11:82:9c:af:72:46:9e:45: 02:9f:4b:48:e3:d6:81:54:5f:62:c9:83:b3:c7:3a:3c:02:4d: 8c:ec:4c:8c -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE4/vPiXYuJ1SjPloAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYyMTIwNDUxMVoXDTI4MDkyMzIwNDUxMVowLzEtMCsGA1UEAxMk MzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4AyWPWZO+QkC/XjOuV5OUznAi/2r8gu1M83 9xlGpcj1qbNwO4X0/COoI5UKSIzt7NpxP7/3QYQMTldwYaV06Dky+aC0iLPOu2f4 eaMNWKX58CbkQF6mvTi1oBrYNzSTwfP8EYAnlzqm/7mCxg+dI5t5kn2pKNgHiX5K JA4WPBlaxW9nl3dwc38mAdLNnFycagm0HWShnwPAt8ayjjcs0W6DVnFI4c3e2obT pYV6fdvtvcIM6AiTpYSb4UTMCEefvTYxlWQhEPtajbaSOv49GaergQFUhXuud/+U LECGXMOVW54r9j0F52OP+DGxXepNEA1mV2u0H/oIaOnU8RqNEwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFBGE8jMduyUp9TE6aLmPGf8CCu9WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z Mjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMyNzhlNzA4LWQxMjgtNDc5MC1h OGUzLTFlMGY0YTFhNmY0YS8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGEx YTZmNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAB7AAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICZXAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAeW/5cIQxV3H+LnXg28BLkALGhAWs9aY6itCfffOfOzpW wMmxqBGqZl8ozZ5waHDNHYyTt5QigW7ULsIL6PzOym+/5aAQwrSv3OSAOQCB5YmS 1VHbjruhlVjhZyosBSoh/vcNz32s/d8DFCVuUcIXvOq+huCUCVE4jVlC0YM/XKj5 UHtD1NMsbeppX+VJ+AVzgzYtHNwERsW+Q5E5ydya4qmT0OucI4aqkhCmRJ9PzPvS DN+Yqntn+07/RS+Zlaw8D3tJIl+6gDlcP8eXWNE6TAqaEjf7hIjWAaI2cTVDchyX thGCnK9yRp5FAp9LSOPWgVRfYsmDs8c6PAJNjOxMjA== -----END CERTIFICATE-----Generated at Thu Jul 9 19:14:35 2026 by rpki-client