$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508.cer File: df17821c-c81a-4f1b-baba-e8419dc81508.cer (raw, json) Hash identifier: RV0L4hjKBN3LmN0l/AmeyJ2E+MFbEdEtXkWYTOnnP8Q= Subject key identifier: EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DE4138F87F65F965D6EDA7FC8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 May 2026 00:45:17 +0000 Certificate not after: Tue 22 Aug 2028 00:45:17 +0000 Subordinate resources: IP: 2620:8b:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:13:8f:87:f6:5f:96:5d:6e:da:7f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: May 20 00:45:17 2026 GMT Not After : Aug 22 00:45:17 2028 GMT Subject: CN=df17821c-c81a-4f1b-baba-e8419dc81508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:d9:c9:b0:57:d9:8a:9c:45:1b:66:0e:95: 8b:53:7c:d4:0b:16:05:45:6c:03:fe:72:a8:8c:e7: 79:c0:23:50:b2:79:f4:da:63:1a:bc:9b:34:db:a8: c7:db:8f:99:e4:a3:47:9e:0e:be:f4:5c:98:63:44: 89:d3:90:2c:06:af:44:28:2e:e7:27:63:52:9d:e8: 96:19:c8:73:09:19:b5:ed:51:38:e2:30:2d:ae:5d: 98:e5:16:14:03:45:b4:c8:39:de:b5:a0:b9:e6:a3: f5:d0:71:70:5a:6b:c0:f8:83:a9:17:e3:8a:f7:3b: e4:69:d9:7d:f9:3b:70:4a:cd:7f:ec:23:8d:96:8e: ba:9b:4f:16:90:d2:d8:06:55:88:db:0a:11:9d:e1: 62:d8:dc:51:64:ba:a3:9c:e9:b5:63:46:1c:5c:09: 89:50:b5:99:fd:c0:a1:71:7e:20:6e:70:ca:2a:ba: c9:0c:6f:28:72:f0:a3:1d:be:26:56:c3:8b:52:4e: 0b:8d:88:45:31:2c:04:76:b6:31:f4:aa:3e:1a:ab: f5:4a:12:80:37:08:fc:74:22:7e:e7:d5:de:00:e1: 58:5e:85:e2:3f:c3:be:e6:b9:43:73:66:60:d1:70: a5:ec:f7:eb:0e:d5:0f:96:f5:bb:27:1f:40:d4:7f: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AB:21:25:66:CB:04:D9:BA:A3:E6:62:78:55:2B:B7:9A:E5:15:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df17821c-c81a-4f1b-baba-e8419dc81508/df17821c-c81a-4f1b-baba-e8419dc81508.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:8b:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e3:9d:04:26:fa:15:21:2b:cc:03:a3:c7:40:b5:4e:e1:ee: eb:02:51:f0:29:ad:75:be:d2:95:42:fe:35:6e:a0:e8:47:78: 51:d4:74:b0:77:67:47:9b:3b:7d:e0:41:f1:48:6f:43:35:d3: 1e:7a:37:33:b6:e5:84:1c:2f:a5:8a:15:cc:fe:e3:af:25:d9: 27:72:c7:2d:03:68:60:57:8d:c2:12:20:af:5e:70:36:6b:3b: bd:00:36:65:ba:7b:7a:d5:e6:0c:cc:50:27:c9:03:67:46:95: 28:70:45:54:46:af:8d:40:d8:06:dd:12:15:2c:30:5c:17:82: 5f:c4:61:64:60:2d:2c:ea:db:19:90:8f:f2:b8:2f:0c:f7:ef: 83:45:de:2d:b8:b4:5a:75:8c:91:93:cb:27:87:a1:ae:b7:ec: bb:5d:08:fd:f3:ca:42:92:09:b1:0d:dd:14:07:29:6d:96:58: 25:45:d6:be:ed:1e:84:9b:b2:9b:26:c6:a5:fa:d8:2e:87:2e: 0b:32:5e:dd:9b:0b:87:10:c8:0f:e4:65:e6:c1:bf:e9:ec:3c: 25:17:bb:04:2a:d7:5f:3e:d8:e4:bc:98:86:d8:c3:22:22:89: b5:1e:ae:0d:97:43:3d:32:d3:8f:6f:70:12:66:31:9d:6e:e9: 1f:a7:84:bc -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE3kE4+H9l+WXW7af8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDUyMDAwNDUxN1oXDTI4MDgyMjAwNDUxN1owLzEtMCsGA1UEAxMk ZGYxNzgyMWMtYzgxYS00ZjFiLWJhYmEtZTg0MTlkYzgxNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWPZybBX2YqcRRtmDpWLU3zUCxYFRWwD/nKo jOd5wCNQsnn02mMavJs026jH24+Z5KNHng6+9FyYY0SJ05AsBq9EKC7nJ2NSneiW GchzCRm17VE44jAtrl2Y5RYUA0W0yDnetaC55qP10HFwWmvA+IOpF+OK9zvkadl9 +TtwSs1/7CONlo66m08WkNLYBlWI2woRneFi2NxRZLqjnOm1Y0YcXAmJULWZ/cCh cX4gbnDKKrrJDG8ocvCjHb4mVsOLUk4LjYhFMSwEdrYx9Ko+Gqv1ShKANwj8dCJ+ 59XeAOFYXoXiP8O+5rlDc2Zg0XCl7PfrDtUPlvW7Jx9A1H8XiwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFOqrISVmywTZuqPmYnhVK7ea5RV5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k ZjE3ODIxYy1jODFhLTRmMWItYmFiYS1lODQxOWRjODE1MDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2RmMTc4MjFjLWM4MWEtNGYxYi1i YWJhLWU4NDE5ZGM4MTUwOC9kZjE3ODIxYy1jODFhLTRmMWItYmFiYS1lODQxOWRj ODE1MDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACLgAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb+OdBCb6FSErzAOj x0C1TuHu6wJR8Cmtdb7SlUL+NW6g6Ed4UdR0sHdnR5s7feBB8UhvQzXTHno3M7bl hBwvpYoVzP7jryXZJ3LHLQNoYFeNwhIgr15wNms7vQA2Zbp7etXmDMxQJ8kDZ0aV KHBFVEavjUDYBt0SFSwwXBeCX8RhZGAtLOrbGZCP8rgvDPfvg0XeLbi0WnWMkZPL J4ehrrfsu10I/fPKQpIJsQ3dFAcpbZZYJUXWvu0ehJuymybGpfrYLocuCzJe3ZsL hxDID+Rl5sG/6ew8JRe7BCrXXz7Y5LyYhtjDIiKJtR6uDZdDPTLTj29wEmYxnW7p H6eEvA== -----END CERTIFICATE-----Generated at Mon May 25 04:26:00 2026 by rpki-client