$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e.cer File: f5248dde-d307-4c48-8e01-6ae16aba8b6e.cer (raw, json) Hash identifier: 3/eqPPiE2Tur6XaeFEN1muPsmaYZ0coCl6+j6W4+OnU= Subject key identifier: 4E:10:76:0D:13:45:E0:3E:CD:AD:2B:BF:91:D4:71:03:9C:20:4A:28 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584E3CF249AA59958BA005961C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/f5248dde-d307-4c48-8e01-6ae16aba8b6e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Jun 2026 20:45:11 +0000 Certificate not after: Fri 22 Sep 2028 20:45:11 +0000 Subordinate resources: AS: 36605 IP: 2602:f6c5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3c:f2:49:aa:59:95:8b:a0:05:96:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jun 20 20:45:11 2026 GMT Not After : Sep 22 20:45:11 2028 GMT Subject: CN=f5248dde-d307-4c48-8e01-6ae16aba8b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:d5:bd:9b:8b:68:49:83:40:c4:a3:c9:43: 2a:e3:3c:ca:ff:30:63:88:c5:aa:aa:9f:08:9c:8a: 6b:14:34:f3:02:70:07:f4:df:af:d0:eb:31:db:01: 9e:37:cf:8a:b6:0d:fe:97:c3:81:ca:3e:85:27:af: e4:c4:05:20:f2:25:15:6f:68:eb:f4:e0:fc:c2:dd: df:39:c3:7c:0f:9c:39:48:2d:e7:85:c9:53:43:69: 8a:12:4a:69:fb:99:8b:ab:72:5b:f4:31:a0:3b:5d: 92:8b:fd:d4:d9:99:24:62:2b:41:f2:cd:3f:af:c1: e6:7a:5b:f2:41:74:e1:9d:8f:d1:af:6c:81:23:b3: 58:f4:6a:35:81:5e:b1:23:55:5b:9f:d6:1e:51:ee: d0:b6:e8:92:33:90:fe:df:23:ee:95:0d:15:5a:45: a3:f1:19:02:3c:f1:b5:fd:7c:2b:72:72:b5:b2:64: 2a:40:16:66:dd:64:a5:ff:a1:de:82:e4:11:17:4b: 65:a7:7f:c1:ee:0c:1f:c9:83:99:7d:80:21:df:c5: 1b:6c:7c:05:d7:69:00:c3:f0:f0:02:a9:81:d2:a4: 4e:0e:fa:4f:88:6d:a6:1d:88:78:c3:85:34:d7:a0: 48:f3:19:41:77:be:e6:35:32:14:82:6f:d0:1f:95: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:10:76:0D:13:45:E0:3E:CD:AD:2B:BF:91:D4:71:03:9C:20:4A:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f5248dde-d307-4c48-8e01-6ae16aba8b6e/f5248dde-d307-4c48-8e01-6ae16aba8b6e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6c5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36605 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:55:97:dc:52:0b:4a:69:47:f8:09:ff:d1:d4:a9:43:44:45: c1:2d:2c:8e:c1:c2:26:0e:15:73:ce:f8:e6:f1:bc:47:7b:65: 76:f8:1c:47:37:5c:e7:94:e5:11:ed:6a:00:12:cf:79:60:17: a0:0d:7e:fd:ab:59:50:a4:9d:30:62:4e:43:5a:2a:2c:41:28: f5:d6:b0:7f:bf:db:02:58:42:14:82:92:2a:c4:e8:58:33:66: d0:36:1b:fc:c3:9b:86:2d:99:79:6c:8d:9e:ee:27:f0:15:82: c7:e4:b7:d7:02:b6:89:78:75:8b:cb:74:e9:d7:70:ee:1a:e1: 1f:d7:cc:00:a6:13:66:f3:31:ae:81:5f:fc:75:bf:dd:1a:26: 2a:d9:56:bd:67:18:c2:85:16:43:ca:3b:60:e0:eb:4d:8d:a8: ab:3b:89:d7:0a:87:43:34:5c:a4:ab:63:4b:ea:0e:bb:11:2b: 73:65:23:7c:72:92:36:43:24:d2:21:c5:c7:7b:4e:86:6a:cf: 50:23:86:3b:17:eb:be:6d:45:ad:d2:87:08:f6:6e:19:ec:ca: f6:99:eb:13:43:92:fa:e6:b8:9e:e0:12:e2:df:a5:6d:7e:75: 3e:73:34:9e:d6:5a:7c:45:12:c1:35:f8:3d:d9:55:84:1f:dc: 38:49:03:fd -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE488kmqWZWLoAWWHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDYyMDIwNDUxMVoXDTI4MDkyMjIwNDUxMVowLzEtMCsGA1UEAxMk ZjUyNDhkZGUtZDMwNy00YzQ4LThlMDEtNmFlMTZhYmE4YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqTVvZuLaEmDQMSjyUMq4zzK/zBjiMWqqp8I nIprFDTzAnAH9N+v0Osx2wGeN8+Ktg3+l8OByj6FJ6/kxAUg8iUVb2jr9OD8wt3f OcN8D5w5SC3nhclTQ2mKEkpp+5mLq3Jb9DGgO12Si/3U2ZkkYitB8s0/r8Hmelvy QXThnY/Rr2yBI7NY9Go1gV6xI1Vbn9YeUe7QtuiSM5D+3yPulQ0VWkWj8RkCPPG1 /XwrcnK1smQqQBZm3WSl/6HeguQRF0tlp3/B7gwfyYOZfYAh38UbbHwF12kAw/Dw AqmB0qRODvpPiG2mHYh4w4U016BI8xlBd77mNTIUgm/QH5XDUwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFE4Qdg0TReA+za0rv5HUcQOcIEooMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m NTI0OGRkZS1kMzA3LTRjNDgtOGUwMS02YWUxNmFiYThiNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y1MjQ4ZGRlLWQzMDctNGM0OC04 ZTAxLTZhZTE2YWJhOGI2ZS9mNTI0OGRkZS1kMzA3LTRjNDgtOGUwMS02YWUxNmFi YThiNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvbFADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAjv0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAjFWX3FILSmlH+An/0dSpQ0RFwS0sjsHCJg4Vc8745vG8 R3tldvgcRzdc55TlEe1qABLPeWAXoA1+/atZUKSdMGJOQ1oqLEEo9dawf7/bAlhC FIKSKsToWDNm0DYb/MObhi2ZeWyNnu4n8BWCx+S31wK2iXh1i8t06ddw7hrhH9fM AKYTZvMxroFf/HW/3RomKtlWvWcYwoUWQ8o7YODrTY2oqzuJ1wqHQzRcpKtjS+oO uxErc2UjfHKSNkMk0iHFx3tOhmrPUCOGOxfrvm1FrdKHCPZuGezK9pnrE0OS+ua4 nuAS4t+lbX51PnM0ntZafEUSwTX4PdlVhB/cOEkD/Q== -----END CERTIFICATE-----Generated at Thu Jul 9 19:12:17 2026 by rpki-client