$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer File: 9bfe0eb0-0689-4c02-9a46-078ee028d631.cer (raw, json) Hash identifier: WUqqgyJRTbzdwqcgyVOXjw03bGbpg5eR05bIIs/n6eI= Subject key identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DA3DDD2E238A8D83B3FF0CF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Apr 2026 00:45:17 +0000 Certificate not after: Sun 30 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 2607:fe78::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:dd:d2:e2:38:a8:d8:3b:3f:f0:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 27 00:45:17 2026 GMT Not After : Jul 30 00:45:17 2028 GMT Subject: CN=9bfe0eb0-0689-4c02-9a46-078ee028d631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:a8:e9:d7:5e:26:a1:2e:cf:50:5f:c5:e0: 03:f6:52:f8:59:80:c2:89:43:18:dc:ad:1b:d7:d0: a2:31:9e:3f:82:66:51:21:2c:2c:72:c6:43:2e:87: ef:ca:1a:6b:78:bd:34:fc:42:cd:12:6b:3f:79:16: e1:f4:fe:74:bc:ef:6e:53:ed:2c:0f:f2:58:1a:6c: d7:dd:c9:a5:50:07:2f:6d:df:11:c9:1e:77:88:24: 82:41:3a:61:0f:e4:97:6b:5a:c5:fe:07:52:e7:36: 38:a8:d3:81:f2:7c:be:54:83:71:7f:b3:e5:31:35: 91:ab:0f:bc:15:2c:59:34:53:ff:7f:37:71:c1:48: 92:d1:bc:c2:1f:7e:72:9f:c4:57:e5:c7:4c:5e:90: 4e:89:ea:47:15:28:fe:18:98:dd:42:57:82:47:ac: 67:40:97:97:56:5e:47:5d:ae:80:05:aa:c9:01:15: e0:9b:27:a1:43:d5:2e:3e:9a:b7:6d:1b:40:44:d9: dd:d2:c2:2b:b5:69:1b:8b:1e:3e:be:98:2d:e7:29: 99:86:a6:25:b3:ff:33:31:b1:cc:35:cb:dd:f5:29: 14:52:ab:07:40:de:3e:9e:e5:95:de:9d:23:1b:d0: 0c:16:7e:ad:72:8b:83:5e:bf:f1:7c:66:63:fe:34: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2607:fe78::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:63:5e:f6:3e:a9:86:c7:9b:66:64:3f:18:0e:ff:80:d1:33: 66:1f:70:84:95:60:a5:ac:a3:0f:1a:8b:d3:b7:67:88:4b:ca: 1b:27:08:76:80:9c:38:d1:dc:61:c2:26:f3:e9:ea:d7:33:d3: a3:a6:7e:e9:90:85:c5:08:13:76:bb:d4:e3:8c:44:f3:8d:e4: 5b:d3:5c:32:fa:a3:2b:c3:c8:0a:47:33:89:4e:d4:70:6e:f2: f7:db:e5:f5:aa:68:87:df:89:73:62:51:c6:a7:58:b8:c8:a8: c7:a3:e2:91:93:1f:61:75:3e:67:ba:86:85:8b:82:5d:fe:51: d4:af:63:3c:cc:60:0b:c5:66:6a:33:28:8c:0c:3c:bb:96:0d: 3d:c2:f6:87:4e:02:2a:f2:68:ee:20:ab:b5:8a:29:ee:11:bd: ca:2d:fd:53:d3:a2:d8:44:07:39:d3:c8:ce:5f:f7:29:9a:c5: ef:d9:25:68:2d:d7:3b:4f:e4:7c:22:e3:20:04:12:b0:e3:c4: 4c:a2:d1:da:65:d6:fa:fa:30:9d:d7:bd:2e:64:ef:31:8a:cd: 0c:00:0f:46:c1:17:0c:ac:2d:99:96:22:5f:da:a7:5e:e5:c6: 79:fa:27:ac:82:c4:fe:e1:86:b4:9b:f4:11:5c:6a:4f:21:6a: bb:43:8f:db -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE2j3dLiOKjYOz/wz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDQyNzAwNDUxN1oXDTI4MDczMDAwNDUxN1owLzEtMCsGA1UEAxMk OWJmZTBlYjAtMDY4OS00YzAyLTlhNDYtMDc4ZWUwMjhkNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyWo6ddeJqEuz1BfxeAD9lL4WYDCiUMY3K0b 19CiMZ4/gmZRISwscsZDLofvyhpreL00/ELNEms/eRbh9P50vO9uU+0sD/JYGmzX 3cmlUAcvbd8RyR53iCSCQTphD+SXa1rF/gdS5zY4qNOB8ny+VINxf7PlMTWRqw+8 FSxZNFP/fzdxwUiS0bzCH35yn8RX5cdMXpBOiepHFSj+GJjdQleCR6xnQJeXVl5H Xa6ABarJARXgmyehQ9UuPpq3bRtARNnd0sIrtWkbix4+vpgt5ymZhqYls/8zMbHM Ncvd9SkUUqsHQN4+nuWV3p0jG9AMFn6tcouDXr/xfGZj/jQi3wIDAQABo4IEADCC A/wwHQYDVR0OBBYEFBdi+wRoCZLf8a8Dj4HZI5ixKyWtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 YmZlMGViMC0wNjg5LTRjMDItOWE0Ni0wNzhlZTAyOGQ2MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzliZmUwZWIwLTA2ODktNGMwMi05 YTQ2LTA3OGVlMDI4ZDYzMS85YmZlMGViMC0wNjg5LTRjMDItOWE0Ni0wNzhlZTAy OGQ2MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB/54MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGxjXvY+qYbHm2ZkPxgO /4DRM2YfcISVYKWsow8ai9O3Z4hLyhsnCHaAnDjR3GHCJvPp6tcz06OmfumQhcUI E3a71OOMRPON5FvTXDL6oyvDyApHM4lO1HBu8vfb5fWqaIffiXNiUcanWLjIqMej 4pGTH2F1Pme6hoWLgl3+UdSvYzzMYAvFZmozKIwMPLuWDT3C9odOAiryaO4gq7WK Ke4Rvcot/VPTothEBznTyM5f9ymaxe/ZJWgt1ztP5Hwi4yAEErDjxEyi0dpl1vr6 MJ3XvS5k7zGKzQwAD0bBFwysLZmWIl/ap17lxnn6J6yCxP7hhrSb9BFcak8hartD j9s= -----END CERTIFICATE-----Generated at Wed Apr 29 17:51:46 2026 by rpki-client