$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer File: f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer (raw, json) Hash identifier: 3t2wncxmsqHZueQEJrLrv9iXDlyWMNrOyG3z+mOH0ok= Subject key identifier: DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E9EA83966E5DDB4E15CB31A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jul 2026 20:45:11 +0000 Certificate not after: Fri 27 Oct 2028 20:45:11 +0000 Subordinate resources: IP: 2602:810:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:a8:39:66:e5:dd:b4:e1:5c:b3:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 25 20:45:11 2026 GMT Not After : Oct 27 20:45:11 2028 GMT Subject: CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:3b:53:2e:c9:02:c1:ab:75:aa:cc:20:a8: b3:70:eb:c1:dd:c4:e3:7c:09:d2:91:d9:b5:01:4f: fa:fb:4f:8e:c5:b3:77:29:e0:7d:47:bb:c9:2f:c3: 2d:6d:25:e5:77:77:6c:e7:09:0d:18:25:eb:42:2b: 2a:78:d1:36:f3:cc:db:be:96:86:13:1b:76:6c:66: cd:ce:32:96:0e:76:f4:a3:17:17:c1:39:c0:0a:f6: 9a:90:b6:64:a6:2a:7b:cb:13:e1:5c:f6:96:77:c8: 0f:f4:56:62:7a:43:b2:33:63:22:38:42:a5:47:ce: 86:c8:b3:3e:82:0e:81:de:51:2e:a7:b5:2b:ae:c9: cc:57:f3:cd:8f:f9:5c:7e:06:78:86:fc:5e:6c:82: 1b:51:b6:b5:0b:4b:13:a2:c3:1c:6a:0d:ce:ba:3d: f2:3c:cc:23:06:3b:89:64:74:59:34:94:7a:de:e3: 16:a0:d9:a3:26:d6:a4:46:48:75:1e:0b:d6:11:35: 52:ad:43:79:e8:fc:76:83:13:4c:15:10:26:ef:8b: ee:37:0b:85:ca:95:f0:89:06:41:65:45:a2:55:61: d9:63:e7:c2:f3:cc:49:84:c3:65:32:af:4e:f5:ef: aa:ee:fb:c7:6f:b6:0b:44:35:4a:d1:24:7f:b8:c4: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:4000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0d:73:82:d3:d7:e0:0e:81:f0:90:55:c8:56:bc:11:f0:ee: cc:2a:b7:b8:68:c9:e9:b5:93:52:ed:28:09:45:2b:4e:55:c8: 4a:0b:04:d2:f6:3f:c3:a7:78:a4:ac:d8:f8:89:87:59:f8:e8: 1e:a1:ac:3f:f0:5e:59:78:be:b7:40:cb:6e:bb:0b:46:53:6f: 91:6c:92:7d:33:2d:d7:9b:f3:6f:b3:b2:d4:cf:66:8a:4d:cd: e5:f5:5e:86:f6:3e:64:c0:e0:2a:cb:86:6a:4f:6d:00:58:89: ef:ad:1a:7f:ce:f5:02:96:0c:f9:55:61:f6:05:23:c4:ab:f7: 92:5c:a6:1b:09:6f:cc:7c:dd:56:aa:a8:ee:e0:92:ee:34:de: 96:2b:e0:6b:2f:65:8d:b5:a5:09:0a:0f:55:3b:13:b7:44:f8: d0:4f:a2:82:c1:da:d3:aa:b9:26:a5:4a:1f:97:99:1b:fe:45: 91:ef:8e:89:2f:2f:b2:fe:53:c7:9b:ff:bf:46:04:7a:b2:1b: 03:0e:79:62:46:b3:ed:e8:fa:49:f1:88:63:d7:cc:9e:56:1a: 55:fc:e0:55:dc:ef:24:13:10:d8:f7:6b:b1:8a:1d:8c:be:84: f4:fb:e9:b7:2a:43:a9:61:5e:8d:84:5d:a0:73:a6:c3:d1:19: 1e:7d:43:77 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE6eqDlm5d204VyzGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcyNTIwNDUxMVoXDTI4MTAyNzIwNDUxMVowLzEtMCsGA1UEAxMk ZjJjYzFjM2ItZDE0NC00MzUwLThlNDItOWFmNDYyN2MxY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRE7Uy7JAsGrdarMIKizcOvB3cTjfAnSkdm1 AU/6+0+OxbN3KeB9R7vJL8MtbSXld3ds5wkNGCXrQisqeNE288zbvpaGExt2bGbN zjKWDnb0oxcXwTnACvaakLZkpip7yxPhXPaWd8gP9FZiekOyM2MiOEKlR86GyLM+ gg6B3lEup7UrrsnMV/PNj/lcfgZ4hvxebIIbUba1C0sTosMcag3Ouj3yPMwjBjuJ ZHRZNJR63uMWoNmjJtakRkh1HgvWETVSrUN56Px2gxNMFRAm74vuNwuFypXwiQZB ZUWiVWHZY+fC88xJhMNlMq9O9e+q7vvHb7YLRDVK0SR/uMTJfQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFN2YypYRgeocN5dd2Z8BKkxn5gaTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m MmNjMWMzYi1kMTQ0LTQzNTAtOGU0Mi05YWY0NjI3YzFjZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2YyY2MxYzNiLWQxNDQtNDM1MC04 ZTQyLTlhZjQ2MjdjMWNkZi9mMmNjMWMzYi1kMTQ0LTQzNTAtOGU0Mi05YWY0NjI3 YzFjZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggQQAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANA1zgtPX4A6B8JBV yFa8EfDuzCq3uGjJ6bWTUu0oCUUrTlXISgsE0vY/w6d4pKzY+ImHWfjoHqGsP/Be WXi+t0DLbrsLRlNvkWySfTMt15vzb7Oy1M9mik3N5fVehvY+ZMDgKsuGak9tAFiJ 760af871ApYM+VVh9gUjxKv3klymGwlvzHzdVqqo7uCS7jTelivgay9ljbWlCQoP VTsTt0T40E+igsHa06q5JqVKH5eZG/5Fke+OiS8vsv5Tx5v/v0YEerIbAw55Ykaz 7ej6SfGIY9fMnlYaVfzgVdzvJBMQ2PdrsYodjL6E9PvptypDqWFejYRdoHOmw9EZ Hn1Ddw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:57:27 2026 by rpki-client