$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer File: 6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer (raw, json) Hash identifier: wcWzaeKpLWrrwhTlunriNx11FHv0NcfROLjV8MNyMdA= Subject key identifier: B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D7302DAFC97F24555BBFFDCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Apr 2026 12:45:17 +0000 Certificate not after: Wed 12 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 2600:f000::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:02:da:fc:97:f2:45:55:bb:ff:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 9 12:45:17 2026 GMT Not After : Jul 12 12:45:17 2028 GMT Subject: CN=6a9537a8-a685-4b48-9fa8-8362e4fc47ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:e8:93:0c:18:d7:c5:b2:d8:9d:d5:c4:15: 4f:02:d4:7a:2e:84:f2:84:c6:87:af:17:e9:40:39: f4:4f:04:25:be:35:26:dd:23:20:b2:0a:c8:ce:0f: d4:14:40:e5:2a:e8:b7:a4:3e:03:f4:de:24:4d:30: 5e:66:e8:44:74:b9:f2:2d:58:1a:85:3c:f9:31:66: 24:ca:9a:6e:c3:18:5f:24:7e:ba:9c:ae:6e:af:23: 5f:b7:c0:d2:8b:51:5d:07:ce:0c:1b:ce:a1:5b:9e: 8f:4c:fe:dc:51:f0:ed:59:7d:bd:b6:f2:66:3e:97: b3:74:02:78:7f:65:2a:1b:36:72:e0:14:c5:d6:89: 07:94:c1:9e:9d:76:16:59:31:3f:57:55:3c:d6:37: e2:da:bd:bc:4b:31:48:f5:47:1a:1f:60:1f:2d:f9: 06:18:eb:4c:9a:82:bb:a9:bc:02:b5:5b:48:04:50: c3:df:9f:8e:60:20:5c:a3:62:63:11:97:fc:0d:3d: 74:05:c0:97:94:2d:0b:9f:2e:14:b9:e8:ee:9c:11: 7b:fe:8a:86:00:1f:37:dd:7b:5d:17:42:dc:96:00: 31:e8:ac:2b:e5:25:99:b1:76:46:93:55:a2:09:28: 57:b4:7f:9f:d3:28:b8:64:7f:66:84:f4:6e:8f:2f: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2600:f000::/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c8:19:6b:90:b1:6f:d1:9c:e6:8f:b3:b9:0b:ce:81:03:58: 15:01:a9:65:e8:03:c6:11:5d:7e:95:bb:69:d5:5f:d5:24:5a: 9d:8b:f7:e3:58:d5:0b:c1:f1:f8:fe:51:21:0d:3b:07:03:e4: 65:e4:1f:9a:f1:20:47:26:5e:5c:ee:38:86:15:d6:e2:01:59: e5:d6:62:3f:d0:78:1d:06:1b:66:a7:1f:ce:fd:22:5f:5f:fa: 70:14:d4:1f:8b:24:b2:32:ff:9a:da:72:c9:5c:0b:20:0d:0d: fd:0b:09:a4:99:d1:0b:05:04:8a:43:4a:b1:4b:db:d6:1a:0c: 9c:5b:f1:a6:52:c9:79:f7:62:5e:a7:37:f9:8a:af:d3:f5:99: da:a8:63:87:3f:4b:da:a3:1a:ac:af:81:92:4d:f7:e2:dd:a6: 42:68:69:8f:02:7b:f8:e0:31:13:2d:ca:69:ee:ea:4e:fa:79: a8:8d:55:a2:65:df:32:30:9f:cb:21:ba:57:d8:47:98:43:fb: 00:05:fe:d4:08:8e:9e:09:e8:32:a8:1c:75:91:0a:e2:ea:99: 0e:04:78:a4:b7:25:00:b3:1e:04:2b:8d:29:77:6b:c1:7b:01: 1e:0a:60:2f:19:08:c1:45:50:11:61:74:62:20:c1:2b:31:7f: ed:97:37:2c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1zAtr8l/JFVbv/3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDQwOTEyNDUxN1oXDTI4MDcxMjEyNDUxN1owLzEtMCsGA1UEAxMk NmE5NTM3YTgtYTY4NS00YjQ4LTlmYTgtODM2MmU0ZmM0N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1fokwwY18Wy2J3VxBVPAtR6LoTyhMaHrxfp QDn0TwQlvjUm3SMgsgrIzg/UFEDlKui3pD4D9N4kTTBeZuhEdLnyLVgahTz5MWYk yppuwxhfJH66nK5uryNft8DSi1FdB84MG86hW56PTP7cUfDtWX29tvJmPpezdAJ4 f2UqGzZy4BTF1okHlMGenXYWWTE/V1U81jfi2r28SzFI9UcaH2AfLfkGGOtMmoK7 qbwCtVtIBFDD35+OYCBco2JjEZf8DT10BcCXlC0Lny4UuejunBF7/oqGAB833Xtd F0LclgAx6Kwr5SWZsXZGk1WiCShXtH+f0yi4ZH9mhPRujy+KiQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLFzbuIFK63UfgEqJcxEfo8mC7FEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 YTk1MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZhOTUzN2E4LWE2ODUtNGI0OC05 ZmE4LTgzNjJlNGZjNDdhZS82YTk1MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYyZTRm YzQ3YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgACMAYDBAAmAPAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS8gZa5Cxb9Gc5o+zuQvO gQNYFQGpZegDxhFdfpW7adVf1SRanYv341jVC8Hx+P5RIQ07BwPkZeQfmvEgRyZe XO44hhXW4gFZ5dZiP9B4HQYbZqcfzv0iX1/6cBTUH4sksjL/mtpyyVwLIA0N/QsJ pJnRCwUEikNKsUvb1hoMnFvxplLJefdiXqc3+Yqv0/WZ2qhjhz9L2qMarK+Bkk33 4t2mQmhpjwJ7+OAxEy3Kae7qTvp5qI1VomXfMjCfyyG6V9hHmEP7AAX+1AiOngno MqgcdZEK4uqZDgR4pLclALMeBCuNKXdrwXsBHgpgLxkIwUVQEWF0YiDBKzF/7Zc3 LA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:37:21 2026 by rpki-client