$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer File: eb3726d7-0f8c-4949-99b6-eecda94a0675.cer (raw, json) Hash identifier: XMDUsYT0kp0/5EvT7M1PzKu7t2fXI72jxaqiTCWqVn8= Subject key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E0681F292EB1D2A538386E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jun 2026 08:45:11 +0000 Certificate not after: Sun 03 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 2620:117:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:06:81:f2:92:eb:1d:2a:53:83:86:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 1 08:45:11 2026 GMT Not After : Sep 3 08:45:11 2028 GMT Subject: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:61:bc:fd:13:f8:0d:cd:fa:03:03:03:7f: e4:e6:60:8b:d3:b8:94:c5:81:71:c8:32:5e:4d:db: 85:30:32:2c:c7:c2:e6:e6:40:ed:13:23:f8:8b:9f: 7e:f8:ab:ab:48:43:29:79:09:38:c0:31:60:e8:6b: e2:0e:9e:7d:36:41:92:74:7e:d0:25:b9:6c:24:e0: 62:c3:31:72:7a:ec:1e:ce:2b:29:55:41:de:31:fa: 29:d8:95:8a:b5:3b:52:4d:9a:94:6e:13:67:f7:3c: ef:07:97:d9:67:63:b5:2a:dd:c8:eb:a8:c8:0a:52: 74:28:4f:82:ee:75:25:42:77:c5:1c:c6:2b:33:8e: 36:e8:8b:ec:e7:4a:db:f8:30:28:ba:a1:51:ff:10: 5e:7f:f4:ba:a7:9c:08:e6:30:77:85:5a:90:36:4d: 49:cf:bb:0c:8e:e8:1a:f3:bf:ef:43:cb:d2:b3:b6: b3:78:b2:dd:ce:ba:94:12:17:82:f0:9e:5e:1c:2b: 13:68:fb:89:8c:07:a3:d9:9b:cd:73:79:49:94:5a: 8f:72:46:4c:40:e6:6f:59:94:3b:1c:f0:69:59:5a: a2:ba:eb:7a:a4:2f:5e:8c:bc:81:6c:82:6f:40:5a: fa:a7:13:ef:b2:da:3b:17:d2:e4:c0:67:3f:c9:05: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ab:3b:56:de:58:51:43:92:51:41:ed:a3:9b:c7:f9:39:8c: ad:25:d6:f6:b6:1b:73:99:12:ea:c6:d1:92:a6:15:8d:c6:00: 5d:a5:ea:94:e2:f8:5d:4b:1d:1b:5b:6e:e3:62:3c:26:40:b7: 8d:5e:1f:36:bc:66:dc:fd:ca:23:5e:88:6c:ca:ef:14:19:1c: 6f:ac:37:95:67:9a:cc:19:4d:16:6b:62:26:45:91:85:11:68: dd:f4:00:09:80:44:15:d7:98:9a:a1:9e:03:00:a8:84:b2:97: e9:57:a1:2b:05:8b:2e:52:69:60:f0:de:4c:84:cf:3a:ec:e6: 30:1e:59:55:67:24:51:df:51:3f:ab:86:6f:40:9b:3a:a8:c0: 0b:0a:a2:be:96:65:39:81:2c:78:31:05:f5:bd:53:20:94:aa: c5:bc:64:3e:21:c0:d0:68:96:77:64:66:a5:ea:e1:d6:8e:f8: 3d:ad:a9:37:d3:07:e6:29:d4:30:ba:38:62:2b:66:e1:a9:5e: c0:0e:e9:27:af:13:45:c7:2f:07:d6:06:6c:9e:1a:22:fb:b2: cc:14:cf:ef:0f:c6:38:5e:84:be:b0:ba:4d:86:6d:a6:12:40: b9:1f:02:b6:33:82:1f:b8:d3:69:46:a2:41:fc:ab:26:ed:5c: 4a:0e:15:59 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE4GgfKS6x0qU4OG4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYwMTA4NDUxMVoXDTI4MDkwMzA4NDUxMVowLzEtMCsGA1UEAxMk ZWIzNzI2ZDctMGY4Yy00OTQ5LTk5YjYtZWVjZGE5NGEwNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktRhvP0T+A3N+gMDA3/k5mCL07iUxYFxyDJe TduFMDIsx8Lm5kDtEyP4i59++KurSEMpeQk4wDFg6GviDp59NkGSdH7QJblsJOBi wzFyeuwezispVUHeMfop2JWKtTtSTZqUbhNn9zzvB5fZZ2O1Kt3I66jIClJ0KE+C 7nUlQnfFHMYrM4426Ivs50rb+DAouqFR/xBef/S6p5wI5jB3hVqQNk1Jz7sMjuga 87/vQ8vSs7azeLLdzrqUEheC8J5eHCsTaPuJjAej2ZvNc3lJlFqPckZMQOZvWZQ7 HPBpWVqiuut6pC9ejLyBbIJvQFr6pxPvsto7F9LkwGc/yQUGDwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFJ7wjUSnpib0qReBXuomV/zYAInhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l YjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0YTA2NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ViMzcyNmQ3LTBmOGMtNDk0OS05 OWI2LWVlY2RhOTRhMDY3NS9lYjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0 YTA2NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAEXIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvqztW3lhRQ5JRQe2j m8f5OYytJdb2thtzmRLqxtGSphWNxgBdpeqU4vhdSx0bW27jYjwmQLeNXh82vGbc /cojXohsyu8UGRxvrDeVZ5rMGU0Wa2ImRZGFEWjd9AAJgEQV15iaoZ4DAKiEspfp V6ErBYsuUmlg8N5MhM867OYwHllVZyRR31E/q4ZvQJs6qMALCqK+lmU5gSx4MQX1 vVMglKrFvGQ+IcDQaJZ3ZGal6uHWjvg9rak30wfmKdQwujhiK2bhqV7ADuknrxNF xy8H1gZsnhoi+7LMFM/vD8Y4XoS+sLpNhm2mEkC5HwK2M4IfuNNpRqJB/Ksm7VxK DhVZ -----END CERTIFICATE-----Generated at Sat Jun 13 09:49:27 2026 by rpki-client