$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer File: 3e5a4c55-417a-4d58-b604-09c3cc10a5ef.cer (raw, json) Hash identifier: KpsaLBeseCgR3cQkyn6xzXygVyflZPSAihzBc9xQuZM= Subject key identifier: A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D5718037E17791E70EB933680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Mar 2026 12:45:17 +0000 Certificate not after: Sun 02 Jul 2028 12:45:17 +0000 Subordinate resources: IP: 2607:6a40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:18:03:7e:17:79:1e:70:eb:93:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 30 12:45:17 2026 GMT Not After : Jul 2 12:45:17 2028 GMT Subject: CN=3e5a4c55-417a-4d58-b604-09c3cc10a5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:93:96:92:59:b8:ed:da:75:a8:66:e3:34:6f: 96:f3:19:fb:b6:76:ef:2e:68:ae:dc:1f:3e:c4:2d: 52:15:b7:7f:2a:bc:5c:70:bf:11:52:c1:9d:04:38: 03:10:9c:d8:43:79:b0:fe:61:b1:c0:fa:4b:59:74: 7b:68:e4:a4:c7:ac:f5:d1:5b:8a:a2:98:2f:48:b3: 3a:2d:50:6d:40:32:93:4a:4b:47:55:31:b7:e7:74: 62:66:68:c3:e8:a4:d8:0b:05:a9:da:9f:34:1c:29: c1:33:ef:cd:60:45:59:c9:cb:c4:bd:d2:37:24:b3: 3b:14:1f:55:d6:c9:3a:c0:49:aa:62:d1:d2:f3:1e: bb:d3:46:bc:d4:94:3a:b3:31:7d:c8:cc:76:37:75: 35:44:dc:2f:ec:4a:15:d8:8d:92:dc:95:84:cf:1f: 31:29:33:6e:47:bf:ec:79:34:85:39:f2:12:75:ad: bd:5c:cd:86:6b:c8:a4:a9:e0:7d:0a:8b:78:f8:01: 5f:c5:2e:e7:f9:20:a3:4c:26:18:57:fa:d2:79:d3: fa:e2:d7:14:58:a0:f5:42:c8:30:5c:e6:5e:6d:cd: 3e:cd:26:a6:6a:f1:0b:07:59:a1:eb:01:05:2c:89: 1b:63:6d:25:04:14:92:15:e4:97:a2:c7:4a:e1:75: 26:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:0B:36:A4:C1:EA:2D:86:7F:C4:88:88:08:44:45:FC:2C:32:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3e5a4c55-417a-4d58-b604-09c3cc10a5ef/3e5a4c55-417a-4d58-b604-09c3cc10a5ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2607:6a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:74:9c:b8:0e:e5:86:6e:c6:05:e7:06:f9:f7:95:76:05:be: a8:7b:f0:f9:31:54:e0:da:8b:39:07:de:ed:fc:e7:f5:26:c1: 0e:4d:7c:46:f0:9d:90:9b:4a:4d:7c:a9:f2:33:2b:7e:e9:84: 71:9b:12:2d:8e:d4:ba:41:b2:4e:18:99:02:b3:dd:5d:75:34: 55:cb:a0:e5:13:20:a1:34:3d:c9:0b:1b:fc:93:b5:6d:4d:49: b0:5b:14:24:1e:80:8d:d0:cb:95:04:4c:6f:5d:f5:ac:05:8f: 04:a8:61:02:3e:fa:34:89:ac:24:f1:f2:eb:f9:25:85:14:97: 7f:be:3c:a2:18:3e:92:f6:b4:d2:cb:36:d7:fc:ae:53:82:08: b4:82:ff:49:98:74:10:d9:a4:1c:e2:31:f7:b2:1d:97:a1:2c: 6e:c0:20:d3:a9:d3:88:15:9e:e1:91:38:7d:82:ae:14:2a:52: d9:62:c0:d2:00:74:16:e6:ec:0d:ae:5b:91:ef:1a:4b:42:92: 83:de:ee:e2:6b:36:5c:3f:ce:5e:8b:86:21:c9:43:b6:a1:72: 43:9b:ab:fe:eb:12:72:5d:c3:12:ce:d2:60:63:85:6d:e9:37: 9b:23:7a:9b:9c:17:50:ef:7c:7c:48:d0:87:32:f6:0b:3d:8f: df:71:ea:17 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE1XGAN+F3kecOuTNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMzMDEyNDUxN1oXDTI4MDcwMjEyNDUxN1owLzEtMCsGA1UEAxMk M2U1YTRjNTUtNDE3YS00ZDU4LWI2MDQtMDljM2NjMTBhNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpOWklm47dp1qGbjNG+W8xn7tnbvLmiu3B8+ xC1SFbd/KrxccL8RUsGdBDgDEJzYQ3mw/mGxwPpLWXR7aOSkx6z10VuKopgvSLM6 LVBtQDKTSktHVTG353RiZmjD6KTYCwWp2p80HCnBM+/NYEVZycvEvdI3JLM7FB9V 1sk6wEmqYtHS8x6700a81JQ6szF9yMx2N3U1RNwv7EoV2I2S3JWEzx8xKTNuR7/s eTSFOfISda29XM2Ga8ikqeB9Cot4+AFfxS7n+SCjTCYYV/rSedP64tcUWKD1Qsgw XOZebc0+zSamavELB1mh6wEFLIkbY20lBBSSFeSXosdK4XUmsQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFKPlCzakweothn/EiIgIREX8LDIqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZTVhNGM1NS00MTdhLTRkNTgtYjYwNC0wOWMzY2MxMGE1ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNlNWE0YzU1LTQxN2EtNGQ1OC1i NjA0LTA5YzNjYzEwYTVlZi8zZTVhNGM1NS00MTdhLTRkNTgtYjYwNC0wOWMzY2Mx MGE1ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB2pAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIZ0nLgO5YZuxgXnBvn3 lXYFvqh78PkxVODaizkH3u385/UmwQ5NfEbwnZCbSk18qfIzK37phHGbEi2O1LpB sk4YmQKz3V11NFXLoOUTIKE0PckLG/yTtW1NSbBbFCQegI3Qy5UETG9d9awFjwSo YQI++jSJrCTx8uv5JYUUl3++PKIYPpL2tNLLNtf8rlOCCLSC/0mYdBDZpBziMfey HZehLG7AINOp04gVnuGROH2CrhQqUtliwNIAdBbm7A2uW5HvGktCkoPe7uJrNlw/ zl6LhiHJQ7ahckObq/7rEnJdwxLO0mBjhW3pN5sjepucF1DvfHxI0Icy9gs9j99x 6hc= -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:30 2026 by rpki-client