$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer File: 6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer (raw, json) Hash identifier: dCUxumtGvireGtLJIo2pU1ETGEITluY/fkIw/ks9ivk= Subject key identifier: 7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584D4BED528CC3468E613982D1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 12:45:22 +0000 Certificate not after: Wed 28 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 2602:ff62::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:ed:52:8c:c3:46:8e:61:39:82:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 26 12:45:22 2026 GMT Not After : Jun 28 12:45:22 2028 GMT Subject: CN=6e579f5b-ec76-457b-99d5-466c7e4fefcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:ba:fc:3d:5a:1d:7b:66:98:1d:c1:56:4e: f7:31:ef:60:a2:da:23:b0:c0:fc:b5:15:ea:0a:4f: a9:18:17:d2:16:55:9e:40:18:64:90:1d:d7:d5:b1: 6a:34:26:52:73:9a:d6:02:ca:61:2b:2e:0b:e4:47: 79:2f:d0:2e:b2:60:4d:b1:66:32:31:fd:aa:a1:b9: df:e5:8a:99:74:f6:ed:41:33:98:41:e3:41:dc:81: 6e:bc:8a:71:4f:bc:4b:3f:d7:1a:85:f9:20:c3:d7: c2:21:1d:1c:9a:68:b1:66:38:62:5d:3c:a7:a5:d2: d9:44:7c:68:07:d1:71:5b:2f:15:e4:43:d1:f8:72: c9:9b:af:9a:30:b9:fa:82:7c:eb:6c:05:9d:4c:a3: 34:5a:de:68:4b:6f:35:e9:fd:4b:21:e6:49:76:65: 75:44:2c:c9:c5:ae:75:6e:5a:d9:96:ec:ce:cb:85: c6:db:92:67:73:ed:32:d8:15:07:fa:9f:76:61:20: bc:c2:28:fa:28:4b:86:98:73:1a:64:5c:73:6f:42: 21:69:b1:ba:e6:40:6f:93:3b:8d:40:e7:3d:df:95: e8:0b:d7:f7:68:0e:20:af:2c:af:30:d8:5f:3a:ee: 95:7f:c6:7e:9c:68:14:58:14:d6:7b:fb:88:df:ef: 84:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:31:3F:95:D4:5E:45:BA:54:D4:CE:4A:7A:BA:AD:80:BA:EC:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff62::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fe:a8:0e:62:36:e1:06:7a:1f:43:fe:85:ba:77:24:e2:dd: 0c:1f:c2:d4:15:cd:96:78:d2:ce:44:da:b8:a4:d7:e8:0c:4e: 63:a3:21:2a:73:7c:ea:2e:35:67:eb:81:6d:14:c2:69:95:b7: 1b:f3:34:5f:a6:a4:4b:b7:97:80:5d:f0:1e:39:0b:7c:1b:3e: 6b:a3:2f:96:e2:8d:0d:7d:66:b1:f4:10:8e:2f:9d:67:9e:c9: a3:ba:3d:ac:c9:33:4c:7c:84:4c:46:cf:a9:03:51:86:fb:a5: d2:29:32:3d:58:5e:d5:3e:69:1b:cd:08:35:df:22:b7:5d:34: 4d:fc:1c:70:7b:f2:07:e6:ab:cc:4b:53:e6:fc:d2:65:8d:09: 71:62:8c:14:fc:2a:ae:2e:2c:0b:2d:65:ba:df:d7:c1:58:16: 39:2d:77:4a:ee:b1:cc:c0:36:aa:a8:c6:c9:79:86:cc:ce:b1: 8b:b8:d6:b6:07:55:21:03:e4:8a:20:a3:f6:17:43:b8:54:fe: e8:7a:c8:6f:fb:dc:e2:c7:90:57:15:fe:3a:1c:27:f4:d6:bf: a6:7a:91:3e:7c:08:c4:e4:51:9d:79:e1:ed:cc:f5:8e:8d:3d: d9:9a:fb:ea:a0:c1:ba:bb:db:3d:99:05:12:60:80:dc:b8:b5: 33:ab:89:3b -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE1L7VKMw0aOYTmC0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDMyNjEyNDUyMloXDTI4MDYyODEyNDUyMlowLzEtMCsGA1UEAxMk NmU1NzlmNWItZWM3Ni00NTdiLTk5ZDUtNDY2YzdlNGZlZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtru6/D1aHXtmmB3BVk73Me9gotojsMD8tRXq Ck+pGBfSFlWeQBhkkB3X1bFqNCZSc5rWAsphKy4L5Ed5L9AusmBNsWYyMf2qobnf 5YqZdPbtQTOYQeNB3IFuvIpxT7xLP9cahfkgw9fCIR0cmmixZjhiXTynpdLZRHxo B9FxWy8V5EPR+HLJm6+aMLn6gnzrbAWdTKM0Wt5oS2816f1LIeZJdmV1RCzJxa51 blrZluzOy4XG25Jnc+0y2BUH+p92YSC8wij6KEuGmHMaZFxzb0IhabG65kBvkzuN QOc935XoC9f3aA4gryyvMNhfOu6Vf8Z+nGgUWBTWe/uI3++EiQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFHp9MT+V1F5FulTUzkp6uq2AuuyhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82 ZTU3OWY1Yi1lYzc2LTQ1N2ItOTlkNS00NjZjN2U0ZmVmY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05 OWQ1LTQ2NmM3ZTRmZWZjYy82ZTU3OWY1Yi1lYzc2LTQ1N2ItOTlkNS00NjZjN2U0 ZmVmY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAv9iADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC/qgOYjbhBnofQ/6F unck4t0MH8LUFc2WeNLORNq4pNfoDE5joyEqc3zqLjVn64FtFMJplbcb8zRfpqRL t5eAXfAeOQt8Gz5roy+W4o0NfWax9BCOL51nnsmjuj2syTNMfIRMRs+pA1GG+6XS KTI9WF7VPmkbzQg13yK3XTRN/Bxwe/IH5qvMS1Pm/NJljQlxYowU/CquLiwLLWW6 39fBWBY5LXdK7rHMwDaqqMbJeYbMzrGLuNa2B1UhA+SKIKP2F0O4VP7oeshv+9zi x5BXFf46HCf01r+mepE+fAjE5FGdeeHtzPWOjT3ZmvvqoMG6u9s9mQUSYIDcuLUz q4k7 -----END CERTIFICATE-----Generated at Thu Apr 16 22:37:40 2026 by rpki-client