$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer File: c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer (raw, json) Hash identifier: iQQi4bZYKTT9szPe+ON10obO88oNggoVT/0YKZ8uDN4= Subject key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F3A104F429B96BBC2DECCE980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Sep 2026 12:45:11 +0000 Certificate not after: Fri 22 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 2606:2b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:10:4f:42:9b:96:bb:c2:de:cc:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 19 12:45:11 2026 GMT Not After : Dec 22 13:45:11 2028 GMT Subject: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:77:cb:e0:fc:b1:b8:fd:32:90:07:91:3e: 4f:97:c2:90:c4:32:69:4f:c6:bf:07:6f:cf:3e:a6: 72:c6:54:37:a2:e2:2c:8a:38:1a:86:a9:46:e5:91: 36:a7:65:4a:7f:18:19:88:d5:72:66:35:44:17:6e: 35:a5:2d:89:6f:40:7b:d0:5e:7d:dc:c3:94:73:8f: f2:93:c9:d2:15:79:09:a0:ff:b6:4d:ec:16:4c:f7: 68:1c:53:9f:9d:93:ed:83:54:5f:2f:c2:d4:23:d8: 62:0d:c5:fa:e6:2d:0a:d4:6d:8a:51:34:74:c5:e4: 08:0f:e9:ca:f9:b3:d6:0a:52:7f:e5:fe:90:eb:2c: d2:e3:ef:79:70:9f:65:0f:a3:34:02:9a:74:43:d0: af:92:8e:4b:bf:2c:fe:5a:9c:fd:b0:f0:cc:72:b4: 4f:2a:d2:ca:02:73:56:36:51:25:98:ff:34:a7:74: 7c:c5:d8:ba:b0:2d:07:98:0e:af:f3:ed:04:6d:7d: 1b:13:31:9b:8c:17:9e:96:5c:e5:bf:d4:59:c4:35: ff:17:00:1b:c2:b7:5c:4e:a3:be:90:10:82:db:03: 75:d3:25:97:24:64:88:13:11:99:2d:1d:8c:34:e9: f7:01:4b:06:b2:8d:8d:40:0b:9b:a8:de:66:49:3b: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9c:66:f3:c0:a3:87:42:ae:ab:ee:71:2a:e3:4a:f2:37:84: 64:19:50:5a:c5:73:f1:8a:4a:1d:ad:47:31:7d:94:f7:79:02: f2:44:e1:d7:b7:5b:82:01:07:77:62:4a:74:f5:88:c6:e8:52: 2e:31:b0:3b:d4:33:73:84:eb:5e:40:ad:ec:92:18:da:ed:eb: a7:f7:53:fc:41:1c:d2:58:2b:a9:cd:bb:26:7f:e2:d3:c0:88: 01:0a:5c:32:6e:06:d3:3f:ae:57:8f:da:10:36:8e:39:3d:7d: 75:6e:22:fb:29:4b:06:c1:47:d7:1c:50:18:23:09:9d:45:bb: 96:f7:2b:e1:c6:5e:9b:ff:fa:ef:64:23:4b:dc:e9:54:22:62: 2d:b4:e2:6b:8a:41:c3:19:9e:3a:ce:e0:a4:63:7a:46:a4:b0: 66:7a:6d:53:43:bf:93:23:8c:32:44:7b:95:68:fd:aa:18:d7: 91:bf:0f:00:30:e5:e0:49:7b:f3:03:12:0c:44:bc:94:14:f9: dc:0c:c1:7e:e7:9f:fa:9b:bd:2c:27:dc:76:d1:2c:28:48:04: b9:cf:c5:08:3e:ac:e8:40:a1:24:15:09:11:83:8f:dc:58:cc: f7:f2:a2:24:9d:27:a3:ff:9f:ed:e8:2e:ed:1e:c4:31:25:9f: 70:7d:04:7b -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE86EE9Cm5a7wt7M6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkxOTEyNDUxMVoXDTI4MTIyMjEzNDUxMVowLzEtMCsGA1UEAxMk YzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBkNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n93y+D8sbj9MpAHkT5Pl8KQxDJpT8a/B2/P PqZyxlQ3ouIsijgahqlG5ZE2p2VKfxgZiNVyZjVEF241pS2Jb0B70F593MOUc4/y k8nSFXkJoP+2TewWTPdoHFOfnZPtg1RfL8LUI9hiDcX65i0K1G2KUTR0xeQID+nK +bPWClJ/5f6Q6yzS4+95cJ9lD6M0App0Q9Cvko5Lvyz+Wpz9sPDMcrRPKtLKAnNW NlElmP80p3R8xdi6sC0HmA6v8+0EbX0bEzGbjBeellzlv9RZxDX/FwAbwrdcTqO+ kBCC2wN10yWXJGSIExGZLR2MNOn3AUsGso2NQAubqN5mSTupwQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFD0nrpBagQBRVR5Et+U9rYu1bX6OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j MTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2MxNDI4ZDk5LWFkMjMtNGQ1OC1i NWY0LTE3ZGE0YTUwZDU5YS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1 MGQ1OWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBisAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACOcZvPAo4dCrqvucSrj SvI3hGQZUFrFc/GKSh2tRzF9lPd5AvJE4de3W4IBB3diSnT1iMboUi4xsDvUM3OE 615AreySGNrt66f3U/xBHNJYK6nNuyZ/4tPAiAEKXDJuBtM/rleP2hA2jjk9fXVu IvspSwbBR9ccUBgjCZ1Fu5b3K+HGXpv/+u9kI0vc6VQiYi204muKQcMZnjrO4KRj ekaksGZ6bVNDv5MjjDJEe5Vo/aoY15G/DwAw5eBJe/MDEgxEvJQU+dwMwX7nn/qb vSwn3HbRLChIBLnPxQg+rOhAoSQVCRGDj9xYzPfyoiSdJ6P/n+3oLu0exDEln3B9 BHs= -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:38 2026 by rpki-client