$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer File: 42820f2e-2eb1-4049-8630-b2760e0a03a1.cer (raw, json) Hash identifier: A7BQUsOLwY5m80gOCdcmP2udD6uGuAQS1dKa6cOxjVI= Subject key identifier: 3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EA43D98A050E4346C1010C100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Jul 2026 20:45:11 +0000 Certificate not after: Sun 29 Oct 2028 20:45:11 +0000 Subordinate resources: AS: 395670 IP: 2620:ac:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:3d:98:a0:50:e4:34:6c:10:10:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 27 20:45:11 2026 GMT Not After : Oct 29 20:45:11 2028 GMT Subject: CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:d9:16:c4:25:a1:0d:f2:5f:d9:dc:05:90: 0e:4a:2e:19:9d:2b:93:01:71:37:5e:d6:a0:51:98: b3:22:fc:36:74:2b:5e:72:5f:8d:f4:87:26:d0:de: 25:95:7e:f4:2b:5b:da:56:97:aa:d8:e4:fa:cb:6e: 6c:25:ed:52:c3:02:6f:83:79:7d:45:99:ea:08:1e: 34:6b:99:b8:03:7c:a3:da:94:e8:bd:10:25:a2:50: 56:9b:22:f5:19:44:8c:2b:e1:ed:df:78:65:48:30: f5:3a:03:2e:03:25:de:f3:ab:ad:87:59:0c:61:e4: 1f:a3:3b:83:08:d5:61:d4:b1:9a:1c:12:04:4a:29: 3e:cb:19:05:27:0a:40:8b:ed:42:e7:40:25:b4:da: 93:22:57:28:bb:1b:fe:06:f3:28:45:b7:f9:29:11: 86:39:76:0c:df:9d:21:82:d2:54:27:d8:66:2f:82: d4:8c:79:71:98:35:e3:d5:fa:39:3d:83:20:6e:05: f2:4e:1c:97:85:8d:9e:55:a8:06:2c:2a:ae:3a:86: 05:52:81:92:bd:70:a2:fe:c7:5c:61:1e:46:04:2e: a6:77:ba:3a:5a:86:c6:01:59:0d:60:a4:6f:03:a7: e7:e6:8f:ea:22:02:9f:97:5a:fe:2c:77:57:8b:e7: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:ac:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395670 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ca:b2:87:a9:99:40:12:c6:e7:45:c2:df:d8:a4:7e:8a:fa: a0:46:dd:80:0f:ad:23:db:08:e8:30:53:a6:4b:7f:cf:90:fd: a1:7b:4e:2a:c3:d4:34:22:54:96:cb:4b:db:73:80:bc:c9:17: 2a:d6:56:93:7f:3c:b9:2c:b4:cf:8b:02:53:5a:58:92:69:d0: 7d:2f:1c:99:bf:4e:10:79:7e:40:c9:db:38:e8:7c:d7:1d:61: 15:fa:61:fc:15:a6:a8:52:76:b5:eb:cd:8f:49:0a:33:09:bc: 85:5e:33:84:ec:95:b1:e4:cc:02:a9:e1:d6:22:18:8c:af:52: 50:0b:2f:af:60:33:15:0b:bd:5f:ae:b1:ff:b9:fc:c3:3e:ee: 60:ad:c0:88:23:c5:2f:03:45:70:97:55:71:72:ca:92:3b:6d: 35:d8:63:ec:78:43:97:d2:f8:15:78:bb:30:bb:27:08:a4:0a: 4c:8e:ac:76:ff:67:7e:c1:c4:4c:6c:4d:bf:b0:d6:e7:4a:c3: 0f:07:7d:bb:d6:73:ce:1e:f3:7f:32:45:3c:a0:ee:2e:7a:db: 32:01:ef:40:f0:83:e8:6a:72:c7:a9:9e:ef:59:17:7a:b3:ff: 60:4d:a2:d1:b8:b3:8c:cf:7d:9c:db:13:dc:cc:70:8f:71:5a: a0:38:59:4f -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE6kPZigUOQ0bBAQwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyNzIwNDUxMVoXDTI4MTAyOTIwNDUxMVowLzEtMCsGA1UEAxMk NDI4MjBmMmUtMmViMS00MDQ5LTg2MzAtYjI3NjBlMGEwM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YnZFsQloQ3yX9ncBZAOSi4ZnSuTAXE3Xtag UZizIvw2dCtecl+N9Icm0N4llX70K1vaVpeq2OT6y25sJe1SwwJvg3l9RZnqCB40 a5m4A3yj2pTovRAlolBWmyL1GUSMK+Ht33hlSDD1OgMuAyXe86uth1kMYeQfozuD CNVh1LGaHBIESik+yxkFJwpAi+1C50AltNqTIlcouxv+BvMoRbf5KRGGOXYM350h gtJUJ9hmL4LUjHlxmDXj1fo5PYMgbgXyThyXhY2eVagGLCquOoYFUoGSvXCi/sdc YR5GBC6md7o6WobGAVkNYKRvA6fn5o/qIgKfl1r+LHdXi+eRFwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFDxWQvZD8vi+n88hVHD/X2zqFlgbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 MjgyMGYyZS0yZWIxLTQwNDktODYzMC1iMjc2MGUwYTAzYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQyODIwZjJlLTJlYjEtNDA0OS04 NjMwLWIyNzYwZTBhMDNhMS80MjgyMGYyZS0yZWIxLTQwNDktODYzMC1iMjc2MGUw YTAzYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIACsIAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBgmWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEXKsoepmUASxudFwt/YpH6K+qBG3YAPrSPbCOgwU6ZL f8+Q/aF7TirD1DQiVJbLS9tzgLzJFyrWVpN/PLkstM+LAlNaWJJp0H0vHJm/ThB5 fkDJ2zjofNcdYRX6YfwVpqhSdrXrzY9JCjMJvIVeM4TslbHkzAKp4dYiGIyvUlAL L69gMxULvV+usf+5/MM+7mCtwIgjxS8DRXCXVXFyypI7bTXYY+x4Q5fS+BV4uzC7 JwikCkyOrHb/Z37BxExsTb+w1udKww8HfbvWc84e838yRTyg7i562zIB70Dwg+hq csepnu9ZF3qz/2BNotG4s4zPfZzbE9zMcI9xWqA4WU8= -----END CERTIFICATE-----Generated at Tue Jul 28 18:40:05 2026 by rpki-client