$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer File: 6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer (raw, json) Hash identifier: AJlOFC0SD7zwoyswECpKG+6qz+wJXs2zPk3kik2+7bs= Subject key identifier: D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584EF70FE442A9EBB14F7BAA7C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Aug 2026 12:45:11 +0000 Certificate not after: Tue 28 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 144.126.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:0f:e4:42:a9:eb:b1:4f:7b:aa:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 26 12:45:11 2026 GMT Not After : Nov 28 13:45:11 2028 GMT Subject: CN=6f824b15-97fd-4ba5-b124-5a3ef78ac2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:fe:6f:ff:4e:46:0e:ea:6a:6b:01:07:16: fd:76:e1:23:48:f9:1b:7d:09:4c:ce:4e:24:ce:6a: 8c:d6:96:8b:e8:27:85:3e:c5:85:ad:53:d0:82:62: 25:8f:8c:b5:d7:41:ae:8e:5d:c5:b0:cb:29:1e:a5: 38:e8:52:0a:72:03:90:35:23:0d:2f:ed:24:00:0a: 19:93:7c:31:6c:a3:c0:cb:12:dc:42:62:4d:1b:34: 11:02:5e:67:a1:7f:91:52:b2:41:e5:65:43:47:2f: 0d:a4:da:89:bd:ee:1f:e6:e1:20:98:cc:12:11:0d: c6:d1:ef:dd:fb:93:cd:05:75:a3:06:be:db:c9:76: 7f:8b:56:e0:cd:fb:e1:6f:63:b2:24:f5:ee:4b:7e: 1c:55:d8:90:a4:b5:e2:29:41:1b:c5:09:ad:5d:3a: 6d:4f:4a:bd:1f:19:2a:54:87:62:39:5c:ed:60:17: 4e:ef:db:d7:3f:7c:e7:30:45:9b:0a:c7:d8:77:d0: 34:ee:ec:06:85:2e:3b:03:07:e1:8e:7b:5a:1c:68: 54:10:6d:24:56:54:ec:a5:e6:b6:23:80:7c:0d:3a: a6:66:17:e5:26:65:2b:a2:e1:5d:e6:42:42:db:fb: 0c:0d:5b:b3:63:32:f2:ce:2a:c9:e5:33:c8:58:ea: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 144.126.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:67:b7:c9:27:33:04:c1:3d:ef:8d:44:d2:df:76:f2:42:d5: 91:39:90:a6:50:08:38:60:6f:87:9d:9a:9a:dd:d8:73:d2:ee: f1:bd:15:b9:72:94:5e:eb:3f:ce:ba:16:f2:c6:c4:14:18:d9: 68:d5:ce:8e:4f:e6:3e:ba:6d:a4:4a:0f:99:42:3d:86:df:12: 26:de:07:45:9a:8e:37:a6:3d:04:83:52:52:93:4c:c6:44:42: 2b:79:80:a9:26:f3:c1:a7:aa:24:66:26:4e:69:07:c5:d9:8e: a7:86:73:4f:a0:1f:e4:ac:0b:42:ce:20:2c:35:e2:fe:23:ee: 54:43:d1:67:22:b1:3b:3a:8a:f0:ce:c4:85:a7:df:cf:17:a5: 00:2e:25:ce:98:2b:97:11:e3:3e:2a:c4:ee:84:b5:25:ab:ac: ca:bd:fd:09:ac:9c:56:29:28:04:4c:61:7d:3f:84:dc:94:ff: a9:0c:43:4b:a4:7e:61:09:9b:83:5c:86:5f:68:b8:b4:f6:78: d0:6f:51:64:98:07:53:20:b6:ff:35:7d:41:e5:bf:32:5c:df: ce:7e:5a:a0:a9:fd:a9:b6:77:20:3e:e1:2f:63:f5:85:21:76: e7:f1:93:d4:64:78:a8:87:17:4f:91:78:1e:58:e6:73:24:ee: 2c:69:47:d1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE73D+RCqeuxT3uqfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgyNjEyNDUxMVoXDTI4MTEyODEzNDUxMVowLzEtMCsGA1UEAxMk NmY4MjRiMTUtOTdmZC00YmE1LWIxMjQtNWEzZWY3OGFjMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7j+b/9ORg7qamsBBxb9duEjSPkbfQlMzk4k zmqM1paL6CeFPsWFrVPQgmIlj4y110Gujl3FsMspHqU46FIKcgOQNSMNL+0kAAoZ k3wxbKPAyxLcQmJNGzQRAl5noX+RUrJB5WVDRy8NpNqJve4f5uEgmMwSEQ3G0e/d +5PNBXWjBr7byXZ/i1bgzfvhb2OyJPXuS34cVdiQpLXiKUEbxQmtXTptT0q9Hxkq VIdiOVztYBdO79vXP3znMEWbCsfYd9A07uwGhS47AwfhjntaHGhUEG0kVlTspea2 I4B8DTqmZhflJmUrouFd5kJC2/sMDVuzYzLyzirJ5TPIWOpVHQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNQG5L6ho9PcvPrA+wXXZ9axji5lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 ZjgyNGIxNS05N2ZkLTRiYTUtYjEyNC01YTNlZjc4YWMyY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzZmODI0YjE1LTk3ZmQtNGJhNS1i MTI0LTVhM2VmNzhhYzJjZS82ZjgyNGIxNS05N2ZkLTRiYTUtYjEyNC01YTNlZjc4 YWMyY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAaQfgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADme3ySczBME9741E0t92 8kLVkTmQplAIOGBvh52amt3Yc9Lu8b0VuXKUXus/zroW8sbEFBjZaNXOjk/mPrpt pEoPmUI9ht8SJt4HRZqON6Y9BINSUpNMxkRCK3mAqSbzwaeqJGYmTmkHxdmOp4Zz T6Af5KwLQs4gLDXi/iPuVEPRZyKxOzqK8M7EhaffzxelAC4lzpgrlxHjPirE7oS1 Jausyr39CaycVikoBExhfT+E3JT/qQxDS6R+YQmbg1yGX2i4tPZ40G9RZJgHUyC2 /zV9QeW/Mlzfzn5aoKn9qbZ3ID7hL2P1hSF25/GT1GR4qIcXT5F4HljmcyTuLGlH 0Q== -----END CERTIFICATE-----Generated at Sat Sep 26 10:42:25 2026 by rpki-client