$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d.cer File: e76d6c5f-6180-4c10-9515-ca56e9332d2d.cer (raw, json) Hash identifier: xkPewMswKcs1cpm2C8IS8AOKVjSluQVg4TBTTfChWtk= Subject key identifier: 52:D7:69:79:8D:47:EE:72:59:78:1F:B7:C3:30:9D:03:EB:F7:B6:FB Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1F8ACF07A882525B7B946E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/e76d6c5f-6180-4c10-9515-ca56e9332d2d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Sep 2026 00:45:11 +0000 Certificate not after: Wed 13 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 2620:d8:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:8a:cf:07:a8:82:52:5b:7b:94:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 10 00:45:11 2026 GMT Not After : Dec 13 01:45:11 2028 GMT Subject: CN=e76d6c5f-6180-4c10-9515-ca56e9332d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:fb:c6:97:c7:4b:cb:53:f4:0a:fb:b2:cb: a1:94:3a:76:cf:48:04:0e:a4:bd:a9:b6:6e:6f:96: 64:c0:03:4c:70:a1:d9:7f:5b:c8:0f:ac:e5:77:e5: 57:51:d5:c9:d3:23:c0:23:82:c2:66:4f:16:28:dc: 00:a4:00:b2:79:77:a2:0b:ce:47:e5:a7:a4:61:b4: fe:ee:ac:ca:12:9c:31:ca:6c:65:ce:64:e1:b5:8d: 17:92:4a:17:21:54:fd:6b:df:cc:e5:18:b5:a9:bc: e7:d6:1d:cb:38:4b:84:e8:dd:d8:00:09:80:4a:00: 02:a7:e4:be:39:99:ab:6d:60:bf:93:1c:7c:c7:95: 5e:d9:24:f7:58:7d:03:a4:6b:9a:80:5b:de:cb:25: 35:90:ae:17:61:15:20:d5:51:8c:01:5e:2f:70:77: 13:03:df:bc:e1:80:ea:76:c3:b6:67:4c:e4:0a:f9: 06:99:a5:26:34:39:35:cf:de:e3:95:1a:bd:62:a1: 54:6c:02:23:03:0f:d0:02:98:ae:93:b5:3e:60:a9: f7:06:3a:67:58:5e:d5:9a:07:a3:2e:6b:ab:7a:c9: 53:70:76:e8:6d:b9:8d:a7:8f:b2:37:80:2a:0e:9f: ad:38:2a:64:a3:b4:8f:0e:07:6c:33:27:89:b4:53: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D7:69:79:8D:47:EE:72:59:78:1F:B7:C3:30:9D:03:EB:F7:B6:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/e76d6c5f-6180-4c10-9515-ca56e9332d2d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:d8:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:81:a3:c8:b8:e6:8b:94:95:07:e6:0c:e7:47:8b:13:38:c0: ea:c1:27:2e:0e:10:0e:4f:2b:f8:60:87:27:ac:d6:68:6c:65: 57:9a:1a:00:f3:cc:16:c5:19:8a:49:55:7e:be:1a:39:a0:82: 45:d9:a2:52:8c:eb:03:3d:d1:7e:f7:0c:ce:b8:28:95:1c:df: fd:02:b7:84:c4:fc:d6:0e:71:80:73:2f:5e:3b:15:14:5f:79: 8d:d9:fc:2c:c4:91:4e:83:67:f0:cf:b6:f9:8e:22:0a:fd:f2: c5:98:96:68:d0:37:04:f4:28:b0:a4:91:f7:7d:b8:fa:7e:1c: 21:41:9a:4a:5c:a4:66:3a:f0:01:09:10:09:7e:bf:ee:a5:a1: 14:f9:2e:7c:5c:91:e7:33:c3:bf:e0:74:7b:0e:02:78:54:56: 37:32:12:04:7c:bd:14:75:4a:c8:b3:da:4d:93:89:8a:bb:93: a6:37:cb:ab:2d:0b:01:09:71:4e:34:26:e7:99:e7:69:ce:52: 58:fe:41:5b:e0:e3:b1:04:a8:a4:b5:89:9e:f0:89:5f:03:04: ff:98:ee:6e:bf:84:d3:e5:a5:19:ab:2a:4d:cd:39:0e:8c:0b: 8e:c4:32:af:2a:6d:78:d0:7e:dd:f3:b2:35:b0:9e:f4:44:4f: 3c:b9:dc:56 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE8fis8HqIJSW3uUbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkxMDAwNDUxMVoXDTI4MTIxMzAxNDUxMVowLzEtMCsGA1UEAxMk ZTc2ZDZjNWYtNjE4MC00YzEwLTk1MTUtY2E1NmU5MzMyZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtn7xpfHS8tT9Ar7ssuhlDp2z0gEDqS9qbZu b5ZkwANMcKHZf1vID6zld+VXUdXJ0yPAI4LCZk8WKNwApACyeXeiC85H5aekYbT+ 7qzKEpwxymxlzmThtY0XkkoXIVT9a9/M5Ri1qbzn1h3LOEuE6N3YAAmASgACp+S+ OZmrbWC/kxx8x5Ve2ST3WH0DpGuagFveyyU1kK4XYRUg1VGMAV4vcHcTA9+84YDq dsO2Z0zkCvkGmaUmNDk1z97jlRq9YqFUbAIjAw/QApiuk7U+YKn3BjpnWF7Vmgej LmureslTcHbobbmNp4+yN4AqDp+tOCpko7SPDgdsMyeJtFPoeQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFFLXaXmNR+5yWXgft8MwnQPr97b7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l NzZkNmM1Zi02MTgwLTRjMTAtOTUxNS1jYTU2ZTkzMzJkMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2U3NmQ2YzVmLTYxODAtNGMxMC05 NTE1LWNhNTZlOTMzMmQyZC9lNzZkNmM1Zi02MTgwLTRjMTAtOTUxNS1jYTU2ZTkz MzJkMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADYIAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABYGjyLjmi5SVB+YM 50eLEzjA6sEnLg4QDk8r+GCHJ6zWaGxlV5oaAPPMFsUZiklVfr4aOaCCRdmiUozr Az3RfvcMzrgolRzf/QK3hMT81g5xgHMvXjsVFF95jdn8LMSRToNn8M+2+Y4iCv3y xZiWaNA3BPQosKSR9324+n4cIUGaSlykZjrwAQkQCX6/7qWhFPkufFyR5zPDv+B0 ew4CeFRWNzISBHy9FHVKyLPaTZOJiruTpjfLqy0LAQlxTjQm55nnac5SWP5BW+Dj sQSopLWJnvCJXwME/5jubr+E0+WlGasqTc05DowLjsQyrypteNB+3fOyNbCe9ERP PLncVg== -----END CERTIFICATE-----Generated at Thu Sep 24 17:57:53 2026 by rpki-client