$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359.cer File: eb047d23-6a3f-4a43-9374-a2cfa94f3359.cer (raw, json) Hash identifier: gqjfISPodU/sap9WQqXn4ahctfX9sprZLkCdFKpTSWI= Subject key identifier: 4D:EA:4E:EA:10:C6:33:62:CD:76:08:E0:30:52:D0:94:AB:57:07:FA Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F066AA70AACE2CBBB0061F3E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/eb047d23-6a3f-4a43-9374-a2cfa94f3359.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Sep 2026 00:45:11 +0000 Certificate not after: Mon 04 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 2620:91::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:6a:a7:0a:ac:e2:cb:bb:00:61:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 1 00:45:11 2026 GMT Not After : Dec 4 01:45:11 2028 GMT Subject: CN=eb047d23-6a3f-4a43-9374-a2cfa94f3359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:65:63:2d:e2:76:f9:88:a6:00:ae:6c:e4: 4d:e5:34:30:96:2d:47:7d:96:78:de:57:4c:61:a7: 1d:72:40:93:fb:d6:bf:4e:27:fa:20:a4:2d:4c:50: 2a:c2:3e:c9:f4:9f:af:bf:c0:ee:bc:c9:7e:81:5f: 20:56:e1:d7:1e:64:fa:e7:64:53:d8:15:0b:d8:82: 3e:82:85:99:26:58:5a:be:6f:f7:a7:ee:b8:8a:9a: 69:a9:3d:e2:ec:a9:de:9e:1e:e8:08:ab:d3:d1:4a: 47:3d:55:a0:2f:2c:c0:29:f1:29:fb:a3:b8:4a:07: bc:95:6b:78:d6:eb:1f:d5:a2:54:d1:48:6e:ac:fa: 0b:7b:77:df:d4:ae:71:5b:a3:b7:73:7b:68:36:92: 9b:e1:59:41:9f:d1:28:99:76:c2:df:49:95:c7:32: 85:c2:da:e7:f4:15:cf:07:b8:b3:48:8e:fc:6d:34: 8a:e6:e9:1a:a9:e0:72:03:7f:a9:52:5a:aa:c0:f6: b7:70:46:87:2a:7b:59:d5:93:01:18:e7:a0:83:90: 4d:e5:24:35:36:8d:a7:37:c8:90:48:99:f6:8a:44: 8b:0d:3c:07:14:0f:c8:6f:1f:fe:7b:d5:64:31:3c: 74:cd:b3:94:53:d1:16:21:ec:9a:02:99:a7:63:c7: 19:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:4E:EA:10:C6:33:62:CD:76:08:E0:30:52:D0:94:AB:57:07:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb047d23-6a3f-4a43-9374-a2cfa94f3359/eb047d23-6a3f-4a43-9374-a2cfa94f3359.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:91::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:60:61:1c:18:bd:ad:f9:6b:3b:20:c0:b1:8f:2f:ee:c9:73: 99:de:5f:dd:a1:11:88:3c:33:85:e2:6d:40:8a:78:d2:7d:2d: aa:c7:17:0f:8b:ee:fa:b2:16:8f:8e:85:ff:e7:02:cd:6a:c6: 78:d8:21:c9:3d:7c:99:6c:94:9b:18:ba:d8:5c:b0:e3:4c:b8: b5:d3:fc:66:a6:09:07:a4:33:6a:4e:87:4d:2c:3d:64:55:d0: a7:56:13:68:b1:74:c6:23:89:07:4d:ee:1d:ff:d4:55:c4:bf: de:8f:4f:0b:03:e4:e4:15:08:8a:d4:d0:d3:83:6b:71:2c:c1: b9:02:3a:03:7b:d1:69:a5:14:c7:c7:f9:a2:a9:c1:7e:f7:25: 52:65:c2:e0:50:9c:96:ae:b2:d0:f3:3b:ab:00:19:2e:85:4d: 10:0d:a7:dd:d3:72:1f:23:51:25:2c:28:cd:4d:bc:ab:58:19: a5:71:cb:78:94:a3:3e:93:6d:0d:40:cd:e0:9d:e7:46:c0:58: 5f:c9:6e:b3:e4:15:b4:6e:85:96:e9:70:2f:67:43:50:04:18: bb:0e:26:bc:1a:37:b7:e0:85:d4:a3:f8:f1:d7:7a:98:08:43: 5b:ec:44:d8:a4:f3:cb:d0:f1:a4:03:14:9b:ae:50:fe:7d:cd: b6:07:48:de -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE8GaqcKrOLLuwBh8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwMTAwNDUxMVoXDTI4MTIwNDAxNDUxMVowLzEtMCsGA1UEAxMk ZWIwNDdkMjMtNmEzZi00YTQzLTkzNzQtYTJjZmE5NGYzMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrxlYy3idvmIpgCubORN5TQwli1HfZZ43ldM YacdckCT+9a/Tif6IKQtTFAqwj7J9J+vv8DuvMl+gV8gVuHXHmT652RT2BUL2II+ goWZJlhavm/3p+64ipppqT3i7Knenh7oCKvT0UpHPVWgLyzAKfEp+6O4Sge8lWt4 1usf1aJU0UhurPoLe3ff1K5xW6O3c3toNpKb4VlBn9EomXbC30mVxzKFwtrn9BXP B7izSI78bTSK5ukaqeByA3+pUlqqwPa3cEaHKntZ1ZMBGOegg5BN5SQ1No2nN8iQ SJn2ikSLDTwHFA/Ibx/+e9VkMTx0zbOUU9EWIeyaApmnY8cZEQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFE3qTuoQxjNizXYI4DBS0JSrVwf6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l YjA0N2QyMy02YTNmLTRhNDMtOTM3NC1hMmNmYTk0ZjMzNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ViMDQ3ZDIzLTZhM2YtNGE0My05 Mzc0LWEyY2ZhOTRmMzM1OS9lYjA0N2QyMy02YTNmLTRhNDMtOTM3NC1hMmNmYTk0 ZjMzNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIACRAAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiGBhHBi9rflrOyDA sY8v7slzmd5f3aERiDwzheJtQIp40n0tqscXD4vu+rIWj46F/+cCzWrGeNghyT18 mWyUmxi62Fyw40y4tdP8ZqYJB6Qzak6HTSw9ZFXQp1YTaLF0xiOJB03uHf/UVcS/ 3o9PCwPk5BUIitTQ04NrcSzBuQI6A3vRaaUUx8f5oqnBfvclUmXC4FCclq6y0PM7 qwAZLoVNEA2n3dNyHyNRJSwozU28q1gZpXHLeJSjPpNtDUDN4J3nRsBYX8lus+QV tG6FlulwL2dDUAQYuw4mvBo3t+CF1KP48dd6mAhDW+xE2KTzy9DxpAMUm65Q/n3N tgdI3g== -----END CERTIFICATE-----Generated at Mon Sep 21 21:26:29 2026 by rpki-client