$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.cer File: eb1de40c-bc28-46a6-9184-ddc5da1f27e3.cer (raw, json) Hash identifier: lwS++f3QWvG0ryxRuIKGYBpA4HhgdcTQSm3BDduX0j4= Subject key identifier: 75:79:D8:A3:21:32:CD:A0:94:AC:F3:82:5F:D4:DB:B5:2C:AB:04:74 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F039FF88C3C7CA7E2FE497200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Aug 2026 00:45:12 +0000 Certificate not after: Sun 03 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 17324 IP: 2620:14d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:9f:f8:8c:3c:7c:a7:e2:fe:49:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Aug 31 00:45:12 2026 GMT Not After : Dec 3 01:45:12 2028 GMT Subject: CN=eb1de40c-bc28-46a6-9184-ddc5da1f27e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:69:f4:da:0a:26:76:4e:38:2b:99:b7:12:f3: c4:35:ed:ef:10:00:17:b0:f8:fa:e6:5d:67:2a:e6: 43:ab:a6:f9:dc:f4:78:95:f4:1f:f9:07:5d:3b:ef: ec:38:26:ac:1f:e1:37:ab:82:da:44:ba:8c:5d:85: a6:43:ad:35:f9:e3:93:f0:50:4e:f3:41:a2:0a:dc: 5a:3e:55:7e:23:33:ec:a5:7c:30:50:d2:64:aa:2d: e2:90:21:b3:e8:a8:ec:00:82:c6:dd:e7:45:d0:58: 68:9b:0a:8b:8c:19:ec:bc:01:3b:06:cb:aa:a2:7f: fd:5d:ec:d7:10:43:41:a8:fb:f0:43:a5:55:29:1e: bb:ba:ff:8c:cf:e9:b7:70:81:d7:31:73:b0:6d:14: 89:61:93:6e:fc:46:c9:59:39:74:93:db:a6:09:73: 03:28:a1:80:a5:33:77:53:75:fd:4a:23:ab:8a:2f: b5:14:3d:94:05:01:99:25:07:d9:e0:49:61:4e:6c: b1:58:9a:17:f7:9a:51:2e:ce:e1:4d:4f:bc:ef:c9: 49:08:05:70:4f:28:0d:a6:27:8a:03:8a:8c:72:e8: 1c:78:53:8b:de:f7:4d:43:60:b6:7e:bb:0d:db:07: 0d:19:3c:3f:f5:fd:af:a7:07:20:86:35:f8:86:9d: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:79:D8:A3:21:32:CD:A0:94:AC:F3:82:5F:D4:DB:B5:2C:AB:04:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3/eb1de40c-bc28-46a6-9184-ddc5da1f27e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:14d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17324 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8e:17:c3:48:25:2d:ad:ce:58:21:76:be:e3:62:17:30:1d: ef:3f:7e:21:8e:13:6e:01:c2:69:61:4d:6d:0f:e9:09:52:9a: 3c:b1:db:b7:23:cb:d9:f7:cd:1a:f9:55:25:b4:51:16:5a:1b: e9:83:ba:48:5a:17:c2:64:c2:e0:87:eb:f0:23:c6:e5:02:7d: 68:41:3e:61:b4:69:fc:5d:30:73:61:41:88:1d:7e:3d:a4:69: 81:cf:7f:11:91:e3:2c:d0:2b:59:97:03:e1:42:bd:85:b1:93: 27:6c:d9:2a:a3:bf:61:32:62:1c:b4:5d:89:3d:a6:2d:26:bf: 51:86:50:7e:dc:96:09:08:fe:34:c8:8f:79:45:e8:ce:71:33: 27:b4:04:2b:e6:b3:e4:2f:f5:de:ca:2d:6f:ce:12:07:3d:3a: 1f:06:ff:d6:04:bf:a2:52:dd:2b:ca:5a:fd:4e:ad:de:06:f6: cd:41:3c:61:c8:a3:ac:85:6f:98:a7:ac:26:ec:3b:f2:c4:d4: 91:83:cb:eb:f6:cb:9e:03:b5:e1:d2:8c:33:8f:af:21:3f:23: 55:b9:b8:56:23:94:66:05:85:bb:a2:4d:82:f8:2f:9a:08:1a: 37:a7:85:a6:c6:1e:60:e4:e4:cc:99:66:5d:d1:93:87:b6:c3: 83:9c:13:4d -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE8Dn/iMPHyn4v5JcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDgzMTAwNDUxMloXDTI4MTIwMzAxNDUxMlowLzEtMCsGA1UEAxMk ZWIxZGU0MGMtYmMyOC00NmE2LTkxODQtZGRjNWRhMWYyN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimn02gomdk44K5m3EvPENe3vEAAXsPj65l1n KuZDq6b53PR4lfQf+QddO+/sOCasH+E3q4LaRLqMXYWmQ601+eOT8FBO80GiCtxa PlV+IzPspXwwUNJkqi3ikCGz6KjsAILG3edF0FhomwqLjBnsvAE7Bsuqon/9XezX EENBqPvwQ6VVKR67uv+Mz+m3cIHXMXOwbRSJYZNu/EbJWTl0k9umCXMDKKGApTN3 U3X9SiOrii+1FD2UBQGZJQfZ4ElhTmyxWJoX95pRLs7hTU+878lJCAVwTygNpieK A4qMcugceFOL3vdNQ2C2frsN2wcNGTw/9f2vpwcghjX4hp2IrwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFHV52KMhMs2glKzzgl/U27UsqwR0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l YjFkZTQwYy1iYzI4LTQ2YTYtOTE4NC1kZGM1ZGExZjI3ZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ViMWRlNDBjLWJjMjgtNDZhNi05 MTg0LWRkYzVkYTFmMjdlMy9lYjFkZTQwYy1iYzI4LTQ2YTYtOTE4NC1kZGM1ZGEx ZjI3ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAFNADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJDrDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBPjhfDSCUtrc5YIXa+42IXMB3vP34hjhNuAcJpYU1tD+kJ Upo8sdu3I8vZ980a+VUltFEWWhvpg7pIWhfCZMLgh+vwI8blAn1oQT5htGn8XTBz YUGIHX49pGmBz38RkeMs0CtZlwPhQr2FsZMnbNkqo79hMmIctF2JPaYtJr9RhlB+ 3JYJCP40yI95RejOcTMntAQr5rPkL/Xeyi1vzhIHPTofBv/WBL+iUt0rylr9Tq3e BvbNQTxhyKOshW+Yp6wm7DvyxNSRg8vr9sueA7Xh0owzj68hPyNVubhWI5RmBYW7 ok2C+C+aCBo3p4Wmxh5g5OTMmWZd0ZOHtsODnBNN -----END CERTIFICATE-----Generated at Sun Sep 20 12:52:21 2026 by rpki-client