$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer File: 19cb6623-eabf-410a-89de-eb6cae8e37a3.cer (raw, json) Hash identifier: bZl1TDV42RnPJmPvDc8rTjTIAh/CpnuZFu4vsuRHfEw= Subject key identifier: 0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D825D9EEB036B848635388200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Apr 2026 00:45:17 +0000 Certificate not after: Tue 18 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 2602:f73e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:5d:9e:eb:03:6b:84:86:35:38:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 15 00:45:17 2026 GMT Not After : Jul 18 00:45:17 2028 GMT Subject: CN=19cb6623-eabf-410a-89de-eb6cae8e37a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:b1:c3:04:79:c5:2b:99:45:87:1e:63:b2: 89:fb:d3:6d:60:ef:01:d2:2b:de:d7:e3:15:c3:ed: 43:4a:d1:b5:58:04:05:28:00:af:c0:81:c6:31:83: 0a:18:63:2c:4b:ee:e3:8d:4c:c5:63:d5:b2:fa:d4: 70:e9:4e:41:be:4c:c3:bf:f9:d0:5d:c8:6e:7b:b7: 8c:5c:f5:e3:c4:f1:bc:aa:d2:66:38:e9:74:5c:b0: 68:ba:01:1a:a1:16:f9:ec:b3:15:4c:02:91:31:79: 9e:eb:80:6d:72:e6:d3:82:2f:1e:3e:91:d3:52:98: 71:94:23:60:e2:6f:40:7b:80:49:75:20:88:a7:a4: 60:b7:a2:f3:b9:02:43:53:33:fe:00:f0:56:27:7d: 63:b0:b1:6c:fe:95:7b:35:e9:dd:e3:02:cd:40:39: 54:e4:99:a3:9b:79:41:86:c9:54:33:26:be:a4:da: 4e:93:51:14:bf:1d:c1:51:5f:02:38:5d:6b:00:3d: 9c:44:b5:c7:f3:c8:44:4d:5a:49:e2:15:b7:b3:8b: ce:3a:69:7e:6b:36:a6:78:26:a0:ab:fe:b7:e8:35: a7:ac:ff:d0:5f:b8:b7:1b:ff:f0:58:ed:66:03:db: 4a:18:1a:24:26:68:47:44:69:32:47:16:cf:8c:77: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:f73e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:77:1f:cd:67:39:61:72:61:d9:a1:f5:cc:b4:d3:da:fe:0f: e6:f1:ce:27:33:d2:8c:16:cb:92:d5:19:d0:da:34:b2:79:36: fc:be:0f:ff:47:ac:38:52:e2:60:0a:28:99:7c:4c:94:b1:61: 8f:cc:38:aa:92:5a:5a:5f:93:d8:73:6e:a7:56:8a:01:e7:3a: ac:63:aa:49:32:0c:35:43:a6:73:07:f6:af:b3:28:53:83:22: 47:65:7a:d9:78:1f:34:cc:d6:41:77:c9:c2:4f:3f:fb:34:5e: 1a:94:8a:d6:06:3d:30:fd:9e:c8:0e:70:91:76:85:6a:45:1c: aa:a3:fa:52:45:28:f7:e3:8f:3b:f8:ed:52:9f:14:28:0d:96: 1b:e2:1d:7b:89:3a:3b:8a:c8:c2:3c:d1:56:75:dc:d3:fb:13: 01:7f:5f:28:5a:d9:2c:3a:6a:db:85:16:a4:d0:35:78:ec:ab: f7:ad:86:c0:5a:e3:c3:46:97:57:5e:c3:b8:05:17:80:e6:e3: fa:84:52:4c:71:e1:be:2d:6b:fa:5e:fe:e9:0a:80:96:11:08: 7b:6d:aa:4b:d8:42:01:36:c8:94:5e:23:a8:12:c0:6f:9d:71: 6b:ae:a0:96:ad:1e:1d:af:cb:46:d7:82:74:90:b5:5e:a7:ed: 5e:4a:82:7d -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE2CXZ7rA2uEhjU4ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQxNTAwNDUxN1oXDTI4MDcxODAwNDUxN1owLzEtMCsGA1UEAxMk MTljYjY2MjMtZWFiZi00MTBhLTg5ZGUtZWI2Y2FlOGUzN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDuxwwR5xSuZRYceY7KJ+9NtYO8B0ive1+MV w+1DStG1WAQFKACvwIHGMYMKGGMsS+7jjUzFY9Wy+tRw6U5BvkzDv/nQXchue7eM XPXjxPG8qtJmOOl0XLBougEaoRb57LMVTAKRMXme64BtcubTgi8ePpHTUphxlCNg 4m9Ae4BJdSCIp6Rgt6LzuQJDUzP+APBWJ31jsLFs/pV7Nend4wLNQDlU5Jmjm3lB hslUMya+pNpOk1EUvx3BUV8COF1rAD2cRLXH88hETVpJ4hW3s4vOOml+azameCag q/636DWnrP/QX7i3G//wWO1mA9tKGBokJmhHRGkyRxbPjHfohQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFAt1cfGDjv+LHTsy6V0fcN0ugrmaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x OWNiNjYyMy1lYWJmLTQxMGEtODlkZS1lYjZjYWU4ZTM3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzE5Y2I2NjIzLWVhYmYtNDEwYS04 OWRlLWViNmNhZThlMzdhMy8xOWNiNjYyMy1lYWJmLTQxMGEtODlkZS1lYjZjYWU4 ZTM3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvc+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1dx/NZzlhcmHZofXM tNPa/g/m8c4nM9KMFsuS1RnQ2jSyeTb8vg//R6w4UuJgCiiZfEyUsWGPzDiqklpa X5PYc26nVooB5zqsY6pJMgw1Q6ZzB/avsyhTgyJHZXrZeB80zNZBd8nCTz/7NF4a lIrWBj0w/Z7IDnCRdoVqRRyqo/pSRSj34487+O1SnxQoDZYb4h17iTo7isjCPNFW ddzT+xMBf18oWtksOmrbhRak0DV47Kv3rYbAWuPDRpdXXsO4BReA5uP6hFJMceG+ LWv6Xv7pCoCWEQh7bapL2EIBNsiUXiOoEsBvnXFrrqCWrR4dr8tG14J0kLVep+1e SoJ9 -----END CERTIFICATE-----Generated at Fri Apr 17 06:16:02 2026 by rpki-client