$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer File: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer (raw, json) Hash identifier: o9S8SmNCze34gBCpzcIGRYt1cK4akdUQYrFo5QpYrHw= Subject key identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584F533075D08B8216761AD73100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 12:45:11 +0000 Certificate not after: Sun 31 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 2620:182::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:30:75:d0:8b:82:16:76:1a:d7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 28 12:45:11 2026 GMT Not After : Dec 31 13:45:11 2028 GMT Subject: CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:0f:38:25:9a:59:ee:40:40:e2:2e:0f:29: 00:08:d6:fe:8d:d8:c5:db:25:52:d3:ea:75:fc:c5: cc:01:dc:de:2e:20:f6:07:5d:70:02:c7:2c:4e:ac: ca:01:c7:8c:0f:50:c7:99:50:95:0c:69:43:ef:ef: b3:4d:90:a8:52:99:ae:eb:8c:86:84:79:a2:26:17: 21:d7:c3:64:0b:47:d4:4d:40:7f:21:96:ce:74:27: 29:ac:59:54:98:06:d7:50:b2:ba:9a:b4:f2:35:49: ad:e0:13:4b:05:ea:9f:39:04:1e:69:ec:d6:31:d2: 4d:b8:07:20:e0:5d:c5:29:51:a9:e0:9b:05:ae:8c: f7:0c:cb:63:ee:a1:3f:5a:88:50:fd:28:2d:a6:92: 25:ab:fa:8a:af:5b:92:46:4b:a5:44:d2:a3:13:b3: 24:17:a5:bc:9b:44:7c:b1:39:bd:29:ce:8f:fe:d9: 8d:f4:d9:34:7c:7f:b4:86:42:62:2d:d4:1f:a8:64: 2d:29:7f:7d:39:ea:c2:8c:2b:45:b6:a5:d0:3e:0d: 93:61:f3:f5:39:78:48:bf:33:bd:37:b0:2c:07:ea: f4:4b:c7:2f:19:87:f5:5f:97:ce:af:86:40:cd:51: 1c:f6:f0:60:88:e6:a5:07:6b:57:83:41:55:1c:4c: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2620:182::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:87:62:4f:2b:ea:8d:c2:af:11:c8:57:48:a6:24:97:62:30: a7:88:07:21:7e:0d:71:e1:08:26:b8:24:d5:7e:2a:a6:b9:1e: fe:e2:cf:67:ce:47:0a:81:42:0e:b0:76:e3:b5:aa:c2:61:5b: 1d:13:10:8a:6b:0e:46:78:1c:48:b4:15:cd:e5:d7:3f:d5:99: 3e:41:f4:e8:50:37:19:8b:9a:26:ae:14:56:02:85:14:10:1b: be:3e:70:c6:39:df:11:95:8d:b4:93:ea:66:ad:91:c4:3e:a9: 18:77:19:e7:93:16:df:5f:c6:25:a0:32:68:e3:d2:aa:db:63: 98:a2:84:88:a6:0c:18:c1:d1:c9:32:8c:9e:f9:e3:10:52:aa: 13:5c:fc:6b:8e:59:a1:74:53:af:c3:26:7b:10:3f:75:f5:ce: cc:ec:d6:cd:bb:5a:5e:e2:e6:1a:4a:53:e6:0c:1b:b0:c9:ae: d0:fb:57:c0:3b:5f:0c:5b:1d:df:d1:c0:ea:02:4f:2c:65:be: e3:e3:31:42:f7:48:96:13:aa:0e:d7:d9:19:b8:27:11:50:78: 72:95:08:aa:8f:d7:31:6d:34:c5:17:36:3e:7b:7d:a5:04:83: 28:6f:87:87:ff:38:aa:09:83:89:9b:03:d8:81:aa:a7:a3:c5: c6:18:e6:ac -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE9TMHXQi4IWdhrXMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI2MDkyODEyNDUxMVoXDTI4MTIzMTEzNDUxMVowLzEtMCsGA1UEAxMk YTVjYzg5ZDYtNzA5ZS00MzJiLTlhNmUtMjhhN2UzZmU0YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjIPOCWaWe5AQOIuDykACNb+jdjF2yVS0+p1 /MXMAdzeLiD2B11wAscsTqzKAceMD1DHmVCVDGlD7++zTZCoUpmu64yGhHmiJhch 18NkC0fUTUB/IZbOdCcprFlUmAbXULK6mrTyNUmt4BNLBeqfOQQeaezWMdJNuAcg 4F3FKVGp4JsFroz3DMtj7qE/WohQ/SgtppIlq/qKr1uSRkulRNKjE7MkF6W8m0R8 sTm9Kc6P/tmN9Nk0fH+0hkJiLdQfqGQtKX99OerCjCtFtqXQPg2TYfP1OXhIvzO9 N7AsB+r0S8cvGYf1X5fOr4ZAzVEc9vBgiOalB2tXg0FVHEzvSwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFEsY4w6rjdgpmU5tiDAPx1X2LvsxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h NWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNmZTRjMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2E1Y2M4OWQ2LTcwOWUtNDMyYi05 YTZlLTI4YTdlM2ZlNGMyYi9hNWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNm ZTRjMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAGCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlh2JPK+qNwq8RyFdI piSXYjCniAchfg1x4QgmuCTVfiqmuR7+4s9nzkcKgUIOsHbjtarCYVsdExCKaw5G eBxItBXN5dc/1Zk+QfToUDcZi5omrhRWAoUUEBu+PnDGOd8RlY20k+pmrZHEPqkY dxnnkxbfX8YloDJo49Kq22OYooSIpgwYwdHJMoye+eMQUqoTXPxrjlmhdFOvwyZ7 ED919c7M7NbNu1pe4uYaSlPmDBuwya7Q+1fAO18MWx3f0cDqAk8sZb7j4zFC90iW E6oO19kZuCcRUHhylQiqj9cxbTTFFzY+e32lBIMob4eH/ziqCYOJmwPYgaqno8XG GOas -----END CERTIFICATE-----Generated at Tue Oct 6 04:15:59 2026 by rpki-client