$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.cer File: 67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.cer (raw, json) Hash identifier: yHqi5dwnruc87mFjvBz06C7IvWY92v/iqtNmBflv/dg= Subject key identifier: 13:41:A6:B3:1B:F4:BC:E1:9D:AC:C8:13:7A:CC:EB:6E:E7:06:A8:5A Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAB2DF13700C03E40D5443C04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Apr 2026 15:37:22 +0000 Certificate not after: Tue 01 Aug 2028 15:37:22 +0000 Subordinate resources: IP: 2001:500:1::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:2d:f1:37:00:c0:3e:40:d5:44:3c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 29 15:37:22 2026 GMT Not After : Aug 1 15:37:22 2028 GMT Subject: CN=67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:81:0b:51:fe:fa:25:23:90:ec:ac:41:6a:eb: 8b:a5:33:4a:0d:f1:f2:1f:70:d3:2d:c4:30:19:b8: 4e:8a:d1:da:a7:a4:2f:8c:f4:a3:bb:8d:32:b2:d1: 56:dc:fc:62:65:17:0f:38:26:fe:cd:3e:a1:d5:90: 46:49:af:09:47:22:10:b4:b8:04:ce:8e:6f:71:97: 96:88:58:ae:18:d9:42:09:b1:98:68:37:86:47:1a: fd:12:9c:c6:ab:24:45:0a:07:58:c7:4a:73:9e:a1: 6a:e4:5f:70:7d:6c:38:bf:db:b6:df:39:c1:5a:be: 64:68:b8:a4:2b:00:a6:21:cb:66:24:2d:0a:f7:73: c3:5a:fd:30:2a:ff:94:1f:32:21:cd:30:3f:42:8b: 65:b9:1b:19:eb:a3:53:cd:bc:b2:45:08:3e:1e:98: 11:f5:65:26:31:5d:a4:02:52:9d:53:8c:36:42:de: 59:32:02:5b:5c:7b:c4:35:61:7b:e8:dc:0f:7f:28: 98:7b:cd:d9:61:fb:38:dd:42:b5:ea:b6:6c:7f:89: 7f:6f:28:ee:8c:30:d8:3e:83:63:db:e7:94:f6:8a: a3:16:22:f0:7d:f8:69:e2:3c:f7:38:dc:14:47:4a: 39:13:42:44:d8:a0:ea:46:00:48:33:ed:26:ad:dc: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:41:A6:B3:1B:F4:BC:E1:9D:AC:C8:13:7A:CC:EB:6E:E7:06:A8:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6b:d2:e4:3a:10:2d:20:af:20:55:99:3e:f4:79:a1:e2:53: f5:b6:c0:54:6e:d8:66:28:92:ea:61:54:80:08:a4:52:b5:49: 45:9b:22:68:90:c6:e4:e3:df:14:05:9d:6d:e1:98:e4:32:60: 68:78:ad:80:69:f7:23:83:d7:de:53:31:e1:1f:ac:ec:43:3c: d5:91:8a:de:99:b1:11:a6:b2:c4:57:9c:b6:0e:c1:79:ec:34: 31:87:fe:67:cd:cc:27:e6:bc:4b:3e:28:4f:6b:6a:67:a0:c5: 0c:86:2c:03:1c:8a:c5:70:ca:70:2e:a1:61:cf:49:1e:f0:0e: 2a:4b:8a:fe:4c:23:02:4c:a5:5e:42:12:dd:c9:87:88:3a:b3: 57:46:5d:ba:53:fe:9b:b6:b3:ce:88:a5:be:b8:10:3b:37:d5: b2:34:88:f8:ae:f5:f5:b7:65:49:9a:59:48:9f:d8:06:85:e9: 3e:14:f5:5d:83:c9:53:77:d1:aa:bc:ce:68:51:22:af:c4:f8: 8f:33:48:65:42:d8:37:5e:e1:ca:12:e5:fc:33:67:21:92:9c: 75:40:77:f4:68:06:bc:05:06:c9:fb:a9:d5:d9:00:bd:4d:0e: 65:30:fa:b8:02:3c:0d:f8:87:45:22:27:d1:a6:77:40:52:e4: ce:c9:57:8b -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE2rLfE3AMA+QNVEPAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQyOTE1MzcyMloXDTI4MDgwMTE1MzcyMlowLzEtMCsGA1UEAxMk NjdjNTViNDEtMGE3Yi00MTFlLWE2YjUtYmYxNWRiY2Y0ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIELUf76JSOQ7KxBauuLpTNKDfHyH3DTLcQw GbhOitHap6QvjPSju40ystFW3PxiZRcPOCb+zT6h1ZBGSa8JRyIQtLgEzo5vcZeW iFiuGNlCCbGYaDeGRxr9EpzGqyRFCgdYx0pznqFq5F9wfWw4v9u23znBWr5kaLik KwCmIctmJC0K93PDWv0wKv+UHzIhzTA/QotluRsZ66NTzbyyRQg+HpgR9WUmMV2k AlKdU4w2Qt5ZMgJbXHvENWF76NwPfyiYe83ZYfs43UK16rZsf4l/byjujDDYPoNj 2+eU9oqjFiLwffhp4jz3ONwUR0o5E0JE2KDqRgBIM+0mrdzzHQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFBNBprMb9LzhnazIE3rM627nBqhaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82 N2M1NWI0MS0wYTdiLTQxMWUtYTZiNS1iZjE1ZGJjZjRmYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzY3YzU1YjQxLTBhN2ItNDExZS1h NmI1LWJmMTVkYmNmNGZiMy82N2M1NWI0MS0wYTdiLTQxMWUtYTZiNS1iZjE1ZGJj ZjRmYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAgAQUAAAEwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfWvS5DoQLSCvIFWZ PvR5oeJT9bbAVG7YZiiS6mFUgAikUrVJRZsiaJDG5OPfFAWdbeGY5DJgaHitgGn3 I4PX3lMx4R+s7EM81ZGK3pmxEaayxFectg7Beew0MYf+Z83MJ+a8Sz4oT2tqZ6DF DIYsAxyKxXDKcC6hYc9JHvAOKkuK/kwjAkylXkIS3cmHiDqzV0ZdulP+m7azzoil vrgQOzfVsjSI+K719bdlSZpZSJ/YBoXpPhT1XYPJU3fRqrzOaFEir8T4jzNIZULY N17hyhLl/DNnIZKcdUB39GgGvAUGyfup1dkAvU0OZTD6uAI8DfiHRSIn0aZ3QFLk zslXiw== -----END CERTIFICATE-----Generated at Wed May 13 02:48:24 2026 by rpki-client