$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8.cer File: c327d959-17ff-4ba3-9e1b-4137bf227cf8.cer (raw, json) Hash identifier: pTfP8+1mwCo6gR3TxGFViYXrBHOOmLEZM+kk9/9lOZ0= Subject key identifier: 47:25:67:E6:7A:AC:25:61:39:54:DD:2F:A8:79:85:F8:61:8E:76:B1 Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DAE29476EA54C888B90F94AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/c327d959-17ff-4ba3-9e1b-4137bf227cf8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Apr 2026 17:15:24 +0000 Certificate not after: Wed 02 Aug 2028 17:15:24 +0000 Subordinate resources: AS: 402467 IP: 2620:3:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:29:47:6e:a5:4c:88:8b:90:f9:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: Apr 30 17:15:24 2026 GMT Not After : Aug 2 17:15:24 2028 GMT Subject: CN=c327d959-17ff-4ba3-9e1b-4137bf227cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:91:4a:fc:79:8f:4e:23:35:63:c2:34:39: b7:97:67:05:0e:f8:43:75:69:a8:64:16:0d:83:5d: 25:25:ff:d7:4f:07:39:a7:41:64:45:bf:12:c7:48: 92:46:0f:ec:a8:56:ae:f8:da:e8:14:d1:f5:cb:74: 49:78:d6:ba:da:1f:4d:a0:ad:4b:7c:8c:17:be:43: 7a:db:57:a2:4e:91:b9:b4:4a:9e:26:69:1b:eb:62: de:42:43:68:15:07:3b:01:04:f1:f5:5a:a5:53:00: 3d:0a:7e:8d:3d:a5:08:7d:e3:69:6d:9b:e4:65:9e: ff:28:c1:e3:bd:6e:04:d3:bd:ff:ad:c8:72:7e:e0: 99:2c:14:5d:5b:5b:84:33:2c:5e:6a:6d:ff:be:2c: ee:f8:ea:91:db:12:8c:ea:e7:2f:a2:ff:d2:d9:b8: c3:ec:f9:e5:6a:86:85:0d:bf:65:94:a5:b5:d1:7a: 3b:e4:14:69:b4:70:e7:3f:1a:d9:98:d9:2d:ca:7e: 77:2d:d0:01:0b:19:3c:88:1e:da:75:e9:60:5c:ac: 94:d9:25:af:c0:43:a7:cd:f8:dc:3b:49:45:79:0c: 7c:e9:80:a0:8a:9d:46:24:66:4b:73:b3:7f:8d:34: 71:af:b1:7e:68:16:6e:f3:a0:d2:82:f3:85:e1:d7: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:25:67:E6:7A:AC:25:61:39:54:DD:2F:A8:79:85:F8:61:8E:76:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c327d959-17ff-4ba3-9e1b-4137bf227cf8/c327d959-17ff-4ba3-9e1b-4137bf227cf8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2620:3:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402467 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9a:96:cb:41:6a:c8:6c:ba:20:fd:76:3c:b4:3c:30:12:cf: 9e:70:cd:0d:72:91:f4:15:6a:19:80:52:a0:4f:eb:1d:7e:8e: a3:70:17:6f:64:db:33:c2:20:91:a5:49:0b:76:40:d9:b2:63: d6:b6:f4:84:78:4b:e0:23:76:e0:3f:93:17:ff:ba:80:71:9d: 1f:ff:ed:90:06:44:4e:42:ca:e2:bd:e6:78:e9:e3:1e:ab:60: f3:6c:c1:0a:6b:1b:21:eb:14:d5:88:74:7d:19:33:6c:09:63: 85:d5:2f:c5:23:ff:e1:db:19:0a:08:85:dd:47:52:ba:39:15: fb:f4:f1:47:29:23:71:c3:65:88:20:a8:9b:e3:f4:a4:e5:38: 7c:46:ab:36:08:55:04:ca:f9:d4:77:8a:d6:64:5e:b0:82:cb: 7d:b0:da:99:53:f9:c6:ed:40:b7:41:f6:6f:ba:e8:ff:8e:7c: eb:ad:be:65:f5:13:37:0d:be:1c:9d:5c:c3:c5:0e:91:a7:4d: 0c:bc:ee:84:7c:0a:8d:8a:0e:3e:0d:2a:93:12:0f:56:80:fa: 61:f4:c6:d0:b8:17:cb:76:b4:06:cc:48:cd:4e:b4:92:52:39: ba:80:2b:c8:54:19:61:b1:b2:50:d1:2c:14:f1:66:d2:f6:b3: 31:a6:35:29 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE2uKUdupUyIi5D5SsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDQzMDE3MTUyNFoXDTI4MDgwMjE3MTUyNFowLzEtMCsGA1UEAxMk YzMyN2Q5NTktMTdmZi00YmEzLTllMWItNDEzN2JmMjI3Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2+RSvx5j04jNWPCNDm3l2cFDvhDdWmoZBYN g10lJf/XTwc5p0FkRb8Sx0iSRg/sqFau+NroFNH1y3RJeNa62h9NoK1LfIwXvkN6 21eiTpG5tEqeJmkb62LeQkNoFQc7AQTx9VqlUwA9Cn6NPaUIfeNpbZvkZZ7/KMHj vW4E073/rchyfuCZLBRdW1uEMyxeam3/vizu+OqR2xKM6ucvov/S2bjD7PnlaoaF Db9llKW10Xo75BRptHDnPxrZmNktyn53LdABCxk8iB7adelgXKyU2SWvwEOnzfjc O0lFeQx86YCgip1GJGZLc7N/jTRxr7F+aBZu86DSgvOF4deKBwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFEclZ+Z6rCVhOVTdL6h5hfhhjnaxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j MzI3ZDk1OS0xN2ZmLTRiYTMtOWUxYi00MTM3YmYyMjdjZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2MzMjdkOTU5LTE3ZmYtNGJhMy05 ZTFiLTQxMzdiZjIyN2NmOC9jMzI3ZDk1OS0xN2ZmLTRiYTMtOWUxYi00MTM3YmYy MjdjZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAD4AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiQjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAKaalstBashsuiD9djy0PDASz55wzQ1ykfQVahmAUqBP 6x1+jqNwF29k2zPCIJGlSQt2QNmyY9a29IR4S+AjduA/kxf/uoBxnR//7ZAGRE5C yuK95njp4x6rYPNswQprGyHrFNWIdH0ZM2wJY4XVL8Uj/+HbGQoIhd1HUro5Ffv0 8UcpI3HDZYggqJvj9KTlOHxGqzYIVQTK+dR3itZkXrCCy32w2plT+cbtQLdB9m+6 6P+OfOutvmX1EzcNvhydXMPFDpGnTQy87oR8Co2KDj4NKpMSD1aA+mH0xtC4F8t2 tAbMSM1OtJJSObqAK8hUGWGxslDRLBTxZtL2szGmNSk= -----END CERTIFICATE-----Generated at Wed May 13 02:50:07 2026 by rpki-client