$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c9e46350-cf9d-432e-88d9-b2c0a6ffd63a.cer File: c9e46350-cf9d-432e-88d9-b2c0a6ffd63a.cer (raw, json) Hash identifier: 4Pc4a3E3kWcXF7NoDnbmp4BMhVYY972XziDCe7WTxlo= Subject key identifier: 73:13:12:F4:A2:EA:FA:65:CA:7D:A1:0A:96:78:24:1D:5B:5E:0B:EF Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DC1E96C1EE6FD3EA449D67780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c9e46350-cf9d-432e-88d9-b2c0a6ffd63a/c9e46350-cf9d-432e-88d9-b2c0a6ffd63a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c9e46350-cf9d-432e-88d9-b2c0a6ffd63a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 May 2026 19:02:54 +0000 Certificate not after: Wed 09 Aug 2028 19:02:54 +0000 Subordinate resources: IP: 2602:fc3b:e000::/36 IP: 2620:10f:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:e9:6c:1e:e6:fd:3e:a4:49:d6:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 7 19:02:54 2026 GMT Not After : Aug 9 19:02:54 2028 GMT Subject: CN=c9e46350-cf9d-432e-88d9-b2c0a6ffd63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:28:81:41:fe:38:78:9b:62:be:4f:17:2d: 32:20:df:34:05:60:e0:67:8d:73:0a:8e:92:a1:33: b9:45:41:30:89:4b:d6:4a:c1:66:d3:2a:78:ef:d4: fe:00:bf:a7:2d:9d:ab:b3:bc:27:df:33:8b:f6:fc: 5f:18:32:3f:56:5d:ba:4d:8e:f7:32:95:32:a0:f3: a8:b1:e0:60:22:99:95:bd:76:7e:1c:77:94:c2:46: 60:6f:98:14:4b:6d:9a:44:94:e4:8d:87:4f:19:62: 53:8c:19:37:f0:e9:29:87:3b:f2:9d:5d:82:97:3b: 82:d7:bb:bb:bc:9a:a3:fa:69:3e:d7:f3:f3:2d:67: a4:d2:48:a2:61:c3:27:9a:ac:4c:7f:95:38:29:24: 52:c3:55:bb:f4:5a:29:78:58:cd:eb:05:17:c7:a1: 8d:db:20:6b:37:39:1a:82:20:5f:e4:ae:3f:98:ee: 07:3c:bb:33:19:72:f3:80:ae:98:b3:00:83:96:5d: 0c:aa:f1:b4:12:2a:37:b5:b9:c2:28:36:46:c2:7a: 49:e3:5c:1c:d5:59:e0:42:5f:2b:2d:93:3a:50:63: da:d3:a6:d6:a3:d4:15:ca:39:67:01:1c:7e:ac:b8: d8:a8:4f:6c:0c:22:36:58:a1:d2:67:ca:c8:3d:fa: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:13:12:F4:A2:EA:FA:65:CA:7D:A1:0A:96:78:24:1D:5B:5E:0B:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c9e46350-cf9d-432e-88d9-b2c0a6ffd63a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c9e46350-cf9d-432e-88d9-b2c0a6ffd63a/c9e46350-cf9d-432e-88d9-b2c0a6ffd63a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:e000::/36 2620:10f:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ea:11:89:99:5d:de:05:7c:eb:32:6a:41:40:e0:12:cd:c7: 4c:10:a3:69:dd:4d:09:e9:be:1b:7b:22:4b:85:a9:f1:87:98: 99:d5:26:f8:fc:5d:b2:e1:45:bf:2e:d5:d5:4d:c6:06:10:f0: 44:c7:8d:33:d5:bc:dd:7d:0e:1a:aa:b6:7d:4b:b7:f0:20:dc: 75:a4:91:a0:6e:fb:22:50:9e:21:1e:d9:0d:82:a5:05:87:da: ce:ce:86:4a:65:15:65:64:c8:6e:43:7e:70:4e:5e:9b:89:0d: 3a:28:29:5c:31:78:f6:e7:67:f0:75:65:00:18:3a:7c:2a:ba: 44:01:e8:21:f3:f3:4e:20:bb:11:27:0a:11:1c:f7:1e:b5:61: 90:40:c3:1a:dd:a6:45:8a:5d:b1:ce:4f:12:aa:4c:4f:9e:8d: 59:b4:b1:53:36:86:bb:33:7d:cf:8b:66:0d:1c:76:63:4a:7e: 08:d8:8b:1e:7f:62:78:1c:df:bc:45:37:81:b7:e3:7e:eb:94: 4c:6c:3e:03:39:c4:f9:ec:8b:ef:95:19:7a:f8:d8:89:29:dc: 66:13:08:07:50:81:8d:6a:1c:44:a8:47:73:bc:ab:bd:e5:da: ac:19:f8:59:d0:12:ac:47:d2:48:3a:a2:e5:fc:c8:96:30:cb: d7:41:74:60 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWE3B6Wwe5v0+pEnWd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwNzE5MDI1NFoXDTI4MDgwOTE5MDI1NFowLzEtMCsGA1UEAxMk YzllNDYzNTAtY2Y5ZC00MzJlLTg4ZDktYjJjMGE2ZmZkNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTcogUH+OHibYr5PFy0yIN80BWDgZ41zCo6S oTO5RUEwiUvWSsFm0yp479T+AL+nLZ2rs7wn3zOL9vxfGDI/Vl26TY73MpUyoPOo seBgIpmVvXZ+HHeUwkZgb5gUS22aRJTkjYdPGWJTjBk38OkphzvynV2ClzuC17u7 vJqj+mk+1/PzLWek0kiiYcMnmqxMf5U4KSRSw1W79FopeFjN6wUXx6GN2yBrNzka giBf5K4/mO4HPLszGXLzgK6YswCDll0MqvG0Eio3tbnCKDZGwnpJ41wc1VngQl8r LZM6UGPa06bWo9QVyjlnARx+rLjYqE9sDCI2WKHSZ8rIPfoTUQIDAQABo4IECjCC BAYwHQYDVR0OBBYEFHMTEvSi6vplyn2hCpZ4JB1bXgvvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9j OWU0NjM1MC1jZjlkLTQzMmUtODhkOS1iMmMwYTZmZmQ2M2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2M5ZTQ2MzUwLWNmOWQtNDMyZS04 OGQ5LWIyYzBhNmZmZDYzYS9jOWU0NjM1MC1jZjlkLTQzMmUtODhkOS1iMmMwYTZm ZmQ2M2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBgQmAvw74AMHBCYgAQ/wADBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCP6hGJ mV3eBXzrMmpBQOASzcdMEKNp3U0J6b4beyJLhanxh5iZ1Sb4/F2y4UW/LtXVTcYG EPBEx40z1bzdfQ4aqrZ9S7fwINx1pJGgbvsiUJ4hHtkNgqUFh9rOzoZKZRVlZMhu Q35wTl6biQ06KClcMXj252fwdWUAGDp8KrpEAegh8/NOILsRJwoRHPcetWGQQMMa 3aZFil2xzk8SqkxPno1ZtLFTNoa7M33Pi2YNHHZjSn4I2Isef2J4HN+8RTeBt+N+ 65RMbD4DOcT57IvvlRl6+NiJKdxmEwgHUIGNahxEqEdzvKu95dqsGfhZ0BKsR9JI OqLl/MiWMMvXQXRg -----END CERTIFICATE-----Generated at Wed May 13 02:48:17 2026 by rpki-client