$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer File: 4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer (raw, json) Hash identifier: J1eFVu73OTHOJ71yDd6vWqnq2aCDbyEdkEMJMmOPp2U= Subject key identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E8DE82069499F577AB46C9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Jul 2026 20:45:12 +0000 Certificate not after: Sat 21 Oct 2028 20:45:12 +0000 Subordinate resources: IP: 2604:580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:e8:20:69:49:9f:57:7a:b4:6c:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 19 20:45:12 2026 GMT Not After : Oct 21 20:45:12 2028 GMT Subject: CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:53:89:f7:49:45:5e:1a:5b:2e:47:54:8e: 1a:26:04:df:e8:30:ef:b3:2f:d4:ec:4f:7a:72:b1: 61:21:c6:26:4f:cc:0b:54:f1:0c:fe:5f:d8:9a:fe: 9d:6a:ba:a2:cf:ee:12:99:65:04:79:e5:af:45:42: 39:31:ec:36:ba:89:57:e3:c4:5e:e8:39:fc:8f:ac: c6:c4:34:1a:91:51:3a:74:ff:5c:db:a3:f7:2f:f4: 85:7f:e4:5b:a8:3d:1b:88:15:11:b2:43:32:69:98: ca:6e:16:7f:05:f1:cd:2c:11:ed:2a:34:fd:b1:39: db:7f:62:06:60:40:39:a5:aa:ab:cd:6a:81:7b:ca: 51:55:4e:6d:10:72:c7:48:a5:5e:91:ba:85:6b:97: 51:8f:d8:37:9e:df:d2:60:c8:7e:c3:9a:6f:43:f1: b7:1f:96:50:84:10:d1:aa:18:e0:c1:a6:86:97:ae: 23:3d:19:12:0d:8c:d4:15:3a:f6:5a:01:49:c1:b8: 01:c5:73:be:92:e5:3b:f6:86:e2:fd:4f:cc:b5:b7: ac:1a:89:4d:a0:f2:3e:d2:b9:2a:6e:19:7d:11:9b: 90:c5:1c:6d:78:5e:8f:d1:93:2d:10:40:13:a6:b7: 4d:03:9a:68:58:8a:39:15:d5:0c:62:02:2e:7b:c6: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2604:580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f6:5c:b9:f5:8f:53:5f:ff:0f:c1:70:f8:53:4a:87:95:b7: eb:24:1a:d2:9a:a3:e0:ed:02:8c:b6:39:8c:f8:93:32:e8:7c: 7c:97:c2:c9:8a:60:c3:2c:23:4a:c0:ab:ec:23:c7:75:b9:02: 1f:35:aa:ea:a3:5f:cb:58:de:ef:cd:ab:62:b1:41:ac:70:3a: c3:93:e2:22:8c:09:f9:37:a6:64:ea:2e:7b:63:cf:c7:43:68: 8f:05:06:c3:85:0c:ad:bd:e7:ef:1b:f6:30:2a:a4:df:2e:3d: 59:0e:4f:a2:b1:5a:74:f8:02:9f:1f:a7:6d:ea:d1:56:a6:05: d2:6d:24:77:b4:5f:ba:90:2e:77:f4:d7:e2:de:ce:cf:0b:45: 0b:53:06:23:a2:59:42:e0:51:00:0d:af:4a:11:62:61:61:c1: e8:1c:17:bc:dc:a8:ed:97:44:3c:b6:2d:9d:8c:c9:50:df:5a: ed:22:f0:03:e5:9b:0e:fe:47:1d:51:dc:40:4c:97:8c:25:15: 21:55:17:26:29:b9:9f:8a:bb:a4:8d:94:e8:be:18:db:ba:fd: 0d:ab:84:fe:78:a9:b3:20:c7:13:cb:ed:f3:56:b7:96:cf:60: d1:0e:9d:d7:8a:10:d0:99:7b:fa:77:c3:85:25:09:0e:a5:6a: 2d:c5:7f:8c -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE6N6CBpSZ9XerRskAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcxOTIwNDUxMloXDTI4MTAyMTIwNDUxMlowLzEtMCsGA1UEAxMk NGM4MWZhNWYtM2Y2ZC00N2RiLWE1MDQtYWNlYjU0ZjkzYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaZTifdJRV4aWy5HVI4aJgTf6DDvsy/U7E96 crFhIcYmT8wLVPEM/l/Ymv6darqiz+4SmWUEeeWvRUI5Mew2uolX48Re6Dn8j6zG xDQakVE6dP9c26P3L/SFf+RbqD0biBURskMyaZjKbhZ/BfHNLBHtKjT9sTnbf2IG YEA5paqrzWqBe8pRVU5tEHLHSKVekbqFa5dRj9g3nt/SYMh+w5pvQ/G3H5ZQhBDR qhjgwaaGl64jPRkSDYzUFTr2WgFJwbgBxXO+kuU79obi/U/MtbesGolNoPI+0rkq bhl9EZuQxRxteF6P0ZMtEEATprdNA5poWIo5FdUMYgIue8ZuFwIDAQABo4IEADCC A/wwHQYDVR0OBBYEFP9S1UnSV1eBCUkV/A8Yz2Hn1+kUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRmOTNjMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRjODFmYTVmLTNmNmQtNDdkYi1h NTA0LWFjZWI1NGY5M2MyOC80YzgxZmE1Zi0zZjZkLTQ3ZGItYTUwNC1hY2ViNTRm OTNjMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBAWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE/2XLn1j1Nf/w/BcPhT SoeVt+skGtKao+DtAoy2OYz4kzLofHyXwsmKYMMsI0rAq+wjx3W5Ah81quqjX8tY 3u/Nq2KxQaxwOsOT4iKMCfk3pmTqLntjz8dDaI8FBsOFDK295+8b9jAqpN8uPVkO T6KxWnT4Ap8fp23q0VamBdJtJHe0X7qQLnf01+Lezs8LRQtTBiOiWULgUQANr0oR YmFhwegcF7zcqO2XRDy2LZ2MyVDfWu0i8APlmw7+Rx1R3EBMl4wlFSFVFyYpuZ+K u6SNlOi+GNu6/Q2rhP54qbMgxxPL7fNWt5bPYNEOndeKENCZe/p3w4UlCQ6lai3F f4w= -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:22 2026 by rpki-client