$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer File: 6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer (raw, json) Hash identifier: wOiU1NLEdGtur50y9W6mjN77tkShs9+kCVDdX0tOTeI= Subject key identifier: B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E580E318AD82C043D811B1C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jun 2026 13:48:15 +0000 Certificate not after: Wed 12 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 8987 IP: 2600:f000::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:58:0e:31:8a:d8:2c:04:3d:81:1b:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 30 13:48:15 2026 GMT Not After : Jul 12 12:45:17 2028 GMT Subject: CN=6a9537a8-a685-4b48-9fa8-8362e4fc47ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:e8:93:0c:18:d7:c5:b2:d8:9d:d5:c4:15: 4f:02:d4:7a:2e:84:f2:84:c6:87:af:17:e9:40:39: f4:4f:04:25:be:35:26:dd:23:20:b2:0a:c8:ce:0f: d4:14:40:e5:2a:e8:b7:a4:3e:03:f4:de:24:4d:30: 5e:66:e8:44:74:b9:f2:2d:58:1a:85:3c:f9:31:66: 24:ca:9a:6e:c3:18:5f:24:7e:ba:9c:ae:6e:af:23: 5f:b7:c0:d2:8b:51:5d:07:ce:0c:1b:ce:a1:5b:9e: 8f:4c:fe:dc:51:f0:ed:59:7d:bd:b6:f2:66:3e:97: b3:74:02:78:7f:65:2a:1b:36:72:e0:14:c5:d6:89: 07:94:c1:9e:9d:76:16:59:31:3f:57:55:3c:d6:37: e2:da:bd:bc:4b:31:48:f5:47:1a:1f:60:1f:2d:f9: 06:18:eb:4c:9a:82:bb:a9:bc:02:b5:5b:48:04:50: c3:df:9f:8e:60:20:5c:a3:62:63:11:97:fc:0d:3d: 74:05:c0:97:94:2d:0b:9f:2e:14:b9:e8:ee:9c:11: 7b:fe:8a:86:00:1f:37:dd:7b:5d:17:42:dc:96:00: 31:e8:ac:2b:e5:25:99:b1:76:46:93:55:a2:09:28: 57:b4:7f:9f:d3:28:b8:64:7f:66:84:f4:6e:8f:2f: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:73:6E:E2:05:2B:AD:D4:7E:01:2A:25:CC:44:7E:8F:26:0B:B1:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2600:f000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8987 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d4:1e:d8:b0:75:ed:7a:91:01:83:19:c8:6b:80:11:01:da: 0a:95:ca:ad:a0:47:7d:6c:4e:00:ed:21:c6:b7:2e:3a:71:e1: b9:0c:b7:e7:03:9a:e0:1b:16:3d:c4:6d:a7:a8:24:ee:8c:66: 88:d0:56:62:5c:5e:66:9a:21:d4:a8:8f:83:a1:d7:63:2d:8f: 59:71:8e:a3:1f:ff:cc:a3:f6:7f:d3:32:d6:74:66:e9:27:35: f1:0b:69:0b:01:8a:4c:51:33:58:22:12:e3:e8:3d:fb:46:20: de:aa:1e:88:05:f7:a7:1e:02:77:01:bc:a5:04:a4:0a:1f:17: aa:48:55:01:45:4d:10:35:90:0e:8f:5d:21:31:c5:0b:b8:7a: 4b:5f:c3:65:ee:aa:3a:4f:80:d4:a2:b0:da:2e:81:ad:66:75: 52:a3:6a:80:30:38:97:fc:20:4d:97:69:12:a6:90:8c:f6:36: 56:f5:bb:d4:5b:f8:05:57:53:ce:74:b3:88:85:81:99:22:78: 8f:b4:1b:54:c1:bf:99:78:5a:19:a0:bf:12:d9:b0:2c:a8:c8: 93:c1:90:bc:9e:67:28:64:03:99:2b:00:70:1c:f7:b9:f9:5f: 37:be:a7:21:55:86:c6:29:1e:89:a4:07:5c:74:80:16:5a:06: 1e:16:88:4e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE5YDjGK2CwEPYEbHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYzMDEzNDgxNVoXDTI4MDcxMjEyNDUxN1owLzEtMCsGA1UEAxMk NmE5NTM3YTgtYTY4NS00YjQ4LTlmYTgtODM2MmU0ZmM0N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1fokwwY18Wy2J3VxBVPAtR6LoTyhMaHrxfp QDn0TwQlvjUm3SMgsgrIzg/UFEDlKui3pD4D9N4kTTBeZuhEdLnyLVgahTz5MWYk yppuwxhfJH66nK5uryNft8DSi1FdB84MG86hW56PTP7cUfDtWX29tvJmPpezdAJ4 f2UqGzZy4BTF1okHlMGenXYWWTE/V1U81jfi2r28SzFI9UcaH2AfLfkGGOtMmoK7 qbwCtVtIBFDD35+OYCBco2JjEZf8DT10BcCXlC0Lny4UuejunBF7/oqGAB833Xtd F0LclgAx6Kwr5SWZsXZGk1WiCShXtH+f0yi4ZH9mhPRujy+KiQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFLFzbuIFK63UfgEqJcxEfo8mC7FEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 YTk1MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZhOTUzN2E4LWE2ODUtNGI0OC05 ZmE4LTgzNjJlNGZjNDdhZS82YTk1MzdhOC1hNjg1LTRiNDgtOWZhOC04MzYyZTRm YzQ3YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgACMAYDBAAmAPAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC IxswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAUdQe2LB17XqRAYMZyGuAEQHaCpXKraBHfWxOAO0hxrcuOnHh uQy35wOa4BsWPcRtp6gk7oxmiNBWYlxeZpoh1KiPg6HXYy2PWXGOox//zKP2f9My 1nRm6Sc18QtpCwGKTFEzWCIS4+g9+0Yg3qoeiAX3px4CdwG8pQSkCh8XqkhVAUVN EDWQDo9dITHFC7h6S1/DZe6qOk+A1KKw2i6BrWZ1UqNqgDA4l/wgTZdpEqaQjPY2 VvW71Fv4BVdTznSziIWBmSJ4j7QbVMG/mXhaGaC/EtmwLKjIk8GQvJ5nKGQDmSsA cBz3uflfN76nIVWGxikeiaQHXHSAFloGHhaITg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:39:56 2026 by rpki-client