$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer File: ec3472d2-073b-458a-8e0f-7ee77169574a.cer (raw, json) Hash identifier: 1D4lwFxZf7RvwRWpY8pA1FM7auNWFvCqtpBpSzqiMCo= Subject key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584F25202D5BB6F241449D3F0F60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Sep 2026 00:45:11 +0000 Certificate not after: Fri 15 Dec 2028 01:45:11 +0000 Subordinate resources: IP: 2602:f957::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:20:2d:5b:b6:f2:41:44:9d:3f:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Sep 12 00:45:11 2026 GMT Not After : Dec 15 01:45:11 2028 GMT Subject: CN=ec3472d2-073b-458a-8e0f-7ee77169574a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:44:b9:ec:4c:47:57:d9:05:4d:97:d1:60: 03:ea:e7:92:42:da:d4:8a:82:9e:e6:1f:01:d1:f5: 4b:d7:7e:a4:3e:c7:9a:fa:a5:16:1a:f7:bf:ad:41: 12:fc:ad:5b:89:23:08:33:27:22:f1:3c:7a:e6:ff: 52:4b:63:c7:b9:ce:ea:55:18:a4:70:ec:6c:48:30: 63:de:78:55:71:ba:86:66:ca:0f:00:7f:ce:c1:bc: 1d:8c:b9:80:87:4f:bd:c1:6f:03:06:27:61:7a:36: 62:49:a5:7e:43:c0:98:55:29:0c:44:ab:3f:60:1f: 30:17:09:c1:b8:85:e6:93:0b:33:51:b2:61:92:b9: 3e:66:a7:17:1f:9c:52:3f:95:2e:ee:91:6e:af:68: 8c:71:91:80:fc:8d:ed:f5:cd:11:54:24:00:b5:60: 57:1d:d0:d6:2d:d7:8d:9c:36:c9:01:27:af:9c:01: 01:00:3e:08:bf:26:2d:81:ef:b0:32:ce:52:4f:22: 6f:00:d5:24:16:79:3a:f0:f5:5b:1d:35:a5:57:78: 32:f7:25:6d:93:e3:9a:9d:59:a0:09:89:6f:74:2c: 4c:8c:f0:4e:90:65:06:9e:d3:a2:53:03:36:fe:c0: db:c7:a0:2a:53:35:fc:fe:d1:26:27:53:d5:2e:fb: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2602:f957::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:36:6d:ce:bd:ee:7a:e5:d1:18:08:f7:63:45:8e:c2:9d:1d: 1b:23:9f:73:2f:81:5d:93:af:e2:6a:ef:37:26:cd:65:0f:b7: 78:ba:4e:94:f2:b4:4f:b2:7d:d9:97:97:79:9d:52:71:3f:53: b9:48:be:79:b6:c5:a9:d7:53:d6:67:dc:80:0b:61:23:1e:9c: 3f:fd:ff:8f:9e:65:01:e7:46:cd:73:3e:4c:c1:e1:56:7c:c5: 9d:8e:03:60:be:06:5b:3d:d8:7c:06:09:1e:de:66:99:db:94: b4:8e:c9:de:50:09:04:d8:0e:ce:13:e8:d3:62:0e:b4:f7:b9: 93:39:2b:80:6b:91:eb:54:4a:10:8a:33:b4:b2:81:05:2b:57: 09:c6:89:64:c6:b4:59:61:f3:f1:68:42:16:ba:7d:87:9c:4b: b9:e2:90:ce:5e:37:b4:ce:6c:77:7d:9c:5e:fe:56:2f:2f:c2: ee:09:46:ed:46:e0:d1:1a:aa:b7:65:a9:5f:d1:fa:b6:ba:3f: 6a:39:6e:82:0e:01:d0:72:33:e0:00:d4:f7:5c:7e:74:c6:d1: 17:ad:05:5b:f8:29:d2:30:af:14:e2:f4:43:6a:cb:73:28:35: e0:7a:d4:a1:6b:88:aa:50:67:4d:ac:c9:ed:79:be:d4:11:a1: 15:d4:b5:f3 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE8lIC1btvJBRJ0/D2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MDkxMjAwNDUxMVoXDTI4MTIxNTAxNDUxMVowLzEtMCsGA1UEAxMk ZWMzNDcyZDItMDczYi00NThhLThlMGYtN2VlNzcxNjk1NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe9EuexMR1fZBU2X0WAD6ueSQtrUioKe5h8B 0fVL136kPsea+qUWGve/rUES/K1biSMIMyci8Tx65v9SS2PHuc7qVRikcOxsSDBj 3nhVcbqGZsoPAH/OwbwdjLmAh0+9wW8DBidhejZiSaV+Q8CYVSkMRKs/YB8wFwnB uIXmkwszUbJhkrk+ZqcXH5xSP5Uu7pFur2iMcZGA/I3t9c0RVCQAtWBXHdDWLdeN nDbJASevnAEBAD4IvyYtge+wMs5STyJvANUkFnk68PVbHTWlV3gy9yVtk+OanVmg CYlvdCxMjPBOkGUGntOiUwM2/sDbx6AqUzX8/tEmJ1PVLvu5NwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFHJwRLyY1+60MrReCoTxhK5WUalFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l YzM0NzJkMi0wNzNiLTQ1OGEtOGUwZi03ZWU3NzE2OTU3NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2VjMzQ3MmQyLTA3M2ItNDU4YS04 ZTBmLTdlZTc3MTY5NTc0YS9lYzM0NzJkMi0wNzNiLTQ1OGEtOGUwZi03ZWU3NzE2 OTU3NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvlXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxNm3Ove565dEYCPdj RY7CnR0bI59zL4Fdk6/iau83Js1lD7d4uk6U8rRPsn3Zl5d5nVJxP1O5SL55tsWp 11PWZ9yAC2EjHpw//f+PnmUB50bNcz5MweFWfMWdjgNgvgZbPdh8Bgke3maZ25S0 jsneUAkE2A7OE+jTYg6097mTOSuAa5HrVEoQijO0soEFK1cJxolkxrRZYfPxaEIW un2HnEu54pDOXje0zmx3fZxe/lYvL8LuCUbtRuDRGqq3Zalf0fq2uj9qOW6CDgHQ cjPgANT3XH50xtEXrQVb+CnSMK8U4vRDastzKDXgetSha4iqUGdNrMnteb7UEaEV 1LXz -----END CERTIFICATE-----Generated at Tue Sep 22 20:25:58 2026 by rpki-client