$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer File: 31cdafa2-3aa9-4253-a242-08ace2acaef2.cer (raw, json) Hash identifier: yf9nlHFLP2WLbNP3FgMeYTDN4xd9cqI5lFYGAYGdV7w= Subject key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E5777C8C00968BE661D446080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jun 2026 08:45:11 +0000 Certificate not after: Mon 02 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 18586 IP: 2602:f702::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:77:c8:c0:09:68:be:66:1d:44:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 30 08:45:11 2026 GMT Not After : Oct 2 08:45:11 2028 GMT Subject: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:4d:97:53:5e:44:ea:8e:70:af:9e:69:f6: 8b:53:a5:76:6d:6c:1f:08:f9:76:8a:0c:1a:fa:2d: 04:f8:38:9b:41:bd:ae:a3:b5:73:91:04:0e:e2:a5: fe:35:5c:f8:fc:c2:c9:5f:02:2e:00:f2:47:88:c0: 29:b8:7a:c8:79:37:a1:47:87:ba:65:73:98:b5:5c: 60:b8:8e:6f:52:38:44:6f:d4:c5:14:60:69:ac:95: 9b:12:00:7a:2b:8c:34:87:bd:d4:80:9c:a8:60:61: 3c:c7:69:6d:a9:cc:37:2b:25:c5:00:9b:e0:ea:20: 69:b3:80:af:c7:b4:1e:06:a0:f8:fb:15:53:de:4f: 7a:ce:7a:0d:94:bf:20:84:58:88:a4:7e:45:61:b0: 46:22:0c:68:10:e0:f9:cf:b4:cf:fa:f5:70:60:00: b3:de:b5:5d:9c:38:48:04:ca:c9:6d:67:26:bb:3a: 22:eb:9c:40:06:b5:20:25:8b:21:04:2c:07:12:0a: 16:e4:37:54:79:a7:ab:d4:15:93:53:18:2c:3a:81: 1a:ab:f6:1c:dc:7d:41:17:81:ee:98:b9:cb:06:f1: 1f:60:3c:fc:97:b4:a4:23:3d:12:9c:cd:3a:aa:ee: a3:3a:61:07:25:e7:62:96:80:6f:5f:90:24:c3:a2: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f702::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18586 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:88:9e:08:02:d9:85:d3:a7:18:e7:93:d3:ef:e0:51:9c:af: c2:06:49:27:79:06:be:93:a6:ea:18:62:ac:5c:76:91:c4:8f: 09:44:6c:54:ea:e1:82:db:39:50:1a:eb:de:a2:f3:e1:be:f0: db:5c:d4:11:72:cd:94:cf:19:cd:ef:c0:92:2f:70:b0:30:79: f2:58:3d:6c:7e:d6:64:e9:c9:7d:4e:55:ef:97:f7:74:96:d0: a4:c5:af:08:40:a1:d5:21:f6:2f:3d:61:28:00:7e:71:91:5e: 12:fb:65:f1:78:39:94:85:c0:0d:ef:ae:46:9f:34:c1:29:66: 2d:68:8b:63:90:de:56:4f:13:26:27:17:d5:09:42:d6:b7:05: 3a:4f:88:4a:15:79:a9:09:90:e3:15:d6:91:0b:1a:db:70:8d: a7:a4:ac:83:25:75:46:c7:90:6e:1e:aa:b7:f9:30:ed:95:3f: 22:19:0a:6f:a0:97:b4:00:bd:97:a3:19:96:94:32:5b:0b:01: 52:66:92:61:2a:08:55:f0:03:3c:26:c4:78:42:87:39:da:a6: 5d:97:b4:3a:fe:01:fb:4a:2a:a0:49:2b:f7:94:74:29:45:76: aa:27:0a:f2:ec:12:e9:8d:fe:f3:b0:0e:a3:91:21:47:41:ca: 7c:85:69:dc -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE5Xd8jACWi+Zh1EYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYzMDA4NDUxMVoXDTI4MTAwMjA4NDUxMVowLzEtMCsGA1UEAxMk MzFjZGFmYTItM2FhOS00MjUzLWEyNDItMDhhY2UyYWNhZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy5Nl1NeROqOcK+eafaLU6V2bWwfCPl2igwa +i0E+DibQb2uo7VzkQQO4qX+NVz4/MLJXwIuAPJHiMApuHrIeTehR4e6ZXOYtVxg uI5vUjhEb9TFFGBprJWbEgB6K4w0h73UgJyoYGE8x2ltqcw3KyXFAJvg6iBps4Cv x7QeBqD4+xVT3k96znoNlL8ghFiIpH5FYbBGIgxoEOD5z7TP+vVwYACz3rVdnDhI BMrJbWcmuzoi65xABrUgJYshBCwHEgoW5DdUeaer1BWTUxgsOoEaq/Yc3H1BF4Hu mLnLBvEfYDz8l7SkIz0SnM06qu6jOmEHJediloBvX5Akw6I1vQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFGESJ9V7sWasxn0dqIUaPZf/XPk0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z MWNkYWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFjZTJhY2FlZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzMxY2RhZmEyLTNhYTktNDI1My1h MjQyLTA4YWNlMmFjYWVmMi8zMWNkYWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFjZTJh Y2FlZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvcCADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJImjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAziJ4IAtmF06cY55PT7+BRnK/CBkkneQa+k6bqGGKsXHaR xI8JRGxU6uGC2zlQGuveovPhvvDbXNQRcs2UzxnN78CSL3CwMHnyWD1sftZk6cl9 TlXvl/d0ltCkxa8IQKHVIfYvPWEoAH5xkV4S+2XxeDmUhcAN765GnzTBKWYtaItj kN5WTxMmJxfVCULWtwU6T4hKFXmpCZDjFdaRCxrbcI2npKyDJXVGx5BuHqq3+TDt lT8iGQpvoJe0AL2XoxmWlDJbCwFSZpJhKghV8AM8JsR4Qoc52qZdl7Q6/gH7Siqg SSv3lHQpRXaqJwry7BLpjf7zsA6jkSFHQcp8hWnc -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:04 2026 by rpki-client