$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/491aabea-f93d-492e-9f8e-d85871f79647.cer File: 491aabea-f93d-492e-9f8e-d85871f79647.cer (raw, json) Hash identifier: DoJFNk4TKldbziSij6Q+ZqBum2b2PBNx4t3tODmYMOw= Subject key identifier: 0F:FB:C1:2D:CD:B3:49:F5:86:7F:9C:08:6F:A8:F7:ED:C5:83:60:1E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584DC494331FFC0DA718AE728580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/491aabea-f93d-492e-9f8e-d85871f79647/491aabea-f93d-492e-9f8e-d85871f79647.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/491aabea-f93d-492e-9f8e-d85871f79647/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 May 2026 17:58:37 +0000 Certificate not after: Thu 10 Aug 2028 17:58:37 +0000 Subordinate resources: IP: 2620:0:50f0::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:94:33:1f:fc:0d:a7:18:ae:72:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 8 17:58:37 2026 GMT Not After : Aug 10 17:58:37 2028 GMT Subject: CN=491aabea-f93d-492e-9f8e-d85871f79647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:1e:7d:3d:a3:3e:bf:2c:96:f6:fd:36:5c: 3f:d0:91:93:0d:20:b0:85:37:e6:b6:c5:cb:7d:79: 00:e7:bf:f4:6e:6a:89:e9:b3:a5:2b:91:28:13:f0: d3:43:aa:b0:95:9c:25:16:ab:ac:89:fa:85:ec:b5: 84:cf:eb:88:bd:c0:34:4e:6b:c2:dc:a0:25:95:50: 3e:11:11:07:64:ec:a8:d5:03:84:e1:ff:ca:84:31: 79:67:d3:16:3c:89:e3:7b:d4:43:fa:59:c7:53:c1: f4:1d:c5:15:37:78:8d:8a:b7:31:9e:b7:4e:07:26: 1c:c0:0c:a0:82:c0:70:4b:1b:93:d2:6c:3c:6a:0c: d7:1e:32:93:01:09:15:62:6b:41:3a:39:2e:e0:87: 48:7e:14:97:ef:79:ba:5b:75:41:b3:9d:06:50:39: 12:b4:a6:3f:65:0e:8d:d8:b8:30:da:62:31:e0:e7: 87:02:1f:72:35:55:99:00:95:ba:c1:e8:b3:4b:fd: 7c:59:69:56:4e:d7:79:46:83:29:e2:39:40:a6:30: 53:33:1b:de:23:ad:05:00:c5:60:36:fe:0e:6c:5b: 80:dc:1e:8e:36:d5:f5:27:9a:5e:82:13:c3:a2:65: 89:d9:94:61:ea:f9:bf:62:62:9f:f4:0b:fa:e5:07: 88:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FB:C1:2D:CD:B3:49:F5:86:7F:9C:08:6F:A8:F7:ED:C5:83:60:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/491aabea-f93d-492e-9f8e-d85871f79647/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/491aabea-f93d-492e-9f8e-d85871f79647/491aabea-f93d-492e-9f8e-d85871f79647.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:50f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3a:6d:60:82:c4:6a:74:5f:f9:03:ef:29:40:d8:7d:c4:9f: be:d6:3e:95:0f:81:93:55:88:24:87:01:b3:3c:67:92:81:2c: 8e:08:93:48:42:7e:d0:c1:b8:b8:da:89:3e:d6:91:cd:69:40: a3:d2:b7:04:33:0b:8e:7b:b8:54:fc:8f:32:b4:b8:3a:36:b3: 61:89:5b:ec:57:47:c7:10:47:05:f6:ca:a7:fa:20:5e:3a:d2: 22:40:22:be:5b:e8:b7:7e:bf:cb:3d:18:8e:4b:2b:c9:bf:a2: 4f:a4:bb:87:65:ba:01:22:55:a2:e2:d5:ae:44:99:5c:b4:f7: 69:d9:91:68:44:cb:45:96:3d:05:db:9e:0f:fd:f3:c9:61:3b: 40:91:4e:fd:e5:26:04:83:b3:28:fa:1b:20:2d:8c:94:2b:5b: 08:16:15:c8:15:44:8b:b3:83:1c:14:bc:7a:57:38:a9:b7:cf: 55:eb:0d:47:84:14:0c:42:22:3e:f8:46:fb:f9:f7:7e:db:74: 35:50:ad:d0:ff:b7:fb:ce:6c:dd:44:ad:9f:ab:e9:7c:bd:28: 6e:a6:7d:95:e6:f0:ab:2f:d8:b1:22:85:a5:af:19:c4:a8:43: ec:af:3b:f7:6f:db:cd:88:ac:b7:52:c8:e2:ae:0b:73:ea:8b: 90:55:c5:bf -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE3ElDMf/A2nGK5yhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDUwODE3NTgzN1oXDTI4MDgxMDE3NTgzN1owLzEtMCsGA1UEAxMk NDkxYWFiZWEtZjkzZC00OTJlLTlmOGUtZDg1ODcxZjc5NjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVEefT2jPr8slvb9Nlw/0JGTDSCwhTfmtsXL fXkA57/0bmqJ6bOlK5EoE/DTQ6qwlZwlFqusifqF7LWEz+uIvcA0TmvC3KAllVA+ EREHZOyo1QOE4f/KhDF5Z9MWPInje9RD+lnHU8H0HcUVN3iNircxnrdOByYcwAyg gsBwSxuT0mw8agzXHjKTAQkVYmtBOjku4IdIfhSX73m6W3VBs50GUDkStKY/ZQ6N 2Lgw2mIx4OeHAh9yNVWZAJW6weizS/18WWlWTtd5RoMp4jlApjBTMxveI60FAMVg Nv4ObFuA3B6ONtX1J5peghPDomWJ2ZRh6vm/YmKf9Av65QeIwwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFA/7wS3Ns0n1hn+cCG+o9+3Fg2AeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 OTFhYWJlYS1mOTNkLTQ5MmUtOWY4ZS1kODU4NzFmNzk2NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzQ5MWFhYmVhLWY5M2QtNDkyZS05 ZjhlLWQ4NTg3MWY3OTY0Ny80OTFhYWJlYS1mOTNkLTQ5MmUtOWY4ZS1kODU4NzFm Nzk2NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAAAUPAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMDptYILEanRf+QPv KUDYfcSfvtY+lQ+Bk1WIJIcBszxnkoEsjgiTSEJ+0MG4uNqJPtaRzWlAo9K3BDML jnu4VPyPMrS4OjazYYlb7FdHxxBHBfbKp/ogXjrSIkAivlvot36/yz0Yjksryb+i T6S7h2W6ASJVouLVrkSZXLT3admRaETLRZY9BdueD/3zyWE7QJFO/eUmBIOzKPob IC2MlCtbCBYVyBVEi7ODHBS8elc4qbfPVesNR4QUDEIiPvhG+/n3ftt0NVCt0P+3 +85s3UStn6vpfL0obqZ9lebwqy/YsSKFpa8ZxKhD7K8792/bzYist1LI4q4Lc+qL kFXFvw== -----END CERTIFICATE-----Generated at Tue May 12 21:32:21 2026 by rpki-client