$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074.cer File: 70dc2956-fb1c-4553-a350-34a7af11a074.cer (raw, json) Hash identifier: B/4bWkvFd7tMHfL4Zoi7sqIIsODZ5tG28ytZ6Yb5oS8= Subject key identifier: FE:2E:65:F2:CC:D2:5E:EF:03:5C:33:14:86:01:54:6E:38:D1:05:0C Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E5612722EC65C58FFE8B113A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/70dc2956-fb1c-4553-a350-34a7af11a074.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jun 2026 20:45:12 +0000 Certificate not after: Sun 01 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 400696 IP: 2602:f6e9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:12:72:2e:c6:5c:58:ff:e8:b1:13:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 29 20:45:12 2026 GMT Not After : Oct 1 20:45:12 2028 GMT Subject: CN=70dc2956-fb1c-4553-a350-34a7af11a074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:c1:c8:05:ba:4a:c8:59:0f:6a:90:d6:03: 6c:e7:84:9e:70:00:1a:a9:dd:36:7c:8c:53:eb:7d: 29:4d:55:bd:fd:f6:d7:93:eb:a8:eb:7e:94:bb:37: 23:e6:b5:47:38:96:ab:f6:16:a2:cb:47:29:03:9f: aa:44:32:aa:a1:46:c1:aa:6b:91:92:80:17:f7:6a: a6:f7:15:f4:da:f2:38:27:eb:c6:69:e7:23:80:b8: b0:15:3e:ca:79:97:0d:96:1a:d4:70:6c:92:15:65: 94:45:c3:91:96:a3:50:8f:5d:d2:06:bd:0b:81:12: 29:60:3e:c5:3f:d8:44:6c:22:64:32:1f:73:ab:7a: 0c:78:e0:21:6a:c6:15:2b:62:b2:a5:e4:dc:c2:93: 6e:59:47:84:a5:67:c3:84:f4:7c:fc:c5:a1:00:f3: 14:b0:74:c0:b2:93:a1:36:70:e5:db:cd:30:14:ef: 5a:5a:5e:56:d2:5a:e8:8f:30:7e:16:82:ed:23:f6: 53:6b:18:3a:fb:10:97:87:ac:ee:76:3e:7c:bb:77: 0d:1f:91:bb:a9:87:e8:3d:69:b7:1b:97:08:f0:7d: a4:f7:e2:1c:0c:8a:91:06:84:88:c4:05:f6:bb:0d: 28:58:77:cd:5d:39:eb:56:f3:d7:03:f5:d5:18:b5: b6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:65:F2:CC:D2:5E:EF:03:5C:33:14:86:01:54:6E:38:D1:05:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/70dc2956-fb1c-4553-a350-34a7af11a074/70dc2956-fb1c-4553-a350-34a7af11a074.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6e9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400696 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9b:78:bd:fb:cb:48:14:0d:8b:31:71:47:dd:d7:f1:90:e7: 07:b1:8b:ef:71:f8:b1:98:2f:03:23:19:6b:9a:6f:94:c9:ad: 51:c8:e7:6b:6f:cd:f2:a6:f4:d1:03:11:df:5c:3c:ad:7d:88: 76:6e:ea:65:32:01:92:7a:38:5f:b1:9c:c4:f0:78:88:44:07: 7d:8e:b2:bf:d2:61:c7:19:b5:13:a8:c7:ab:0c:f7:94:82:0b: 5a:79:ba:1b:96:d3:a8:f6:43:c2:e3:73:7b:3d:67:7a:d8:f4: 5a:ff:79:28:16:31:b9:13:8a:82:b9:01:25:17:f2:89:7d:bb: aa:54:6a:f5:1b:e3:80:02:15:5f:8f:5a:24:13:04:18:c0:49: 99:08:d4:5a:2f:79:7e:ec:65:89:62:0b:61:8b:7f:2b:d6:90: 07:eb:44:7f:1d:17:c5:dc:b4:38:1b:77:85:c3:49:fe:0c:21: 84:4b:c3:d5:39:17:d5:cd:07:3c:a5:dd:c8:87:b7:02:1e:07: 8e:4e:17:89:ce:6d:6c:e0:bc:41:02:6b:c2:d4:3f:e2:31:eb: d1:d8:a1:11:bc:fd:61:c6:fd:de:2f:f1:56:4d:10:54:0c:8f: 49:35:25:15:82:0d:77:8b:6a:09:dc:37:84:62:83:b1:f1:fa: 15:ef:13:41 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE5WEnIuxlxY/+ixE6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDYyOTIwNDUxMloXDTI4MTAwMTIwNDUxMlowLzEtMCsGA1UEAxMk NzBkYzI5NTYtZmIxYy00NTUzLWEzNTAtMzRhN2FmMTFhMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzjByAW6SshZD2qQ1gNs54SecAAaqd02fIxT 630pTVW9/fbXk+uo636Uuzcj5rVHOJar9haiy0cpA5+qRDKqoUbBqmuRkoAX92qm 9xX02vI4J+vGaecjgLiwFT7KeZcNlhrUcGySFWWURcORlqNQj13SBr0LgRIpYD7F P9hEbCJkMh9zq3oMeOAhasYVK2KypeTcwpNuWUeEpWfDhPR8/MWhAPMUsHTAspOh NnDl280wFO9aWl5W0lrojzB+FoLtI/ZTaxg6+xCXh6zudj58u3cNH5G7qYfoPWm3 G5cI8H2k9+IcDIqRBoSIxAX2uw0oWHfNXTnrVvPXA/XVGLW2bwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFP4uZfLM0l7vA1wzFIYBVG440QUMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 MGRjMjk1Ni1mYjFjLTQ1NTMtYTM1MC0zNGE3YWYxMWEwNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcwZGMyOTU2LWZiMWMtNDU1My1h MzUwLTM0YTdhZjExYTA3NC83MGRjMjk1Ni1mYjFjLTQ1NTMtYTM1MC0zNGE3YWYx MWEwNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvbpADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGHTgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAOZt4vfvLSBQNizFxR93X8ZDnB7GL73H4sZgvAyMZa5pv lMmtUcjna2/N8qb00QMR31w8rX2Idm7qZTIBkno4X7GcxPB4iEQHfY6yv9Jhxxm1 E6jHqwz3lIILWnm6G5bTqPZDwuNzez1netj0Wv95KBYxuROKgrkBJRfyiX27qlRq 9RvjgAIVX49aJBMEGMBJmQjUWi95fuxliWILYYt/K9aQB+tEfx0Xxdy0OBt3hcNJ /gwhhEvD1TkX1c0HPKXdyIe3Ah4Hjk4Xic5tbOC8QQJrwtQ/4jHr0dihEbz9Ycb9 3i/xVk0QVAyPSTUlFYINd4tqCdw3hGKDsfH6Fe8TQQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:23:48 2026 by rpki-client