$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798.cer File: bdbbe046-d490-45ba-874a-27181cb4b798.cer (raw, json) Hash identifier: cV2e9kYvQOxWSVntYPxB9p54/w/awam4sRsiUoOPXyQ= Subject key identifier: 53:30:DA:7B:DE:0A:A0:09:B2:05:36:2F:7E:74:14:45:06:D3:CF:DB Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584E96482DCE37B1F6D7DA585000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/bdbbe046-d490-45ba-874a-27181cb4b798.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jul 2026 20:45:12 +0000 Certificate not after: Tue 24 Oct 2028 20:45:12 +0000 Subordinate resources: AS: 32071 IP: 2620:66:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:96:48:2d:ce:37:b1:f6:d7:da:58:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jul 22 20:45:12 2026 GMT Not After : Oct 24 20:45:12 2028 GMT Subject: CN=bdbbe046-d490-45ba-874a-27181cb4b798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:68:33:16:75:0d:a4:2e:40:c3:25:18:82: 7e:7a:6b:64:88:7c:7d:23:7e:8e:04:44:01:a8:2b: 1a:47:bf:81:00:d8:94:c6:f1:68:cd:6c:8e:65:4e: 04:3a:f1:8c:e6:f0:78:99:84:e6:50:49:2d:ad:99: ee:52:b9:34:aa:e9:5e:90:96:a4:9f:f5:d5:69:e3: 73:8f:1f:9e:66:49:56:9b:80:5c:45:39:38:0a:29: 3b:e3:ba:94:29:e8:59:9f:09:82:08:79:78:3f:fb: 30:ff:37:92:b3:46:39:6b:66:8a:f0:42:1f:e7:cd: 8a:6f:a7:43:ef:0e:67:73:7a:05:98:33:10:17:8a: 00:85:43:93:84:af:41:ea:aa:e7:59:8d:2e:1d:40: 95:d6:b5:f8:d7:54:74:91:b4:86:2f:fa:29:40:29: 37:ee:4d:1c:f6:a0:ea:22:8a:6d:bb:8e:93:8f:30: 0b:8d:38:bb:97:e1:4c:26:08:94:67:36:78:a3:83: fe:dc:e6:e9:85:4c:16:e8:42:72:33:42:59:17:f7: b4:68:d4:e5:48:4b:2e:29:2a:65:bc:92:38:f4:4e: ea:bd:90:3c:d7:d3:d3:34:e8:34:7c:67:91:32:4e: 07:d0:7f:3a:6f:f8:f2:6e:14:c7:48:ba:c2:36:db: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:DA:7B:DE:0A:A0:09:B2:05:36:2F:7E:74:14:45:06:D3:CF:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bdbbe046-d490-45ba-874a-27181cb4b798/bdbbe046-d490-45ba-874a-27181cb4b798.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv6: 2620:66:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:2e:d0:6e:6c:51:f1:f2:f4:ea:38:88:39:de:e0:17:86:3a: 15:83:d3:b1:82:dd:d2:10:51:46:22:df:d4:d6:50:09:09:87: f0:f7:9e:3f:eb:a1:ab:30:43:10:74:9d:67:fa:49:21:28:61: c3:61:b7:5b:7e:2e:cd:46:c3:5d:73:c9:a3:22:13:ab:10:51: ac:e4:47:fb:fb:74:cf:d9:ff:97:7d:20:9a:79:6a:45:34:ff: 38:00:5e:24:aa:e1:6d:72:3e:91:47:b7:93:88:9a:be:ee:2c: af:bf:9f:e3:1d:c9:08:56:d7:bc:bb:fc:42:25:f0:35:9b:4f: a5:c1:81:8c:be:a5:0b:45:0f:2f:2b:48:11:52:7d:d8:89:f2: ed:84:6c:0a:3a:b2:db:95:bd:01:eb:c5:07:43:0e:91:46:98: f4:7c:cb:53:af:22:19:19:b5:09:82:8f:22:8a:f0:91:94:a9: 1f:62:a6:d0:a6:af:e2:b0:29:2c:25:c1:45:af:80:17:17:09: f7:de:ac:ad:68:c2:3f:d5:3a:03:89:c4:9b:e8:2d:38:ec:4a: 1b:c5:76:53:20:d5:bd:47:71:81:9c:58:c4:c7:f6:b4:3b:46: 3e:4c:b6:be:a0:05:4e:ea:55:b7:c8:a9:94:a6:81:26:8e:35: bf:4c:43:4b -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE6WSC3ON7H219pYUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDcyMjIwNDUxMloXDTI4MTAyNDIwNDUxMlowLzEtMCsGA1UEAxMk YmRiYmUwNDYtZDQ5MC00NWJhLTg3NGEtMjcxODFjYjRiNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfJoMxZ1DaQuQMMlGIJ+emtkiHx9I36OBEQB qCsaR7+BANiUxvFozWyOZU4EOvGM5vB4mYTmUEktrZnuUrk0qulekJakn/XVaeNz jx+eZklWm4BcRTk4Cik747qUKehZnwmCCHl4P/sw/zeSs0Y5a2aK8EIf582Kb6dD 7w5nc3oFmDMQF4oAhUOThK9B6qrnWY0uHUCV1rX411R0kbSGL/opQCk37k0c9qDq Ioptu46TjzALjTi7l+FMJgiUZzZ4o4P+3ObphUwW6EJyM0JZF/e0aNTlSEsuKSpl vJI49E7qvZA819PTNOg0fGeRMk4H0H86b/jybhTHSLrCNtt/GQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFFMw2nveCqAJsgU2L350FEUG08/bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i ZGJiZTA0Ni1kNDkwLTQ1YmEtODc0YS0yNzE4MWNiNGI3OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JkYmJlMDQ2LWQ0OTAtNDViYS04 NzRhLTI3MTgxY2I0Yjc5OC9iZGJiZTA0Ni1kNDkwLTQ1YmEtODc0YS0yNzE4MWNi NGI3OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABmgAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICfUcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEADC7QbmxR8fL06jiIOd7gF4Y6FYPTsYLd0hBRRiLf1NZQ CQmH8PeeP+uhqzBDEHSdZ/pJIShhw2G3W34uzUbDXXPJoyITqxBRrORH+/t0z9n/ l30gmnlqRTT/OABeJKrhbXI+kUe3k4iavu4sr7+f4x3JCFbXvLv8QiXwNZtPpcGB jL6lC0UPLytIEVJ92Iny7YRsCjqy25W9AevFB0MOkUaY9HzLU68iGRm1CYKPIorw kZSpH2Km0Kav4rApLCXBRa+AFxcJ996srWjCP9U6A4nEm+gtOOxKG8V2UyDVvUdx gZxYxMf2tDtGPky2vqAFTupVt8iplKaBJo41v0xDSw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:22:56 2026 by rpki-client