$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484.cer File: 9cc85aca-3fd8-4f20-8694-fe51dbf42484.cer (raw, json) Hash identifier: oQmnfaurUA6moBt06BeFXK7clWCh0H77SoSfvIbMuyU= Subject key identifier: EA:04:07:86:F6:5F:11:0C:19:BD:CE:14:B4:93:A2:C6:82:0B:F6:6E Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584DA6A88231EE2B56B76DC0CF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/9cc85aca-3fd8-4f20-8694-fe51dbf42484.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 00:45:17 +0000 Certificate not after: Mon 31 Jul 2028 00:45:17 +0000 Subordinate resources: IP: 2620:170::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:a8:82:31:ee:2b:56:b7:6d:c0:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Apr 28 00:45:17 2026 GMT Not After : Jul 31 00:45:17 2028 GMT Subject: CN=9cc85aca-3fd8-4f20-8694-fe51dbf42484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:b8:22:2b:85:d4:be:6b:c3:8a:db:1b:f4: 54:2f:c7:0f:40:c7:f5:99:3a:39:51:a5:0c:84:2f: 51:c3:a3:04:9d:55:87:35:8f:02:03:ae:e8:f3:cb: 9d:7b:f2:66:45:64:f8:35:94:ac:49:5c:e6:00:ba: ca:bb:26:57:3a:8c:2a:28:de:60:9d:2b:4b:9b:7d: 79:d8:a7:46:65:b4:7b:18:20:53:e3:0b:fc:1c:b8: 10:42:37:4e:0f:45:66:c3:79:c4:10:8e:c6:c3:0a: b3:42:1b:b6:49:62:b7:1a:c2:84:20:b5:6e:84:04: f9:fd:b8:21:1b:f6:d8:2b:7b:7d:98:0c:78:8a:2b: 5e:ee:15:3a:f4:94:a5:5f:2e:26:ff:5d:4c:58:db: b5:fe:f8:52:b6:d6:14:61:d9:d2:0e:8a:11:5e:05: ac:b1:53:48:92:70:5c:84:3e:0c:00:59:81:fa:83: 76:60:78:2a:a1:76:cc:6b:f5:cb:11:9b:c5:78:5c: 82:db:59:97:e0:47:06:74:9c:77:77:12:36:be:33: 27:22:8b:53:c8:c3:bd:5b:60:1b:06:e8:ce:21:2b: 9b:28:01:d3:d2:b7:a8:86:91:a1:a7:93:8f:62:46: 01:bc:8e:69:86:31:b8:2b:78:bf:8d:0e:1e:50:88: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:04:07:86:F6:5F:11:0C:19:BD:CE:14:B4:93:A2:C6:82:0B:F6:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9cc85aca-3fd8-4f20-8694-fe51dbf42484/9cc85aca-3fd8-4f20-8694-fe51dbf42484.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:170::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bb:a5:b0:5d:05:7b:b5:6c:53:06:3b:0e:f6:d8:e3:73:2c: fc:a2:34:ab:93:94:cf:76:98:b5:f3:5b:a2:52:02:da:4d:5d: f0:2b:95:a2:9c:0d:79:83:21:59:5b:56:fe:f4:f3:64:5c:c5: f3:fb:bb:c6:df:00:7a:6a:ba:eb:56:80:d5:c3:2d:6e:f3:1b: ab:4e:e4:c2:94:b8:b9:4a:3d:33:c0:bd:f8:ea:77:a3:76:f7: 2d:70:4a:4f:0a:fb:ac:2a:62:c8:16:42:8e:81:d2:ab:27:ea: fd:74:51:8f:22:f2:b3:2d:6d:e2:e4:e1:82:ab:f5:88:5b:2b: cf:cc:67:1d:13:cd:02:d3:1b:d6:dc:67:ea:8d:61:af:43:71: 69:63:c5:8e:7b:13:aa:31:54:f2:8a:4c:f8:55:49:96:05:bc: 3e:dc:98:c8:1b:bd:68:76:ec:2c:8d:38:80:42:e4:a8:89:3c: 97:09:47:a2:49:a5:66:15:71:15:ca:54:61:ad:dd:69:66:46: 32:cd:f3:1b:17:39:c8:5d:df:74:49:ca:a3:88:f4:83:6a:07: dd:c4:15:b2:f0:3f:cc:69:8a:ab:4d:3d:dd:2c:8c:db:aa:5b: cf:c7:a8:30:12:c7:5e:1b:a3:35:ba:09:55:01:c9:4d:e5:a3: 74:63:0d:8b -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE2mqIIx7itWt23AzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDQyODAwNDUxN1oXDTI4MDczMTAwNDUxN1owLzEtMCsGA1UEAxMk OWNjODVhY2EtM2ZkOC00ZjIwLTg2OTQtZmU1MWRiZjQyNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkS4IiuF1L5rw4rbG/RUL8cPQMf1mTo5UaUM hC9Rw6MEnVWHNY8CA67o88ude/JmRWT4NZSsSVzmALrKuyZXOowqKN5gnStLm315 2KdGZbR7GCBT4wv8HLgQQjdOD0Vmw3nEEI7GwwqzQhu2SWK3GsKEILVuhAT5/bgh G/bYK3t9mAx4iite7hU69JSlXy4m/11MWNu1/vhSttYUYdnSDooRXgWssVNIknBc hD4MAFmB+oN2YHgqoXbMa/XLEZvFeFyC21mX4EcGdJx3dxI2vjMnIotTyMO9W2Ab BujOISubKAHT0reohpGhp5OPYkYBvI5phjG4K3i/jQ4eUIh4gQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFOoEB4b2XxEMGb3OFLSTosaCC/ZuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 Y2M4NWFjYS0zZmQ4LTRmMjAtODY5NC1mZTUxZGJmNDI0ODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzljYzg1YWNhLTNmZDgtNGYyMC04 Njk0LWZlNTFkYmY0MjQ4NC85Y2M4NWFjYS0zZmQ4LTRmMjAtODY5NC1mZTUxZGJm NDI0ODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmIAFwADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANu6WwXQV7tWxTBjsO 9tjjcyz8ojSrk5TPdpi181uiUgLaTV3wK5WinA15gyFZW1b+9PNkXMXz+7vG3wB6 arrrVoDVwy1u8xurTuTClLi5Sj0zwL346nejdvctcEpPCvusKmLIFkKOgdKrJ+r9 dFGPIvKzLW3i5OGCq/WIWyvPzGcdE80C0xvW3GfqjWGvQ3FpY8WOexOqMVTyikz4 VUmWBbw+3JjIG71oduwsjTiAQuSoiTyXCUeiSaVmFXEVylRhrd1pZkYyzfMbFznI Xd90ScqjiPSDagfdxBWy8D/MaYqrTT3dLIzbqlvPx6gwEsdeG6M1uglVAclN5aN0 Yw2L -----END CERTIFICATE-----Generated at Wed May 13 00:19:45 2026 by rpki-client