$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer File: e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer (raw, json) Hash identifier: 9Cox9x7n9QjyhsGYJxzPXjmu6hZtdONUDfwqspWxcQI= Subject key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584D2A6D1D96C75CAF7B1E4F5900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Mar 2026 12:45:22 +0000 Certificate not after: Fri 16 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 2001:520::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:6d:1d:96:c7:5c:af:7b:1e:4f:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 14 12:45:22 2026 GMT Not After : Jun 16 12:45:22 2028 GMT Subject: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:43:69:4d:80:85:96:25:0b:e4:2d:d4:ee: 6b:95:e6:02:a1:74:94:5a:f4:fa:9a:ad:7f:24:91: b2:6c:b1:e9:80:10:1a:0d:10:78:df:ff:7f:28:4f: 53:6d:8d:4e:86:03:8b:9a:38:a8:db:21:0a:96:5b: 31:13:c2:7c:30:4a:71:ed:d3:b4:2f:ba:d0:99:21: b9:0b:81:93:bc:86:b9:0b:71:fb:68:d4:9f:df:5f: 01:8c:ce:14:5e:0d:28:a2:63:b3:bc:70:1a:32:3e: dd:47:79:7a:46:bd:a6:4f:f6:9e:84:91:6d:e2:fd: d2:1e:f8:3d:3a:25:24:51:d2:21:48:ad:07:a8:03: 97:5c:d0:81:56:0c:31:51:5e:fb:f2:51:b4:b6:6c: 5b:62:93:9f:af:e1:df:ea:84:38:7e:6e:74:54:eb: 65:22:8e:4f:7f:20:28:ce:e7:d5:86:7d:b8:f9:78: 75:a9:02:32:04:c0:d9:23:69:6d:1a:2a:08:18:53: 27:77:4b:65:c8:87:46:23:e6:27:49:a6:85:2d:3a: b4:7f:4e:9f:33:f5:09:19:48:67:59:f0:31:c8:22: d6:93:92:d0:76:db:e1:a6:29:36:61:51:03:79:2c: 6f:69:12:77:fd:72:27:c6:83:89:f6:e9:48:b1:70: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2001:520::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4e:36:23:e5:c9:00:a8:d0:da:3c:ec:19:fd:54:75:84:86: 8a:f9:0a:c0:78:8b:13:3b:6f:19:cf:65:6c:3e:7a:5b:07:f6: ef:19:57:6e:bf:67:58:09:74:7c:2f:68:17:5d:05:9e:7b:37: e4:0f:19:bc:28:12:de:44:78:a4:7f:4e:fb:f2:3f:67:fd:9b: d1:43:de:3b:1f:22:22:64:0c:3e:31:6a:a5:5e:1d:02:4b:a7: 5a:50:41:36:cc:d8:75:e2:c1:ef:46:88:06:72:b2:7f:8f:e7: ad:72:b4:fb:4c:3d:1c:87:94:c8:82:4f:24:54:32:f9:e0:f9: 04:67:17:38:90:d2:90:37:eb:85:ed:ff:3f:39:3e:51:d5:67: d2:64:88:2b:ae:04:ba:cb:ed:56:95:7d:74:33:82:cf:95:d3: 18:54:c5:8a:35:61:55:58:eb:e3:2e:0d:61:40:10:18:e3:57: 9a:c0:03:e0:24:b0:5b:f2:b5:01:8c:6c:50:ba:a8:8c:22:2d: c5:32:c0:da:d7:f9:f9:20:00:f3:9b:67:6d:d4:ca:65:b2:fd: 58:3e:8a:08:46:ce:d4:6c:b8:d4:34:35:9b:12:7f:7b:5f:79: 2e:5f:c0:95:c3:74:a4:78:e9:dc:96:9a:d5:81:7e:6d:f0:fb: 69:96:68:54 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE0qbR2Wx1yvex5PWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDMxNDEyNDUyMloXDTI4MDYxNjEyNDUyMlowLzEtMCsGA1UEAxMk ZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBlOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R5DaU2AhZYlC+Qt1O5rleYCoXSUWvT6mq1/ JJGybLHpgBAaDRB43/9/KE9TbY1OhgOLmjio2yEKllsxE8J8MEpx7dO0L7rQmSG5 C4GTvIa5C3H7aNSf318BjM4UXg0oomOzvHAaMj7dR3l6Rr2mT/aehJFt4v3SHvg9 OiUkUdIhSK0HqAOXXNCBVgwxUV778lG0tmxbYpOfr+Hf6oQ4fm50VOtlIo5PfyAo zufVhn24+Xh1qQIyBMDZI2ltGioIGFMnd0tlyIdGI+YnSaaFLTq0f06fM/UJGUhn WfAxyCLWk5LQdtvhpik2YVEDeSxvaRJ3/XInxoOJ9ulIsXALVQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFIwFx1toJCwAxvzQUVNPkfsat/FvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l NmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U2ZjNkNjNjLTc4YzMtNDE5ZS05 YzViLWQ5MzdlMGEwZThjMy9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBh MGU4YzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAgAQUgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAClONiPlyQCo0No87Bn9 VHWEhor5CsB4ixM7bxnPZWw+elsH9u8ZV26/Z1gJdHwvaBddBZ57N+QPGbwoEt5E eKR/TvvyP2f9m9FD3jsfIiJkDD4xaqVeHQJLp1pQQTbM2HXiwe9GiAZysn+P561y tPtMPRyHlMiCTyRUMvng+QRnFziQ0pA364Xt/z85PlHVZ9JkiCuuBLrL7VaVfXQz gs+V0xhUxYo1YVVY6+MuDWFAEBjjV5rAA+AksFvytQGMbFC6qIwiLcUywNrX+fkg APObZ23UymWy/Vg+ighGztRsuNQ0NZsSf3tfeS5fwJXDdKR46dyWmtWBfm3w+2mW aFQ= -----END CERTIFICATE-----Generated at Wed Mar 25 22:37:06 2026 by rpki-client