$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/626af019-bae8-4f15-8833-720b97ac9369.cer File: 626af019-bae8-4f15-8833-720b97ac9369.cer (raw, json) Hash identifier: lrim70HHqUTpdc7kKStG+gY62yUdanC9oLiOdYLElwA= Subject key identifier: 53:0F:14:81:07:A3:81:FE:7D:66:35:46:22:73:CB:24:DA:F4:91:4D Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F67CEB28B25217A0231216680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/626af019-bae8-4f15-8833-720b97ac9369/626af019-bae8-4f15-8833-720b97ac9369.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/626af019-bae8-4f15-8833-720b97ac9369/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 22:00:11 +0000 Certificate not after: Sun 07 Jan 2029 23:00:11 +0000 Subordinate resources: IP: 2620:0:28b0::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:ce:b2:8b:25:21:7a:02:31:21:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 5 22:00:11 2026 GMT Not After : Jan 7 23:00:11 2029 GMT Subject: CN=626af019-bae8-4f15-8833-720b97ac9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:67:a6:46:79:cd:a2:bc:f3:1b:30:ae:e9: 84:d2:da:d2:ad:3b:c6:b5:b3:bc:65:4a:78:b1:49: 4b:c8:79:25:6a:c9:5a:fb:a4:11:46:d4:c8:15:54: 8f:19:b6:1f:7b:bf:e9:e6:c3:97:f5:37:db:01:fd: ce:a4:63:ad:61:e3:03:ea:2e:c7:85:d0:62:58:12: ff:61:bb:55:70:e8:5a:34:c6:a7:9e:f9:cc:1b:21: 43:88:5a:48:31:23:06:fc:89:53:30:ce:cf:ad:eb: e3:a4:58:06:fd:35:96:7e:e4:da:a8:41:75:c9:cc: 2c:66:9a:4e:fd:af:cb:ff:90:25:a7:99:7c:47:17: d5:90:b0:5c:5a:91:0d:14:b4:e9:68:20:42:aa:de: 79:01:09:2a:09:97:09:2b:d5:3f:94:55:9e:c4:53: b2:f0:91:60:7c:e8:b8:f9:be:82:92:bf:ec:46:bc: b1:03:86:21:ab:70:ac:b6:d1:f8:2f:eb:d5:e1:78: 46:3e:0d:ed:42:b2:12:57:b0:08:58:ae:31:f6:d7: 3c:9f:8b:3e:49:de:00:04:93:aa:b6:d9:4b:e1:34: 87:42:dd:22:f7:c7:ac:45:7b:c8:ce:ff:46:e6:2d: 92:88:d5:6a:f8:7b:77:86:b3:e1:7b:97:d1:46:86: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0F:14:81:07:A3:81:FE:7D:66:35:46:22:73:CB:24:DA:F4:91:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/626af019-bae8-4f15-8833-720b97ac9369/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/626af019-bae8-4f15-8833-720b97ac9369/626af019-bae8-4f15-8833-720b97ac9369.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:28b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4e:54:ba:9f:8c:5f:9d:de:a1:cf:0b:eb:2d:cd:71:fb:31: ed:2e:6b:af:4b:6d:9a:0f:f7:c4:e7:6e:3d:3b:bc:7f:c0:f2: 72:66:86:b4:40:21:e5:db:65:e4:3c:4d:52:43:7b:9c:02:29: b1:83:f6:bc:c1:e4:1d:f4:d9:35:b8:22:44:ef:92:bb:ee:db: 84:c7:f9:de:d1:78:1b:96:aa:05:f1:94:ab:4e:0c:3b:de:93: 05:18:2d:d9:4a:48:7a:77:d3:6d:36:39:37:17:1e:b2:ba:fc: 92:b7:85:96:ba:dc:be:49:1e:d9:be:70:9c:e4:77:b8:9c:a3: f1:4f:75:ef:00:ea:e5:39:84:1c:20:a1:16:d1:ff:a5:ae:19: 1d:f5:c8:86:6e:df:c9:d9:af:58:65:65:5d:e3:fe:29:06:d2: 99:dd:a8:d6:a5:cc:1f:fa:45:f5:30:ab:68:ee:be:5a:61:42: 63:12:a8:e5:1f:29:0d:f9:e3:41:63:a8:3d:ea:17:d9:86:03: e7:a4:c8:98:a4:5e:1c:3f:af:d1:e2:88:de:38:43:b9:64:45: 74:f5:03:13:8e:3f:9b:c3:29:2e:ec:e4:69:aa:da:42:bc:e3: 2b:9d:f1:f5:8e:1e:c7:a6:26:60:fb:b1:03:db:bd:f4:b3:2d: a9:1e:60:1a -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE9nzrKLJSF6AjEhZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNTIyMDAxMVoXDTI5MDEwNzIzMDAxMVowLzEtMCsGA1UEAxMk NjI2YWYwMTktYmFlOC00ZjE1LTg4MzMtNzIwYjk3YWM5MzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6xnpkZ5zaK88xswrumE0trSrTvGtbO8ZUp4 sUlLyHklasla+6QRRtTIFVSPGbYfe7/p5sOX9TfbAf3OpGOtYeMD6i7HhdBiWBL/ YbtVcOhaNMannvnMGyFDiFpIMSMG/IlTMM7PrevjpFgG/TWWfuTaqEF1ycwsZppO /a/L/5Alp5l8RxfVkLBcWpENFLTpaCBCqt55AQkqCZcJK9U/lFWexFOy8JFgfOi4 +b6Ckr/sRryxA4Yhq3CsttH4L+vV4XhGPg3tQrISV7AIWK4x9tc8n4s+Sd4ABJOq ttlL4TSHQt0i98esRXvIzv9G5i2SiNVq+Ht3hrPhe5fRRoaz3wIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFFMPFIEHo4H+fWY1RiJzyyTa9JFNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82 MjZhZjAxOS1iYWU4LTRmMTUtODgzMy03MjBiOTdhYzkzNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzYyNmFmMDE5LWJhZTgtNGYxNS04 ODMzLTcyMGI5N2FjOTM2OS82MjZhZjAxOS1iYWU4LTRmMTUtODgzMy03MjBiOTdh YzkzNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAAAKLAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVE5Uup+MX53eoc8L 6y3Ncfsx7S5rr0ttmg/3xOduPTu8f8DycmaGtEAh5dtl5DxNUkN7nAIpsYP2vMHk HfTZNbgiRO+Su+7bhMf53tF4G5aqBfGUq04MO96TBRgt2UpIenfTbTY5Nxcesrr8 kreFlrrcvkke2b5wnOR3uJyj8U917wDq5TmEHCChFtH/pa4ZHfXIhm7fydmvWGVl XeP+KQbSmd2o1qXMH/pF9TCraO6+WmFCYxKo5R8pDfnjQWOoPeoX2YYD56TImKRe HD+v0eKI3jhDuWRFdPUDE44/m8MpLuzkaaraQrzjK53x9Y4ex6YmYPuxA9u99LMt qR5gGg== -----END CERTIFICATE-----Generated at Sun Oct 11 16:46:56 2026 by rpki-client