$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f29aa01-3ce5-445d-9ad4-4f169dc9584a.cer File: 9f29aa01-3ce5-445d-9ad4-4f169dc9584a.cer (raw, json) Hash identifier: mirg1awzcAEVKTuFBV5t3+LlnwCCmPHSoLznItRzRuw= Subject key identifier: 91:08:9C:85:A4:B1:C6:71:90:31:23:34:51:41:B8:7D:96:53:8A:AE Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F490E5137BBFB43CCE9764F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f29aa01-3ce5-445d-9ad4-4f169dc9584a/9f29aa01-3ce5-445d-9ad4-4f169dc9584a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f29aa01-3ce5-445d-9ad4-4f169dc9584a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 21:38:18 +0000 Certificate not after: Wed 27 Dec 2028 22:38:18 +0000 Subordinate resources: AS: 395144 IP: 2602:f35b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:0e:51:37:bb:fb:43:cc:e9:76:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 24 21:38:18 2026 GMT Not After : Dec 27 22:38:18 2028 GMT Subject: CN=9f29aa01-3ce5-445d-9ad4-4f169dc9584a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:f4:b2:70:24:ae:13:7b:72:74:62:76:46: 73:66:a4:ca:c2:91:97:05:31:8f:a6:4e:ed:1d:7f: 8d:6f:c0:d6:a1:73:4a:30:69:53:c9:91:8a:5a:75: 44:5e:ca:df:d5:26:e5:6e:9a:6b:de:17:cc:08:3f: fc:f1:16:9f:1a:a3:21:f1:3b:e9:0b:ba:f9:a8:2e: 3c:84:23:8a:f4:3a:02:ca:18:4a:07:f1:3a:79:6b: 58:08:f7:64:f7:de:87:ce:ee:5f:b4:c4:0e:d1:b3: 4b:ec:b1:26:a3:9c:98:e2:eb:4f:90:b7:9f:61:19: a7:57:df:18:30:f2:87:13:f0:6a:ab:9d:dd:44:ab: c6:ba:8e:2f:6f:aa:78:87:d7:1c:f0:46:ef:82:cd: 78:0f:f6:01:4d:01:36:d6:0d:12:8d:d3:27:7b:57: ca:91:4b:41:6d:d6:41:5d:65:9e:ba:c0:f2:26:08: 64:31:b8:16:5a:93:ad:8d:55:53:ce:1b:3d:cb:8a: 88:eb:c0:cc:1e:2c:bb:f3:8d:9c:a0:88:a1:51:e4: 86:b3:50:7d:3a:d2:98:9f:d1:23:ef:f1:df:9d:63: 93:19:a9:0e:07:2c:47:2d:a3:00:87:5d:82:34:75: 16:d3:f1:af:4a:84:1b:3e:2b:91:42:cf:d7:52:83: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:08:9C:85:A4:B1:C6:71:90:31:23:34:51:41:B8:7D:96:53:8A:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f29aa01-3ce5-445d-9ad4-4f169dc9584a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f29aa01-3ce5-445d-9ad4-4f169dc9584a/9f29aa01-3ce5-445d-9ad4-4f169dc9584a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2602:f35b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395144 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9b:4f:bc:7a:1b:74:98:da:b1:9c:10:cf:12:fa:85:d0:dc: 63:0f:7b:55:fd:73:a7:12:24:76:7f:bd:6c:7b:1b:63:ef:52: 72:a3:d9:cf:e7:97:e5:98:5e:41:01:47:0e:f4:7f:ba:24:f0: 13:80:e4:0d:33:bd:bf:22:08:e1:99:64:b6:d6:fd:12:67:16: 9a:9c:82:35:0d:ed:7f:b3:99:1a:e2:1a:ca:2b:6c:39:d0:c3: bb:fc:64:ab:cf:d7:66:c6:44:6a:e7:d7:98:1e:13:4c:1c:c2: e2:a5:f3:45:8a:0d:12:18:2d:a6:6e:c1:a7:ba:20:8e:df:7c: 96:7e:be:0d:5d:ae:34:55:a0:31:4a:50:df:2a:74:32:78:86: 16:fd:61:e2:70:7b:a5:53:e1:72:b2:58:e5:91:80:a9:e5:27: 87:77:b2:0b:8f:af:b1:72:88:e0:a0:68:e3:11:35:aa:90:fc: b0:64:af:67:31:5e:9f:81:0f:d7:39:0f:19:a9:99:93:2d:3b: f7:44:d7:2d:22:a0:49:8e:5e:4c:3c:f8:b5:48:84:ae:81:c5: 6c:74:b4:e8:30:4a:13:01:9a:42:64:51:57:e9:f0:7b:ab:7a: 97:13:95:db:7e:bf:43:04:4d:dc:d4:a9:d7:eb:57:d4:46:0a: 57:44:ae:ac -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE9JDlE3u/tDzOl2T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyNDIxMzgxOFoXDTI4MTIyNzIyMzgxOFowLzEtMCsGA1UEAxMk OWYyOWFhMDEtM2NlNS00NDVkLTlhZDQtNGYxNjlkYzk1ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip30snAkrhN7cnRidkZzZqTKwpGXBTGPpk7t HX+Nb8DWoXNKMGlTyZGKWnVEXsrf1Sblbppr3hfMCD/88RafGqMh8TvpC7r5qC48 hCOK9DoCyhhKB/E6eWtYCPdk996Hzu5ftMQO0bNL7LEmo5yY4utPkLefYRmnV98Y MPKHE/Bqq53dRKvGuo4vb6p4h9cc8Ebvgs14D/YBTQE21g0SjdMne1fKkUtBbdZB XWWeusDyJghkMbgWWpOtjVVTzhs9y4qI68DMHiy7842coIihUeSGs1B9OtKYn9Ej 7/HfnWOTGakOByxHLaMAh12CNHUW0/GvSoQbPiuRQs/XUoMTqwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFJEInIWkscZxkDEjNFFBuH2WU4quMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 ZjI5YWEwMS0zY2U1LTQ0NWQtOWFkNC00ZjE2OWRjOTU4NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzlmMjlhYTAxLTNjZTUtNDQ1ZC05 YWQ0LTRmMTY5ZGM5NTg0YS85ZjI5YWEwMS0zY2U1LTQ0NWQtOWFkNC00ZjE2OWRj OTU4NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvNbADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGB4gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAOJtPvHobdJjasZwQzxL6hdDcYw97Vf1zpxIkdn+9bHsb Y+9ScqPZz+eX5ZheQQFHDvR/uiTwE4DkDTO9vyII4Zlkttb9EmcWmpyCNQ3tf7OZ GuIayitsOdDDu/xkq8/XZsZEaufXmB4TTBzC4qXzRYoNEhgtpm7Bp7ogjt98ln6+ DV2uNFWgMUpQ3yp0MniGFv1h4nB7pVPhcrJY5ZGAqeUnh3eyC4+vsXKI4KBo4xE1 qpD8sGSvZzFen4EP1zkPGamZky0790TXLSKgSY5eTDz4tUiEroHFbHS06DBKEwGa QmRRV+nwe6t6lxOV236/QwRN3NSp1+tX1EYKV0SurA== -----END CERTIFICATE-----Generated at Wed Sep 30 00:52:00 2026 by rpki-client