$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca.cer File: a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca.cer (raw, json) Hash identifier: Q5muwMSmHJ1Qn8Lw86g4Os8xgnF0cAssYgmwr0mRc4M= Subject key identifier: FA:3C:35:B0:4A:D8:69:C4:2E:2A:C0:58:6A:D3:D9:0B:82:C5:F6:F4 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6AE80A0512E48FD7DC171C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca/a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 00:38:40 +0000 Certificate not after: Tue 09 Jan 2029 01:38:40 +0000 Subordinate resources: AS: 397490 IP: 2602:f2e7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:e8:0a:05:12:e4:8f:d7:dc:17:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 7 00:38:40 2026 GMT Not After : Jan 9 01:38:40 2029 GMT Subject: CN=a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:3f:a0:39:5b:b0:1f:83:56:33:c2:fe:73: c4:ce:3f:7d:fa:2c:19:4e:49:ec:07:6a:6f:0f:5d: 39:31:82:fb:3d:f1:a6:94:a3:f1:ff:fd:f4:3a:e9: 01:a8:0d:97:90:a7:35:4e:b4:f8:b8:5e:be:02:18: cb:83:44:e3:d9:3c:52:66:60:1c:de:2e:30:b7:1c: dd:63:ee:e8:34:b5:b3:cb:ce:9b:e1:27:88:36:ad: 05:25:98:9a:09:ef:1b:b3:db:a3:da:ff:e2:2b:4b: 3f:d1:b4:57:36:d0:38:63:b8:6e:fa:de:2f:26:47: 54:70:87:5f:f8:50:ba:59:87:89:93:79:c4:75:b4: ab:c0:95:56:c1:f5:fd:d2:1b:69:2e:ad:1a:27:8c: 2a:c1:6c:8a:0f:89:85:07:2f:00:84:05:8e:b5:df: 30:8e:5f:8d:58:b7:31:60:76:3c:ca:34:c2:a8:72: c4:3e:c1:d8:cb:96:13:4d:87:9f:82:89:9f:b7:96: d5:32:6b:39:b8:1f:df:a9:9f:3a:80:a8:46:88:a5: 4a:92:cb:e3:97:58:0b:65:ce:0f:8c:1f:04:9d:06: f7:e1:dc:e8:f0:6a:bf:6e:73:06:d1:2e:ba:e3:94: a6:0e:a0:d3:19:7e:00:11:90:48:e9:4b:ee:94:a9: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3C:35:B0:4A:D8:69:C4:2E:2A:C0:58:6A:D3:D9:0B:82:C5:F6:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca/a9c0d051-3f8e-4a12-b7a1-ee2cbf9abcca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2602:f2e7::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397490 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7f:da:63:c7:b6:32:70:fd:ce:e2:de:70:e0:52:94:c0:c7: 00:9f:da:61:67:4f:e2:87:20:d5:66:9c:76:9c:4c:d3:86:5d: 03:61:00:6d:9b:cb:5d:63:ee:3e:52:84:e5:49:b3:93:08:94: d7:27:18:97:7e:45:bc:0a:3d:19:56:cb:b5:e9:6e:16:f9:b0: 2a:3e:77:94:21:7d:35:bd:cd:8d:62:cb:26:2c:48:29:e7:27: d4:96:c4:3a:06:4e:49:58:73:15:61:24:30:5c:62:47:c8:1d: 8f:0b:a0:b9:54:b0:64:7c:03:ac:93:b8:10:f4:55:ea:cd:7d: e6:d8:df:5e:54:8d:e9:40:03:42:5a:ef:84:63:0e:d2:2b:0a: 16:62:c7:e2:3a:52:a8:e2:79:96:d6:21:cd:b5:9e:99:dd:2a: af:48:ad:ab:08:22:7b:28:20:ca:f0:ff:e7:fd:9f:b2:d6:8d: 2e:20:6e:70:8b:62:4d:2e:77:b8:ae:1d:35:8b:2d:6c:ba:97: 09:44:05:7c:80:79:30:db:6d:74:9d:d7:f4:50:26:c0:d6:ac: 8b:94:87:9d:ab:0b:60:0d:c9:17:01:d7:bf:2c:54:04:60:6f: 35:10:36:be:c8:15:5a:35:f7:3d:fd:59:d8:e2:30:05:10:a6: ec:19:b9:e7 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE9q6AoFEuSP19wXHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNzAwMzg0MFoXDTI5MDEwOTAxMzg0MFowLzEtMCsGA1UEAxMk YTljMGQwNTEtM2Y4ZS00YTEyLWI3YTEtZWUyY2JmOWFiY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDo/oDlbsB+DVjPC/nPEzj99+iwZTknsB2pv D105MYL7PfGmlKPx//30OukBqA2XkKc1TrT4uF6+AhjLg0Tj2TxSZmAc3i4wtxzd Y+7oNLWzy86b4SeINq0FJZiaCe8bs9uj2v/iK0s/0bRXNtA4Y7hu+t4vJkdUcIdf +FC6WYeJk3nEdbSrwJVWwfX90htpLq0aJ4wqwWyKD4mFBy8AhAWOtd8wjl+NWLcx YHY8yjTCqHLEPsHYy5YTTYefgomft5bVMms5uB/fqZ86gKhGiKVKksvjl1gLZc4P jB8EnQb34dzo8Gq/bnMG0S6645SmDqDTGX4AEZBI6UvulKmGvwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFPo8NbBK2GnELirAWGrT2QuCxfb0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h OWMwZDA1MS0zZjhlLTRhMTItYjdhMS1lZTJjYmY5YWJjY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2E5YzBkMDUxLTNmOGUtNGExMi1i N2ExLWVlMmNiZjlhYmNjYS9hOWMwZDA1MS0zZjhlLTRhMTItYjdhMS1lZTJjYmY5 YWJjY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvLnADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGELIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAOX/aY8e2MnD9zuLecOBSlMDHAJ/aYWdP4ocg1WacdpxM 04ZdA2EAbZvLXWPuPlKE5UmzkwiU1ycYl35FvAo9GVbLteluFvmwKj53lCF9Nb3N jWLLJixIKecn1JbEOgZOSVhzFWEkMFxiR8gdjwuguVSwZHwDrJO4EPRV6s195tjf XlSN6UADQlrvhGMO0isKFmLH4jpSqOJ5ltYhzbWemd0qr0itqwgieyggyvD/5/2f staNLiBucItiTS53uK4dNYstbLqXCUQFfIB5MNttdJ3X9FAmwNasi5SHnasLYA3J FwHXvyxUBGBvNRA2vsgVWjX3Pf1Z2OIwBRCm7Bm55w== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:55 2026 by rpki-client