$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b56c0935-c257-4093-a989-265697723e7d.cer File: b56c0935-c257-4093-a989-265697723e7d.cer (raw, json) Hash identifier: SPZRzQlWSDOaplKD6R3qODNl4VZGT5KnhAsSUD2Wbx0= Subject key identifier: 2C:89:03:5F:BA:31:61:B2:5F:EE:F7:1F:F5:80:FF:6E:BC:CE:25:B5 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F93D3EDC25F7E652A87562580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b56c0935-c257-4093-a989-265697723e7d/b56c0935-c257-4093-a989-265697723e7d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b56c0935-c257-4093-a989-265697723e7d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 16:26:17 +0000 Certificate not after: Tue 23 Jan 2029 17:26:17 +0000 Subordinate resources: IP: 2602:fea1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:d3:ed:c2:5f:7e:65:2a:87:56:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 21 16:26:17 2026 GMT Not After : Jan 23 17:26:17 2029 GMT Subject: CN=b56c0935-c257-4093-a989-265697723e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:36:ea:0e:bc:af:ae:94:7e:4a:b7:6c:cd: 59:ec:41:c1:10:df:5a:d0:d3:1a:57:59:a4:e6:7f: 93:a1:77:27:00:fd:b5:f0:e3:ad:cb:7b:77:c2:44: 66:0a:31:60:3f:c2:e7:61:9b:ce:39:b4:49:00:a5: 84:5d:7c:8c:93:62:09:b8:57:e3:72:b7:9c:53:96: 2b:b8:3c:13:42:83:83:9c:48:00:73:8b:52:e6:b9: f4:98:dd:1e:4a:67:c0:b9:f7:0e:a6:a5:ac:ce:77: 6c:b2:de:ab:a4:f7:6d:5f:60:13:71:90:0d:64:a2: 1f:43:d3:1d:5b:f8:2f:34:80:4f:3d:20:2e:f0:d2: 54:96:9b:be:8d:2c:0b:a8:3b:93:6a:ee:8e:6a:dc: f5:d2:0e:f8:cd:96:09:83:8c:ad:39:a2:6c:40:57: 81:2e:ff:83:df:2f:f0:f3:79:a9:8c:5a:79:d9:0f: bc:ba:27:81:c5:ca:ec:67:17:0c:46:ef:20:64:3a: 99:80:3a:01:8a:97:01:a2:be:ee:59:dc:41:c1:0e: 0f:6f:19:d2:c5:b9:e6:cf:9a:06:bc:3a:ea:56:5e: 11:2a:01:8a:85:ae:ea:4f:fd:23:03:8a:33:70:57: aa:4b:49:31:fe:7a:69:43:19:81:59:2a:1c:8f:bb: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:89:03:5F:BA:31:61:B2:5F:EE:F7:1F:F5:80:FF:6E:BC:CE:25:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b56c0935-c257-4093-a989-265697723e7d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b56c0935-c257-4093-a989-265697723e7d/b56c0935-c257-4093-a989-265697723e7d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2602:fea1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2a:5c:62:d6:78:6d:0b:cb:a3:c1:60:87:7d:7b:45:51:4d: 24:d1:a3:be:28:ca:6f:4b:0b:3a:f8:83:ee:74:2a:2f:c6:c5: 57:aa:2e:26:fe:18:49:5e:9c:5d:2b:9b:a7:b5:79:80:4d:60: 22:8b:3f:12:b9:ec:06:d8:76:8d:72:c7:7b:eb:8d:a6:a6:b6: a9:70:b6:d5:1f:6e:e1:c7:7b:cb:2a:89:31:d1:33:3d:f0:9d: ea:de:60:f1:47:11:33:fc:95:4b:2c:89:50:68:fc:e0:bf:dd: 5a:4e:6f:d2:40:23:e6:21:be:9e:31:1e:24:76:9d:32:8d:7d: 66:ec:18:53:0f:5d:ff:66:cd:11:fe:c0:9f:35:75:c1:34:16: 1c:f5:20:02:7f:5f:4d:85:e1:04:d4:9f:fb:6f:d2:c6:2b:a6: 31:4f:3e:2c:d1:5d:f6:12:4c:b5:d0:45:f0:fa:ee:c7:52:a7: 83:8d:9b:66:38:e3:22:db:32:f6:94:07:e6:b0:06:f9:14:86: af:49:bc:2c:8f:c8:38:3f:6b:3c:1e:f3:b3:e7:b0:f0:47:69: 90:8d:4b:89:05:93:be:88:75:ae:6f:38:5e:1e:01:d2:9d:d5: 01:b7:f3:03:f0:0c:44:98:f8:34:0f:cb:37:80:82:83:78:e4: e1:1b:d6:f4 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWE+T0+3CX35lKodWJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMTE2MjYxN1oXDTI5MDEyMzE3MjYxN1owLzEtMCsGA1UEAxMk YjU2YzA5MzUtYzI1Ny00MDkzLWE5ODktMjY1Njk3NzIzZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc426g68r66Ufkq3bM1Z7EHBEN9a0NMaV1mk 5n+ToXcnAP218OOty3t3wkRmCjFgP8LnYZvOObRJAKWEXXyMk2IJuFfjcrecU5Yr uDwTQoODnEgAc4tS5rn0mN0eSmfAufcOpqWszndsst6rpPdtX2ATcZANZKIfQ9Md W/gvNIBPPSAu8NJUlpu+jSwLqDuTau6Oatz10g74zZYJg4ytOaJsQFeBLv+D3y/w 83mpjFp52Q+8uieBxcrsZxcMRu8gZDqZgDoBipcBor7uWdxBwQ4PbxnSxbnmz5oG vDrqVl4RKgGKha7qT/0jA4ozcFeqS0kx/nppQxmBWSocj7u96wIDAQABo4IEATCC A/0wHQYDVR0OBBYEFCyJA1+6MWGyX+73H/WA/268ziW1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i NTZjMDkzNS1jMjU3LTQwOTMtYTk4OS0yNjU2OTc3MjNlN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2I1NmMwOTM1LWMyNTctNDA5My1h OTg5LTI2NTY5NzcyM2U3ZC9iNTZjMDkzNS1jMjU3LTQwOTMtYTk4OS0yNjU2OTc3 MjNlN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAv6hADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjKlxi1nhtC8ujwWCH fXtFUU0k0aO+KMpvSws6+IPudCovxsVXqi4m/hhJXpxdK5untXmATWAiiz8SuewG 2HaNcsd7642mprapcLbVH27hx3vLKokx0TM98J3q3mDxRxEz/JVLLIlQaPzgv91a Tm/SQCPmIb6eMR4kdp0yjX1m7BhTD13/Zs0R/sCfNXXBNBYc9SACf19NheEE1J/7 b9LGK6YxTz4s0V32Eky10EXw+u7HUqeDjZtmOOMi2zL2lAfmsAb5FIavSbwsj8g4 P2s8HvOz57DwR2mQjUuJBZO+iHWubzheHgHSndUBt/MD8AxEmPg0D8s3gIKDeOTh G9b0 -----END CERTIFICATE-----Generated at Wed Nov 4 04:14:36 2026 by rpki-client