$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9.cer File: c4aedb33-8769-4c61-812f-8b5c73c1bec9.cer (raw, json) Hash identifier: 6PL5GlyvVKJ3Z981zCAgen08N+uHjmCyBnNPcTwCo0k= Subject key identifier: BC:18:42:E2:2E:90:73:4B:28:E2:21:F9:76:04:B1:87:B0:C3:1B:07 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F802ACFF10CA1F70E66923AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c4aedb33-8769-4c61-812f-8b5c73c1bec9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 15:25:11 +0000 Certificate not after: Tue 16 Jan 2029 16:25:11 +0000 Subordinate resources: AS: 55276 IP: 2604:2a60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:2a:cf:f1:0c:a1:f7:0e:66:92:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 14 15:25:11 2026 GMT Not After : Jan 16 16:25:11 2029 GMT Subject: CN=c4aedb33-8769-4c61-812f-8b5c73c1bec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:3b:d5:b0:b9:6b:d7:a8:22:ce:0a:8c:2b: 5d:ff:b5:77:db:d9:40:95:0a:8a:68:f2:b0:91:06: a1:df:9e:d1:6f:9b:e2:05:19:62:42:bc:c0:cc:3e: df:8d:58:c1:80:70:72:d2:c1:c7:94:9b:74:1a:a0: c8:01:f3:ba:ed:4a:80:b1:66:77:27:55:a5:1d:2f: db:08:e4:ac:cb:90:81:51:30:4f:08:66:2a:2e:de: 23:7c:c9:8a:a1:da:3a:56:a2:32:49:7f:f9:59:8f: c2:0a:f9:60:ae:7d:40:5f:35:aa:0c:d6:23:98:79: 1c:9b:eb:88:aa:e5:55:db:7c:e0:31:66:9a:84:bd: 46:d0:4d:14:2c:f3:6b:cb:46:16:3e:fa:23:f2:05: 91:53:e9:e6:40:a5:0a:44:56:43:34:2f:12:f4:f7: 77:ab:7e:65:a3:1f:a4:7f:fb:8c:38:a5:a1:e6:ae: ae:de:e5:22:89:22:fe:d6:cb:b1:db:1c:a4:5f:73: fe:20:9c:42:fd:11:e5:51:19:ef:85:87:d7:1a:61: 54:15:74:f7:a8:cc:0c:c6:e7:71:a8:41:9b:37:fb: 0d:f2:08:f6:d0:48:99:b5:c6:fc:51:a4:95:ae:05: fa:86:44:bc:f6:38:ce:ec:2a:29:2d:d3:d9:3b:6f: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:18:42:E2:2E:90:73:4B:28:E2:21:F9:76:04:B1:87:B0:C3:1B:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4aedb33-8769-4c61-812f-8b5c73c1bec9/c4aedb33-8769-4c61-812f-8b5c73c1bec9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2604:2a60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55276 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bb:53:2f:db:c0:21:71:d5:42:ec:67:87:73:55:bb:43:2b: b7:d5:cf:3b:db:ef:31:c7:94:ef:2e:68:6d:f4:bf:e5:25:35: c4:b8:53:ae:5e:ff:85:09:67:e2:08:87:e8:3e:6f:32:2f:72: 03:af:3b:ed:bf:29:08:f1:22:e8:21:f9:6c:38:fd:ba:81:77: 83:b3:fd:ae:f8:05:21:17:50:92:56:02:2d:b8:a6:48:04:48: bb:bb:e6:25:ff:4c:f4:74:14:ab:d7:67:da:53:e3:7a:05:aa: 43:90:a4:b8:f7:fe:da:c3:3c:aa:a7:35:62:45:57:40:4d:10: fe:4c:d2:6c:d2:ea:40:c7:a2:cb:ff:85:66:a4:3a:0a:f6:3a: 4f:98:99:e1:36:76:22:e7:78:d0:9b:95:e6:60:c8:63:50:26: d1:67:22:5f:51:ed:fb:47:0b:b4:23:21:4e:40:af:a5:39:6e: 28:57:ae:f3:64:38:0e:0b:61:fb:2c:ec:e9:51:99:0e:e1:c6: 9b:6f:68:a7:1d:24:49:85:4f:ef:67:f4:f7:82:2e:2c:f0:85: 98:ae:f4:38:f7:9e:86:53:2b:9d:9b:31:c9:cf:1e:03:27:03: 9e:a5:a5:59:ec:bd:7f:3a:08:47:2c:47:a3:ca:41:c4:d8:a4: a8:70:0a:a9 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE+AKs/xDKH3DmaSOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNDE1MjUxMVoXDTI5MDExNjE2MjUxMVowLzEtMCsGA1UEAxMk YzRhZWRiMzMtODc2OS00YzYxLTgxMmYtOGI1YzczYzFiZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqg71bC5a9eoIs4KjCtd/7V329lAlQqKaPKw kQah357Rb5viBRliQrzAzD7fjVjBgHBy0sHHlJt0GqDIAfO67UqAsWZ3J1WlHS/b COSsy5CBUTBPCGYqLt4jfMmKodo6VqIySX/5WY/CCvlgrn1AXzWqDNYjmHkcm+uI quVV23zgMWaahL1G0E0ULPNry0YWPvoj8gWRU+nmQKUKRFZDNC8S9Pd3q35lox+k f/uMOKWh5q6u3uUiiSL+1sux2xykX3P+IJxC/RHlURnvhYfXGmFUFXT3qMwMxudx qEGbN/sN8gj20EiZtcb8UaSVrgX6hkS89jjO7CopLdPZO29h4wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFLwYQuIukHNLKOIh+XYEsYewwxsHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j NGFlZGIzMy04NzY5LTRjNjEtODEyZi04YjVjNzNjMWJlYzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M0YWVkYjMzLTg3NjktNGM2MS04 MTJmLThiNWM3M2MxYmVjOS9jNGFlZGIzMy04NzY5LTRjNjEtODEyZi04YjVjNzNj MWJlYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBCpgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDX7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCDu1Mv28AhcdVC7GeHc1W7Qyu31c872+8xx5TvLmht9L/l JTXEuFOuXv+FCWfiCIfoPm8yL3IDrzvtvykI8SLoIflsOP26gXeDs/2u+AUhF1CS VgItuKZIBEi7u+Yl/0z0dBSr12faU+N6BapDkKS49/7awzyqpzViRVdATRD+TNJs 0upAx6LL/4VmpDoK9jpPmJnhNnYi53jQm5XmYMhjUCbRZyJfUe37Rwu0IyFOQK+l OW4oV67zZDgOC2H7LOzpUZkO4cabb2inHSRJhU/vZ/T3gi4s8IWYrvQ4956GUyud mzHJzx4DJwOepaVZ7L1/OghHLEejykHE2KSocAqp -----END CERTIFICATE-----Generated at Fri Oct 23 06:02:30 2026 by rpki-client