$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54.cer File: e20843e1-dc3e-47a6-a0d4-c529ca572b54.cer (raw, json) Hash identifier: Ihzeyk4Sv5+LMjG72RWWvQRpjs8FJnjxM6O5QwtKOgg= Subject key identifier: BD:2E:9E:69:35:B5:E0:45:A7:7C:56:B9:B6:F9:97:56:43:9B:47:DD Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6BE6456CB858B491D8626A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/e20843e1-dc3e-47a6-a0d4-c529ca572b54.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 09:10:55 +0000 Certificate not after: Tue 09 Jan 2029 10:10:55 +0000 Subordinate resources: AS: 402987 IP: 2602:f2c5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6b:e6:45:6c:b8:58:b4:91:d8:62:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 7 09:10:55 2026 GMT Not After : Jan 9 10:10:55 2029 GMT Subject: CN=e20843e1-dc3e-47a6-a0d4-c529ca572b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:d1:72:ef:7b:bb:6a:f8:e8:f4:d6:41:39: d1:5d:2b:2d:d2:09:33:c6:e9:67:4b:bd:d3:e7:90: ba:b4:fa:81:98:3a:bd:dc:62:21:55:08:50:6a:e2: 77:37:8f:b0:af:17:0d:f5:43:83:f2:db:74:c5:22: 4e:fc:e7:90:6f:b2:ac:93:46:d1:3a:37:ac:df:16: 02:07:48:c9:c7:13:c1:76:39:25:79:45:34:de:60: 8e:f8:2a:df:a6:9c:ed:2b:ba:58:d6:61:3b:7c:49: cd:6e:27:e1:fd:19:8d:2c:8b:86:eb:94:ed:9e:11: bb:61:31:4c:16:5c:66:e0:c1:f9:ec:23:3f:ea:50: 57:d2:27:f4:d4:16:e4:e9:b6:3e:bd:ab:c8:f0:c6: cd:d1:f5:d6:df:cf:7b:bc:f3:31:67:1a:3c:90:02: d8:2a:ca:d3:d0:a9:67:df:49:ea:9a:62:ae:35:5b: fa:9d:c6:62:af:9a:6d:64:86:55:c3:34:83:f9:c9: 76:08:32:a7:29:c3:be:74:79:ed:a9:74:3c:ca:e6: 42:da:3f:6f:68:fc:73:29:96:b4:41:df:17:bb:17: 28:b4:fd:4c:ca:1e:4c:0c:44:64:c6:3b:de:13:9a: 8a:30:4d:b8:7d:c3:99:10:45:ff:21:0a:8a:d4:ff: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:9E:69:35:B5:E0:45:A7:7C:56:B9:B6:F9:97:56:43:9B:47:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e20843e1-dc3e-47a6-a0d4-c529ca572b54/e20843e1-dc3e-47a6-a0d4-c529ca572b54.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2602:f2c5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402987 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:08:c1:bc:fb:ba:2f:4f:03:e3:e2:b2:97:45:f3:d2:17:f4: b7:12:1c:27:47:98:e9:a1:4f:64:15:3a:3c:a4:b3:19:a5:46: d2:9d:0b:86:d5:12:f3:2b:c3:55:17:fe:81:79:48:35:47:95: 57:ba:25:81:d7:16:81:87:c4:87:42:ed:72:27:a1:f0:2e:b0: a7:ae:25:df:aa:19:3d:d5:60:1a:54:5c:b5:90:18:4a:bc:02: 8d:39:ad:4b:72:53:9f:5e:ff:1f:d6:7f:e4:12:ed:16:1b:72: 45:0a:4b:83:4f:56:29:86:b5:bc:78:4f:70:57:86:4b:28:cf: ae:5d:65:7c:48:68:4e:1a:53:95:3d:32:52:68:c2:1e:54:32: 31:32:b6:a5:a2:44:c4:55:f7:ae:a2:f8:28:a1:d5:56:38:d0: c5:86:d3:76:6d:99:9b:6e:e7:7f:e5:2c:f5:4b:cb:87:13:c1: c1:21:72:92:07:3f:6c:ce:2d:c5:c4:ff:d0:a2:a9:0b:a8:b5: af:0d:57:70:0b:0d:a5:bc:41:0b:29:81:0b:86:c4:aa:09:c3: 8d:4b:f9:32:05:11:7a:84:d6:9a:f7:b9:ba:1b:d3:0a:b6:96: 32:d8:4a:74:66:da:49:30:cd:a7:3b:4c:17:6a:bd:fd:48:73: 5d:b6:21:a6 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE9r5kVsuFi0kdhiaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNzA5MTA1NVoXDTI5MDEwOTEwMTA1NVowLzEtMCsGA1UEAxMk ZTIwODQzZTEtZGMzZS00N2E2LWEwZDQtYzUyOWNhNTcyYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxLRcu97u2r46PTWQTnRXSst0gkzxulnS73T 55C6tPqBmDq93GIhVQhQauJ3N4+wrxcN9UOD8tt0xSJO/OeQb7Ksk0bROjes3xYC B0jJxxPBdjkleUU03mCO+CrfppztK7pY1mE7fEnNbifh/RmNLIuG65TtnhG7YTFM Flxm4MH57CM/6lBX0if01Bbk6bY+vavI8MbN0fXW3897vPMxZxo8kALYKsrT0Kln 30nqmmKuNVv6ncZir5ptZIZVwzSD+cl2CDKnKcO+dHntqXQ8yuZC2j9vaPxzKZa0 Qd8XuxcotP1Myh5MDERkxjveE5qKME24fcOZEEX/IQqK1P/0oQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFL0unmk1teBFp3xWubb5l1ZDm0fdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l MjA4NDNlMS1kYzNlLTQ3YTYtYTBkNC1jNTI5Y2E1NzJiNTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2UyMDg0M2UxLWRjM2UtNDdhNi1h MGQ0LWM1MjljYTU3MmI1NC9lMjA4NDNlMS1kYzNlLTQ3YTYtYTBkNC1jNTI5Y2E1 NzJiNTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvLFADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGJiswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGwjBvPu6L08D4+Kyl0Xz0hf0txIcJ0eY6aFPZBU6PKSz GaVG0p0LhtUS8yvDVRf+gXlINUeVV7olgdcWgYfEh0Ltcieh8C6wp64l36oZPdVg GlRctZAYSrwCjTmtS3JTn17/H9Z/5BLtFhtyRQpLg09WKYa1vHhPcFeGSyjPrl1l fEhoThpTlT0yUmjCHlQyMTK2paJExFX3rqL4KKHVVjjQxYbTdm2Zm27nf+Us9UvL hxPBwSFykgc/bM4txcT/0KKpC6i1rw1XcAsNpbxBCymBC4bEqgnDjUv5MgUReoTW mve5uhvTCraWMthKdGbaSTDNpztMF2q9/UhzXbYhpg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:50 2026 by rpki-client