$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.cer File: fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.cer (raw, json) Hash identifier: uJSq1GautHF2/+aLyo/Jtjv/eKcX9vweMhsIUTRwcso= Subject key identifier: CB:85:EF:4B:BA:22:1F:EE:E2:0E:4F:A4:79:54:23:CD:A4:D1:FE:96 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F86816E845BB9DA97FA835780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Oct 2026 21:54:33 +0000 Certificate not after: Thu 18 Jan 2029 22:54:33 +0000 Subordinate resources: IP: 2602:fc3b:f000::/36 IP: 2620:10:6000::/48 IP: 2620:63:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:81:6e:84:5b:b9:da:97:fa:83:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 16 21:54:33 2026 GMT Not After : Jan 18 22:54:33 2029 GMT Subject: CN=fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:aa:e3:75:73:f3:e1:36:5a:8c:79:9d:20: 1e:37:cc:c4:a0:22:a9:83:84:94:10:41:c5:a2:a4: e7:40:94:ee:73:db:b1:1b:3a:ef:15:06:1e:fd:97: 64:52:df:d7:7a:78:7f:b1:4f:75:34:b8:18:27:bb: a1:01:35:d9:84:52:eb:1d:cb:9a:a8:a8:2d:ec:68: ca:a6:85:4d:1c:16:28:be:d4:f5:57:6e:fa:eb:b9: 08:08:2e:2b:21:b3:55:42:b1:93:7e:51:b5:f5:46: c6:cd:92:8a:ad:61:42:fa:d4:58:27:dc:81:e4:e2: b0:8d:72:f9:0f:6b:b0:a0:96:e1:57:75:c7:52:90: ff:64:38:98:da:ff:cc:90:0c:fc:af:91:00:cc:1b: d5:f3:10:76:26:2e:f5:fa:33:9f:ce:af:d2:e4:5c: f6:e1:87:8c:cb:57:e4:12:20:6d:f6:63:2a:61:3f: 31:9e:da:ff:ba:63:3c:c8:81:c4:ed:ef:01:b3:20: 0d:9a:b1:e3:7e:73:a8:87:3b:eb:7f:e4:44:19:c6: 26:41:70:00:95:5e:d7:c9:8b:3d:45:df:9e:7c:1d: fc:13:dd:ee:04:64:93:f4:94:2e:dc:32:79:01:16: 08:81:51:b3:42:e0:42:0c:5c:b1:6f:6c:a2:52:d5: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:85:EF:4B:BA:22:1F:EE:E2:0E:4F:A4:79:54:23:CD:A4:D1:FE:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9/fe76ac88-7cfd-476b-9e8b-d791cc4ab6b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:f000::/36 2620:10:6000::/48 2620:63:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5a:73:85:da:82:93:b2:5b:a5:04:67:84:03:f5:bd:55:ad: ec:26:0d:7e:4d:20:54:db:2c:82:35:89:50:b1:8c:62:90:be: 4c:5f:4b:e3:dd:45:d2:f2:ba:24:39:c6:06:41:42:6d:ed:b3: b6:3e:06:07:13:5a:7e:d9:7e:24:02:3c:a4:69:2b:5e:c7:2b: 25:cd:84:70:6d:0a:83:0f:08:38:3b:f2:35:c9:95:37:d7:9f: e6:35:91:30:b2:b8:63:17:8a:fa:69:90:9f:82:76:c2:fc:d7: 21:e4:b5:b0:fe:21:3f:2b:62:6f:c4:73:00:ea:97:30:7c:a9: 6f:4a:71:31:b1:55:73:02:07:09:e8:2d:05:b5:d3:20:ce:17: f8:6e:ad:be:41:7e:e2:9d:f2:43:8b:b3:cb:38:2b:d1:bf:5b: a0:3d:ae:8d:d2:19:9e:ed:ed:f2:7d:da:29:20:43:63:4b:73: 5e:09:b9:28:13:ac:b3:90:0f:3f:f4:3c:08:d6:67:c1:cf:87: 96:92:2f:6f:1f:1c:b7:4a:b2:44:b8:80:e9:41:35:15:0a:83: 36:5f:00:c2:5f:bd:93:25:a9:f3:1d:8c:fd:1c:7d:f4:b6:9d: 9b:95:9c:db:9d:d3:17:4c:1c:94:36:72:54:36:e9:5b:32:30: 68:c8:fd:a7 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWE+GgW6EW7nal/qDV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNjIxNTQzM1oXDTI5MDExODIyNTQzM1owLzEtMCsGA1UEAxMk ZmU3NmFjODgtN2NmZC00NzZiLTllOGItZDc5MWNjNGFiNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIqq43Vz8+E2Wox5nSAeN8zEoCKpg4SUEEHF oqTnQJTuc9uxGzrvFQYe/ZdkUt/Xenh/sU91NLgYJ7uhATXZhFLrHcuaqKgt7GjK poVNHBYovtT1V27667kICC4rIbNVQrGTflG19UbGzZKKrWFC+tRYJ9yB5OKwjXL5 D2uwoJbhV3XHUpD/ZDiY2v/MkAz8r5EAzBvV8xB2Ji71+jOfzq/S5Fz24YeMy1fk EiBt9mMqYT8xntr/umM8yIHE7e8BsyANmrHjfnOohzvrf+REGcYmQXAAlV7XyYs9 Rd+efB38E93uBGST9JQu3DJ5ARYIgVGzQuBCDFyxb2yiUtVdYQIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFMuF70u6Ih/u4g5PpHlUI82k0f6WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m ZTc2YWM4OC03Y2ZkLTQ3NmItOWU4Yi1kNzkxY2M0YWI2YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2ZlNzZhYzg4LTdjZmQtNDc2Yi05 ZThiLWQ3OTFjYzRhYjZiOS9mZTc2YWM4OC03Y2ZkLTQ3NmItOWU4Yi1kNzkxY2M0 YWI2YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgACMBoDBgQmAvw78AMHACYgABBgAAMHACYgAGOgADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAhWnOF2oKTslulBGeEA/W9Va3sJg1+TSBU2yyCNYlQsYxikL5MX0vj3UXS 8rokOcYGQUJt7bO2PgYHE1p+2X4kAjykaStexyslzYRwbQqDDwg4O/I1yZU315/m NZEwsrhjF4r6aZCfgnbC/Nch5LWw/iE/K2JvxHMA6pcwfKlvSnExsVVzAgcJ6C0F tdMgzhf4bq2+QX7infJDi7PLOCvRv1ugPa6N0hme7e3yfdopIENjS3NeCbkoE6yz kA8/9DwI1mfBz4eWki9vHxy3SrJEuIDpQTUVCoM2XwDCX72TJanzHYz9HH30tp2b lZzbndMXTByUNnJUNulbMjBoyP2n -----END CERTIFICATE-----Generated at Tue Oct 20 11:29:18 2026 by rpki-client