$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df.cer File: 8e0f4fae-ff80-4fa6-bac5-646b485c54df.cer (raw, json) Hash identifier: LgUb45a/4lHulZxaojryiqgAVceiWIBMkoj7/xgfDvo= Subject key identifier: B5:DF:68:BB:5F:85:C0:EA:5E:AC:9E:87:15:60:09:EB:E8:36:A2:3B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584F6C5E0EA900C2C447B0554B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/8e0f4fae-ff80-4fa6-bac5-646b485c54df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 13:12:16 +0000 Certificate not after: Mon 08 Jan 2029 21:31:33 +0000 Subordinate resources: AS: 403034 IP: 204.68.238.0/24 IP: 2602:f2be::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:5e:0e:a9:00:c2:c4:47:b0:55:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 7 13:12:16 2026 GMT Not After : Jan 8 21:31:33 2029 GMT Subject: CN=8e0f4fae-ff80-4fa6-bac5-646b485c54df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:9b:26:63:c0:98:c4:ba:04:a4:fc:d2:1a: 9c:1a:9c:27:0c:38:19:8a:d8:5c:72:7e:42:72:37: 88:ff:bc:78:d1:9b:87:0f:e7:3f:65:d8:d4:30:9e: 47:60:31:d7:91:7b:5f:97:2b:fb:09:ce:07:d9:d2: 1d:31:83:f3:65:2c:21:92:49:96:18:40:6c:ab:de: 40:53:69:e4:0c:cc:6e:c1:4c:93:41:b9:ce:e2:63: 59:b3:c3:8f:c0:ca:f7:7a:b0:66:e9:d3:a5:c9:78: 51:64:43:f0:a9:28:03:51:c0:b7:36:07:42:af:41: ff:05:ae:bb:db:40:b9:fe:90:1f:5d:37:b9:ed:66: 6c:2d:ad:eb:8d:c2:59:8f:66:b7:b9:fe:7b:e6:7d: 37:83:b1:8d:de:c4:08:72:82:ef:2d:69:ac:63:fc: a5:67:91:47:36:03:07:f3:79:e0:a7:cc:c4:29:89: 57:82:18:45:e7:f5:4c:37:5d:23:91:d0:a3:a9:df: 6b:87:c9:5c:7e:2c:62:a5:a2:f8:19:9c:c5:1c:7a: cb:a0:80:28:aa:0f:10:dd:1a:16:26:71:75:1c:e1: fa:67:df:d1:9b:25:1e:99:b6:40:40:58:17:24:c9: 3e:4c:34:e6:94:d0:41:04:d8:51:80:e8:f8:6f:44: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:68:BB:5F:85:C0:EA:5E:AC:9E:87:15:60:09:EB:E8:36:A2:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8e0f4fae-ff80-4fa6-bac5-646b485c54df/8e0f4fae-ff80-4fa6-bac5-646b485c54df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 204.68.238.0/24 IPv6: 2602:f2be::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:17:ff:38:53:ef:a4:d9:c1:a9:ee:43:7c:af:df:4f:4e:ab: 04:22:ec:b6:9a:11:49:b1:49:e2:c4:3d:a3:07:6d:99:2a:4a: 69:a8:dd:4e:78:78:5e:4c:dd:7d:73:05:4f:dd:13:52:06:4c: 5e:da:94:21:d7:d0:7b:b9:68:03:99:ec:69:64:d1:08:57:f6: 7b:47:31:47:60:1e:42:d9:57:02:4b:80:35:ac:5f:d7:89:57: e3:a7:f1:19:d3:fb:0e:e4:e3:fd:12:96:b3:cb:44:c2:fc:ba: 83:9b:7b:e5:6a:3a:31:d7:13:bb:b6:6f:0a:53:28:df:44:83: ca:1d:39:a3:61:15:a1:b3:40:98:22:c3:bc:ae:f4:2a:d1:41: 30:72:93:2f:3f:16:22:f4:68:8f:e3:9e:fe:85:b5:e2:b6:f4: 65:de:6c:26:3c:17:88:56:4d:07:5a:7b:5c:b3:35:ff:6e:6a: 5f:87:1d:a8:aa:2a:92:21:92:c9:fa:71:30:18:1b:23:08:1e: 88:87:79:07:f3:50:8b:f7:8a:4d:c0:95:d6:12:6b:4e:5d:3a: 66:b0:bd:8e:9c:e5:1c:7f:4e:55:3f:6a:7d:33:34:c7:fe:c1: 29:3c:2e:22:c5:cf:6e:03:f5:71:91:24:46:8a:b1:0c:cb:4d: 23:dd:ec:09 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9sXg6pAMLER7BVS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTAwNzEzMTIxNloXDTI5MDEwODIxMzEzM1owLzEtMCsGA1UEAxMk OGUwZjRmYWUtZmY4MC00ZmE2LWJhYzUtNjQ2YjQ4NWM1NGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytKbJmPAmMS6BKT80hqcGpwnDDgZithccn5C cjeI/7x40ZuHD+c/ZdjUMJ5HYDHXkXtflyv7Cc4H2dIdMYPzZSwhkkmWGEBsq95A U2nkDMxuwUyTQbnO4mNZs8OPwMr3erBm6dOlyXhRZEPwqSgDUcC3NgdCr0H/Ba67 20C5/pAfXTe57WZsLa3rjcJZj2a3uf575n03g7GN3sQIcoLvLWmsY/ylZ5FHNgMH 83ngp8zEKYlXghhF5/VMN10jkdCjqd9rh8lcfixipaL4GZzFHHrLoIAoqg8Q3RoW JnF1HOH6Z9/RmyUembZAQFgXJMk+TDTmlNBBBNhRgOj4b0QrtwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLXfaLtfhcDqXqyehxVgCevoNqI7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 ZTBmNGZhZS1mZjgwLTRmYTYtYmFjNS02NDZiNDg1YzU0ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzhlMGY0ZmFlLWZmODAtNGZhNi1i YWM1LTY0NmI0ODVjNTRkZi84ZTBmNGZhZS1mZjgwLTRmYTYtYmFjNS02NDZiNDg1 YzU0ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADMRO4wDgQCAAIwCAMGACYC8r4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmWjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBF/84U++k2cGp7kN8r99PTqsE Iuy2mhFJsUnixD2jB22ZKkppqN1OeHheTN19cwVP3RNSBkxe2pQh19B7uWgDmexp ZNEIV/Z7RzFHYB5C2VcCS4A1rF/XiVfjp/EZ0/sO5OP9Epazy0TC/LqDm3vlajox 1xO7tm8KUyjfRIPKHTmjYRWhs0CYIsO8rvQq0UEwcpMvPxYi9GiP457+hbXitvRl 3mwmPBeIVk0HWntcszX/bmpfhx2oqiqSIZLJ+nEwGBsjCB6Ih3kH81CL94pNwJXW EmtOXTpmsL2OnOUcf05VP2p9MzTH/sEpPC4ixc9uA/VxkSRGirEMy00j3ewJ -----END CERTIFICATE-----Generated at Fri Oct 30 14:08:17 2026 by rpki-client