$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50.cer File: 8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50.cer (raw, json) Hash identifier: kMrCG/HxORPWATglpAjkbvdu21nOIrNOuKOuKx3q0uU= Subject key identifier: 34:50:5D:AC:C1:73:E1:DB:2C:56:2D:31:17:B3:C4:01:1C:FB:A1:88 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584F6A537288DD72DA5745621E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50/8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 19:39:16 +0000 Certificate not after: Mon 08 Jan 2029 20:39:16 +0000 Subordinate resources: AS: 402982 IP: 2620:8c:d000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:53:72:88:dd:72:da:57:45:62:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 6 19:39:16 2026 GMT Not After : Jan 8 20:39:16 2029 GMT Subject: CN=8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:3e:ed:32:4f:20:b0:70:11:54:be:81:f6: c6:b0:4e:02:35:0e:c4:cf:38:98:ff:c9:10:74:29: b3:dd:be:33:62:fe:0b:f1:9c:f9:a7:2b:eb:51:36: 7e:75:8a:1d:18:1a:44:c5:b5:82:a6:11:61:13:e4: 90:11:9f:c4:36:3d:d9:d2:a2:49:5e:56:29:20:e8: 72:10:cd:60:72:f4:a6:a1:39:c0:4c:4e:7a:16:44: ee:2d:f0:a5:09:f5:0c:eb:6a:0e:a3:be:69:4a:9e: de:18:70:13:2a:cc:50:82:c1:b1:4f:fc:33:e8:f1: f5:f5:c6:65:63:f7:2d:23:66:9b:c7:b2:c9:2f:6d: 44:47:e1:a8:97:1d:bf:a3:7d:f2:17:1a:39:96:28: 2e:00:8b:25:8d:ef:cf:74:43:ed:5f:ce:e6:92:f7: 33:be:ae:70:f8:18:71:77:03:e4:7c:a9:1e:12:26: 7c:82:20:10:c6:9b:0b:56:d9:ad:69:a3:46:18:ba: f5:00:5b:77:9e:bc:32:c7:5b:23:23:8c:c8:86:b0: fc:f0:24:e1:fc:e7:d3:b9:46:ff:4b:3f:5d:3f:f8: 02:65:39:4b:53:ea:7b:c7:2f:a1:e1:5c:80:2b:0e: 4c:17:59:04:ee:a2:20:b5:a5:e3:ac:45:da:ad:16: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:50:5D:AC:C1:73:E1:DB:2C:56:2D:31:17:B3:C4:01:1C:FB:A1:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50/8f8a878d-c9de-48a1-aeb4-0ed3f7b39a50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2620:8c:d000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402982 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:18:7a:c6:7c:a3:71:c8:07:c5:dc:09:04:fb:b7:3a:15:1e: 94:9b:b6:6a:ef:1c:9a:63:1c:69:b3:35:eb:24:50:d1:b7:c2: 6f:63:49:5a:77:3f:34:1f:f0:ca:11:77:9d:19:1a:e7:16:8a: c3:5e:0c:45:5d:1c:80:09:b6:49:9a:95:60:e6:ef:7d:04:22: 70:74:f0:13:d9:32:65:aa:2e:9e:17:8e:0f:c5:46:17:97:0d: 3a:d1:b5:f2:ab:bb:a1:58:34:89:8e:a5:80:af:ce:96:dc:7b: c4:ae:c6:88:99:ed:71:3e:35:1b:4a:55:a5:4e:0d:d4:2a:53: df:42:2b:3f:1a:9a:dd:7d:c8:75:9f:a9:96:c3:ea:aa:70:9e: 34:d1:e7:0c:83:22:4d:80:b8:42:1c:bc:1a:06:78:6a:cf:cc: ce:be:6d:3c:02:bd:b6:1e:15:7f:04:cd:d0:ae:cf:2f:e0:f7: 02:d2:5f:02:ae:16:5b:5c:1f:72:fd:7f:88:d5:b3:40:8b:46: 11:c2:8d:2e:78:77:9a:b0:77:ee:99:c9:30:f1:be:fb:7d:0e: 88:0f:19:cb:3d:29:8c:85:0e:29:4e:96:d4:95:ac:d4:ff:c8: 3e:63:0f:f8:c9:fa:1e:96:0b:17:71:f8:b1:93:d0:c8:40:e0: 62:29:7b:8b -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE9qU3KI3XLaV0ViHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MTAwNjE5MzkxNloXDTI5MDEwODIwMzkxNlowLzEtMCsGA1UEAxMk OGY4YTg3OGQtYzlkZS00OGExLWFlYjQtMGVkM2Y3YjM5YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmo+7TJPILBwEVS+gfbGsE4CNQ7EzziY/8kQ dCmz3b4zYv4L8Zz5pyvrUTZ+dYodGBpExbWCphFhE+SQEZ/ENj3Z0qJJXlYpIOhy EM1gcvSmoTnATE56FkTuLfClCfUM62oOo75pSp7eGHATKsxQgsGxT/wz6PH19cZl Y/ctI2abx7LJL21ER+Golx2/o33yFxo5liguAIslje/PdEPtX87mkvczvq5w+Bhx dwPkfKkeEiZ8giAQxpsLVtmtaaNGGLr1AFt3nrwyx1sjI4zIhrD88CTh/OfTuUb/ Sz9dP/gCZTlLU+p7xy+h4VyAKw5MF1kE7qIgtaXjrEXarRYm4QIDAQABo4IEHjCC BBowHQYDVR0OBBYEFDRQXazBc+HbLFYtMRezxAEc+6GIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 ZjhhODc4ZC1jOWRlLTQ4YTEtYWViNC0wZWQzZjdiMzlhNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzhmOGE4NzhkLWM5ZGUtNDhhMS1h ZWI0LTBlZDNmN2IzOWE1MC84ZjhhODc4ZC1jOWRlLTQ4YTEtYWViNC0wZWQzZjdi MzlhNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACM0AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiYmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAGcYesZ8o3HIB8XcCQT7tzoVHpSbtmrvHJpjHGmzNesk UNG3wm9jSVp3PzQf8MoRd50ZGucWisNeDEVdHIAJtkmalWDm730EInB08BPZMmWq Lp4Xjg/FRheXDTrRtfKru6FYNImOpYCvzpbce8SuxoiZ7XE+NRtKVaVODdQqU99C Kz8amt19yHWfqZbD6qpwnjTR5wyDIk2AuEIcvBoGeGrPzM6+bTwCvbYeFX8EzdCu zy/g9wLSXwKuFltcH3L9f4jVs0CLRhHCjS54d5qwd+6ZyTDxvvt9DogPGcs9KYyF DilOltSVrNT/yD5jD/jJ+h6WCxdx+LGT0MhA4GIpe4s= -----END CERTIFICATE-----Generated at Sat Oct 31 21:31:41 2026 by rpki-client