$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.cer File: c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.cer (raw, json) Hash identifier: grHsC2aerXqvOv/2DvSZa5tWqwai0pJ97OTteqWlc+s= Subject key identifier: FE:81:51:36:4F:40:83:92:EB:EF:8F:DE:E7:8E:89:D0:FA:32:17:D2 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F6C509F5BE8A7A1789D470E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 12:45:12 +0000 Certificate not after: Tue 09 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 46401 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:50:9f:5b:e8:a7:a1:78:9d:47:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Oct 7 12:45:12 2026 GMT Not After : Jan 9 13:45:12 2029 GMT Subject: CN=c62b2f2e-99d7-4927-b2c8-10b5b15e00d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:33:1f:af:4b:2b:8b:fc:a6:3b:4a:ba:36: dd:c3:49:43:5f:22:e0:1e:d6:8f:95:b4:63:c2:89: c8:31:d2:8a:cf:a9:6a:64:a4:c8:30:c5:2d:d6:f0: 47:c9:b6:13:51:4b:a2:d9:71:3d:8f:f6:bc:9f:66: f4:38:8b:0e:34:80:3a:96:02:1d:a3:9d:16:8a:98: db:83:4f:ad:81:77:1d:b1:ac:f4:83:66:ef:95:71: 86:70:be:46:27:21:af:a9:1a:70:88:44:eb:d1:d2: 81:75:1e:bf:2a:6d:d5:64:01:b6:fe:c0:e4:4e:7f: 75:62:39:a2:a0:16:f7:9f:ce:d6:19:ff:92:ff:90: 01:bb:86:87:c4:e2:6d:b7:eb:03:cb:09:f6:a8:af: 7f:37:58:d6:49:cf:13:25:02:19:77:e1:31:db:a6: 8b:09:40:0a:b2:83:d8:33:02:94:b3:c3:39:74:c5: e9:67:33:3c:c1:4e:7c:5d:bf:94:d8:a6:d5:db:f7: 77:6f:bb:f8:0f:83:fc:56:0d:44:bb:1a:ea:00:af: af:6a:79:4d:9f:27:31:a3:03:18:4c:85:bf:d4:61: cd:5d:94:51:af:5e:46:31:67:89:15:33:11:5d:b5: 95:d4:96:5f:57:40:2d:0a:fe:4c:0f:4a:dc:d8:9c: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:81:51:36:4F:40:83:92:EB:EF:8F:DE:E7:8E:89:D0:FA:32:17:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8/c62b2f2e-99d7-4927-b2c8-10b5b15e00d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 46401 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:55:de:d2:1a:15:39:79:48:55:f2:ea:36:05:c7:d2:f2:d1: b4:e2:71:95:1d:bf:04:29:ef:46:8b:d9:3d:7d:a6:6e:af:98: 1e:5e:bb:bb:fb:22:aa:06:67:e1:2e:3d:2e:26:28:54:93:57: 08:e7:98:80:4d:e7:7d:b3:25:cc:77:f9:f7:54:88:a7:2a:46: 19:97:88:91:ec:f4:94:1a:90:13:6c:57:f2:93:b2:22:7d:1a: 92:eb:8d:ad:c3:37:2c:38:0a:6b:76:1d:89:f7:9b:63:da:f3: 59:f9:d1:d4:d7:6d:2e:61:0a:95:08:5e:a0:0a:74:32:7d:ba: 47:b1:47:d4:68:21:34:25:0b:d4:e2:c1:37:8a:be:fc:cf:af: dc:c0:99:ac:09:25:6a:c9:8a:ff:72:c5:2a:94:73:5a:dd:04: 75:81:9f:ec:a3:c7:bd:dc:2f:16:40:f6:21:02:ec:0a:93:77: 11:b6:07:9f:7b:57:8e:d1:22:d4:ab:7d:26:24:70:0a:60:1a: b9:df:67:47:d5:29:0b:85:9e:44:34:29:5b:a1:ff:86:dc:10: 0d:fb:de:7a:be:f8:42:aa:28:4c:9d:0a:05:a7:c9:32:62:14: a0:3e:87:e3:b7:ef:55:1c:f4:c3:89:9a:e6:f5:d8:ca:86:8e: f1:d0:ba:a2 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE9sUJ9b6KeheJ1HDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MTAwNzEyNDUxMloXDTI5MDEwOTEzNDUxMlowLzEtMCsGA1UEAxMk YzYyYjJmMmUtOTlkNy00OTI3LWIyYzgtMTBiNWIxNWUwMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijkzH69LK4v8pjtKujbdw0lDXyLgHtaPlbRj wonIMdKKz6lqZKTIMMUt1vBHybYTUUui2XE9j/a8n2b0OIsONIA6lgIdo50Wipjb g0+tgXcdsaz0g2bvlXGGcL5GJyGvqRpwiETr0dKBdR6/Km3VZAG2/sDkTn91Yjmi oBb3n87WGf+S/5ABu4aHxOJtt+sDywn2qK9/N1jWSc8TJQIZd+Ex26aLCUAKsoPY MwKUs8M5dMXpZzM8wU58Xb+U2KbV2/d3b7v4D4P8Vg1EuxrqAK+vanlNnycxowMY TIW/1GHNXZRRr15GMWeJFTMRXbWV1JZfV0AtCv5MD0rc2JzYpwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFP6BUTZPQIOS6++P3ueOidD6MhfSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j NjJiMmYyZS05OWQ3LTQ5MjctYjJjOC0xMGI1YjE1ZTAwZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M2MmIyZjJlLTk5ZDctNDkyNy1i MmM4LTEwYjViMTVlMDBkOC9jNjJiMmYyZS05OWQ3LTQ5MjctYjJjOC0xMGI1YjE1 ZTAwZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALVBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ9V3tIaFTl5SFXy6jYFx9Ly0bTi cZUdvwQp70aL2T19pm6vmB5eu7v7IqoGZ+EuPS4mKFSTVwjnmIBN532zJcx3+fdU iKcqRhmXiJHs9JQakBNsV/KTsiJ9GpLrja3DNyw4Cmt2HYn3m2Pa81n50dTXbS5h CpUIXqAKdDJ9ukexR9RoITQlC9TiwTeKvvzPr9zAmawJJWrJiv9yxSqUc1rdBHWB n+yjx73cLxZA9iEC7AqTdxG2B597V47RItSrfSYkcApgGrnfZ0fVKQuFnkQ0KVuh /4bcEA373nq++EKqKEydCgWnyTJiFKA+h+O371Uc9MOJmub12MqGjvHQuqI= -----END CERTIFICATE-----Generated at Thu Oct 8 00:50:13 2026 by rpki-client