$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer File: bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer (raw, json) Hash identifier: 28O/tcl0mxH5gHx6yiAYxX/TJdB59Bo7HtgCWCQ6rCI= Subject key identifier: 0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584EE0BA6B0B3764DF4B93B3DA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Aug 2026 12:45:11 +0000 Certificate not after: Mon 20 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 394446 IP: 2602:fd1a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:ba:6b:0b:37:64:df:4b:93:b3:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 18 12:45:11 2026 GMT Not After : Nov 20 13:45:11 2028 GMT Subject: CN=bc531289-e97e-4da3-a7d9-a36ddfc34cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:51:35:34:e9:15:0e:b6:b5:d0:03:d4:15: 21:31:13:30:37:73:9c:ee:d3:ea:c6:05:b3:ca:a7: c4:69:ef:61:eb:11:5e:f5:e6:56:60:87:72:57:c6: df:56:89:38:7a:f3:3b:21:bf:5a:a7:94:7c:4c:71: 88:4e:5f:97:3c:ca:e5:38:7f:7f:44:6f:d5:60:0a: 87:a4:d3:6f:60:6f:05:81:31:58:85:15:42:83:4e: 29:6f:1b:5b:53:96:7d:84:9f:52:67:74:29:18:c0: d1:2c:40:16:f4:8e:79:ff:08:ed:62:f3:06:65:52: 58:09:54:0d:d4:98:7b:2e:f4:e8:b8:ca:cd:35:3b: de:75:27:d0:6a:b4:4a:ce:1b:7b:8c:71:a4:09:fa: 84:87:75:12:5f:68:e8:3f:07:45:dc:06:f6:56:fd: 77:d2:4a:18:cd:c0:89:90:63:8b:5f:b7:4c:b3:19: fa:1d:6e:12:39:3c:35:78:28:2d:ec:f7:60:0c:80: da:63:52:c3:08:cf:26:0f:1a:55:87:73:30:96:aa: 89:6d:67:b0:01:c1:dc:bd:37:c3:28:dc:bf:e9:3b: 3f:83:cc:df:f4:50:a3:0b:ab:60:99:50:1a:85:50: 42:7a:fc:d7:89:c9:9f:6c:94:df:a4:1b:b0:51:3c: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd1a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:01:70:45:38:0f:dd:bf:d1:33:b3:a1:df:58:e8:2f:83:1d: 9f:fb:2e:13:e6:a2:7c:46:fd:8d:f4:6b:8a:d2:06:a9:ba:33: 80:d1:d4:dc:b7:db:c5:b2:3b:61:54:39:65:b3:23:64:9f:01: 1e:50:fa:54:68:55:83:31:e3:74:d5:46:b4:79:62:8e:9f:6f: d8:c6:3d:1b:12:2a:02:f2:fa:bc:1c:6b:39:cd:d9:02:a7:b1: a7:6d:5d:a2:20:12:b5:06:c1:31:0f:bd:fe:d5:29:64:c4:bc: 6e:90:44:30:6e:23:5a:bb:dd:a5:97:5f:80:b0:39:61:90:4c: f1:cd:3a:c1:fa:4c:00:d4:04:93:d9:90:6d:2c:5d:b9:0a:f3: f9:fa:fc:62:aa:2d:0f:46:e1:9b:45:49:62:89:25:9e:9a:b0: a5:ce:eb:80:27:f2:7a:df:d1:fa:05:7e:92:f7:ee:c3:73:6c: d2:a1:3d:38:4b:51:aa:12:01:34:84:c1:46:55:bf:bc:ad:af: 68:b2:4b:a7:bd:8b:91:76:c7:1b:57:e9:bd:9c:25:d7:08:44: 9a:5a:10:08:97:74:a9:1d:bd:f7:8e:be:c3:db:4e:6e:6e:17: 68:69:a4:69:dd:97:11:1e:4b:d3:7e:6a:2b:a0:d8:d4:d6:64: f7:68:62:10 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE7gumsLN2TfS5Oz2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI2MDgxODEyNDUxMVoXDTI4MTEyMDEzNDUxMVowLzEtMCsGA1UEAxMk YmM1MzEyODktZTk3ZS00ZGEzLWE3ZDktYTM2ZGRmYzM0Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7tRNTTpFQ62tdAD1BUhMRMwN3Oc7tPqxgWz yqfEae9h6xFe9eZWYIdyV8bfVok4evM7Ib9ap5R8THGITl+XPMrlOH9/RG/VYAqH pNNvYG8FgTFYhRVCg04pbxtbU5Z9hJ9SZ3QpGMDRLEAW9I55/wjtYvMGZVJYCVQN 1Jh7LvTouMrNNTvedSfQarRKzht7jHGkCfqEh3USX2joPwdF3Ab2Vv130koYzcCJ kGOLX7dMsxn6HW4SOTw1eCgt7PdgDIDaY1LDCM8mDxpVh3MwlqqJbWewAcHcvTfD KNy/6Ts/g8zf9FCjC6tgmVAahVBCevzXicmfbJTfpBuwUTypVwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFAuQIn0HH/e7PsqESIQtOKtlav3dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i YzUzMTI4OS1lOTdlLTRkYTMtYTdkOS1hMzZkZGZjMzRjZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JjNTMxMjg5LWU5N2UtNGRhMy1h N2Q5LWEzNmRkZmMzNGNkZi9iYzUzMTI4OS1lOTdlLTRkYTMtYTdkOS1hMzZkZGZj MzRjZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAv0aADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGBM4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAKQFwRTgP3b/RM7Oh31joL4Mdn/suE+aifEb9jfRritIG qbozgNHU3LfbxbI7YVQ5ZbMjZJ8BHlD6VGhVgzHjdNVGtHlijp9v2MY9GxIqAvL6 vBxrOc3ZAqexp21doiAStQbBMQ+9/tUpZMS8bpBEMG4jWrvdpZdfgLA5YZBM8c06 wfpMANQEk9mQbSxduQrz+fr8YqotD0bhm0VJYoklnpqwpc7rgCfyet/R+gV+kvfu w3Ns0qE9OEtRqhIBNITBRlW/vK2vaLJLp72LkXbHG1fpvZwl1whEmloQCJd0qR29 946+w9tObm4XaGmkad2XER5L035qK6DY1NZk92hiEA== -----END CERTIFICATE-----Generated at Fri Sep 11 19:33:33 2026 by rpki-client