$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd.cer File: bf8da86a-9eab-4c67-ab88-813739f945fd.cer (raw, json) Hash identifier: qxMP6meKmOPWJ/If+Upz+8FmgtzZoDzZz2w7updzKI8= Subject key identifier: E4:66:46:72:7E:12:0D:8B:8D:CC:95:10:3B:21:60:3C:D4:86:EF:E6 Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FA6D010F0A59C175CF86A1010 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/bf8da86a-9eab-4c67-ab88-813739f945fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 11:38:52 +0000 Certificate not after: Tue 30 Jan 2029 12:38:52 +0000 Subordinate resources: AS: 403102 IP: 2620:c5:d000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a6:d0:10:f0:a5:9c:17:5c:f8:6a:10:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 28 11:38:52 2026 GMT Not After : Jan 30 12:38:52 2029 GMT Subject: CN=bf8da86a-9eab-4c67-ab88-813739f945fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:23:7d:70:60:50:de:6e:b4:ab:54:ad:16: 9f:79:97:8d:3c:21:4d:ac:d1:de:ee:1f:da:dc:6c: bd:a5:d8:1b:1d:90:5d:e2:dd:b5:1e:be:f3:e2:c7: f8:25:34:b4:cb:ad:35:6b:ab:22:d5:09:35:5e:1d: a8:e9:61:50:8c:8a:09:7f:31:a6:b6:e1:cb:48:39: 52:5a:7f:de:91:5e:ad:53:d2:21:35:43:bc:87:62: 77:ba:61:4e:07:fa:3c:c0:7d:d8:ae:fd:00:1c:50: 1b:52:c4:02:0a:4e:76:6f:7f:0d:0b:b4:ce:11:ef: 63:a9:2f:a7:a0:77:94:3e:cb:27:60:22:f9:3a:ff: 4a:99:85:fd:b4:66:5c:0f:cd:b0:1b:e0:26:5d:bf: 5d:8b:cb:c8:36:ca:98:6d:e7:de:91:42:cb:04:5c: 77:4f:6d:86:05:57:0a:56:e8:a9:59:4e:7d:4a:02: 24:94:f2:f0:ef:6a:c7:87:29:96:3f:97:2e:57:05: 13:5b:da:67:6f:6a:e0:89:ea:03:ef:37:4e:de:12: 37:17:f0:6d:f7:41:c3:b2:f9:83:e9:b9:52:4a:79: 97:bf:8b:8d:58:bb:7a:83:51:31:31:92:6a:3c:23: cb:5b:b3:31:1d:26:06:21:0c:b2:8a:38:dc:62:97: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:66:46:72:7E:12:0D:8B:8D:CC:95:10:3B:21:60:3C:D4:86:EF:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf8da86a-9eab-4c67-ab88-813739f945fd/bf8da86a-9eab-4c67-ab88-813739f945fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv6: 2620:c5:d000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403102 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8b:b3:6f:1b:f7:62:42:c7:fe:ab:96:39:65:1d:ad:5e:e6: 21:95:ea:6a:e7:7d:e0:39:5c:84:5c:1d:9b:60:c9:77:67:a1: 52:f1:ba:48:04:2c:ce:4d:ef:04:07:3f:92:19:b5:cb:88:81: be:4b:72:13:f0:5f:32:ef:a2:fb:0c:82:bf:f1:ca:06:f7:c2: 9a:57:9e:85:cb:ec:3a:a6:77:3d:33:61:74:a5:25:c1:0f:9e: 44:71:a1:53:f2:7d:ef:b3:d0:e5:4f:4f:46:9d:6f:b4:14:ed: 6b:47:77:d4:84:21:2d:75:fc:74:b2:69:59:3d:62:94:17:2c: 27:bd:32:3f:f6:76:a3:d9:a1:a7:65:d7:ac:42:af:d6:a2:0e: 88:0f:59:78:d7:27:e2:2d:74:d8:ae:43:e9:57:4c:d1:e1:d8: af:38:4f:05:ec:0f:26:5f:03:2b:19:50:86:ae:74:81:58:66: 03:00:b8:cc:f4:4c:33:9f:7d:3c:27:28:ff:10:49:9d:7a:14: 6e:59:38:01:5f:97:9b:b4:3a:9b:3d:d9:02:de:6e:23:f3:7b: f9:0c:49:97:8f:a7:6e:ec:73:9e:b7:bb:bf:79:00:e6:1c:49: 17:bf:52:27:d2:f6:65:1d:5f:25:bd:c4:00:28:d9:20:09:4f: 63:43:19:88 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE+m0BDwpZwXXPhqEBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAyODExMzg1MloXDTI5MDEzMDEyMzg1MlowLzEtMCsGA1UEAxMk YmY4ZGE4NmEtOWVhYi00YzY3LWFiODgtODEzNzM5Zjk0NWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujQjfXBgUN5utKtUrRafeZeNPCFNrNHe7h/a 3Gy9pdgbHZBd4t21Hr7z4sf4JTS0y601a6si1Qk1Xh2o6WFQjIoJfzGmtuHLSDlS Wn/ekV6tU9IhNUO8h2J3umFOB/o8wH3Yrv0AHFAbUsQCCk52b38NC7TOEe9jqS+n oHeUPssnYCL5Ov9KmYX9tGZcD82wG+AmXb9di8vINsqYbefekULLBFx3T22GBVcK VuipWU59SgIklPLw72rHhymWP5cuVwUTW9pnb2rgieoD7zdO3hI3F/Bt90HDsvmD 6blSSnmXv4uNWLt6g1ExMZJqPCPLW7MxHSYGIQyyijjcYpfEkwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFORmRnJ+Eg2LjcyVEDshYDzUhu/mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9i ZjhkYTg2YS05ZWFiLTRjNjctYWI4OC04MTM3MzlmOTQ1ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2JmOGRhODZhLTllYWItNGM2Ny1h Yjg4LTgxMzczOWY5NDVmZC9iZjhkYTg2YS05ZWFiLTRjNjctYWI4OC04MTM3Mzlm OTQ1ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADF0AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiaeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAI+Ls28b92JCx/6rljllHa1e5iGV6mrnfeA5XIRcHZtg yXdnoVLxukgELM5N7wQHP5IZtcuIgb5LchPwXzLvovsMgr/xygb3wppXnoXL7Dqm dz0zYXSlJcEPnkRxoVPyfe+z0OVPT0adb7QU7WtHd9SEIS11/HSyaVk9YpQXLCe9 Mj/2dqPZoadl16xCr9aiDogPWXjXJ+ItdNiuQ+lXTNHh2K84TwXsDyZfAysZUIau dIFYZgMAuMz0TDOffTwnKP8QSZ16FG5ZOAFfl5u0Ops92QLebiPze/kMSZePp27s c563u795AOYcSRe/UifS9mUdXyW9xAAo2SAJT2NDGYg= -----END CERTIFICATE-----Generated at Mon Nov 2 08:50:07 2026 by rpki-client