$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ce93d038-dde3-4b0f-9e82-b0012cf1c2fb.cer File: ce93d038-dde3-4b0f-9e82-b0012cf1c2fb.cer (raw, json) Hash identifier: J6OcsO9mps7Yqc9+lstUEgXkNV5IYRYXDpis1J1KaK8= Subject key identifier: B1:47:C5:E4:56:F3:2B:9D:F7:E9:D8:E3:DE:79:21:7B:ED:BD:35:EF Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Certificate serial: 010D0C9F4328584FB0375DF72E4489EE83B16480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ce93d038-dde3-4b0f-9e82-b0012cf1c2fb/ce93d038-dde3-4b0f-9e82-b0012cf1c2fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ce93d038-dde3-4b0f-9e82-b0012cf1c2fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 31 Oct 2026 20:29:17 +0000 Certificate not after: Fri 02 Feb 2029 21:29:17 +0000 Subordinate resources: AS: 403157 IP: 2620:42:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:37:5d:f7:2e:44:89:ee:83:b1:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2 Validity Not Before: Oct 31 20:29:17 2026 GMT Not After : Feb 2 21:29:17 2029 GMT Subject: CN=ce93d038-dde3-4b0f-9e82-b0012cf1c2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:9d:2d:cf:36:86:70:c5:b9:5c:49:81:5f: c5:ec:9a:c9:ec:1f:46:d3:ab:17:6e:c1:be:6e:d1: b6:36:e6:c0:9d:e5:58:e2:30:88:7f:14:40:9d:8e: 8a:5f:f0:4b:8b:c4:e5:57:6e:87:8e:e9:f6:18:81: 51:77:4b:f0:7b:e9:69:64:75:e7:c1:71:9f:78:ed: aa:8e:25:c7:11:86:76:62:db:93:d6:1a:02:a9:4e: 26:5c:30:62:3d:ff:0c:06:b2:1c:e5:b2:5b:54:c7: 58:f4:45:53:e7:1a:1b:bb:16:16:8c:bc:b7:b2:48: 0e:22:bf:2f:64:51:0c:10:73:cd:94:cf:f0:21:5e: 3c:86:94:aa:bf:d5:bf:ed:b6:64:b0:ce:ba:82:6e: 48:e3:2e:9a:5c:a7:9e:11:21:fb:08:b7:2f:64:c5: a2:87:35:0e:a7:f4:78:2e:6e:9b:c8:de:46:d1:15: 22:aa:ad:26:72:96:d0:d2:09:2e:e3:5c:e9:f0:de: ac:8e:dc:a6:66:ee:86:72:02:17:8b:4d:82:0f:91: ac:2b:76:b8:ca:88:13:f9:d8:c5:b1:26:b8:a3:df: 08:70:80:97:47:ca:2d:22:cc:31:ae:fb:4f:e9:3a: fa:52:7e:30:69:de:f9:c5:6d:f4:83:87:2d:ed:d1: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:47:C5:E4:56:F3:2B:9D:F7:E9:D8:E3:DE:79:21:7B:ED:BD:35:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ce93d038-dde3-4b0f-9e82-b0012cf1c2fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/ce93d038-dde3-4b0f-9e82-b0012cf1c2fb/ce93d038-dde3-4b0f-9e82-b0012cf1c2fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl X509v3 Authority Key Identifier: keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer sbgp-ipAddrBlock: critical IPv6: 2620:42:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403157 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9b:ed:95:36:39:8e:e0:bf:97:e2:7f:1f:6e:e3:cc:5e:ee: 3c:cd:79:fb:f2:6f:f1:6b:08:1a:99:76:9d:06:8a:d0:68:36: a2:5e:9a:7d:03:2d:3f:7f:e8:6d:2c:f4:aa:23:05:3b:5e:5d: 88:38:71:86:c2:af:ea:13:f0:77:ad:2d:ad:fc:b8:45:b9:a7: dc:15:40:58:51:70:75:18:08:02:0f:e8:0d:47:0c:c6:82:51: 75:4a:77:e4:73:38:c5:91:d5:3b:0c:a6:d6:31:47:c1:01:cb: 58:54:20:bd:68:6c:85:8c:c8:76:7a:97:d7:fb:59:9c:f1:61: a2:38:c2:1d:60:bd:b1:de:7b:52:c4:fb:45:4c:03:ac:91:2c: a0:60:a2:5a:62:da:a5:6f:b5:d1:d1:92:ee:ee:82:0b:9d:04: 30:b8:12:1a:40:5f:e2:f5:36:74:a2:1e:0d:40:8b:7f:f1:f7: 3b:7b:94:e1:3c:d9:54:0c:4f:8a:51:bc:47:79:ee:38:d3:8b: 04:90:bf:be:26:ab:ad:9b:0a:38:0d:79:da:43:21:da:05:7b: 31:6a:3a:e7:a6:a4:7b:81:15:a1:e6:5b:4f:b1:cf:b0:4d:28: 8d:5f:e8:26:1a:3a:53:56:c7:9f:66:9f:e9:a2:fa:75:62:b7: 69:8a:50:af -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE+wN133LkSJ7oOxZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl YmYyMB4XDTI2MTAzMTIwMjkxN1oXDTI5MDIwMjIxMjkxN1owLzEtMCsGA1UEAxMk Y2U5M2QwMzgtZGRlMy00YjBmLTllODItYjAwMTJjZjFjMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiKdLc82hnDFuVxJgV/F7JrJ7B9G06sXbsG+ btG2NubAneVY4jCIfxRAnY6KX/BLi8TlV26Hjun2GIFRd0vwe+lpZHXnwXGfeO2q jiXHEYZ2YtuT1hoCqU4mXDBiPf8MBrIc5bJbVMdY9EVT5xobuxYWjLy3skgOIr8v ZFEMEHPNlM/wIV48hpSqv9W/7bZksM66gm5I4y6aXKeeESH7CLcvZMWihzUOp/R4 Lm6byN5G0RUiqq0mcpbQ0gku41zp8N6sjtymZu6GcgIXi02CD5GsK3a4yogT+djF sSa4o98IcICXR8otIswxrvtP6Tr6Un4wad75xW30g4ct7dEahwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFLFHxeRW8yud9+nY4955IXvtvTXvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9j ZTkzZDAzOC1kZGUzLTRiMGYtOWU4Mi1iMDAxMmNmMWMyZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyL2NlOTNkMDM4LWRkZTMtNGIwZi05 ZTgyLWIwMDEyY2YxYzJmYi9jZTkzZDAzOC1kZGUzLTRiMGYtOWU4Mi1iMDAxMmNm MWMyZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3 NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO 67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABCgAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBibVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBACSb7ZU2OY7gv5fifx9u48xe7jzNefvyb/FrCBqZdp0G itBoNqJemn0DLT9/6G0s9KojBTteXYg4cYbCr+oT8HetLa38uEW5p9wVQFhRcHUY CAIP6A1HDMaCUXVKd+RzOMWR1TsMptYxR8EBy1hUIL1obIWMyHZ6l9f7WZzxYaI4 wh1gvbHee1LE+0VMA6yRLKBgolpi2qVvtdHRku7uggudBDC4EhpAX+L1NnSiHg1A i3/x9zt7lOE82VQMT4pRvEd57jjTiwSQv74mq62bCjgNedpDIdoFezFqOuempHuB FaHmW0+xz7BNKI1f6CYaOlNWx59mn+mi+nVit2mKUK8= -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:06 2026 by rpki-client