$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5.cer File: e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5.cer (raw, json) Hash identifier: qmQhrF+gj1eDpHYRfioVYpq5+VAOzyrZZB34wejjqeo= Subject key identifier: 4E:F2:18:E6:1B:60:B3:BD:E1:2B:8A:82:3B:B8:AC:25:BB:08:D2:53 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F37720759E5802B4F37641D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5/e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 14:14:40 +0000 Certificate not after: Thu 21 Dec 2028 15:14:40 +0000 Subordinate resources: AS: 401661 IP: 2604:be0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:72:07:59:e5:80:2b:4f:37:64:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 18 14:14:40 2026 GMT Not After : Dec 21 15:14:40 2028 GMT Subject: CN=e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:04:f0:05:e0:5e:04:0e:49:ee:f9:7c:fb: b2:f2:ea:4a:e7:77:ea:a4:68:4e:0d:c2:71:e3:86: 35:3b:b9:16:ae:a4:3e:29:97:59:4f:a7:a2:16:3c: 9d:eb:45:79:af:9f:ff:ff:ea:b3:b4:fc:39:0a:5d: 58:4c:12:b1:07:6f:00:c3:d0:c8:f5:bc:84:bc:f0: 58:9d:43:96:6d:72:d8:cd:43:b8:12:0c:ec:f7:6c: 00:1e:2e:a6:3b:d1:bc:e6:0b:21:a5:a5:ab:77:80: a2:f4:fd:fb:1e:0a:0f:fe:06:e5:d1:d8:0b:61:bd: 42:64:e0:7a:da:e7:e0:80:8c:32:1c:c1:e6:1a:3d: 68:0e:72:b3:6a:23:bb:ae:a6:dc:e7:a2:a5:ec:1c: 6d:9e:f9:2c:0d:8b:b0:1d:08:d6:ea:8a:13:d4:ba: 40:fc:14:36:61:3c:15:f6:99:fe:5f:ea:f0:4f:34: 68:e5:f0:86:44:ab:18:7f:df:c7:1f:82:77:68:92: d9:3c:91:72:31:54:bb:dd:ec:c6:a8:ba:17:65:3c: 24:26:82:f6:31:2e:8a:26:de:c7:9f:e9:20:93:32: 1f:82:de:95:cc:6c:d7:a6:f1:98:a7:83:57:0b:93: df:17:5d:81:49:a9:bb:e0:dc:5f:e5:cf:f3:f6:e4: 75:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F2:18:E6:1B:60:B3:BD:E1:2B:8A:82:3B:B8:AC:25:BB:08:D2:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5/e4869b08-c0ba-49ba-95ea-8dbbc1e3e4a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv6: 2604:be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401661 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fb:a2:12:39:5f:99:13:0e:f0:88:88:19:bc:75:4a:33:92: b5:91:ac:4f:55:2f:63:63:47:39:80:db:45:e6:e5:c1:62:07: 32:45:c0:58:24:0f:15:8c:1b:c2:95:a4:17:77:e2:4c:26:12: f9:3c:d5:f9:f7:57:b0:70:e4:45:9e:61:67:93:0e:59:a5:bc: 06:95:36:c0:3b:61:18:8e:ee:b5:ab:5b:94:54:dd:3e:be:f2: 48:42:f3:1b:5c:14:dc:c7:6e:8d:2e:ce:49:d3:70:ed:78:df: f0:3d:ea:85:03:b2:9b:41:8e:8e:36:67:a8:af:71:f8:6e:c6: d3:66:47:11:22:59:0d:9e:60:4a:49:49:30:8a:43:27:61:2c: bf:1b:03:d1:c4:b3:5f:04:e7:ea:db:4e:96:41:96:70:70:17: 61:b0:9b:18:46:1f:81:e0:ba:0f:93:ff:34:92:1d:94:7f:c9: ac:2c:75:4d:7a:dc:ab:43:28:6c:81:0d:e0:ef:e0:9d:d5:11: 7d:14:8f:6b:9a:8c:d7:d5:cd:b9:16:c7:ef:a8:68:dc:d8:2e: 37:74:77:c8:28:7c:39:fb:40:a4:60:eb:bd:fb:00:c0:48:b4: bd:a3:4b:88:26:86:3b:5b:a9:83:12:86:6e:7a:25:2d:08:b8: 38:6c:01:34 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE83cgdZ5YArTzdkHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxODE0MTQ0MFoXDTI4MTIyMTE1MTQ0MFowLzEtMCsGA1UEAxMk ZTQ4NjliMDgtYzBiYS00OWJhLTk1ZWEtOGRiYmMxZTNlNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn8E8AXgXgQOSe75fPuy8upK53fqpGhODcJx 44Y1O7kWrqQ+KZdZT6eiFjyd60V5r5///+qztPw5Cl1YTBKxB28Aw9DI9byEvPBY nUOWbXLYzUO4Egzs92wAHi6mO9G85gshpaWrd4Ci9P37HgoP/gbl0dgLYb1CZOB6 2ufggIwyHMHmGj1oDnKzaiO7rqbc56Kl7BxtnvksDYuwHQjW6ooT1LpA/BQ2YTwV 9pn+X+rwTzRo5fCGRKsYf9/HH4J3aJLZPJFyMVS73ezGqLoXZTwkJoL2MS6KJt7H n+kgkzIfgt6VzGzXpvGYp4NXC5PfF12BSam74Nxf5c/z9uR1sQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFE7yGOYbYLO94SuKgju4rCW7CNJTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l NDg2OWIwOC1jMGJhLTQ5YmEtOTVlYS04ZGJiYzFlM2U0YTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2U0ODY5YjA4LWMwYmEtNDliYS05 NWVhLThkYmJjMWUzZTRhNS9lNDg2OWIwOC1jMGJhLTQ5YmEtOTVlYS04ZGJiYzFl M2U0YTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBAvgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYg/TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAZ+6ISOV+ZEw7wiIgZvHVKM5K1kaxPVS9jY0c5gNtF5uXB YgcyRcBYJA8VjBvClaQXd+JMJhL5PNX591ewcORFnmFnkw5ZpbwGlTbAO2EYju61 q1uUVN0+vvJIQvMbXBTcx26NLs5J03DteN/wPeqFA7KbQY6ONmeor3H4bsbTZkcR IlkNnmBKSUkwikMnYSy/GwPRxLNfBOfq206WQZZwcBdhsJsYRh+B4LoPk/80kh2U f8msLHVNetyrQyhsgQ3g7+Cd1RF9FI9rmozX1c25FsfvqGjc2C43dHfIKHw5+0Ck YOu9+wDASLS9o0uIJoY7W6mDEoZueiUtCLg4bAE0 -----END CERTIFICATE-----Generated at Sun Sep 20 19:20:58 2026 by rpki-client