$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer File: 1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer (raw, json) Hash identifier: Pfn3B5qAX2AY0ON8QJFEeObWiZljRy09g4WQWO4hAw4= Subject key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584EE91A7891C2CB18B5A3BFD800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Aug 2026 12:45:11 +0000 Certificate not after: Thu 23 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 14217 IP: 2602:f96f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:1a:78:91:c2:cb:18:b5:a3:bf:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 21 12:45:11 2026 GMT Not After : Nov 23 13:45:11 2028 GMT Subject: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:0a:be:dd:48:08:09:f0:35:c6:74:b5:db: fb:86:3e:42:a4:f0:7f:8b:c1:09:43:18:0d:e5:2a: 4a:9f:60:3c:45:d8:2c:90:0b:22:a9:12:0e:f9:a9: 45:b6:d2:d1:65:a2:0a:69:7f:b7:0a:79:02:3f:38: f8:1b:6c:74:b6:38:43:e2:98:89:01:bd:c8:59:77: 4a:50:cd:96:eb:0c:c9:9f:0e:7c:c1:3b:bf:ea:c0: 43:96:53:39:d2:77:55:2f:01:29:6e:43:ce:bf:5e: 61:aa:ac:92:dd:fe:60:fb:a8:ee:3c:c0:b4:db:09: 99:d2:22:c6:c8:58:ad:5a:6e:de:e3:72:dc:ef:9d: 60:0a:a7:8f:96:24:10:47:af:af:da:3e:23:d6:4c: 6e:4c:37:7e:73:0f:8f:5b:11:42:b6:cb:e3:d5:19: 90:07:86:75:a0:1e:9e:e6:78:a6:4d:5c:10:d2:3b: ad:d9:f3:21:17:d2:57:57:9b:8c:8b:0f:e6:57:0e: e6:06:59:cc:33:de:b5:87:be:2a:99:55:c6:8c:35: d3:21:85:43:71:8b:1c:c3:72:f2:ff:e3:1d:07:af: b4:23:20:6e:81:6e:36:52:54:ae:dc:6c:d8:b0:b9: 25:44:5a:81:77:9a:2c:9a:fe:ed:d5:cf:3f:1a:14: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f96f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14217 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:95:32:e4:59:57:2f:ed:39:cb:4f:81:4a:0b:d4:80:6e:7c: c9:16:9c:b6:1a:48:5a:81:89:3f:ff:ce:80:32:92:54:bf:6b: 96:a2:8a:e6:dc:2b:c9:47:22:64:e1:12:24:34:d8:bc:ab:7d: db:d3:25:64:2b:97:ec:0f:f3:47:ad:ef:26:d5:56:7f:33:ac: 2d:1f:ca:72:2b:de:81:41:1c:84:26:e9:6a:50:48:1a:62:c9: 91:92:f3:9b:26:f2:1f:04:88:ff:1e:b3:b2:2d:51:aa:1e:7d: 8f:d3:1a:ee:b3:ed:4e:76:47:99:2b:ff:7c:a8:69:99:5c:71: 6e:9b:f9:99:8a:89:d5:21:f7:d6:e6:68:45:2e:87:97:83:ae: a1:8b:85:93:0b:9e:83:f0:2b:ed:37:5b:f0:80:f5:68:b1:d7: 0f:60:64:06:ed:07:7b:f0:9f:fe:44:d2:5d:e4:93:5f:1e:0d: c2:3e:5b:ef:00:52:05:49:76:09:0f:27:8a:c4:bb:7f:f4:81: 07:b3:25:98:6c:d4:bc:94:f1:0e:6a:e9:0c:6b:e7:54:20:af: ce:94:74:99:65:7c:07:17:71:72:d0:53:5c:82:95:2e:cf:f4: 40:a4:2b:8a:b4:ed:17:12:92:4e:35:5d:f6:74:cc:e3:8f:4a: 35:87:e4:f3 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE7pGniRwssYtaO/2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDgyMTEyNDUxMVoXDTI4MTEyMzEzNDUxMVowLzEtMCsGA1UEAxMk MWU2NDQyY2UtZmYxZi00YjZiLTk0ZTMtMzY0NzlkMDFjYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzEKvt1ICAnwNcZ0tdv7hj5CpPB/i8EJQxgN 5SpKn2A8RdgskAsiqRIO+alFttLRZaIKaX+3CnkCPzj4G2x0tjhD4piJAb3IWXdK UM2W6wzJnw58wTu/6sBDllM50ndVLwEpbkPOv15hqqyS3f5g+6juPMC02wmZ0iLG yFitWm7e43Lc751gCqePliQQR6+v2j4j1kxuTDd+cw+PWxFCtsvj1RmQB4Z1oB6e 5nimTVwQ0jut2fMhF9JXV5uMiw/mVw7mBlnMM961h74qmVXGjDXTIYVDcYscw3Ly /+MdB6+0IyBugW42UlSu3GzYsLklRFqBd5osmv7t1c8/GhSRnQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFA+vK0BP6W3sAQ0DjmIZbDaEdZgxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x ZTY0NDJjZS1mZjFmLTRiNmItOTRlMy0zNjQ3OWQwMWNhNTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzFlNjQ0MmNlLWZmMWYtNGI2Yi05 NGUzLTM2NDc5ZDAxY2E1Mi8xZTY0NDJjZS1mZjFmLTRiNmItOTRlMy0zNjQ3OWQw MWNhNTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvlvADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgI3iTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAdlTLkWVcv7TnLT4FKC9SAbnzJFpy2GkhagYk//86AMpJU v2uWoorm3CvJRyJk4RIkNNi8q33b0yVkK5fsD/NHre8m1VZ/M6wtH8pyK96BQRyE JulqUEgaYsmRkvObJvIfBIj/HrOyLVGqHn2P0xrus+1OdkeZK/98qGmZXHFum/mZ ionVIffW5mhFLoeXg66hi4WTC56D8CvtN1vwgPVosdcPYGQG7Qd78J/+RNJd5JNf Hg3CPlvvAFIFSXYJDyeKxLt/9IEHsyWYbNS8lPEOaukMa+dUIK/OlHSZZXwHF3Fy 0FNcgpUuz/RApCuKtO0XEpJONV32dMzjj0o1h+Tz -----END CERTIFICATE-----Generated at Mon Sep 21 03:29:58 2026 by rpki-client