$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer File: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer (raw, json) Hash identifier: RYR9EV2rlqswpv0oXmhgyZrWNyXe260NdjbaSjLcjxQ= Subject key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F9FF648133D4ABA47EA7A0D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 00:45:12 +0000 Certificate not after: Sun 28 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 396350 IP: 2602:f950::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:f6:48:13:3d:4a:ba:47:ea:7a:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 26 00:45:12 2026 GMT Not After : Jan 28 01:45:12 2029 GMT Subject: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:07:28:ca:79:86:01:17:cb:ae:5e:49:e6: 49:c4:7d:42:ea:c0:64:cc:7b:83:31:d1:37:8a:6a: e0:63:ac:81:47:62:64:18:7c:54:96:62:b7:12:88: fe:f0:cd:cd:bc:dd:4b:2d:2a:28:54:f3:cc:7a:9f: 16:ab:20:10:c5:fb:da:57:3a:60:e2:ef:cd:25:8b: 92:9d:13:58:05:a0:c5:0d:21:6e:38:e4:41:f9:ba: 6c:ff:30:1e:0e:f5:44:f6:5b:28:b6:03:db:aa:6d: e7:13:0d:6f:c7:62:cd:68:f3:11:60:16:0b:fc:12: 5e:05:8c:12:00:38:6a:83:9d:e0:53:4b:46:4a:82: 04:8c:fa:27:a1:2e:81:84:d7:f9:32:d4:cf:81:5a: d1:5c:72:e1:8b:f5:6c:2e:31:21:c8:5a:bb:5f:58: e0:4e:7d:ea:12:0f:16:d5:fc:9e:ee:9a:5f:a2:78: 82:ed:2c:a9:48:82:b0:4f:f1:ea:f9:b9:19:a3:e9: a7:a7:8d:61:44:e0:c1:0e:85:9b:9f:cf:43:db:0a: 3a:9a:bd:72:d1:05:47:68:30:fd:33:d2:57:41:7d: 32:37:76:f2:49:1f:66:4c:8c:8d:e4:1a:63:a8:77: 0b:fa:53:34:7a:14:11:62:e6:d7:9f:d9:85:85:cf: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f950::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396350 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:70:bc:f7:68:25:5a:0a:93:28:5b:15:e7:31:a1:07:d7:76: 33:21:99:83:8a:57:80:71:cb:20:dc:1e:9b:82:79:23:e3:4f: 45:fd:fd:00:df:5b:d1:da:ca:09:30:05:23:c2:7d:91:cc:a1: 34:48:fd:ae:a3:23:cf:d5:3f:03:d3:64:fc:4e:16:be:3b:ee: b6:ad:64:b4:0b:22:c9:9c:f7:df:90:9b:43:b4:52:de:27:f5: 3d:db:83:a8:10:e2:8a:6a:84:26:b6:90:ab:a9:7f:0e:0a:3d: 5b:80:70:be:e0:5f:1b:c3:9e:6a:1c:de:54:b7:d2:30:03:fb: 61:9d:ab:77:07:73:3b:b7:ce:78:31:32:9f:85:30:1a:31:d2: d3:2c:8e:39:bf:0c:96:42:19:b9:05:e4:df:53:ec:8c:e7:34: 74:11:db:cc:ae:d2:40:91:e7:d4:bf:1a:8f:5f:2a:cf:b5:8c: 10:82:31:e2:70:d3:24:50:b1:05:b6:4f:b8:08:4b:ae:11:7c: 18:7a:e7:19:f1:97:40:a3:89:08:36:e9:e5:90:10:4f:55:b2: a0:df:b3:c2:7e:28:22:e8:2b:af:64:bf:e0:15:2e:11:91:6b: 6a:99:a6:5e:67:ff:02:ac:58:17:49:05:d8:89:23:1f:78:81: 28:7e:fc:66 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE+f9kgTPUq6R+p6DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAyNjAwNDUxMloXDTI5MDEyODAxNDUxMlowLzEtMCsGA1UEAxMk M2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2ZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbwHKMp5hgEXy65eSeZJxH1C6sBkzHuDMdE3 imrgY6yBR2JkGHxUlmK3Eoj+8M3NvN1LLSooVPPMep8WqyAQxfvaVzpg4u/NJYuS nRNYBaDFDSFuOORB+bps/zAeDvVE9lsotgPbqm3nEw1vx2LNaPMRYBYL/BJeBYwS ADhqg53gU0tGSoIEjPonoS6BhNf5MtTPgVrRXHLhi/VsLjEhyFq7X1jgTn3qEg8W 1fye7ppfoniC7SypSIKwT/Hq+bkZo+mnp41hRODBDoWbn89D2wo6mr1y0QVHaDD9 M9JXQX0yN3bySR9mTIyN5BpjqHcL+lM0ehQRYubXn9mFhc9edQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLRwthF6yF8Cir6Uxm1cnCS6xvruMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNlM2I1MmM3LWI3YTUtNDViMC1h MmE0LWY4MjQyYjJiNmUwMi8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIy YjZlMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvlQADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGDD4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAg3C892glWgqTKFsV5zGhB9d2MyGZg4pXgHHLINwem4J5 I+NPRf39AN9b0drKCTAFI8J9kcyhNEj9rqMjz9U/A9Nk/E4Wvjvutq1ktAsiyZz3 35CbQ7RS3if1PduDqBDiimqEJraQq6l/Dgo9W4BwvuBfG8OeahzeVLfSMAP7YZ2r dwdzO7fOeDEyn4UwGjHS0yyOOb8MlkIZuQXk31PsjOc0dBHbzK7SQJHn1L8aj18q z7WMEIIx4nDTJFCxBbZPuAhLrhF8GHrnGfGXQKOJCDbp5ZAQT1WyoN+zwn4oIugr r2S/4BUuEZFrapmmXmf/AqxYF0kF2IkjH3iBKH78Zg== -----END CERTIFICATE-----Generated at Thu Nov 5 03:51:09 2026 by rpki-client