$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059.cer File: 9326b60c-910b-4c2d-acc0-4eaf54d2b059.cer (raw, json) Hash identifier: /Vb8PfzKbNpZGsz8ZEvYLrJG+wrucsF82Yi8rB7/O/I= Subject key identifier: 75:6A:61:A9:35:56:52:A2:40:29:9C:C0:54:F9:CE:12:E5:07:38:25 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F9E90F0479BE19205EECC8B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/9326b60c-910b-4c2d-acc0-4eaf54d2b059.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Oct 2026 12:45:12 +0000 Certificate not after: Sat 27 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 2620:8c:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:90:f0:47:9b:e1:92:05:ee:cc:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 25 12:45:12 2026 GMT Not After : Jan 27 13:45:12 2029 GMT Subject: CN=9326b60c-910b-4c2d-acc0-4eaf54d2b059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:32:03:37:0b:44:4a:a0:c3:57:72:95:e0: 17:e1:4a:2c:6a:8d:ed:aa:87:33:d2:df:d5:5c:c5: 8e:ed:d6:2f:81:dd:81:2b:2f:cc:4c:33:aa:2e:d5: 91:92:6e:a2:4d:2f:13:4e:e9:35:ea:9a:2f:59:3f: 31:f9:7d:08:5f:ec:47:6a:23:5d:16:d4:64:51:f0: 3a:71:48:6f:37:db:2b:c9:f4:52:89:c5:03:6c:6b: 5e:da:82:ca:1d:d9:71:5c:5d:b8:85:82:4c:b9:b6: c7:ac:0a:58:00:a9:6c:f1:a9:de:23:a6:71:91:5d: a2:1f:46:9d:ae:8b:3a:4a:ee:7c:ba:b5:d1:38:95: 63:06:3e:48:51:fc:64:c6:48:92:f9:a3:5e:ac:30: 24:a2:29:6f:ae:78:95:48:12:7f:0d:37:a6:f9:19: ce:e2:20:62:7c:a1:5b:ce:a0:fe:96:6f:7f:a8:87: 1d:e6:ba:99:44:c4:77:e5:38:6b:82:4f:88:29:ed: e5:0a:9d:6a:4a:77:15:e0:ce:ce:d4:c1:65:02:c7: fb:e4:13:3e:f7:34:76:bf:19:d4:a1:fa:5a:ee:b9: f1:17:92:af:c9:7d:11:41:c9:4b:8f:c5:25:ac:da: 0f:77:6a:9d:82:ea:85:52:3c:22:2e:16:09:44:cf: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6A:61:A9:35:56:52:A2:40:29:9C:C0:54:F9:CE:12:E5:07:38:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9326b60c-910b-4c2d-acc0-4eaf54d2b059/9326b60c-910b-4c2d-acc0-4eaf54d2b059.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2620:8c:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3c:a7:19:43:5e:bb:3f:b3:c2:87:20:47:d7:bc:04:b7:cf: c5:21:71:48:30:85:8a:78:34:f1:fa:0d:0d:5a:2a:e0:3e:d1: e1:6b:1a:2f:1c:ca:38:18:b4:a0:68:08:e5:bc:f9:6f:c7:4f: 66:d9:77:86:da:58:20:c0:32:a9:1c:ba:72:35:80:a2:9e:97: f0:fe:50:4f:cd:c0:f9:e8:5d:61:3f:dd:4a:3b:a4:b4:e5:87: 03:f2:f0:f1:45:8a:22:50:20:7c:e0:08:20:1d:9a:ca:56:2d: d8:18:ec:31:95:d3:85:2d:c1:cd:5f:61:e8:62:4d:d8:05:dc: b3:40:2c:39:d3:c6:32:57:b9:e9:71:73:53:34:1e:53:92:fa: 7f:96:6e:2f:72:45:ef:f8:e1:1c:26:00:1a:8b:0a:04:cf:39: 29:c8:8f:3a:28:91:18:bd:0c:a7:b3:90:7b:5e:6a:62:4b:33: 99:bf:2b:be:12:44:86:7d:b9:65:3d:dc:a9:52:48:59:dd:c5: a9:4f:01:9b:1b:be:58:c9:72:dd:50:9d:a5:dd:76:cf:6f:24: 97:18:4a:5c:e7:c4:02:3b:7d:6b:ec:ee:d3:2a:0a:7b:52:85: 02:6f:10:fe:2e:7c:e8:73:57:76:3d:eb:40:00:1b:64:c7:cf: 4c:dc:d5:cb -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE+ekPBHm+GSBe7MiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MTAyNTEyNDUxMloXDTI5MDEyNzEzNDUxMlowLzEtMCsGA1UEAxMk OTMyNmI2MGMtOTEwYi00YzJkLWFjYzAtNGVhZjU0ZDJiMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyUyAzcLREqgw1dyleAX4Uosao3tqocz0t/V XMWO7dYvgd2BKy/MTDOqLtWRkm6iTS8TTuk16povWT8x+X0IX+xHaiNdFtRkUfA6 cUhvN9sryfRSicUDbGte2oLKHdlxXF24hYJMubbHrApYAKls8aneI6ZxkV2iH0ad ros6Su58urXROJVjBj5IUfxkxkiS+aNerDAkoilvrniVSBJ/DTem+RnO4iBifKFb zqD+lm9/qIcd5rqZRMR35Thrgk+IKe3lCp1qSncV4M7O1MFlAsf75BM+9zR2vxnU ofpa7rnxF5KvyX0RQclLj8UlrNoPd2qdguqFUjwiLhYJRM9TVwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFHVqYak1VlKiQCmcwFT5zhLlBzglMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 MzI2YjYwYy05MTBiLTRjMmQtYWNjMC00ZWFmNTRkMmIwNTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzkzMjZiNjBjLTkxMGItNGMyZC1h Y2MwLTRlYWY1NGQyYjA1OS85MzI2YjYwYy05MTBiLTRjMmQtYWNjMC00ZWFmNTRk MmIwNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACMoAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgzynGUNeuz+zwocg R9e8BLfPxSFxSDCFing08foNDVoq4D7R4WsaLxzKOBi0oGgI5bz5b8dPZtl3htpY IMAyqRy6cjWAop6X8P5QT83A+ehdYT/dSjuktOWHA/Lw8UWKIlAgfOAIIB2aylYt 2BjsMZXThS3BzV9h6GJN2AXcs0AsOdPGMle56XFzUzQeU5L6f5ZuL3JF7/jhHCYA GosKBM85KciPOiiRGL0Mp7OQe15qYkszmb8rvhJEhn25ZT3cqVJIWd3FqU8Bmxu+ WMly3VCdpd12z28klxhKXOfEAjt9a+zu0yoKe1KFAm8Q/i586HNXdj3rQAAbZMfP TNzVyw== -----END CERTIFICATE-----Generated at Thu Nov 5 01:22:13 2026 by rpki-client