$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer File: e7f210e3-2923-4916-a0dd-8d3cc9158403.cer (raw, json) Hash identifier: shpfwPWcmeePSnxiZrASoWCjJmsB1E03KAK9Dkn0g0M= Subject key identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F25202DA1AF1789F37B08BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 12 Sep 2026 00:45:11 +0000 Certificate not after: Fri 15 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 394837 IP: 2607:9d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:20:2d:a1:af:17:89:f3:7b:08:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 12 00:45:11 2026 GMT Not After : Dec 15 01:45:11 2028 GMT Subject: CN=e7f210e3-2923-4916-a0dd-8d3cc9158403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:2d:0a:59:ad:8d:dc:2f:c2:46:9b:39:28: 41:8c:f5:22:0b:7b:ee:a8:5d:85:a5:92:cd:b6:cd: 89:53:e9:70:2c:fc:bb:11:1d:ce:40:68:0d:66:15: e7:78:40:22:3f:59:a6:84:e4:96:cf:58:3a:f4:31: d6:4e:31:e8:bb:eb:e5:91:52:f9:7d:5f:43:e6:cf: cb:d7:3f:e0:66:fe:fc:cc:95:67:0f:6d:16:a6:32: 0b:f5:93:62:60:f8:ec:a5:8c:48:40:ae:10:f2:85: 5c:bd:f4:4a:46:c5:b0:ca:fd:6e:df:ef:d6:47:da: c3:f0:04:d5:08:a7:45:aa:3d:d0:a9:d9:1a:00:2f: d7:bd:bc:c2:89:45:df:51:0f:f6:25:df:f4:a0:9d: fb:df:80:c9:ea:73:42:9a:fc:ae:69:16:da:78:9b: 09:d6:83:33:05:c5:86:cd:79:75:7c:9a:50:2d:64: 2f:a5:c0:4a:3b:21:a9:e3:f5:b9:ce:b9:6e:4c:20: af:b3:66:8c:0d:0a:93:23:c4:dc:87:d4:5e:66:ad: ed:c0:77:5d:ef:b2:ca:77:de:86:ac:01:ad:76:1e: 56:aa:c6:36:c5:c1:a8:cd:e4:e7:76:82:3e:97:4e: 52:60:d3:71:e0:bf:76:97:56:76:ca:80:24:72:87: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:9d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394837 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6a:33:53:f0:da:75:b6:4d:bd:48:69:2b:89:87:f7:5a:d8: 6f:2e:a1:0e:aa:fe:fc:c3:2c:4f:ad:32:b8:38:56:14:2b:f7: 87:49:c8:b9:49:f0:2e:84:bd:ff:9a:6c:7d:2b:ad:83:a4:37: cc:58:1c:6c:6b:24:a1:2a:28:37:b0:d8:a0:30:e4:d2:bc:83: 9f:dd:c7:6e:fa:75:c3:dd:10:45:95:65:37:75:41:11:dd:8f: d9:fe:56:85:d3:d8:22:df:dc:9f:91:3d:81:9a:ae:25:17:82: 8d:ff:4f:c5:36:8e:74:68:80:1b:34:f7:25:b2:df:2e:02:09: 8f:47:9d:ba:22:38:26:60:3a:be:56:7f:41:cd:4f:9d:2f:1a: 46:fa:86:4c:38:f4:d3:bf:a3:01:56:e1:a9:dd:9b:ee:56:bc: dd:88:e5:eb:08:5b:cb:7c:01:99:f6:de:95:56:c0:51:2f:2c: 02:df:8f:65:b5:5c:36:93:3b:64:3f:65:47:e0:85:55:ad:65: 46:3e:cc:92:ed:46:b4:5e:1f:2f:ee:0f:b1:34:9d:bb:b9:30: ac:6f:20:e1:e2:60:52:cf:0d:8b:7f:9b:db:62:b6:6b:43:ab: b2:01:f5:b9:6d:93:11:0e:48:c6:bc:d3:26:6b:b5:d6:6e:e2: 28:23:6f:12 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE8lIC2hrxeJ83sIvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxMjAwNDUxMVoXDTI4MTIxNTAxNDUxMVowLzEtMCsGA1UEAxMk ZTdmMjEwZTMtMjkyMy00OTE2LWEwZGQtOGQzY2M5MTU4NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ctClmtjdwvwkabOShBjPUiC3vuqF2FpZLN ts2JU+lwLPy7ER3OQGgNZhXneEAiP1mmhOSWz1g69DHWTjHou+vlkVL5fV9D5s/L 1z/gZv78zJVnD20WpjIL9ZNiYPjspYxIQK4Q8oVcvfRKRsWwyv1u3+/WR9rD8ATV CKdFqj3QqdkaAC/XvbzCiUXfUQ/2Jd/0oJ3734DJ6nNCmvyuaRbaeJsJ1oMzBcWG zXl1fJpQLWQvpcBKOyGp4/W5zrluTCCvs2aMDQqTI8Tch9ReZq3twHdd77LKd96G rAGtdh5WqsY2xcGozeTndoI+l05SYNNx4L92l1Z2yoAkcocvlQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFLtqg/zishJm6f33sa9UUAv5C9j/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l N2YyMTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNjYzkxNTg0MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U3ZjIxMGUzLTI5MjMtNDkxNi1h MGRkLThkM2NjOTE1ODQwMy9lN2YyMTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNjYzkx NTg0MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB51AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYGVTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAjajNT8Np1tk29SGkriYf3WthvLqEOqv78wyxPrTK4OFYU K/eHSci5SfAuhL3/mmx9K62DpDfMWBxsayShKig3sNigMOTSvIOf3cdu+nXD3RBF lWU3dUER3Y/Z/laF09gi39yfkT2Bmq4lF4KN/0/FNo50aIAbNPclst8uAgmPR526 IjgmYDq+Vn9BzU+dLxpG+oZMOPTTv6MBVuGp3ZvuVrzdiOXrCFvLfAGZ9t6VVsBR LywC349ltVw2kztkP2VH4IVVrWVGPsyS7Ua0Xh8v7g+xNJ27uTCsbyDh4mBSzw2L f5vbYrZrQ6uyAfW5bZMRDkjGvNMma7XWbuIoI28S -----END CERTIFICATE-----Generated at Sun Sep 20 16:54:00 2026 by rpki-client