$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer File: f6a6838a-15aa-48f4-960c-d9d0071829af.cer (raw, json) Hash identifier: fLDxHvuSRrYBlCiDetminrxENANzvGlkLwBCWqz6+f4= Subject key identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584F3A104F22A1D6C98D9306F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Sep 2026 12:45:11 +0000 Certificate not after: Fri 22 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 19051 IP: 2602:f95d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:10:4f:22:a1:d6:c9:8d:93:06:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 19 12:45:11 2026 GMT Not After : Dec 22 13:45:11 2028 GMT Subject: CN=f6a6838a-15aa-48f4-960c-d9d0071829af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:1e:e4:97:0e:f8:80:a5:4c:27:e1:0e:31: 29:22:39:e1:1c:8f:c3:9c:d2:c8:22:4c:9e:6c:8b: 88:9e:cc:c3:44:87:da:4c:f9:0b:fb:d4:b4:8f:a2: 2f:0d:77:13:4f:f6:e3:65:30:c0:3d:3b:72:77:44: 08:1b:ea:d4:f1:47:e6:98:e5:be:d3:05:28:36:18: 1e:69:bf:73:8d:14:a2:bf:ae:73:6a:01:12:d8:d5: f4:6c:a6:d1:93:58:f4:ba:d3:3d:bf:a5:d1:f4:de: da:bf:ff:75:b2:d5:fb:f7:4f:30:01:6a:fd:4b:84: fd:c5:a8:77:8d:c7:bb:f2:40:e0:04:31:e4:52:f6: af:8c:4b:30:ec:f5:ff:de:9c:58:8a:07:54:51:a7: 7b:54:ba:b0:68:c1:cb:af:bd:a0:c1:b6:9d:45:d5: ba:04:04:8c:05:93:15:90:54:2b:05:fb:dd:e3:20: 7f:3d:be:05:bc:69:2f:c8:bf:08:2c:b5:a6:39:8c: 20:5d:c5:af:7b:5f:57:f1:7e:c5:da:d3:18:de:e3: ab:98:75:26:cb:9c:d7:fb:13:c7:5f:93:ea:30:5a: 25:76:cf:39:32:1e:cb:de:48:8c:5e:5d:b1:25:a2: 99:93:f0:3b:52:ef:62:19:71:bf:4f:73:8a:b9:2a: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f95d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19051 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f8:fa:fa:58:b8:19:af:bf:f0:06:a9:5d:8a:f4:ea:6c:97: fb:eb:44:8b:a1:50:a6:b8:47:8f:f4:60:83:ac:82:64:75:cb: 77:16:a7:55:55:4d:71:8d:e4:e5:59:ef:48:d3:8d:78:90:16: 4a:db:8d:85:b0:2d:0a:35:ae:f8:30:9d:6b:24:94:77:55:ef: 2f:ad:b8:45:88:64:82:92:f9:46:d5:7e:e4:05:29:20:ab:5d: e5:81:9e:23:be:71:b5:e2:67:41:6e:54:83:f5:ad:a0:dc:95: d4:d4:48:1b:b0:a7:de:f4:e1:d7:a7:aa:d6:17:a4:c8:3e:ab: 64:17:21:98:54:09:a4:68:aa:cb:44:6d:74:ac:16:f1:1d:7a: 9f:0f:37:fe:fa:43:6d:f9:8f:85:02:c1:3f:00:92:93:63:90: 86:5e:44:7d:63:29:5d:e2:92:9f:8e:58:4d:9d:9c:40:71:ed: b3:cb:5c:f8:50:09:4c:cd:a6:f2:20:aa:04:df:f3:ed:9d:18: 44:ff:d6:1f:e4:86:35:7a:2c:e7:a5:0f:3f:76:79:7c:cb:bb: 75:14:c8:c1:ac:57:52:93:a6:32:b0:e9:ab:6d:84:50:fd:f3: f5:22:b8:8e:3b:b8:1e:15:97:9d:c2:cb:4d:b7:1a:61:48:ef: 2a:71:67:aa -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE86EE8iodbJjZMG8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDkxOTEyNDUxMVoXDTI4MTIyMjEzNDUxMVowLzEtMCsGA1UEAxMk ZjZhNjgzOGEtMTVhYS00OGY0LTk2MGMtZDlkMDA3MTgyOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Ye5JcO+IClTCfhDjEpIjnhHI/DnNLIIkye bIuInszDRIfaTPkL+9S0j6IvDXcTT/bjZTDAPTtyd0QIG+rU8UfmmOW+0wUoNhge ab9zjRSiv65zagES2NX0bKbRk1j0utM9v6XR9N7av/91stX7908wAWr9S4T9xah3 jce78kDgBDHkUvavjEsw7PX/3pxYigdUUad7VLqwaMHLr72gwbadRdW6BASMBZMV kFQrBfvd4yB/Pb4FvGkvyL8ILLWmOYwgXcWve19X8X7F2tMY3uOrmHUmy5zX+xPH X5PqMFolds85Mh7L3kiMXl2xJaKZk/A7Uu9iGXG/T3OKuSrr1wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFCHgG10oKNTuuLJ3uAndoEptugtxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m NmE2ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQwMDcxODI5YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y2YTY4MzhhLTE1YWEtNDhmNC05 NjBjLWQ5ZDAwNzE4MjlhZi9mNmE2ODM4YS0xNWFhLTQ4ZjQtOTYwYy1kOWQwMDcx ODI5YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvldADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJKazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAN+Pr6WLgZr7/wBqldivTqbJf760SLoVCmuEeP9GCDrIJk dct3FqdVVU1xjeTlWe9I0414kBZK242FsC0KNa74MJ1rJJR3Ve8vrbhFiGSCkvlG 1X7kBSkgq13lgZ4jvnG14mdBblSD9a2g3JXU1EgbsKfe9OHXp6rWF6TIPqtkFyGY VAmkaKrLRG10rBbxHXqfDzf++kNt+Y+FAsE/AJKTY5CGXkR9Yyld4pKfjlhNnZxA ce2zy1z4UAlMzabyIKoE3/PtnRhE/9Yf5IY1eiznpQ8/dnl8y7t1FMjBrFdSk6Yy sOmrbYRQ/fP1IriOO7geFZedwstNtxphSO8qcWeq -----END CERTIFICATE-----Generated at Mon Sep 21 19:55:04 2026 by rpki-client