$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.cer File: 3a402fb7-2c3d-4c65-a693-41ffae7b91c5.cer (raw, json) Hash identifier: fpHdAfKzpsHWdxq0zNohIS82ZsVTbpRfwT5oyI/xCT8= Subject key identifier: 40:85:E8:20:C6:8E:B7:7B:40:0C:C0:C5:D1:58:38:C8:EF:5F:80:17 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CA754BDAD34A5C1D4F6FB3D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:45:22 +0000 Certificate not after: Sun 30 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 399945 IP: 2604:2860::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:54:bd:ad:34:a5:c1:d4:f6:fb:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 26 13:45:22 2026 GMT Not After : Apr 30 12:45:22 2028 GMT Subject: CN=3a402fb7-2c3d-4c65-a693-41ffae7b91c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:09:b3:2d:39:1b:a2:a6:a8:3d:12:81:3b: ae:49:8e:0e:55:a5:0d:a6:bd:dc:35:29:c3:e2:55: 42:0d:72:32:62:03:5f:f0:5b:fc:0e:47:cf:9f:af: af:49:8f:06:e1:1b:38:db:62:74:d2:d2:1c:76:c9: 47:a6:d9:73:a5:bc:60:17:3e:87:d9:e3:e4:46:3d: cd:b0:55:71:31:ed:fa:b5:40:8e:ef:fc:69:9d:ad: 2c:ee:e9:13:6a:de:78:fb:3a:75:bb:d8:c1:ce:ce: 7b:d9:70:8a:9f:b9:76:ca:fd:9b:89:f0:7d:5d:ea: 08:e8:e4:23:0a:2d:75:e7:41:b5:1e:4b:27:f0:6d: 91:e6:4e:b3:5d:26:63:8d:99:7f:6c:2d:d5:97:84: 54:ea:09:04:fb:52:8f:e0:7c:9f:02:44:95:10:ea: 43:59:f3:3d:71:0a:59:1e:b9:c1:d2:01:bc:d1:6e: 47:58:51:a9:0c:17:56:68:c2:07:33:da:e4:b9:2d: 1d:ff:f4:33:97:df:f5:7a:40:34:36:64:c2:08:be: fd:dc:6e:42:23:cb:ed:d6:82:da:7d:79:34:b7:12: 17:8e:86:2f:e1:38:69:a1:a7:3a:c7:77:db:7a:df: df:c9:d9:1e:91:45:3a:49:77:58:ae:5e:f5:42:a5: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:E8:20:C6:8E:B7:7B:40:0C:C0:C5:D1:58:38:C8:EF:5F:80:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a402fb7-2c3d-4c65-a693-41ffae7b91c5/3a402fb7-2c3d-4c65-a693-41ffae7b91c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv6: 2604:2860::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399945 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:48:f6:10:70:9c:f1:97:c8:bf:8a:bc:79:fe:29:ca:97:7d: b9:e1:56:4d:1c:bb:43:51:f1:5b:75:c9:f9:21:f4:29:f7:df: 40:2b:69:a3:aa:69:a1:94:48:e5:e7:4c:89:eb:91:b9:bd:fb: 1b:52:9f:2f:27:a5:77:f1:1d:3b:0b:76:03:7d:c8:18:6b:4f: 91:5d:05:a6:54:2a:bb:ef:9d:eb:25:7c:cb:04:10:4a:e7:7c: 8c:84:e1:6a:59:c6:27:ef:01:e9:26:1b:36:69:19:a8:79:dd: 85:6e:2e:db:b1:7c:3d:8d:be:bf:d8:cb:07:b9:73:14:88:9d: c3:e6:56:4c:4b:ab:0a:96:c5:75:1e:a9:85:41:75:98:82:48: 57:49:f0:d8:87:3c:5d:5b:27:65:c9:87:6f:c9:1e:71:36:bd: 71:b4:1d:db:d9:8c:43:70:d7:40:af:b4:8b:24:0a:27:96:d1: 05:19:a1:0c:7e:e4:d5:3b:a4:95:8f:f0:63:a0:0d:1f:5f:0e: 59:9e:3e:1c:8c:b3:e3:a1:63:aa:ac:c1:23:d3:7f:77:8c:a9: 89:be:c8:35:72:78:73:fe:95:77:40:2a:fe:b0:19:25:2d:d0: 64:8e:cf:4f:cd:87:03:83:d9:c0:be:89:04:49:16:0e:33:46: 13:63:86:60 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEynVL2tNKXB1Pb7PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEyNjEzNDUyMloXDTI4MDQzMDEyNDUyMlowLzEtMCsGA1UEAxMk M2E0MDJmYjctMmMzZC00YzY1LWE2OTMtNDFmZmFlN2I5MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N0Jsy05G6KmqD0SgTuuSY4OVaUNpr3cNSnD 4lVCDXIyYgNf8Fv8DkfPn6+vSY8G4Rs422J00tIcdslHptlzpbxgFz6H2ePkRj3N sFVxMe36tUCO7/xpna0s7ukTat54+zp1u9jBzs572XCKn7l2yv2bifB9XeoI6OQj Ci1150G1Hksn8G2R5k6zXSZjjZl/bC3Vl4RU6gkE+1KP4HyfAkSVEOpDWfM9cQpZ HrnB0gG80W5HWFGpDBdWaMIHM9rkuS0d//Qzl9/1ekA0NmTCCL793G5CI8vt1oLa fXk0txIXjoYv4Thpoac6x3fbet/fydkekUU6SXdYrl71QqXvPQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFECF6CDGjrd7QAzAxdFYOMjvX4AXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z YTQwMmZiNy0yYzNkLTRjNjUtYTY5My00MWZmYWU3YjkxYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNhNDAyZmI3LTJjM2QtNGM2NS1h NjkzLTQxZmZhZTdiOTFjNS8zYTQwMmZiNy0yYzNkLTRjNjUtYTY5My00MWZmYWU3 YjkxYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBChgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYaSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCPSPYQcJzxl8i/irx5/inKl3254VZNHLtDUfFbdcn5IfQp 999AK2mjqmmhlEjl50yJ65G5vfsbUp8vJ6V38R07C3YDfcgYa0+RXQWmVCq7753r JXzLBBBK53yMhOFqWcYn7wHpJhs2aRmoed2Fbi7bsXw9jb6/2MsHuXMUiJ3D5lZM S6sKlsV1HqmFQXWYgkhXSfDYhzxdWydlyYdvyR5xNr1xtB3b2YxDcNdAr7SLJAon ltEFGaEMfuTVO6SVj/BjoA0fXw5Znj4cjLPjoWOqrMEj0393jKmJvsg1cnhz/pV3 QCr+sBklLdBkjs9PzYcDg9nAvokESRYOM0YTY4Zg -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:15 2026 by rpki-client