$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31.cer File: a2e3fb4b-e277-458e-bd0b-3983238eff31.cer (raw, json) Hash identifier: GZusw40iNPEhGAX1XvTtSIEQ/jRbfP3TNQ9PNn+BRUo= Subject key identifier: 23:5B:E8:A9:D1:C4:77:94:BA:4A:B6:F2:63:FD:56:D0:8D:0E:4D:33 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F4328584F3CDAFDA9C00EB3E4E87A30C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/a2e3fb4b-e277-458e-bd0b-3983238eff31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Sep 2026 12:45:11 +0000 Certificate not after: Sat 23 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 11309 IP: 2620:137:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:da:fd:a9:c0:0e:b3:e4:e8:7a:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 20 12:45:11 2026 GMT Not After : Dec 23 13:45:11 2028 GMT Subject: CN=a2e3fb4b-e277-458e-bd0b-3983238eff31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:c1:38:28:0f:97:69:89:8c:83:cd:9a:89: f9:11:70:02:d4:3d:04:a4:e8:50:5d:aa:74:ef:53: 94:c0:d6:1c:8f:a9:ca:a8:48:3c:51:0a:c3:cd:a9: 93:92:6d:52:da:51:e2:68:a2:fe:ce:bd:22:64:e8: 06:eb:d2:72:65:7b:8d:50:75:40:86:a3:61:ff:58: 8b:d7:28:e2:1c:14:b9:44:6c:cc:e6:28:9b:00:dd: e3:c5:c3:f3:d8:78:e6:f5:89:f3:e7:91:2d:e1:f5: 20:c7:4b:8f:0d:10:9f:2b:60:09:1b:a8:6f:62:6e: 60:05:57:e4:6c:34:3e:30:8d:75:39:ef:b1:00:52: aa:ac:7a:12:5a:8f:46:18:71:ec:67:02:29:aa:ce: f9:e6:b5:69:3c:91:5b:3b:60:28:7a:87:6a:69:0a: 24:ca:64:07:8a:a2:11:a0:2f:6a:8b:f1:c8:ef:17: 9b:e7:6c:ec:95:49:79:e5:d1:4c:6b:dd:6b:9a:dd: 2c:7f:a2:2b:f4:d8:f1:8a:3a:9b:8b:ea:36:7d:48: 5e:96:9d:42:aa:b7:ea:d0:00:61:8c:5f:95:ba:b9: 1f:1c:d6:e1:fb:92:d0:b3:50:ef:be:c7:02:5a:b4: 73:9a:18:b1:2a:36:e5:f0:73:cf:83:58:aa:5d:f3: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5B:E8:A9:D1:C4:77:94:BA:4A:B6:F2:63:FD:56:D0:8D:0E:4D:33 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a2e3fb4b-e277-458e-bd0b-3983238eff31/a2e3fb4b-e277-458e-bd0b-3983238eff31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv6: 2620:137:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11309 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:33:1f:1a:a4:e5:31:3f:56:c8:80:c3:e0:11:e6:f4:fc:c5: cd:b6:11:c6:5e:20:e0:e0:d8:0d:4e:83:11:5b:19:ed:ad:79: 27:b2:b7:fc:9a:b3:4d:d7:59:fb:23:30:ca:f8:af:bb:29:d0: 3a:76:da:27:55:8f:d2:e5:87:5a:b2:ef:af:03:d2:57:1b:93: 7b:e0:ee:0b:9a:dd:25:b9:be:24:9b:78:37:7d:4f:0b:c1:bf: fc:68:c7:c5:38:77:f0:7a:bf:e6:83:2c:57:3c:aa:8b:fc:5c: b3:00:c6:63:8a:aa:a8:16:c4:c6:1c:0e:08:17:cb:cb:07:01: 28:18:48:7b:52:26:dd:7f:1a:1a:82:70:36:93:5a:b0:cd:cf: 24:bb:0b:dc:71:18:4a:b4:7c:e3:4a:62:cd:e4:fa:9a:43:1c: 2c:76:2a:4a:1c:e2:c2:51:6c:5c:00:26:f6:4a:f8:d5:0c:57: 74:e1:a0:84:2f:18:f4:8d:e8:b6:32:42:ce:40:2d:ce:c1:8b: fd:e5:1c:e7:ba:09:cc:b9:a6:ad:82:f7:d7:4b:20:83:01:bb: 4d:cf:4b:06:a2:f0:a5:f3:fc:ac:2c:be:58:8a:e9:08:29:c2: 10:77:84:a8:d1:27:5b:d6:18:ad:cd:e4:f6:bf:4a:42:a2:5f: b7:dd:2a:49 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE882v2pwA6z5Oh6MMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI2MDkyMDEyNDUxMVoXDTI4MTIyMzEzNDUxMVowLzEtMCsGA1UEAxMk YTJlM2ZiNGItZTI3Ny00NThlLWJkMGItMzk4MzIzOGVmZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhnBOCgPl2mJjIPNmon5EXAC1D0EpOhQXap0 71OUwNYcj6nKqEg8UQrDzamTkm1S2lHiaKL+zr0iZOgG69JyZXuNUHVAhqNh/1iL 1yjiHBS5RGzM5iibAN3jxcPz2Hjm9Ynz55Et4fUgx0uPDRCfK2AJG6hvYm5gBVfk bDQ+MI11Oe+xAFKqrHoSWo9GGHHsZwIpqs755rVpPJFbO2AoeodqaQokymQHiqIR oC9qi/HI7xeb52zslUl55dFMa91rmt0sf6Ir9Njxijqbi+o2fUhelp1Cqrfq0ABh jF+VurkfHNbh+5LQs1DvvscCWrRzmhixKjbl8HPPg1iqXfNLpwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFCNb6KnRxHeUukq28mP9VtCNDk0zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9h MmUzZmI0Yi1lMjc3LTQ1OGUtYmQwYi0zOTgzMjM4ZWZmMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2EyZTNmYjRiLWUyNzctNDU4ZS1i ZDBiLTM5ODMyMzhlZmYzMS9hMmUzZmI0Yi1lMjc3LTQ1OGUtYmQwYi0zOTgzMjM4 ZWZmMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAE3MDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIsLTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBKMx8apOUxP1bIgMPgEeb0/MXNthHGXiDg4NgNToMRWxnt rXknsrf8mrNN11n7IzDK+K+7KdA6dtonVY/S5Ydasu+vA9JXG5N74O4Lmt0lub4k m3g3fU8Lwb/8aMfFOHfwer/mgyxXPKqL/FyzAMZjiqqoFsTGHA4IF8vLBwEoGEh7 UibdfxoagnA2k1qwzc8kuwvccRhKtHzjSmLN5PqaQxwsdipKHOLCUWxcACb2SvjV DFd04aCELxj0jei2MkLOQC3OwYv95RznugnMuaatgvfXSyCDAbtNz0sGovCl8/ys LL5YiukIKcIQd4So0Sdb1hitzeT2v0pCol+33SpJ -----END CERTIFICATE-----Generated at Thu Sep 24 08:44:34 2026 by rpki-client