$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer File: f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer (raw, json) Hash identifier: wygCIU5sMYRrEpy6WcempPmsyeHBSQPD6ac2bbHGEqY= Subject key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584F90F7DC85ACAB56197DA51F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 15:51:16 +0000 Certificate not after: Thu 31 Aug 2028 08:45:11 +0000 Subordinate resources: AS: 40924 IP: 2602:816:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:f7:dc:85:ac:ab:56:19:7d:a5:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 20 15:51:16 2026 GMT Not After : Aug 31 08:45:11 2028 GMT Subject: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:03:fd:17:8e:ad:dd:f8:ef:0f:03:31:7f: a0:59:3e:8b:c2:eb:d0:04:06:94:89:e8:0c:99:ae: 61:46:e2:28:33:31:c7:aa:45:f3:cf:35:4d:d5:5d: 17:9a:bf:d3:8c:ae:64:47:67:d2:56:da:56:94:e3: e1:cb:08:2f:81:e3:70:d9:d3:e7:13:b9:1d:69:d9: 48:1b:bf:84:50:82:66:95:e4:81:47:40:20:93:b7: 35:a5:3c:a0:1a:a4:61:10:bd:46:95:8d:92:66:f9: f8:9f:7a:0c:2f:ee:6c:5a:ab:03:10:eb:65:a1:32: 97:83:e1:29:26:ba:14:63:0c:55:a4:2d:93:d3:30: a0:cb:a8:db:a7:97:37:7a:79:7b:d6:9b:0b:07:e8: 14:88:35:23:2b:0c:7b:0d:33:8c:42:1a:7f:58:3f: 08:a4:99:e0:9e:26:4a:b6:eb:7a:dd:27:1f:f0:24: ed:cf:29:e3:99:3a:9e:5b:f3:b8:fa:6e:88:06:07: a8:68:d8:55:b7:ad:4b:6a:17:23:91:96:a8:c8:7d: 60:8f:22:02:95:c8:d5:7b:33:38:d4:25:5d:aa:3f: c7:4c:b6:86:21:ef:11:76:a9:a4:99:aa:bb:1f:a6: fd:2e:cc:78:31:b0:4b:54:a9:52:2e:31:d9:d2:48: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40924 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b7:29:b9:e2:ae:9c:63:8e:5b:3d:7f:f3:12:12:02:1f:c0: 78:65:e9:f3:62:9d:7a:37:d3:f8:31:0a:e2:e3:13:86:52:36: 06:8a:d8:1d:b8:1e:4e:b6:33:00:9e:d7:ca:b7:c9:d3:ed:e2: a4:a3:71:f7:c6:27:55:e1:05:81:f2:36:6a:ed:45:51:44:ce: 11:96:e1:93:0a:d2:16:7e:85:2d:6c:29:10:8b:51:44:3a:90: a0:49:a7:c3:7d:cb:24:48:8a:d3:e4:0e:9d:11:ec:59:0e:ff: a5:e8:2e:73:fe:cc:b2:09:86:84:28:cf:da:d8:6a:e5:e4:44: a3:80:0a:ae:9a:e1:18:a2:b8:e9:e7:d5:62:b9:de:bc:a9:34: 9f:5a:ee:87:5e:68:aa:d4:02:59:70:80:75:11:e7:db:ac:65: 71:03:05:1b:c5:d7:a6:fd:fb:36:b2:65:de:c5:f6:8d:62:ea: a6:43:8c:4e:17:da:6b:91:75:4f:98:a9:5f:bf:5a:5a:e7:5d: 84:d6:18:eb:6b:85:13:04:e5:09:d9:aa:d5:fe:04:00:7d:f8: 4a:46:8a:33:0a:36:3d:42:dd:17:11:c1:98:7d:aa:0c:c8:50: 18:37:5e:11:91:0a:e1:3f:32:18:07:e3:ff:a4:4a:7d:d1:f5: 47:7b:38:a7 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE+Q99yFrKtWGX2lH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI2MTAyMDE1NTExNloXDTI4MDgzMTA4NDUxMVowLzEtMCsGA1UEAxMk ZjAxZjdlMGItMDBjYi00N2EyLThlMjAtMDMzYjM1NjdjYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4sD/ReOrd347w8DMX+gWT6LwuvQBAaUiegM ma5hRuIoMzHHqkXzzzVN1V0Xmr/TjK5kR2fSVtpWlOPhywgvgeNw2dPnE7kdadlI G7+EUIJmleSBR0Agk7c1pTygGqRhEL1GlY2SZvn4n3oML+5sWqsDEOtloTKXg+Ep JroUYwxVpC2T0zCgy6jbp5c3enl71psLB+gUiDUjKwx7DTOMQhp/WD8IpJngniZK tut63Scf8CTtzynjmTqeW/O4+m6IBgeoaNhVt61LahcjkZaoyH1gjyIClcjVezM4 1CVdqj/HTLaGIe8Rdqmkmaq7H6b9Lsx4MbBLVKlSLjHZ0ki5ewIDAQABo4IEHjCC BBowHQYDVR0OBBYEFMQQsM/uzy1uWJ3gmGWBV4IhpChAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2N2NjNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YwMWY3ZTBiLTAwY2ItNDdhMi04 ZTIwLTAzM2IzNTY3Y2M2ZC9mMDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2 N2NjNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggWcAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAJ/cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAJa3Kbnirpxjjls9f/MSEgIfwHhl6fNinXo30/gxCuLj E4ZSNgaK2B24Hk62MwCe18q3ydPt4qSjcffGJ1XhBYHyNmrtRVFEzhGW4ZMK0hZ+ hS1sKRCLUUQ6kKBJp8N9yyRIitPkDp0R7FkO/6XoLnP+zLIJhoQoz9rYauXkRKOA Cq6a4RiiuOnn1WK53rypNJ9a7odeaKrUAllwgHUR59usZXEDBRvF16b9+zayZd7F 9o1i6qZDjE4X2muRdU+YqV+/WlrnXYTWGOtrhRME5QnZqtX+BAB9+EpGijMKNj1C 3RcRwZh9qgzIUBg3XhGRCuE/MhgH4/+kSn3R9Ud7OKc= -----END CERTIFICATE-----Generated at Wed Nov 4 19:57:50 2026 by rpki-client