$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4.cer File: 1e62482a-67fc-4fe8-b451-5436d07d4ef4.cer (raw, json) Hash identifier: 2UQZSWuF1WkQ6TIwZcNXsiPH/JFLfiMBEf0eLoOJG4Y= Subject key identifier: 65:C3:BB:DA:A2:9C:82:94:7F:3F:BF:C5:69:ED:CC:DB:F3:BB:8C:EC Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584F1E2577B091C6D69B264B7080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/1e62482a-67fc-4fe8-b451-5436d07d4ef4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 12:45:11 +0000 Certificate not after: Tue 12 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 18985 AS: 395318 IP: 2620:b6:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:25:77:b0:91:c6:d6:9b:26:4b:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 9 12:45:11 2026 GMT Not After : Dec 12 13:45:11 2028 GMT Subject: CN=1e62482a-67fc-4fe8-b451-5436d07d4ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:78:75:8a:18:39:e0:69:33:75:18:e2:8b:5d: 62:6b:ab:f1:b4:2d:4f:40:e3:38:1f:3a:70:e6:36: 49:78:57:da:7d:28:c9:1c:b1:73:a2:9d:33:df:b3: de:1c:48:f4:fc:4e:41:ed:6b:55:33:e1:10:48:33: 7e:9a:c4:5f:81:7b:c1:88:35:57:f9:4b:72:89:d5: 42:63:79:28:83:04:6b:b2:1c:c4:02:85:d2:bc:37: 35:ef:9c:a2:b2:0d:cc:fb:8c:3d:16:9b:68:d8:ff: 80:16:67:fa:0a:aa:da:a7:42:ed:6f:68:b2:63:18: da:3a:e9:cd:26:9c:1a:73:4f:39:13:06:63:13:cc: 7f:47:7b:32:69:2e:c0:bc:70:8b:35:c8:e7:17:25: ef:55:d5:88:6f:99:2b:ed:10:8a:d7:b4:61:8e:bf: 91:c1:e5:a0:3a:44:92:52:50:20:16:98:a1:ac:bf: 36:f7:2c:7c:07:ca:3a:57:7a:7e:2a:45:f2:8e:77: fa:b6:6a:ef:d2:80:4f:46:fd:75:6c:a1:35:e4:87: 63:e5:cf:d2:3a:cb:bc:0e:72:9b:c9:97:2a:31:27: 8a:08:85:eb:e3:91:41:88:be:4e:9a:a5:97:3f:28: 65:38:4f:d0:85:4d:05:5d:3b:46:1d:e3:9e:a2:88: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C3:BB:DA:A2:9C:82:94:7F:3F:BF:C5:69:ED:CC:DB:F3:BB:8C:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e62482a-67fc-4fe8-b451-5436d07d4ef4/1e62482a-67fc-4fe8-b451-5436d07d4ef4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2620:b6:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18985 395318 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:00:d0:4b:f8:b5:97:7b:b3:2f:ba:21:b3:8a:70:9e:44:c4: 32:92:c9:22:45:ba:dc:cf:28:28:14:8f:88:fb:c2:54:cf:e3: 5e:9b:32:02:12:02:fc:5b:1e:2c:a3:a9:28:1c:ed:62:06:62: 91:85:5b:20:5f:31:ab:9b:e3:61:a9:bc:97:5b:e2:87:ba:09: 46:bc:49:a4:3d:a6:76:02:c6:a8:e6:a4:17:1b:59:ce:f0:35: 9c:dd:a3:b3:2b:97:d6:be:31:8f:56:7f:4f:1a:dd:98:cc:d4: 00:4c:f4:e8:ff:86:b5:84:b5:56:57:d3:04:3f:0f:88:8e:1f: 81:40:88:54:db:5a:74:da:bd:2b:91:35:f6:14:06:c9:a4:15: 2e:bf:f5:e2:c6:11:d1:e5:92:cc:ae:f5:af:32:cd:6b:c5:ba: d2:c8:bf:53:93:16:b5:52:2a:0c:23:74:23:12:e6:24:10:b3: 30:f5:24:08:46:de:7a:3a:a1:b0:5c:d6:47:41:7f:08:55:89: da:97:4d:37:04:4b:ab:96:b3:95:9f:42:99:17:67:ab:fa:b8: 38:bc:a7:31:9b:42:c4:c5:a4:07:56:ea:c7:90:a1:2e:2b:4f: 13:0e:97:ce:f7:bd:a2:c5:49:fa:4d:54:99:3a:ae:17:d5:fa: 45:16:ac:9b -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWE8eJXewkcbWmyZLcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDkwOTEyNDUxMVoXDTI4MTIxMjEzNDUxMVowLzEtMCsGA1UEAxMk MWU2MjQ4MmEtNjdmYy00ZmU4LWI0NTEtNTQzNmQwN2Q0ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hh1ihg54GkzdRjii11ia6vxtC1PQOM4Hzpw 5jZJeFfafSjJHLFzop0z37PeHEj0/E5B7WtVM+EQSDN+msRfgXvBiDVX+UtyidVC Y3kogwRrshzEAoXSvDc175yisg3M+4w9Fpto2P+AFmf6Cqrap0Ltb2iyYxjaOunN Jpwac085EwZjE8x/R3syaS7AvHCLNcjnFyXvVdWIb5kr7RCK17Rhjr+RweWgOkSS UlAgFpihrL829yx8B8o6V3p+KkXyjnf6tmrv0oBPRv11bKE15Idj5c/SOsu8DnKb yZcqMSeKCIXr45FBiL5OmqWXPyhlOE/QhU0FXTtGHeOeoogpGQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFGXDu9qinIKUfz+/xWntzNvzu4zsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x ZTYyNDgyYS02N2ZjLTRmZTgtYjQ1MS01NDM2ZDA3ZDRlZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFlNjI0ODJhLTY3ZmMtNGZlOC1i NDUxLTU0MzZkMDdkNGVmNC8xZTYyNDgyYS02N2ZjLTRmZTgtYjQ1MS01NDM2ZDA3 ZDRlZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAC2wAAwHgYIKwYBBQUHAQgBAf8EDzANoAsw CQICSikCAwYINjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBcANBL+LWXe7MvuiGzinCeRMQykskiRbrczygo FI+I+8JUz+NemzICEgL8Wx4so6koHO1iBmKRhVsgXzGrm+NhqbyXW+KHuglGvEmk PaZ2Asao5qQXG1nO8DWc3aOzK5fWvjGPVn9PGt2YzNQATPTo/4a1hLVWV9MEPw+I jh+BQIhU21p02r0rkTX2FAbJpBUuv/XixhHR5ZLMrvWvMs1rxbrSyL9Tkxa1UioM I3QjEuYkELMw9SQIRt56OqGwXNZHQX8IVYnal003BEurlrOVn0KZF2er+rg4vKcx m0LExaQHVurHkKEuK08TDpfO972ixUn6TVSZOq4X1fpFFqyb -----END CERTIFICATE-----Generated at Tue Sep 22 23:09:25 2026 by rpki-client