$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/861f008a-e44d-4d68-ae37-2d79cc6b8499.cer File: 861f008a-e44d-4d68-ae37-2d79cc6b8499.cer (raw, json) Hash identifier: 1AJ+msbx/k26S0yGZS6TaWSA8Zkw28wRNdE+c21GZNM= Subject key identifier: 34:62:A7:15:D0:49:94:A0:85:5F:20:54:FC:76:E3:80:B0:B5:B1:04 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584FC09C82AA9311B3F0CA0DDD24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/861f008a-e44d-4d68-ae37-2d79cc6b8499/861f008a-e44d-4d68-ae37-2d79cc6b8499.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/861f008a-e44d-4d68-ae37-2d79cc6b8499/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Nov 2026 17:26:00 +0000 Certificate not after: Thu 08 Feb 2029 17:26:00 +0000 Subordinate resources: AS: 403191 IP: 2602:81a:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c0:9c:82:aa:93:11:b3:f0:ca:0d:dd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 6 17:26:00 2026 GMT Not After : Feb 8 17:26:00 2029 GMT Subject: CN=861f008a-e44d-4d68-ae37-2d79cc6b8499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:f8:97:92:3c:04:5d:8b:45:60:cb:a8:9f: 18:3f:8d:c2:ac:71:a6:ed:88:07:e1:74:4e:a7:95: b7:1f:26:0d:0a:6a:2a:05:11:10:c2:4b:19:8e:b2: 30:c9:85:77:03:bc:eb:59:fe:da:0a:81:1c:16:16: c1:1c:4a:af:b2:6a:46:4b:01:92:d1:1c:ea:2c:4b: 5e:ad:1d:88:c4:00:20:66:b0:71:e6:4a:7d:db:b6: 26:07:1a:3c:26:77:4c:7d:ea:2b:df:44:3c:37:65: 81:08:09:b1:6c:2f:ed:dd:5c:c3:37:da:67:6c:1b: ff:cb:ed:97:5e:85:f8:c4:56:53:87:20:b4:07:4f: c4:c7:e1:dd:8e:a1:cf:ed:b6:1b:0c:4f:64:33:d9: 7c:3c:ee:8a:d5:12:2a:52:8b:ac:9c:9c:f1:58:ea: ba:ac:66:e9:c3:9a:d1:21:90:68:a0:75:d7:26:22: b4:64:e4:db:9f:38:0e:f9:2d:69:7b:92:d3:17:6a: 89:a1:9f:2a:96:3f:cf:9d:dd:3d:05:5c:45:8c:11: 25:c1:0d:fc:4d:b1:9f:18:c4:41:09:90:e5:54:a6: 0d:a5:33:4f:93:7d:43:cf:c5:57:25:d0:80:34:30: ea:fe:1b:ab:12:c5:ed:03:5e:5c:50:da:46:fe:ea: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:A7:15:D0:49:94:A0:85:5F:20:54:FC:76:E3:80:B0:B5:B1:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/861f008a-e44d-4d68-ae37-2d79cc6b8499/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/861f008a-e44d-4d68-ae37-2d79cc6b8499/861f008a-e44d-4d68-ae37-2d79cc6b8499.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv6: 2602:81a:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403191 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b1:c6:7b:37:e4:a9:02:b8:6d:90:64:69:04:b8:06:bd:cc: 7c:ac:cc:f1:a6:36:5b:e6:4b:bd:c5:90:21:23:7e:67:75:ca: 5a:cd:8f:f4:8b:27:80:dd:65:b6:1b:69:68:4e:35:4f:c1:e6: 40:7f:5b:d0:36:d8:3f:e4:5c:b2:72:d6:63:22:2f:e4:7d:db: 0b:b7:60:1d:47:32:f7:71:da:29:4c:9e:e7:75:81:b2:9f:d7: 33:16:8b:5b:d6:b0:6c:70:cf:2d:d2:ab:e4:92:88:3c:04:34: 13:a9:27:3e:3c:29:6b:4e:ec:7a:74:75:2e:ef:43:64:ab:1e: 11:f3:02:f5:06:ac:3b:e1:a1:d5:f4:51:55:51:44:d3:7a:0b: f4:96:d7:75:24:32:e4:77:43:e7:dd:e9:42:7f:d8:8f:69:5a: 2a:97:be:49:df:55:06:15:8c:e4:8b:d8:03:f9:3d:c0:59:b6: 2f:5f:61:25:88:12:a7:2a:48:1a:20:6a:03:6a:85:11:eb:c6: 2b:2a:01:1f:97:0c:ef:85:aa:06:31:55:43:02:fd:54:24:b3: 4b:27:e2:9e:1b:87:fd:87:ba:2a:d4:96:56:88:7d:0e:d5:6b: ce:e4:22:07:78:a8:ba:db:d9:98:9c:6e:e5:f0:d4:b3:a5:47: f2:3f:41:7a -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE/AnIKqkxGz8MoN3SQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MTEwNjE3MjYwMFoXDTI5MDIwODE3MjYwMFowLzEtMCsGA1UEAxMk ODYxZjAwOGEtZTQ0ZC00ZDY4LWFlMzctMmQ3OWNjNmI4NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlov4l5I8BF2LRWDLqJ8YP43CrHGm7YgH4XRO p5W3HyYNCmoqBREQwksZjrIwyYV3A7zrWf7aCoEcFhbBHEqvsmpGSwGS0RzqLEte rR2IxAAgZrBx5kp927YmBxo8JndMfeor30Q8N2WBCAmxbC/t3VzDN9pnbBv/y+2X XoX4xFZThyC0B0/Ex+HdjqHP7bYbDE9kM9l8PO6K1RIqUousnJzxWOq6rGbpw5rR IZBooHXXJiK0ZOTbnzgO+S1pe5LTF2qJoZ8qlj/Pnd09BVxFjBElwQ38TbGfGMRB CZDlVKYNpTNPk31Dz8VXJdCANDDq/hurEsXtA15cUNpG/up9JQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFDRipxXQSZSghV8gVPx244CwtbEEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 NjFmMDA4YS1lNDRkLTRkNjgtYWUzNy0yZDc5Y2M2Yjg0OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzg2MWYwMDhhLWU0NGQtNGQ2OC1h ZTM3LTJkNzljYzZiODQ5OS84NjFmMDA4YS1lNDRkLTRkNjgtYWUzNy0yZDc5Y2M2 Yjg0OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggaEAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBib3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAD6xxns35KkCuG2QZGkEuAa9zHyszPGmNlvmS73FkCEj fmd1ylrNj/SLJ4DdZbYbaWhONU/B5kB/W9A22D/kXLJy1mMiL+R92wu3YB1HMvdx 2ilMnud1gbKf1zMWi1vWsGxwzy3Sq+SSiDwENBOpJz48KWtO7Hp0dS7vQ2SrHhHz AvUGrDvhodX0UVVRRNN6C/SW13UkMuR3Q+fd6UJ/2I9pWiqXvknfVQYVjOSL2AP5 PcBZti9fYSWIEqcqSBogagNqhRHrxisqAR+XDO+FqgYxVUMC/VQks0sn4p4bh/2H uirUllaIfQ7Va87kIgd4qLrb2ZicbuXw1LOlR/I/QXo= -----END CERTIFICATE-----Generated at Sun Nov 15 16:17:53 2026 by rpki-client