$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f094525-6d8b-4995-ab58-ab80684683b3.cer File: 0f094525-6d8b-4995-ab58-ab80684683b3.cer (raw, json) Hash identifier: 6+86fjZ5cmJTatKorJXMwn/dnU6e8oRzgdPIY+w9hfo= Subject key identifier: E0:76:AC:6B:E5:F8:54:B0:8D:EF:27:11:9E:17:3E:89:67:89:B8:F8 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7A7FFFA6CF27921BE46D6260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f094525-6d8b-4995-ab58-ab80684683b3/0f094525-6d8b-4995-ab58-ab80684683b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f094525-6d8b-4995-ab58-ab80684683b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 14:41:58 +0000 Certificate not after: Sun 14 Jan 2029 15:41:58 +0000 Subordinate resources: IP: 199.27.189.0/24 IP: 206.108.224.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:7f:ff:a6:cf:27:92:1b:e4:6d:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 12 14:41:58 2026 GMT Not After : Jan 14 15:41:58 2029 GMT Subject: CN=0f094525-6d8b-4995-ab58-ab80684683b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:66:49:b7:34:8d:ce:26:df:5b:77:d6:47: ea:da:7a:60:b5:7f:3d:2c:f0:18:95:e1:fb:f0:23: 67:23:42:26:d7:71:fe:9c:bd:ad:17:ac:88:f7:da: 5d:6c:f1:ea:c3:ec:8e:d6:44:ba:7e:b7:a1:4b:86: ea:bb:bd:f6:ef:cb:8b:93:93:11:fc:0b:62:24:e8: 27:62:08:da:01:49:3c:d8:44:12:6b:be:52:9d:71: 6a:b0:09:e7:83:1a:0c:f7:20:70:1a:37:ee:c0:35: a8:14:61:6f:dd:9e:02:66:7c:bc:78:a1:ce:56:0e: f6:fd:22:3b:9d:48:c4:40:3f:5d:06:6f:73:ee:12: 68:43:dd:f8:84:b6:f1:9d:7b:c0:ba:ef:ee:39:d6: 30:bf:f7:79:38:80:05:7f:dc:ba:f2:c5:e9:04:2a: be:ac:cf:ab:91:49:86:e3:ee:67:8a:35:0d:e2:9c: 1e:ad:53:17:8f:b7:28:c7:51:a0:24:28:20:c3:ea: b9:a4:46:a3:66:c4:7e:d9:c3:1a:e6:d0:5a:47:d0: 14:0c:ec:e9:79:ac:8e:fc:c8:06:55:7f:38:03:b5: d0:98:2a:ea:02:3b:25:15:75:2c:cc:a6:ad:3e:aa: f1:d2:e9:6b:7c:22:1b:c5:d3:10:91:ea:cb:c5:38: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:AC:6B:E5:F8:54:B0:8D:EF:27:11:9E:17:3E:89:67:89:B8:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f094525-6d8b-4995-ab58-ab80684683b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f094525-6d8b-4995-ab58-ab80684683b3/0f094525-6d8b-4995-ab58-ab80684683b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.27.189.0/24 206.108.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5c:d3:38:1c:c7:58:7d:1d:34:3a:73:c7:d8:cf:63:9a:3a: c2:44:d1:c2:a4:67:41:6f:95:63:12:22:8b:a3:d1:d6:e0:71: 8a:67:98:d6:40:a5:54:36:11:db:e5:b5:e6:f2:5d:e7:0e:02: 63:fb:a1:1a:50:cc:64:74:39:b1:54:9c:5d:42:5f:3d:19:88: aa:40:bb:b7:34:8c:3c:f3:c7:89:46:d0:1c:bd:7c:15:93:b0: 9a:84:24:25:15:e2:45:34:90:70:e5:a8:bf:99:be:da:0c:5e: 36:f0:00:59:70:be:fe:8e:c5:2e:41:04:ea:d0:9c:4f:c0:dd: ac:b5:88:52:9f:80:fd:4c:65:6b:90:b0:78:7d:bd:ce:dc:1b: 6a:39:17:1c:ce:53:bd:00:bc:47:32:5e:06:b2:7f:ae:01:73: 83:dd:00:2f:c0:4a:00:e2:3c:e7:b3:51:10:63:da:2b:bc:c0: 73:2b:39:ac:9c:43:06:26:c4:da:bf:6f:aa:a8:e3:68:1e:30: c1:8f:d5:4f:27:8f:c0:d6:64:61:46:82:ed:2a:66:01:f4:3c: 97:2f:0f:c2:1c:61:b9:52:0e:b4:ca:db:85:12:01:94:da:2d: 15:b6:d6:7c:0e:81:5a:29:d2:a9:bc:7e:40:17:54:35:09:60: 7e:53:9e:0c -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE96f/+mzyeSG+RtYmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMjE0NDE1OFoXDTI5MDExNDE1NDE1OFowLzEtMCsGA1UEAxMk MGYwOTQ1MjUtNmQ4Yi00OTk1LWFiNTgtYWI4MDY4NDY4M2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwalmSbc0jc4m31t31kfq2npgtX89LPAYleH7 8CNnI0Im13H+nL2tF6yI99pdbPHqw+yO1kS6frehS4bqu73278uLk5MR/AtiJOgn YgjaAUk82EQSa75SnXFqsAnngxoM9yBwGjfuwDWoFGFv3Z4CZny8eKHOVg72/SI7 nUjEQD9dBm9z7hJoQ934hLbxnXvAuu/uOdYwv/d5OIAFf9y68sXpBCq+rM+rkUmG 4+5nijUN4pwerVMXj7cox1GgJCggw+q5pEajZsR+2cMa5tBaR9AUDOzpeayO/MgG VX84A7XQmCrqAjslFXUszKatPqrx0ulrfCIbxdMQkerLxTjB7wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOB2rGvl+FSwje8nEZ4XPolnibj4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8w ZjA5NDUyNS02ZDhiLTQ5OTUtYWI1OC1hYjgwNjg0NjgzYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzBmMDk0NTI1LTZkOGItNDk5NS1h YjU4LWFiODA2ODQ2ODNiMy8wZjA5NDUyNS02ZDhiLTQ5OTUtYWI1OC1hYjgwNjg0 NjgzYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADHG70DBADObOAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE1zTOBzHWH0d NDpzx9jPY5o6wkTRwqRnQW+VYxIii6PR1uBximeY1kClVDYR2+W15vJd5w4CY/uh GlDMZHQ5sVScXUJfPRmIqkC7tzSMPPPHiUbQHL18FZOwmoQkJRXiRTSQcOWov5m+ 2gxeNvAAWXC+/o7FLkEE6tCcT8DdrLWIUp+A/Uxla5CweH29ztwbajkXHM5TvQC8 RzJeBrJ/rgFzg90AL8BKAOI857NREGPaK7zAcys5rJxDBibE2r9vqqjjaB4wwY/V TyePwNZkYUaC7SpmAfQ8ly8PwhxhuVIOtMrbhRIBlNotFbbWfA6BWinSqbx+QBdU NQlgflOeDA== -----END CERTIFICATE-----Generated at Fri Oct 30 14:25:57 2026 by rpki-client