$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae.cer File: b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae.cer (raw, json) Hash identifier: ZueKiWUYBf2FawgGrS4NLHYsb+ePMFJMHqKkoIhKh08= Subject key identifier: 8A:A1:8A:79:E2:41:AD:A8:4B:5A:C2:9F:CF:61:19:80:19:BC:70:2A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8E292B2A71BD665F2B746560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae/b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 15:43:11 +0000 Certificate not after: Sun 21 Jan 2029 16:43:11 +0000 Subordinate resources: AS: 394427 IP: 103.19.84.0/22 IP: 204.89.220.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:29:2b:2a:71:bd:66:5f:2b:74:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 15:43:11 2026 GMT Not After : Jan 21 16:43:11 2029 GMT Subject: CN=b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:5b:4a:0a:00:90:24:df:ba:02:56:fb:12: a3:c8:83:53:bd:71:f9:5a:a2:d8:e7:17:96:90:01: e1:78:2b:3f:d2:d1:f8:de:2d:3e:0e:64:0d:e9:40: f8:bf:62:17:25:1a:f2:52:83:b3:b1:2a:42:0a:39: 3d:c6:04:d5:87:57:cd:8f:61:b9:15:cf:e8:f2:04: 45:a4:05:ee:e7:fb:3d:d5:62:bb:69:c3:83:29:67: 58:01:4f:31:1f:ee:e7:2c:f3:cc:38:c3:ff:a1:02: c1:17:46:23:4d:e1:b8:d2:68:e8:ac:00:3d:df:5c: 27:dc:51:2c:46:35:53:81:77:54:3c:ec:ac:5b:8e: ab:8a:b2:c9:6a:d0:58:82:4e:16:b0:64:56:d2:37: 6b:c7:39:60:e0:9c:f0:36:e7:6e:64:ff:c3:bc:d1: 1c:bf:aa:ee:27:a2:bd:99:3a:2e:78:eb:8a:ac:5d: ed:cc:ff:d0:14:75:92:4e:33:43:19:ae:63:85:eb: be:e8:c5:72:f2:df:38:6c:4d:d2:c4:3b:86:cb:58: 5c:f6:e5:4e:dc:85:e7:a8:1d:2a:71:a0:05:8a:41: a4:68:e8:40:33:33:2c:5a:04:f0:d7:68:f8:15:ae: cb:78:e8:73:72:77:a2:0e:5a:07:74:65:18:9b:1d: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A1:8A:79:E2:41:AD:A8:4B:5A:C2:9F:CF:61:19:80:19:BC:70:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae/b8c0d734-d86a-4a1a-aa1c-7d4d39ad2eae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 103.19.84.0/22 204.89.220.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6e:0e:83:99:3b:ff:db:36:b3:44:eb:c5:ab:35:ff:c2:bb: c9:9a:fd:3b:42:ad:1e:e4:f4:f9:29:c3:b4:c0:ec:0e:c4:57: 2f:6a:c0:05:7b:c1:a8:c1:4d:64:8f:9b:c3:b6:d7:f1:fc:4c: 3c:91:8d:af:df:62:e1:13:38:fc:8e:6c:07:c0:75:7a:b5:07: a4:f9:67:bd:63:ed:3d:3c:05:fb:d3:aa:65:05:38:08:69:12: ee:23:d4:d1:90:57:4d:69:5a:83:ba:db:16:92:18:06:cb:24: f4:c1:75:6e:af:23:41:05:eb:33:86:0b:0f:21:e7:f0:fe:f0: de:a7:bb:1f:a9:8f:f3:d8:f0:3a:2e:bb:82:42:f8:d0:4d:28: 6e:70:ef:cf:9b:b1:8f:17:13:68:ec:51:2b:06:ff:f3:c1:29: 28:d4:a0:46:c0:fe:29:26:0c:19:d3:2b:e5:ed:3d:b9:3a:5a: 5d:a9:6c:db:6d:dd:d7:de:24:50:a6:32:a9:e1:6e:cd:90:57: aa:5d:32:43:fa:0c:0e:dd:61:8a:8e:0c:3d:21:d0:4b:9b:15: cd:2a:6f:f2:cc:4e:ac:60:b7:b8:75:d9:d8:34:7f:c6:42:de: 86:8c:f9:2a:32:fa:f3:dc:0f:8a:99:f4:0d:83:a1:30:7e:84: 49:cc:76:dd -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE+OKSsqcb1mXyt0ZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTE1NDMxMVoXDTI5MDEyMTE2NDMxMVowLzEtMCsGA1UEAxMk YjhjMGQ3MzQtZDg2YS00YTFhLWFhMWMtN2Q0ZDM5YWQyZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+xbSgoAkCTfugJW+xKjyINTvXH5WqLY5xeW kAHheCs/0tH43i0+DmQN6UD4v2IXJRryUoOzsSpCCjk9xgTVh1fNj2G5Fc/o8gRF pAXu5/s91WK7acODKWdYAU8xH+7nLPPMOMP/oQLBF0YjTeG40mjorAA931wn3FEs RjVTgXdUPOysW46rirLJatBYgk4WsGRW0jdrxzlg4JzwNuduZP/DvNEcv6ruJ6K9 mToueOuKrF3tzP/QFHWSTjNDGa5jheu+6MVy8t84bE3SxDuGy1hc9uVO3IXnqB0q caAFikGkaOhAMzMsWgTw12j4Fa7LeOhzcneiDloHdGUYmx2uZQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIqhinniQa2oS1rCn89hGYAZvHAqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i OGMwZDczNC1kODZhLTRhMWEtYWExYy03ZDRkMzlhZDJlYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2I4YzBkNzM0LWQ4NmEtNGExYS1h YTFjLTdkNGQzOWFkMmVhZS9iOGMwZDczNC1kODZhLTRhMWEtYWExYy03ZDRkMzlh ZDJlYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJnE1QDBADMWdwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgS7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAF1uDoOZO//bNrNE68WrNf/Cu8ma/TtCrR7k9Pkp w7TA7A7EVy9qwAV7wajBTWSPm8O21/H8TDyRja/fYuETOPyObAfAdXq1B6T5Z71j 7T08BfvTqmUFOAhpEu4j1NGQV01pWoO62xaSGAbLJPTBdW6vI0EF6zOGCw8h5/D+ 8N6nux+pj/PY8Douu4JC+NBNKG5w78+bsY8XE2jsUSsG//PBKSjUoEbA/ikmDBnT K+XtPbk6Wl2pbNtt3dfeJFCmMqnhbs2QV6pdMkP6DA7dYYqODD0h0EubFc0qb/LM Tqxgt7h12dg0f8ZC3oaM+Soy+vPcD4qZ9A2DoTB+hEnMdt0= -----END CERTIFICATE-----Generated at Fri Oct 30 16:02:52 2026 by rpki-client