$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094.cer File: 071e752e-c5a0-48d4-bcbf-b8f7a628f094.cer (raw, json) Hash identifier: kUAPRvjkY+2Dtgn4Vo/1b4liZn7fWA5GXelK4mXU3OU= Subject key identifier: BB:68:CC:DC:D5:B7:17:61:BB:A7:67:EF:51:84:7F:BB:92:53:E1:12 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7CEB89D7AB54ABD842A09840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/071e752e-c5a0-48d4-bcbf-b8f7a628f094.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 11:30:16 +0000 Certificate not after: Wed 10 Jan 2029 04:32:47 +0000 Subordinate resources: AS: 403084 IP: 198.134.165.0/24 IP: 2602:f2a9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:eb:89:d7:ab:54:ab:d8:42:a0:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 13 11:30:16 2026 GMT Not After : Jan 10 04:32:47 2029 GMT Subject: CN=071e752e-c5a0-48d4-bcbf-b8f7a628f094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:12:07:46:9d:4a:d2:89:8c:2e:bf:73:ac: 3f:ef:63:48:1b:80:cf:bb:ab:07:46:7c:03:81:92: 1f:d4:99:e1:8f:e6:29:e1:ed:b1:46:90:95:86:76: f0:b8:29:87:c4:27:2c:40:f7:1d:ee:1e:cb:7c:2d: 7d:49:eb:2e:83:86:78:d0:42:0e:ec:3f:d5:ed:67: 38:60:fa:a4:b8:9d:89:b8:84:66:c9:c2:3e:73:99: 01:c3:43:37:00:41:10:72:d3:15:ae:f7:20:e6:ed: c1:c3:5e:1f:0f:47:e4:4d:8e:23:7e:65:ac:f3:23: 97:cb:98:f0:47:e4:5c:ba:09:71:89:46:b0:28:5a: 2d:89:75:5a:ea:a9:af:9c:fe:25:e1:8c:18:79:1c: d4:bc:47:c3:f7:33:d1:e4:ed:26:cf:f7:eb:1b:aa: 57:a9:87:a2:e8:73:05:8e:d3:09:c9:a6:50:36:ad: 35:2c:1c:f6:af:93:3b:08:4d:a9:a3:c7:84:11:99: 25:90:8b:65:c1:84:1e:0c:9d:d4:62:b0:67:1d:62: 2e:3b:cd:5f:3c:3e:cb:56:d4:8d:a8:1f:17:aa:8e: 3d:6f:26:70:dc:b3:8a:d2:03:66:f0:7b:85:79:49: 5f:87:23:9c:6e:ea:9e:b7:8f:1b:dc:83:b9:94:e6: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:68:CC:DC:D5:B7:17:61:BB:A7:67:EF:51:84:7F:BB:92:53:E1:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/071e752e-c5a0-48d4-bcbf-b8f7a628f094/071e752e-c5a0-48d4-bcbf-b8f7a628f094.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.134.165.0/24 IPv6: 2602:f2a9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403084 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c9:78:47:84:f4:0f:c7:30:38:1d:d0:ca:55:f1:d3:a3:dd: 87:be:51:b3:a4:86:40:d3:99:50:02:58:57:e7:f0:e7:fe:22: 84:a7:27:6c:7f:85:23:ba:2e:92:2c:99:7a:a6:7a:39:68:e6: 5e:2d:f5:52:bc:c0:02:f8:99:e1:65:0c:fe:04:42:3d:be:2c: 00:a0:48:26:e6:69:66:03:1f:17:7a:3c:fc:d0:6a:c5:a2:39: 1d:c2:95:81:45:43:4a:54:8a:db:b1:49:60:b6:39:ec:f7:5a: a5:50:12:1b:9e:79:a0:03:22:ca:3e:4a:12:95:56:fa:ff:07: 51:85:b4:9f:4a:43:37:56:c9:58:ba:09:c9:b6:05:14:34:63: cd:2a:ef:11:0f:08:4e:b2:2d:29:76:13:2e:c3:ac:db:e5:3a: e9:d6:36:0b:8e:26:f1:e3:d8:ed:ac:aa:3b:43:be:29:b9:9f: c6:68:2b:ec:eb:05:2e:1d:1b:cc:dd:94:a0:a2:f8:ea:00:67: 4f:c7:d1:07:83:eb:c0:25:4f:e5:17:ce:26:02:a8:81:0a:48: 50:48:8b:34:44:48:05:07:44:cb:6d:58:57:a8:71:99:56:3c: 1c:22:59:a9:d0:76:c3:6e:cd:41:19:12:5e:0c:de:37:e4:83: 99:a1:9e:5d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9864nXq1Sr2EKgmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMzExMzAxNloXDTI5MDExMDA0MzI0N1owLzEtMCsGA1UEAxMk MDcxZTc1MmUtYzVhMC00OGQ0LWJjYmYtYjhmN2E2MjhmMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsgSB0adStKJjC6/c6w/72NIG4DPu6sHRnwD gZIf1Jnhj+Yp4e2xRpCVhnbwuCmHxCcsQPcd7h7LfC19Sesug4Z40EIO7D/V7Wc4 YPqkuJ2JuIRmycI+c5kBw0M3AEEQctMVrvcg5u3Bw14fD0fkTY4jfmWs8yOXy5jw R+RcuglxiUawKFotiXVa6qmvnP4l4YwYeRzUvEfD9zPR5O0mz/frG6pXqYei6HMF jtMJyaZQNq01LBz2r5M7CE2po8eEEZklkItlwYQeDJ3UYrBnHWIuO81fPD7LVtSN qB8Xqo49byZw3LOK0gNm8HuFeUlfhyOcbuqet48b3IO5lOb/LQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLtozNzVtxdhu6dn71GEf7uSU+ESMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8w NzFlNzUyZS1jNWEwLTQ4ZDQtYmNiZi1iOGY3YTYyOGYwOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzA3MWU3NTJlLWM1YTAtNDhkNC1i Y2JmLWI4ZjdhNjI4ZjA5NC8wNzFlNzUyZS1jNWEwLTQ4ZDQtYmNiZi1iOGY3YTYy OGYwOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGhqUwDgQCAAIwCAMGACYC8qkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmjDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1yXhHhPQPxzA4HdDKVfHTo92H vlGzpIZA05lQAlhX5/Dn/iKEpydsf4Ujui6SLJl6pno5aOZeLfVSvMAC+JnhZQz+ BEI9viwAoEgm5mlmAx8Xejz80GrFojkdwpWBRUNKVIrbsUlgtjns91qlUBIbnnmg AyLKPkoSlVb6/wdRhbSfSkM3VslYugnJtgUUNGPNKu8RDwhOsi0pdhMuw6zb5Trp 1jYLjibx49jtrKo7Q74puZ/GaCvs6wUuHRvM3ZSgovjqAGdPx9EHg+vAJU/lF84m AqiBCkhQSIs0REgFB0TLbVhXqHGZVjwcIlmp0HbDbs1BGRJeDN435IOZoZ5d -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:29 2026 by rpki-client