$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d.cer File: 0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d.cer (raw, json) Hash identifier: vSEI7ERCZSbifhhL5Vo4TgO1ijeeaYv96XlI9o+B17c= Subject key identifier: 79:25:2E:2C:20:DC:F4:D0:EC:FB:7E:95:D7:F4:70:A5:3D:79:57:D7 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F843612921369090AA0693640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d/0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Oct 2026 02:11:06 +0000 Certificate not after: Thu 18 Jan 2029 03:11:06 +0000 Subordinate resources: AS: 393656 IP: 168.245.146.0/24 IP: 170.199.210.0 -- 170.199.217.255 IP: 2604:bbc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:84:36:12:92:13:69:09:0a:a0:69:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 16 02:11:06 2026 GMT Not After : Jan 18 03:11:06 2029 GMT Subject: CN=0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:66:cf:f0:f6:37:78:76:9e:10:a0:13:0b:87: c9:31:27:b2:be:78:38:49:fe:b8:16:75:22:32:7e: b7:c7:77:86:d3:3e:e8:ef:a2:8e:b7:38:f5:b3:b2: d8:07:31:54:19:db:ba:80:f0:15:84:88:98:b5:bc: 55:75:6c:57:5f:d6:bf:b1:10:38:a3:34:22:9e:a5: 96:ec:ec:59:16:dd:ef:cf:1a:01:d1:d2:a2:ed:1b: e8:30:b8:16:b8:ce:f1:6a:8a:55:39:82:bc:01:96: 5d:ee:46:1c:89:63:19:9f:e7:46:90:4b:45:72:0c: cc:e8:96:46:c6:f0:26:11:f9:b6:69:d0:bb:69:4f: da:74:db:24:79:27:fc:f4:e1:02:99:c1:30:06:bd: a6:a5:47:21:6d:27:92:11:9a:b0:3e:b6:8e:b1:c0: 98:ab:90:7a:27:34:00:70:e2:3d:d2:d2:04:bc:69: 5c:54:b4:8a:ce:0e:6a:a2:80:d4:ad:91:91:3e:f1: 8b:03:4c:e5:41:01:be:0f:33:a6:52:fd:41:3a:b5: 1f:57:58:79:ac:6a:2a:0e:a7:2c:27:48:91:24:38: a6:2a:ab:e2:07:3c:20:a8:0c:b9:73:5e:00:28:79: 37:23:b2:f7:61:48:ed:b9:7e:19:45:97:82:58:93: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:25:2E:2C:20:DC:F4:D0:EC:FB:7E:95:D7:F4:70:A5:3D:79:57:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d/0bf9cd15-7362-4c9b-a2e7-cb257b1ae18d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 168.245.146.0/24 170.199.210.0-170.199.217.255 IPv6: 2604:bbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393656 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7a:a0:2a:f8:e1:66:af:65:e8:30:de:b8:d7:80:94:fb:95: 1d:bc:62:a6:b8:58:0e:77:99:ba:1a:73:07:2f:3b:6a:cc:ce: 8a:39:03:29:0b:1c:0c:fd:71:5a:7e:52:52:4a:a8:86:c7:c9: b9:e4:99:f2:b3:51:78:60:10:3a:e9:b4:5f:47:a5:dd:31:4a: 28:39:60:68:1d:62:ed:34:11:d6:59:ec:7a:9b:53:15:b3:e6: c7:2e:ea:2b:72:b7:49:12:73:f1:7b:1f:00:7c:88:78:36:46: be:89:c6:ca:65:8e:a0:ee:25:ca:43:7d:0b:2d:79:23:c4:55: 38:9c:4a:11:ce:39:27:de:f5:2d:26:4f:4c:19:5d:93:10:a0: 08:70:7c:f9:3d:10:60:63:35:c8:33:d7:8f:c4:b9:c9:72:7f: 43:bb:d1:c1:a3:73:24:b0:20:d2:75:cf:f0:e1:d6:68:b0:32: aa:b6:74:ad:01:e2:ef:a5:18:4c:24:bd:d5:41:ea:12:96:7c: 64:5e:35:09:7b:ee:38:14:01:73:87:0f:39:69:83:b7:c9:27: ab:a0:6e:3e:38:4a:90:38:7b:b9:c4:68:ad:dd:e5:56:23:bc: f0:33:45:a3:29:87:06:e2:e4:93:bf:cd:14:0b:c2:08:de:4f: 8a:1e:76:92 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWE+ENhKSE2kJCqBpNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNjAyMTEwNloXDTI5MDExODAzMTEwNlowLzEtMCsGA1UEAxMk MGJmOWNkMTUtNzM2Mi00YzliLWEyZTctY2IyNTdiMWFlMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimbP8PY3eHaeEKATC4fJMSeyvng4Sf64FnUi Mn63x3eG0z7o76KOtzj1s7LYBzFUGdu6gPAVhIiYtbxVdWxXX9a/sRA4ozQinqWW 7OxZFt3vzxoB0dKi7RvoMLgWuM7xaopVOYK8AZZd7kYciWMZn+dGkEtFcgzM6JZG xvAmEfm2adC7aU/adNskeSf89OECmcEwBr2mpUchbSeSEZqwPraOscCYq5B6JzQA cOI90tIEvGlcVLSKzg5qooDUrZGRPvGLA0zlQQG+DzOmUv1BOrUfV1h5rGoqDqcs J0iRJDimKqviBzwgqAy5c14AKHk3I7L3YUjtuX4ZRZeCWJMSdwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFHklLiwg3PTQ7Pt+ldf0cKU9eVfXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8w YmY5Y2QxNS03MzYyLTRjOWItYTJlNy1jYjI1N2IxYWUxOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzBiZjljZDE1LTczNjItNGM5Yi1h MmU3LWNiMjU3YjFhZTE4ZC8wYmY5Y2QxNS03MzYyLTRjOWItYTJlNy1jYjI1N2Ix YWUxOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBoEAgABMBQDBACo9ZIwDAMEAarH0gMEAarH2DANBAIAAjAHAwUA JgS7wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGAbgwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb3qgKvjh Zq9l6DDeuNeAlPuVHbxiprhYDneZuhpzBy87aszOijkDKQscDP1xWn5SUkqohsfJ ueSZ8rNReGAQOum0X0el3TFKKDlgaB1i7TQR1lnseptTFbPmxy7qK3K3SRJz8Xsf AHyIeDZGvonGymWOoO4lykN9Cy15I8RVOJxKEc45J971LSZPTBldkxCgCHB8+T0Q YGM1yDPXj8S5yXJ/Q7vRwaNzJLAg0nXP8OHWaLAyqrZ0rQHi76UYTCS91UHqEpZ8 ZF41CXvuOBQBc4cPOWmDt8knq6BuPjhKkDh7ucRord3lViO88DNFoymHBuLkk7/N FAvCCN5Pih52kg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:29 2026 by rpki-client