$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0c57a371-6da8-450a-9674-611efcc7609c.cer File: 0c57a371-6da8-450a-9674-611efcc7609c.cer (raw, json) Hash identifier: qbJa4RPWC4JmPRn7GO5mhsSvAaVbovrBqlKnShVLfl0= Subject key identifier: 91:AD:D3:BF:8A:5B:58:07:9F:AD:EF:9F:60:7E:03:77:0A:1D:DF:89 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F993F371E49E046E6F8E8C700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0c57a371-6da8-450a-9674-611efcc7609c/0c57a371-6da8-450a-9674-611efcc7609c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0c57a371-6da8-450a-9674-611efcc7609c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Oct 2026 15:01:30 +0000 Certificate not after: Thu 25 Jan 2029 16:01:30 +0000 Subordinate resources: IP: 204.145.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:3f:37:1e:49:e0:46:e6:f8:e8:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 23 15:01:30 2026 GMT Not After : Jan 25 16:01:30 2029 GMT Subject: CN=0c57a371-6da8-450a-9674-611efcc7609c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:f0:41:f6:0a:0d:d0:fc:7f:d1:e2:62:76: 2c:96:27:a0:89:25:2f:98:5f:fb:4b:f6:a1:70:38: 74:86:8c:b7:8e:30:aa:c8:f9:4b:6b:e4:f1:86:23: 06:18:fa:5b:ed:aa:f6:62:32:23:49:1e:92:c0:83: 71:a3:e9:a4:f0:45:56:f5:f5:f7:f8:78:dc:cf:af: 28:94:7f:1b:90:75:7c:66:31:40:72:78:28:47:20: 7e:f8:2c:15:7c:25:50:a9:9f:9a:1a:be:58:b1:3b: f9:68:ad:02:95:d9:67:88:d3:74:a3:10:ec:80:1a: b0:56:08:77:67:9c:a3:7b:d9:77:ee:21:bb:22:27: 16:f5:2f:a3:69:b8:4d:8d:39:ea:b0:0e:9b:64:b6: 0d:76:a4:b0:02:9a:c4:c8:16:de:d8:5c:08:1b:fc: fa:60:ce:1e:d6:bc:1d:4f:3e:64:ac:71:8e:5d:9e: ee:ea:5a:7f:e0:ad:ce:a4:74:ca:68:09:5f:13:1e: f1:a0:f2:73:d8:f1:51:56:79:1c:96:e1:de:45:d4: e5:49:6e:cc:f2:58:be:33:f1:96:a1:77:a7:ea:ad: ee:37:38:e5:4f:da:de:e7:d7:bb:5a:a1:4b:da:bc: a5:5c:58:b6:77:5f:63:10:33:b4:28:c8:8a:fa:cb: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:D3:BF:8A:5B:58:07:9F:AD:EF:9F:60:7E:03:77:0A:1D:DF:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0c57a371-6da8-450a-9674-611efcc7609c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0c57a371-6da8-450a-9674-611efcc7609c/0c57a371-6da8-450a-9674-611efcc7609c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 204.145.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:09:ad:45:8f:3a:70:b1:b8:68:36:e9:03:1f:87:e5:16:da: ae:f8:9b:db:51:2b:c8:a1:ff:94:8c:a1:3c:82:6c:55:5a:8c: 53:47:18:79:72:44:fb:af:cd:a2:70:fc:92:be:f9:9b:b8:a3: 61:4d:84:39:30:fe:2d:62:02:f4:f4:57:c5:77:c8:8b:30:29: 03:8c:51:8e:87:1e:23:c0:cd:81:77:d3:f7:e2:69:53:86:f6: 6f:ba:dd:23:b4:d2:75:7d:fe:b8:d7:bf:ce:1f:70:bc:9f:77: b8:fd:56:ab:93:8f:fa:f9:5b:84:b3:f4:e7:fb:d0:26:e4:fb: 7e:b4:c7:c4:e8:b8:46:ee:ee:15:87:a0:78:12:cb:15:95:f2: bd:89:ff:d5:66:07:b3:f3:4c:ee:91:6d:c4:0a:1b:87:8a:cc: 20:5c:94:85:33:01:ee:b0:18:7a:16:fe:c4:e4:52:22:87:2a: 24:33:8b:21:81:38:ba:e7:b9:6b:4b:71:b2:1c:e2:de:1f:4a: e8:e3:2c:fb:a5:1e:1c:cc:22:c0:86:83:f2:66:3f:13:ab:7e: 9c:4b:f8:c3:d1:02:0f:c7:b5:ef:37:b7:98:6f:cf:6e:30:ba: fe:20:a6:84:44:3e:b9:f0:70:9e:ae:d5:56:b4:7a:0c:a1:13: 7f:4b:3f:2f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+ZPzceSeBG5vjoxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMzE1MDEzMFoXDTI5MDEyNTE2MDEzMFowLzEtMCsGA1UEAxMk MGM1N2EzNzEtNmRhOC00NTBhLTk2NzQtNjExZWZjYzc2MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIrwQfYKDdD8f9HiYnYsliegiSUvmF/7S/ah cDh0hoy3jjCqyPlLa+TxhiMGGPpb7ar2YjIjSR6SwINxo+mk8EVW9fX3+Hjcz68o lH8bkHV8ZjFAcngoRyB++CwVfCVQqZ+aGr5YsTv5aK0CldlniNN0oxDsgBqwVgh3 Z5yje9l37iG7IicW9S+jabhNjTnqsA6bZLYNdqSwAprEyBbe2FwIG/z6YM4e1rwd Tz5krHGOXZ7u6lp/4K3OpHTKaAlfEx7xoPJz2PFRVnkcluHeRdTlSW7M8li+M/GW oXen6q3uNzjlT9re59e7WqFL2rylXFi2d19jEDO0KMiK+sv+qwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJGt07+KW1gHn63vn2B+A3cKHd+JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8w YzU3YTM3MS02ZGE4LTQ1MGEtOTY3NC02MTFlZmNjNzYwOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzBjNTdhMzcxLTZkYTgtNDUwYS05 Njc0LTYxMWVmY2M3NjA5Yy8wYzU3YTM3MS02ZGE4LTQ1MGEtOTY3NC02MTFlZmNj NzYwOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXMkSAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAgmtRY86cLG4aDbpAx+H 5Rbarvib21EryKH/lIyhPIJsVVqMU0cYeXJE+6/NonD8kr75m7ijYU2EOTD+LWIC 9PRXxXfIizApA4xRjoceI8DNgXfT9+JpU4b2b7rdI7TSdX3+uNe/zh9wvJ93uP1W q5OP+vlbhLP05/vQJuT7frTHxOi4Ru7uFYegeBLLFZXyvYn/1WYHs/NM7pFtxAob h4rMIFyUhTMB7rAYehb+xORSIocqJDOLIYE4uue5a0txshzi3h9K6OMs+6UeHMwi wIaD8mY/E6t+nEv4w9ECD8e17ze3mG/PbjC6/iCmhEQ+ufBwnq7VVrR6DKETf0s/ Lw== -----END CERTIFICATE-----Generated at Sun Nov 1 05:33:51 2026 by rpki-client