$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e.cer File: 0ec83038-2e5d-4e80-bbab-04a564f27a8e.cer (raw, json) Hash identifier: vx5FURUcJ4EuiBE1IBfmJ9gV0YSzCORHbf/Sqn3JOKU= Subject key identifier: 97:B3:74:F4:AE:94:8F:F1:41:95:23:1E:65:9B:33:C2:DF:C2:D1:01 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5E466330FB3B6829D12D2000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/0ec83038-2e5d-4e80-bbab-04a564f27a8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 12:03:15 +0000 Certificate not after: Wed 27 Dec 2028 22:47:35 +0000 Subordinate resources: AS: 402761 IP: 23.165.20.0/24 IP: 2602:f2d9::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:46:63:30:fb:3b:68:29:d1:2d:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 12:03:15 2026 GMT Not After : Dec 27 22:47:35 2028 GMT Subject: CN=0ec83038-2e5d-4e80-bbab-04a564f27a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:c1:c7:ac:6b:8d:d8:ab:85:a5:83:3d:5e: 8f:5a:6d:ea:1b:30:e5:d0:41:60:49:ec:77:e9:1b: 7d:4f:05:22:6a:98:01:34:49:5f:da:5d:ef:b1:ad: 41:e6:b3:eb:7a:18:5d:f4:b7:c2:7c:dc:30:b1:fb: ee:f7:72:e6:d7:cb:c9:4d:62:c8:d0:aa:82:c9:b1: 13:e1:7e:08:46:2a:17:07:f2:45:44:8e:ee:f9:ca: 2a:10:2a:0c:9b:55:49:a0:7e:18:0f:71:7f:26:17: b2:f5:c3:96:a8:f5:3c:44:47:8d:44:39:88:90:2d: fe:41:b9:61:f7:d2:d2:85:56:df:4f:42:3f:ca:2d: 04:ea:5f:a9:dd:d6:4b:d7:1c:11:0a:15:cf:b6:9a: 37:ad:d2:0a:cb:8f:b0:3e:a7:69:2c:c2:0f:98:d5: f6:0f:c0:51:7c:ba:b2:b9:af:40:9b:f6:81:34:89: 2d:a2:b6:a5:98:e5:35:8e:42:51:2b:c2:8d:43:d1: d3:5c:5e:e7:31:2c:9d:c9:08:5e:8a:04:4b:92:cc: 88:cc:00:83:6f:ca:ae:99:4d:d6:85:79:8e:bc:3c: 59:8d:94:7c:72:be:ea:71:8a:0b:0f:1a:ae:a8:78: 73:df:73:ed:fc:5c:e0:68:6b:8d:25:a8:34:e2:4a: b5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B3:74:F4:AE:94:8F:F1:41:95:23:1E:65:9B:33:C2:DF:C2:D1:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/0ec83038-2e5d-4e80-bbab-04a564f27a8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.165.20.0/24 IPv6: 2602:f2d9::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402761 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e3:15:ec:c6:21:f8:21:b7:1e:98:da:d4:30:d1:56:71:0b: 77:0d:cd:a8:f0:cb:c7:9b:9b:46:76:69:1a:01:74:d9:ed:89: 48:d1:e6:84:a0:ca:98:f3:e3:14:de:1b:c8:76:41:fa:7c:2b: b5:7e:30:ef:23:04:3f:b6:a6:3e:8f:a9:cd:53:51:1a:73:93: bc:25:72:69:08:19:3c:8c:ae:79:21:68:77:e6:ef:d6:23:a0: 41:80:42:2f:db:29:a7:63:35:b1:32:4f:9a:f9:e8:95:c2:ad: 1a:11:b4:5b:7b:b7:06:33:86:99:ee:a1:48:85:30:b0:ca:f6: 88:b3:42:04:af:27:a7:29:ff:89:2a:08:06:46:f8:90:a2:7c: ab:e9:e5:43:ae:e5:af:85:26:ac:26:8d:46:ec:49:7d:7c:16: 1b:64:73:93:35:13:dc:d3:2f:f0:8f:f2:ad:ff:d2:f5:81:7d: 08:24:b9:4d:c5:b5:37:48:f7:f7:8a:08:80:80:d0:bd:28:97: 06:82:46:86:ac:3a:be:24:a8:37:75:0a:5c:c3:2a:10:19:aa: eb:76:03:47:24:8a:1e:4e:36:11:d0:6d:75:75:f0:7c:b6:7a: 30:7a:8a:e6:c8:29:4f:00:e5:19:19:e4:9a:87:b8:4c:29:2f: b9:b2:92:dd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9eRmMw+ztoKdEtIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjEyMDMxNVoXDTI4MTIyNzIyNDczNVowLzEtMCsGA1UEAxMk MGVjODMwMzgtMmU1ZC00ZTgwLWJiYWItMDRhNTY0ZjI3YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXPBx6xrjdirhaWDPV6PWm3qGzDl0EFgSex3 6Rt9TwUiapgBNElf2l3vsa1B5rPrehhd9LfCfNwwsfvu93Lm18vJTWLI0KqCybET 4X4IRioXB/JFRI7u+coqECoMm1VJoH4YD3F/Jhey9cOWqPU8REeNRDmIkC3+Qblh 99LShVbfT0I/yi0E6l+p3dZL1xwRChXPtpo3rdIKy4+wPqdpLMIPmNX2D8BRfLqy ua9Am/aBNIktoralmOU1jkJRK8KNQ9HTXF7nMSydyQheigRLksyIzACDb8qumU3W hXmOvDxZjZR8cr7qcYoLDxquqHhz33Pt/FzgaGuNJag04kq18wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJezdPSulI/xQZUjHmWbM8LfwtEBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8w ZWM4MzAzOC0yZTVkLTRlODAtYmJhYi0wNGE1NjRmMjdhOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzBlYzgzMDM4LTJlNWQtNGU4MC1i YmFiLTA0YTU2NGYyN2E4ZS8wZWM4MzAzOC0yZTVkLTRlODAtYmJhYi0wNGE1NjRm MjdhOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpRQwDgQCAAIwCAMGBCYC8tkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYlSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBe4xXsxiH4IbcemNrUMNFWcQt3 Dc2o8MvHm5tGdmkaAXTZ7YlI0eaEoMqY8+MU3hvIdkH6fCu1fjDvIwQ/tqY+j6nN U1Eac5O8JXJpCBk8jK55IWh35u/WI6BBgEIv2ymnYzWxMk+a+eiVwq0aEbRbe7cG M4aZ7qFIhTCwyvaIs0IEryenKf+JKggGRviQonyr6eVDruWvhSasJo1G7El9fBYb ZHOTNRPc0y/wj/Kt/9L1gX0IJLlNxbU3SPf3igiAgNC9KJcGgkaGrDq+JKg3dQpc wyoQGarrdgNHJIoeTjYR0G11dfB8tnoweormyClPAOUZGeSah7hMKS+5spLd -----END CERTIFICATE-----Generated at Sun Nov 1 08:27:43 2026 by rpki-client