$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1145bde7-1dc3-46d3-a95f-b0e933f9a60b.cer File: 1145bde7-1dc3-46d3-a95f-b0e933f9a60b.cer (raw, json) Hash identifier: zvt84tSOC7x/tOgmGuFxG03BTtWvfy/ruVjjFv4PS9A= Subject key identifier: 6D:AE:EB:60:AB:3B:D8:9A:1B:70:6D:20:8B:C9:C5:3E:2C:D7:9D:65 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F9447318036D0F5F0C5C4ADF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1145bde7-1dc3-46d3-a95f-b0e933f9a60b/1145bde7-1dc3-46d3-a95f-b0e933f9a60b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1145bde7-1dc3-46d3-a95f-b0e933f9a60b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 20:18:32 +0000 Certificate not after: Tue 23 Jan 2029 21:18:32 +0000 Subordinate resources: AS: 401504 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:47:31:80:36:d0:f5:f0:c5:c4:ad:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 21 20:18:32 2026 GMT Not After : Jan 23 21:18:32 2029 GMT Subject: CN=1145bde7-1dc3-46d3-a95f-b0e933f9a60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:db:b2:82:09:da:6a:a4:f5:7e:24:68:e2: a9:2f:60:fa:bf:78:2c:8b:58:9d:1b:60:a4:fa:f7: 65:ff:32:b5:a3:5b:de:65:79:22:b7:b5:7a:23:67: 96:55:82:ac:f0:c5:b2:ef:9b:27:c1:77:b5:dd:4d: d4:6b:ba:71:c7:c1:41:9c:5d:04:fa:04:3f:92:a6: 59:42:9c:d8:0a:36:b0:f4:d4:7e:50:5f:7c:41:9a: 84:e1:36:f5:d9:2a:e8:14:51:e6:77:2a:cd:81:be: 0d:16:cf:d8:70:ec:7b:1a:bc:e8:e1:3a:80:0f:e9: 3e:a5:83:2a:a5:69:33:f9:50:1c:d9:65:bb:6a:d2: fc:80:11:f0:6b:04:42:a5:d7:2d:a9:79:c0:21:3a: 07:e5:34:ec:09:37:16:c2:14:fe:21:e1:23:51:f4: df:a1:c4:61:a0:8a:09:a1:79:82:b9:0b:e6:91:c0: 0c:45:ed:bf:f3:d1:f7:73:b4:93:ad:d7:79:e0:fa: f9:5a:73:27:cb:52:8d:62:f0:33:66:48:dc:f3:da: 7d:95:09:cb:94:74:bb:1b:19:a7:2b:03:31:e0:86: e3:13:e1:ad:89:4d:c6:93:a8:bf:9e:4d:d6:84:c4: 58:14:43:bd:81:79:4f:47:c6:ea:e0:26:8a:c4:73: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AE:EB:60:AB:3B:D8:9A:1B:70:6D:20:8B:C9:C5:3E:2C:D7:9D:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1145bde7-1dc3-46d3-a95f-b0e933f9a60b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1145bde7-1dc3-46d3-a95f-b0e933f9a60b/1145bde7-1dc3-46d3-a95f-b0e933f9a60b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401504 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1b:9c:9a:c7:0f:c6:0e:ec:3e:69:ce:10:75:36:b3:0a:39: e2:75:8d:26:3f:1f:99:b1:47:30:be:51:00:b7:5b:ff:6d:d0: 19:de:6e:06:40:f9:1a:6c:eb:06:3e:ee:fb:4f:a7:dd:5f:b5: 7c:03:c4:51:3d:74:33:53:ef:a1:58:59:78:b8:cd:27:c0:35: 05:86:c8:6d:ab:d5:cf:c8:71:a5:4d:af:98:b1:4b:b8:ee:41: f8:12:bc:e1:68:64:c0:21:d0:52:c7:02:b4:46:fd:05:82:96: ab:c7:32:cb:b8:ac:01:9f:11:7e:58:22:df:af:1a:15:d4:6f: 65:d8:a4:67:6b:c7:cc:bc:8f:4c:4b:05:f6:cb:2f:e2:b4:4e: ec:6a:71:20:89:1c:20:b0:33:ae:85:c7:bc:95:52:d6:58:34: 3b:99:ab:e6:0b:57:27:b8:e8:8a:25:68:96:e1:44:dd:78:61: d9:a4:25:0e:44:44:71:10:b8:62:aa:33:77:cb:96:cc:1f:a5: 8d:f1:96:6b:20:62:ce:55:0b:dc:ee:aa:37:6e:36:16:f3:fe: 9d:72:ab:1e:9f:18:9c:b1:35:7d:d4:48:68:71:e5:38:19:cc: fd:aa:a6:1d:ff:40:5c:09:6a:4d:4d:2e:37:88:6c:c0:83:0a: 2f:1f:c7:fd -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE+URzGANtD18MXErfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMTIwMTgzMloXDTI5MDEyMzIxMTgzMlowLzEtMCsGA1UEAxMk MTE0NWJkZTctMWRjMy00NmQzLWE5NWYtYjBlOTMzZjlhNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HbsoIJ2mqk9X4kaOKpL2D6v3gsi1idG2Ck +vdl/zK1o1veZXkit7V6I2eWVYKs8MWy75snwXe13U3Ua7pxx8FBnF0E+gQ/kqZZ QpzYCjaw9NR+UF98QZqE4Tb12SroFFHmdyrNgb4NFs/YcOx7Grzo4TqAD+k+pYMq pWkz+VAc2WW7atL8gBHwawRCpdctqXnAIToH5TTsCTcWwhT+IeEjUfTfocRhoIoJ oXmCuQvmkcAMRe2/89H3c7STrdd54Pr5WnMny1KNYvAzZkjc89p9lQnLlHS7Gxmn KwMx4IbjE+GtiU3Gk6i/nk3WhMRYFEO9gXlPR8bq4CaKxHPV6QIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFG2u62CrO9iaG3BtIIvJxT4s151lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x MTQ1YmRlNy0xZGMzLTQ2ZDMtYTk1Zi1iMGU5MzNmOWE2MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzExNDViZGU3LTFkYzMtNDZkMy1h OTVmLWIwZTkzM2Y5YTYwYi8xMTQ1YmRlNy0xZGMzLTQ2ZDMtYTk1Zi1iMGU5MzNm OWE2MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiBgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIYbnJrHD8YO7D5pzhB1NrMKOeJ1 jSY/H5mxRzC+UQC3W/9t0BnebgZA+Rps6wY+7vtPp91ftXwDxFE9dDNT76FYWXi4 zSfANQWGyG2r1c/IcaVNr5ixS7juQfgSvOFoZMAh0FLHArRG/QWClqvHMsu4rAGf EX5YIt+vGhXUb2XYpGdrx8y8j0xLBfbLL+K0TuxqcSCJHCCwM66Fx7yVUtZYNDuZ q+YLVye46IolaJbhRN14YdmkJQ5ERHEQuGKqM3fLlswfpY3xlmsgYs5VC9zuqjdu Nhbz/p1yqx6fGJyxNX3USGhx5TgZzP2qph3/QFwJak1NLjeIbMCDCi8fx/0= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:26 2026 by rpki-client