$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13d76b4c-b233-4ee7-a832-81bab96be6a2.cer File: 13d76b4c-b233-4ee7-a832-81bab96be6a2.cer (raw, json) Hash identifier: mR82s+ruia03bYZ++Hnjb53YReBY2FgCGu1fofUXp2w= Subject key identifier: 14:4C:4F:4F:52:60:06:5F:FE:54:CA:B8:4E:C0:26:8B:98:29:4D:2B Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F59B79C562AA17DDD2A3566E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13d76b4c-b233-4ee7-a832-81bab96be6a2/13d76b4c-b233-4ee7-a832-81bab96be6a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13d76b4c-b233-4ee7-a832-81bab96be6a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 20:52:21 +0000 Certificate not after: Tue 02 Jan 2029 21:52:21 +0000 Subordinate resources: AS: 393464 IP: 104.255.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:b7:9c:56:2a:a1:7d:dd:2a:35:66:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 30 20:52:21 2026 GMT Not After : Jan 2 21:52:21 2029 GMT Subject: CN=13d76b4c-b233-4ee7-a832-81bab96be6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:87:59:ab:6e:8d:5a:9e:d0:70:70:f4:ab: 37:fa:35:91:6f:4e:bb:06:3b:53:ad:88:22:f9:84: ab:33:4e:de:20:d3:81:3c:34:76:27:49:b4:6a:d5: e7:a3:7d:d4:85:8a:b0:4c:92:d1:21:c3:3d:3a:32: a7:1e:d3:8c:3e:6f:43:41:6f:05:bb:9b:93:48:88: 15:d2:be:70:70:3a:a5:08:8d:3c:5c:c1:f9:b6:b2: d8:c1:73:19:75:1a:8b:6a:cb:9c:eb:89:d6:ae:29: 00:f6:cb:dd:25:57:92:08:2c:2a:f9:f5:5d:e7:12: 5c:c6:cd:46:01:67:11:45:02:33:6a:90:18:ab:3c: 13:85:be:3b:04:b4:f5:17:d0:c4:7d:fb:70:59:ab: ce:45:0e:20:4b:42:ea:61:52:1d:ff:e8:45:f4:9f: 4d:4c:4e:63:a1:92:95:73:3a:0f:80:82:a7:5f:59: f3:a7:f4:59:7d:cb:b3:fb:88:ff:d5:ce:bf:b1:e0: 87:12:28:a1:71:67:53:2f:33:3f:17:56:a3:6a:2b: 01:b8:42:49:4a:61:2c:79:48:7c:31:30:a2:ce:55: 90:ac:ff:24:88:49:32:e6:bb:7b:c7:bd:cc:50:1c: d8:86:0d:48:4d:bd:6f:9e:f0:85:2c:9d:b3:b5:5b: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4C:4F:4F:52:60:06:5F:FE:54:CA:B8:4E:C0:26:8B:98:29:4D:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13d76b4c-b233-4ee7-a832-81bab96be6a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/13d76b4c-b233-4ee7-a832-81bab96be6a2/13d76b4c-b233-4ee7-a832-81bab96be6a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 104.255.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393464 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:36:fd:ee:86:75:07:a5:33:e1:9f:9d:0b:24:1d:87:6b:3d: ee:18:4f:fe:cf:17:a4:0c:51:23:8d:08:1e:87:28:0b:b1:70: 86:82:20:1f:44:72:1e:22:ba:b9:f9:69:5d:97:51:8b:54:06: 76:5a:f5:f7:8c:cd:bc:49:83:02:61:0b:9b:41:f5:9a:2f:77: ed:fb:a2:d7:54:bf:02:56:00:ed:fd:d3:89:f9:14:6b:80:47: 39:72:d5:ba:3b:22:ac:29:4a:0b:d4:c4:9f:fd:8e:32:2e:bf: e1:f5:5e:78:89:da:89:2b:ce:a1:66:33:05:2d:f7:b8:e4:4c: 1a:87:fd:17:27:1c:6b:a5:2a:bd:0d:48:9b:1d:81:72:c5:f6: 4e:cd:b8:04:38:17:e3:c8:20:e9:f0:78:7f:83:00:24:42:0b: a4:d6:52:4c:db:13:60:db:51:ad:6d:a4:ee:3b:3d:83:6f:80: 25:95:85:25:b8:21:22:23:00:2d:1d:5c:77:0f:fe:5b:34:ba: cf:ab:e3:96:ea:46:7c:aa:bf:55:71:a4:87:83:97:ac:c0:38: e2:90:1a:85:37:0d:79:a6:31:5c:b2:cf:3c:72:c1:2c:9d:fa: 0a:58:6f:48:b8:94:72:d6:5d:4d:d4:6d:af:c7:ba:66:f7:00: e1:a9:e8:9f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9Zt5xWKqF93So1ZuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkzMDIwNTIyMVoXDTI5MDEwMjIxNTIyMVowLzEtMCsGA1UEAxMk MTNkNzZiNGMtYjIzMy00ZWU3LWE4MzItODFiYWI5NmJlNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXGHWatujVqe0HBw9Ks3+jWRb067BjtTrYgi +YSrM07eINOBPDR2J0m0atXno33UhYqwTJLRIcM9OjKnHtOMPm9DQW8Fu5uTSIgV 0r5wcDqlCI08XMH5trLYwXMZdRqLasuc64nWrikA9svdJVeSCCwq+fVd5xJcxs1G AWcRRQIzapAYqzwThb47BLT1F9DEfftwWavORQ4gS0LqYVId/+hF9J9NTE5joZKV czoPgIKnX1nzp/RZfcuz+4j/1c6/seCHEiihcWdTLzM/F1ajaisBuEJJSmEseUh8 MTCizlWQrP8kiEky5rt7x73MUBzYhg1ITb1vnvCFLJ2ztVuPrQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBRMT09SYAZf/lTKuE7AJouYKU0rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x M2Q3NmI0Yy1iMjMzLTRlZTctYTgzMi04MWJhYjk2YmU2YTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzEzZDc2YjRjLWIyMzMtNGVlNy1h ODMyLTgxYmFiOTZiZTZhMi8xM2Q3NmI0Yy1iMjMzLTRlZTctYTgzMi04MWJhYjk2 YmU2YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJo/7wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgD4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIY2/e6GdQelM+GfnQskHYdrPe4YT/7PF6QMUSONCB6HKAux cIaCIB9Ech4iurn5aV2XUYtUBnZa9feMzbxJgwJhC5tB9Zovd+37otdUvwJWAO39 04n5FGuARzly1bo7IqwpSgvUxJ/9jjIuv+H1XniJ2okrzqFmMwUt97jkTBqH/Rcn HGulKr0NSJsdgXLF9k7NuAQ4F+PIIOnweH+DACRCC6TWUkzbE2DbUa1tpO47PYNv gCWVhSW4ISIjAC0dXHcP/ls0us+r45bqRnyqv1VxpIeDl6zAOOKQGoU3DXmmMVyy zzxywSyd+gpYb0i4lHLWXU3Uba/Humb3AOGp6J8= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:23 2026 by rpki-client