$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d.cer File: 162b5119-ce50-4cc1-a8ba-220f5dafed5d.cer (raw, json) Hash identifier: ewzy8DPYh9sXYpcoN60+bl9yUTSNbM0wy+43Izp7xXc= Subject key identifier: 5C:63:62:0F:E6:D0:2D:D1:6F:F2:92:47:D0:B0:58:1A:0F:A8:42:C3 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5ED0DA0DFEFF5CDCBF7E6B90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/162b5119-ce50-4cc1-a8ba-220f5dafed5d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 16:42:15 +0000 Certificate not after: Wed 20 Dec 2028 13:26:23 +0000 Subordinate resources: AS: 63352 IP: 143.203.52.0/22 IP: 2602:f2eb::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:d0:da:0d:fe:ff:5c:dc:bf:7e:6b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 16:42:15 2026 GMT Not After : Dec 20 13:26:23 2028 GMT Subject: CN=162b5119-ce50-4cc1-a8ba-220f5dafed5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:95:4b:b8:79:d9:ef:1a:47:f6:5c:11:6d:42: c1:e2:be:4b:8b:e0:c2:90:a3:e0:8f:74:e7:d9:92: ee:18:bc:22:09:21:d9:76:d1:11:8e:d9:43:0e:1c: ce:b5:99:01:7d:3d:a5:1a:60:c1:c9:a9:20:9b:c5: ff:95:b9:57:dc:f7:39:41:21:56:c9:e6:13:53:fd: 8c:d3:d9:7d:fa:a4:74:0a:fe:ed:b5:dd:31:b5:cc: 74:12:1e:54:a0:e3:ea:8f:dd:4c:91:69:ed:04:12: ab:3e:74:e4:03:22:c7:54:73:d9:d9:a2:96:5d:9e: b6:e5:45:39:77:1c:c4:e6:2f:f1:b0:2a:ec:ef:b5: 51:6b:0e:95:ab:ba:33:e1:3a:4a:67:15:6b:d5:cb: 47:df:9a:ba:f7:b4:9f:55:0b:40:6e:e0:9b:70:8e: 92:a9:f2:95:d8:ad:8f:fd:f9:85:68:69:86:be:8a: 97:69:94:64:93:a5:9b:26:71:e0:2b:55:fb:c3:3f: ba:b2:64:1b:ba:23:74:42:73:cc:e6:c5:a7:66:40: 49:01:03:45:75:bb:44:2f:5d:7b:2e:35:b5:9f:78: 0f:55:9a:fe:6a:38:2d:bb:8d:09:86:aa:5d:9f:1a: dd:dc:86:52:25:fa:cc:7d:8b:46:27:f4:7a:80:69: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:62:0F:E6:D0:2D:D1:6F:F2:92:47:D0:B0:58:1A:0F:A8:42:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/162b5119-ce50-4cc1-a8ba-220f5dafed5d/162b5119-ce50-4cc1-a8ba-220f5dafed5d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 143.203.52.0/22 IPv6: 2602:f2eb::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63352 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:74:fe:22:09:42:af:0c:ac:eb:37:76:3f:79:71:65:4c:7a: 27:0d:95:63:dc:9f:34:6e:e3:40:53:d5:fd:dd:ea:d8:e4:90: e2:b3:81:90:59:f6:52:41:d5:26:91:75:09:a9:39:4d:d4:11: 87:41:07:83:2e:56:a7:3c:f8:2f:38:06:f7:68:a3:50:71:f5: bb:05:f5:36:2b:55:29:06:62:7d:80:aa:e7:27:57:36:46:5c: 4b:3b:c3:30:23:ee:40:ee:4a:90:b3:9b:02:53:2d:59:98:fd: bd:05:9a:1b:81:72:e3:62:cc:87:87:2a:11:c0:f2:50:70:af: 0b:5d:af:a8:68:29:10:33:7a:3f:45:89:c2:3a:9f:00:e5:ee: 30:ca:dc:b7:63:49:d0:dc:8f:71:a8:89:92:3b:c3:94:3a:9a: 99:25:5e:cb:4e:e1:53:e2:e7:09:50:40:0c:a9:0a:88:96:49: 0a:a5:ca:fe:fc:ba:0d:b0:68:0c:6b:ae:9f:96:e6:dc:ee:e7: 51:31:12:5c:a0:a5:ad:10:41:e8:04:37:e5:82:9b:70:a6:2b: 6d:d1:4f:72:7c:e0:be:a5:49:c2:32:09:d0:f7:0f:d0:a7:f0: be:da:e7:83:e5:ae:d2:05:1d:90:df:18:96:d1:fd:45:16:c7: ef:2c:40:f9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9e0NoN/v9c3L9+a5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjE2NDIxNVoXDTI4MTIyMDEzMjYyM1owLzEtMCsGA1UEAxMk MTYyYjUxMTktY2U1MC00Y2MxLWE4YmEtMjIwZjVkYWZlZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpVLuHnZ7xpH9lwRbULB4r5Li+DCkKPgj3Tn 2ZLuGLwiCSHZdtERjtlDDhzOtZkBfT2lGmDByakgm8X/lblX3Pc5QSFWyeYTU/2M 09l9+qR0Cv7ttd0xtcx0Eh5UoOPqj91MkWntBBKrPnTkAyLHVHPZ2aKWXZ625UU5 dxzE5i/xsCrs77VRaw6Vq7oz4TpKZxVr1ctH35q697SfVQtAbuCbcI6SqfKV2K2P /fmFaGmGvoqXaZRkk6WbJnHgK1X7wz+6smQbuiN0QnPM5sWnZkBJAQNFdbtEL117 LjW1n3gPVZr+ajgtu40Jhqpdnxrd3IZSJfrMfYtGJ/R6gGmPqQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFxjYg/m0C3Rb/KSR9CwWBoPqELDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x NjJiNTExOS1jZTUwLTRjYzEtYThiYS0yMjBmNWRhZmVkNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzE2MmI1MTE5LWNlNTAtNGNjMS1h OGJhLTIyMGY1ZGFmZWQ1ZC8xNjJiNTExOS1jZTUwLTRjYzEtYThiYS0yMjBmNWRh ZmVkNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKPyzQwDgQCAAIwCAMGACYC8usAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD3eDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXdP4iCUKvDKzrN3Y/eXFlTHon DZVj3J80buNAU9X93erY5JDis4GQWfZSQdUmkXUJqTlN1BGHQQeDLlanPPgvOAb3 aKNQcfW7BfU2K1UpBmJ9gKrnJ1c2RlxLO8MwI+5A7kqQs5sCUy1ZmP29BZobgXLj YsyHhyoRwPJQcK8LXa+oaCkQM3o/RYnCOp8A5e4wyty3Y0nQ3I9xqImSO8OUOpqZ JV7LTuFT4ucJUEAMqQqIlkkKpcr+/LoNsGgMa66flubc7udRMRJcoKWtEEHoBDfl gptwpitt0U9yfOC+pUnCMgnQ9w/Qp/C+2ueD5a7SBR2Q3xiW0f1FFsfvLED5 -----END CERTIFICATE-----Generated at Thu Oct 8 07:24:32 2026 by rpki-client