$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a.cer File: 1a500574-9f04-4e23-9ecf-075f2c02835a.cer (raw, json) Hash identifier: C0fT1bfHfUfxLb3xo8u8WIoUuiIpA1/+5eLEjZusWH8= Subject key identifier: E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F726E6AD12460AB314FE59500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 17:20:05 +0000 Certificate not after: Thu 11 Jan 2029 18:20:05 +0000 Subordinate resources: AS: 399460 IP: 142.228.12.0/24 IP: 142.228.24.0/24 IP: 142.228.28.0/24 IP: 207.241.184.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:6e:6a:d1:24:60:ab:31:4f:e5:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 17:20:05 2026 GMT Not After : Jan 11 18:20:05 2029 GMT Subject: CN=1a500574-9f04-4e23-9ecf-075f2c02835a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:a6:4d:ed:39:b4:2d:10:ee:47:4a:b7:62: 2a:25:e2:ac:47:f1:87:9f:ee:1b:a9:58:53:9c:41: 3d:c9:db:b0:4e:54:6a:6a:a3:87:c2:df:b0:c9:6c: 87:e2:03:3c:fd:4f:ae:60:a8:51:c8:ff:f1:4c:97: ac:dd:c3:06:a7:a6:06:21:93:b9:d2:2b:38:d0:28: a4:66:bb:bc:14:68:b3:6a:12:9c:8c:e0:9b:b4:9b: 70:b9:f9:00:8a:27:e8:38:2f:7c:a3:78:4c:64:58: e8:c7:74:cf:0f:6b:c5:fd:ce:7f:74:90:86:b5:fe: 70:73:22:2c:2d:18:54:dc:bb:14:25:29:30:bb:4a: 26:5d:be:2b:d1:29:3c:f7:b7:07:53:c0:ae:ab:b5: 0c:15:19:da:00:87:a1:8c:0d:59:b1:87:be:59:46: 4b:b4:72:bf:55:74:f0:6e:43:26:ea:b6:f3:59:35: b0:d2:3f:29:1b:9d:44:1c:83:1a:53:cb:c5:1b:44: 05:33:e1:a7:79:70:17:a2:c2:22:c6:59:4d:f5:3a: 30:c2:04:25:11:56:b7:8f:8e:d7:99:a3:2e:3b:3e: 70:df:e1:f8:35:cb:9d:b9:0d:9b:9a:8d:63:0a:3e: 39:ca:ef:e7:23:4a:dc:55:5b:9a:40:03:70:ab:24: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:26:D9:7B:B9:00:1A:88:09:E9:F0:FB:44:08:70:85:DD:2E:98:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1a500574-9f04-4e23-9ecf-075f2c02835a/1a500574-9f04-4e23-9ecf-075f2c02835a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 142.228.12.0/24 142.228.24.0/24 142.228.28.0/24 207.241.184.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399460 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:37:ee:1e:e5:4b:69:44:f6:53:93:ac:1a:f3:6c:8b:ee:e9: 69:72:5d:2c:6c:66:53:c0:7f:98:47:c5:72:31:62:1d:af:3a: 27:47:ca:2d:3e:bc:58:f1:27:92:2f:69:7e:4f:67:20:be:fe: 65:42:fa:ef:98:78:c4:99:08:16:78:16:a1:92:47:55:ab:07: 21:56:24:46:47:7d:1b:e4:a9:54:49:b4:5b:8b:65:ed:47:94: b5:c5:c7:48:17:86:59:20:08:fe:1e:f3:c1:b4:63:41:bc:fa: 87:96:a5:ab:00:5d:ca:3f:15:a6:77:c2:18:d5:15:84:e0:44: ac:28:3f:53:98:eb:ef:e7:e0:a3:09:30:e6:27:f7:8a:bf:59: 7b:c6:c9:02:b2:e0:87:1a:7a:a3:ad:f3:0e:f9:0c:eb:bc:68: fb:7a:10:4f:74:b0:4b:c4:35:75:10:72:f4:31:37:bb:34:d2: 26:eb:28:00:47:8a:38:ac:99:69:cb:38:97:d5:d2:40:f8:0d: 7c:30:4c:08:5c:6e:13:4e:92:f6:b7:74:23:23:55:44:98:23: db:e7:4c:9a:21:ee:2c:86:2e:2a:27:e7:00:f6:eb:af:66:ab: a6:5e:1f:31:2f:64:75:b6:3b:54:87:75:2c:0a:d5:f9:f3:05: 08:bd:78:1e -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWE9ybmrRJGCrMU/llQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTE3MjAwNVoXDTI5MDExMTE4MjAwNVowLzEtMCsGA1UEAxMk MWE1MDA1NzQtOWYwNC00ZTIzLTllY2YtMDc1ZjJjMDI4MzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGKmTe05tC0Q7kdKt2IqJeKsR/GHn+4bqVhT nEE9yduwTlRqaqOHwt+wyWyH4gM8/U+uYKhRyP/xTJes3cMGp6YGIZO50is40Cik Zru8FGizahKcjOCbtJtwufkAiifoOC98o3hMZFjox3TPD2vF/c5/dJCGtf5wcyIs LRhU3LsUJSkwu0omXb4r0Sk897cHU8Cuq7UMFRnaAIehjA1ZsYe+WUZLtHK/VXTw bkMm6rbzWTWw0j8pG51EHIMaU8vFG0QFM+GneXAXosIixllN9TowwgQlEVa3j47X maMuOz5w3+H4NcuduQ2bmo1jCj45yu/nI0rcVVuaQANwqyTfvQIDAQABo4IELTCC BCkwHQYDVR0OBBYEFOAm2Xu5ABqICenw+0QIcIXdLpjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x YTUwMDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVmMmMwMjgzNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzFhNTAwNTc0LTlmMDQtNGUyMy05 ZWNmLTA3NWYyYzAyODM1YS8xYTUwMDU3NC05ZjA0LTRlMjMtOWVjZi0wNzVmMmMw MjgzNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBACO5AwDBACO5BgDBACO5BwDBADP8bgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBhhkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJY37h7lS2lE9lOTrBrzbIvu 6WlyXSxsZlPAf5hHxXIxYh2vOidHyi0+vFjxJ5IvaX5PZyC+/mVC+u+YeMSZCBZ4 FqGSR1WrByFWJEZHfRvkqVRJtFuLZe1HlLXFx0gXhlkgCP4e88G0Y0G8+oeWpasA Xco/FaZ3whjVFYTgRKwoP1OY6+/n4KMJMOYn94q/WXvGyQKy4IcaeqOt8w75DOu8 aPt6EE90sEvENXUQcvQxN7s00ibrKABHijismWnLOJfV0kD4DXwwTAhcbhNOkva3 dCMjVUSYI9vnTJoh7iyGLion5wD2669mq6ZeHzEvZHW2O1SHdSwK1fnzBQi9eB4= -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:37 2026 by rpki-client