$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d130c14-10db-4e79-a5e6-1f9232d4b81a.cer File: 1d130c14-10db-4e79-a5e6-1f9232d4b81a.cer (raw, json) Hash identifier: SxUQnKR7KaPTGpL1HSRdaiWAcE1e1mL2a4i9NsXQWlc= Subject key identifier: 08:5A:AD:13:6A:B5:5F:92:31:33:1B:95:09:CF:65:5B:CC:BC:28:D4 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA70A567F376B37A491DE1400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d130c14-10db-4e79-a5e6-1f9232d4b81a/1d130c14-10db-4e79-a5e6-1f9232d4b81a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d130c14-10db-4e79-a5e6-1f9232d4b81a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 13:36:16 +0000 Certificate not after: Mon 22 Jan 2029 15:39:26 +0000 Subordinate resources: AS: 572 IP: 198.185.26.0/23 IP: 2602:81f:9000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a7:0a:56:7f:37:6b:37:a4:91:de:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 28 13:36:16 2026 GMT Not After : Jan 22 15:39:26 2029 GMT Subject: CN=1d130c14-10db-4e79-a5e6-1f9232d4b81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:8b:af:d3:76:69:48:3c:5d:33:dc:5a:0c: 30:04:4e:f3:49:11:0c:cf:b8:13:8e:b8:96:81:cb: 87:67:c2:dd:21:96:e1:00:39:4d:03:b6:33:bc:9b: 32:8d:a6:44:27:b3:b9:d1:9b:17:7c:9f:ca:90:5d: a3:e8:3d:da:88:6e:f9:13:a6:ae:01:4c:27:0f:6a: c6:4e:f1:55:6a:92:b6:58:4b:3e:b2:3b:98:87:4e: 9f:62:8f:eb:e9:e2:cd:62:f0:71:9e:96:89:8b:d1: c7:6d:4b:0e:eb:85:3a:4a:22:6a:9d:1b:91:75:10: ba:38:de:74:65:6c:48:77:72:5c:61:c5:e9:0a:ca: ac:75:26:bc:71:98:95:0d:a7:e8:92:3b:c9:1e:fd: 36:12:98:29:87:f6:f3:d3:9e:66:2c:98:54:02:29: 4d:6c:cb:9a:47:90:99:cd:53:85:ff:83:15:88:75: 6d:8c:85:f4:73:33:9e:28:4f:0f:18:15:f2:90:65: 92:c5:31:34:45:f1:0b:f4:e5:dd:20:db:3f:5c:5c: 75:8a:22:9f:be:4c:aa:d9:b9:88:95:68:2f:4c:e3: 08:c3:86:aa:78:83:ff:d0:a0:66:d2:84:66:a3:77: a9:51:9b:14:bd:e8:f0:14:de:fb:65:45:ef:af:d1: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5A:AD:13:6A:B5:5F:92:31:33:1B:95:09:CF:65:5B:CC:BC:28:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d130c14-10db-4e79-a5e6-1f9232d4b81a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1d130c14-10db-4e79-a5e6-1f9232d4b81a/1d130c14-10db-4e79-a5e6-1f9232d4b81a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.185.26.0/23 IPv6: 2602:81f:9000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 572 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5b:95:36:3f:c2:4d:82:63:b4:40:b8:f8:b9:0f:83:8a:1f: 17:42:4f:b2:bd:13:8d:da:a7:87:a4:e5:93:33:d4:dd:ef:c7: c9:5b:42:fb:78:5c:91:da:64:5c:73:ce:12:3c:82:fe:67:23: df:9d:b8:cf:5e:8a:94:a7:7b:00:6f:57:25:e2:ff:a9:5f:44: fc:f9:89:3c:8d:94:29:1c:1b:24:2c:2a:45:76:db:6b:49:77: cb:91:2b:e0:84:99:2c:d2:35:3d:26:25:6e:4c:fa:36:76:fb: 1b:cf:ca:ae:2a:90:34:06:82:f3:91:71:b5:04:b4:d6:50:64: fd:50:ca:8e:98:8b:ce:8d:20:b9:1c:00:b7:bb:ad:33:24:fa: 7e:21:1f:45:79:be:9e:39:e6:af:9c:3c:97:27:9a:07:aa:74: 33:a1:15:7c:f4:c0:84:95:c1:3d:bb:87:28:7e:9a:32:2b:ab: 7a:4f:cc:1b:32:db:ea:a6:39:f0:48:eb:f1:7e:f9:32:88:35: 04:66:13:aa:55:27:bc:06:b1:c5:a7:1d:30:fa:22:66:f0:27: ff:a2:e0:d5:59:8a:e5:17:8e:e1:b7:77:3c:a4:ee:1b:30:ce: ff:16:a8:ea:b3:fb:31:fe:a2:20:00:ab:f1:52:35:d8:97:bb: b5:4b:da:2d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE+nClZ/N2s3pJHeFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyODEzMzYxNloXDTI5MDEyMjE1MzkyNlowLzEtMCsGA1UEAxMk MWQxMzBjMTQtMTBkYi00ZTc5LWE1ZTYtMWY5MjMyZDRiODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD6Lr9N2aUg8XTPcWgwwBE7zSREMz7gTjriW gcuHZ8LdIZbhADlNA7YzvJsyjaZEJ7O50ZsXfJ/KkF2j6D3aiG75E6auAUwnD2rG TvFVapK2WEs+sjuYh06fYo/r6eLNYvBxnpaJi9HHbUsO64U6SiJqnRuRdRC6ON50 ZWxId3JcYcXpCsqsdSa8cZiVDafokjvJHv02Epgph/bz055mLJhUAilNbMuaR5CZ zVOF/4MViHVtjIX0czOeKE8PGBXykGWSxTE0RfEL9OXdINs/XFx1iiKfvkyq2bmI lWgvTOMIw4aqeIP/0KBm0oRmo3epUZsUvejwFN77ZUXvr9GdYQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAharRNqtV+SMTMblQnPZVvMvCjUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x ZDEzMGMxNC0xMGRiLTRlNzktYTVlNi0xZjkyMzJkNGI4MWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzFkMTMwYzE0LTEwZGItNGU3OS1h NWU2LTFmOTIzMmQ0YjgxYS8xZDEzMGMxNC0xMGRiLTRlNzktYTVlNi0xZjkyMzJk NGI4MWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHGuRowDgQCAAIwCAMGACYCCB+QMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAgI8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHJblTY/wk2CY7RAuPi5D4OKHxdC T7K9E43ap4ek5ZMz1N3vx8lbQvt4XJHaZFxzzhI8gv5nI9+duM9eipSnewBvVyXi /6lfRPz5iTyNlCkcGyQsKkV222tJd8uRK+CEmSzSNT0mJW5M+jZ2+xvPyq4qkDQG gvORcbUEtNZQZP1Qyo6Yi86NILkcALe7rTMk+n4hH0V5vp455q+cPJcnmgeqdDOh FXz0wISVwT27hyh+mjIrq3pPzBsy2+qmOfBI6/F++TKINQRmE6pVJ7wGscWnHTD6 ImbwJ/+i4NVZiuUXjuG3dzyk7hswzv8WqOqz+zH+oiAAq/FSNdiXu7VL2i0= -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:49 2026 by rpki-client