$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.cer File: 1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.cer (raw, json) Hash identifier: Mh2xGBogQorLcUKbrONAZMBEimW38QQxTX4hbnLCwp8= Subject key identifier: 21:A2:48:86:01:21:83:0A:EA:B5:D8:81:70:BE:54:B6:A5:5C:77:CC Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F920DCEE109501DA85BC4A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 01:11:17 +0000 Certificate not after: Tue 23 Jan 2029 02:11:17 +0000 Subordinate resources: IP: 143.203.32.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:0d:ce:e1:09:50:1d:a8:5b:c4:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 21 01:11:17 2026 GMT Not After : Jan 23 02:11:17 2029 GMT Subject: CN=1e1de9e8-ffb4-4c1f-a311-e4e0c0849176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:06:b9:5b:d7:3f:05:09:dc:6f:d8:2d:6a: 24:f8:83:bd:ab:df:e5:58:d2:98:51:d5:b3:7e:8c: b2:f2:4a:ed:0f:f5:5b:99:e6:b8:7a:6b:f1:54:8a: c9:9d:7e:6d:fc:5e:05:01:8d:30:f9:c1:0d:36:09: d6:69:dc:de:bc:2c:d8:92:d5:41:0f:67:b4:ef:21: 9d:2d:ad:c0:57:97:5d:2e:99:7c:95:9f:0d:22:4a: 47:9f:32:3b:32:6c:a8:9f:71:a3:83:87:8d:d6:5a: 7f:09:4e:16:ab:6d:41:9f:83:7f:c1:79:0f:85:96: 33:5f:16:6d:23:f6:2e:99:12:b8:1e:ba:7f:a8:cc: 5c:87:22:87:6a:84:4d:2b:4b:7d:03:94:b9:e1:8b: 49:53:0d:90:32:42:7c:10:63:02:15:45:37:d9:83: 4b:7e:8d:d9:7c:9c:0f:e4:c0:61:fb:4c:1c:14:b8: 89:d9:c6:c1:63:d3:d4:fe:39:09:b2:6f:90:a8:da: a3:e1:c7:00:42:4e:fc:e8:63:7d:c9:55:ed:3b:2e: 8b:46:58:4d:e4:d6:a0:b8:4b:bc:89:98:40:9e:cd: cb:34:e5:73:36:90:50:8d:b8:ec:7f:e1:c5:5b:04: 24:7b:87:82:5f:93:07:a2:4f:fd:cd:53:92:67:f5: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A2:48:86:01:21:83:0A:EA:B5:D8:81:70:BE:54:B6:A5:5C:77:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176/1e1de9e8-ffb4-4c1f-a311-e4e0c0849176.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 143.203.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ac:2d:7c:ab:a1:02:41:b9:bb:33:c2:9b:26:74:61:39:99: 36:d7:6e:e3:ab:d0:82:24:4c:6e:45:95:78:75:8f:f4:05:2d: 21:4c:8c:ed:21:b0:ff:fb:f8:26:b6:42:67:ce:30:ec:52:09: 84:3e:10:ad:c9:3a:f0:cd:92:29:9c:39:0b:b3:7b:dc:ee:9f: 17:3a:ea:e6:97:15:12:7f:45:1a:b1:5e:69:74:1a:fc:1d:58: 1a:40:11:94:c0:f9:99:1b:81:16:87:44:80:20:f5:e0:64:d7: 66:ca:21:10:9d:18:24:28:1a:50:a9:f4:65:d5:56:f1:9e:07: a5:10:39:f3:8e:80:96:0e:d9:c0:64:5f:aa:44:7e:05:d7:1f: 2d:5b:4f:cf:41:32:fd:81:0c:e2:66:fa:74:27:09:ae:38:b7: c9:f4:56:18:9f:c2:5f:89:3c:7f:32:0d:3e:17:c7:83:93:df: 88:5b:4f:36:12:5b:fb:4e:c1:8c:37:87:be:7d:7a:e1:1a:53: 4f:b2:e7:d6:fb:39:81:9b:b1:2f:da:a0:67:72:db:ab:88:90: fb:31:9d:15:8a:c1:d8:40:7e:6e:4a:0e:8d:42:5f:a1:e1:09: c4:6e:ed:be:7f:6d:f6:b2:eb:03:b1:b7:14:59:04:e4:c4:4c: 10:65:7f:8a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+SDc7hCVAdqFvEowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMTAxMTExN1oXDTI5MDEyMzAyMTExN1owLzEtMCsGA1UEAxMk MWUxZGU5ZTgtZmZiNC00YzFmLWEzMTEtZTRlMGMwODQ5MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf4GuVvXPwUJ3G/YLWok+IO9q9/lWNKYUdWz foyy8krtD/Vbmea4emvxVIrJnX5t/F4FAY0w+cENNgnWadzevCzYktVBD2e07yGd La3AV5ddLpl8lZ8NIkpHnzI7Mmyon3Gjg4eN1lp/CU4Wq21Bn4N/wXkPhZYzXxZt I/YumRK4Hrp/qMxchyKHaoRNK0t9A5S54YtJUw2QMkJ8EGMCFUU32YNLfo3ZfJwP 5MBh+0wcFLiJ2cbBY9PU/jkJsm+QqNqj4ccAQk786GN9yVXtOy6LRlhN5NaguEu8 iZhAns3LNOVzNpBQjbjsf+HFWwQke4eCX5MHok/9zVOSZ/WsAwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCGiSIYBIYMK6rXYgXC+VLalXHfMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x ZTFkZTllOC1mZmI0LTRjMWYtYTMxMS1lNGUwYzA4NDkxNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzFlMWRlOWU4LWZmYjQtNGMxZi1h MzExLWU0ZTBjMDg0OTE3Ni8xZTFkZTllOC1mZmI0LTRjMWYtYTMxMS1lNGUwYzA4 NDkxNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKPyyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmawtfKuhAkG5uzPCmyZ0 YTmZNtdu46vQgiRMbkWVeHWP9AUtIUyM7SGw//v4JrZCZ84w7FIJhD4Qrck68M2S KZw5C7N73O6fFzrq5pcVEn9FGrFeaXQa/B1YGkARlMD5mRuBFodEgCD14GTXZsoh EJ0YJCgaUKn0ZdVW8Z4HpRA5846Alg7ZwGRfqkR+BdcfLVtPz0Ey/YEM4mb6dCcJ rji3yfRWGJ/CX4k8fzINPhfHg5PfiFtPNhJb+07BjDeHvn164RpTT7Ln1vs5gZux L9qgZ3Lbq4iQ+zGdFYrB2EB+bkoOjUJfoeEJxG7tvn9t9rLrA7G3FFkE5MRMEGV/ ig== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:23 2026 by rpki-client