$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f4e215e-de59-41a6-ba8c-1cd62014b854.cer File: 1f4e215e-de59-41a6-ba8c-1cd62014b854.cer (raw, json) Hash identifier: ORpFIwP6vgiRUNZnq431X9ORV/Edr3WtLgVLnKNO2aA= Subject key identifier: 1A:84:D2:D6:A2:2F:BA:86:12:59:AC:38:B4:BF:13:4A:CA:9B:D3:9F Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F464A9F096628962A2B239E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f4e215e-de59-41a6-ba8c-1cd62014b854/1f4e215e-de59-41a6-ba8c-1cd62014b854.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f4e215e-de59-41a6-ba8c-1cd62014b854/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 21:52:23 +0000 Certificate not after: Tue 26 Dec 2028 22:52:23 +0000 Subordinate resources: AS: 400525 IP: 170.62.82.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:4a:9f:09:66:28:96:2a:2b:23:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 21:52:23 2026 GMT Not After : Dec 26 22:52:23 2028 GMT Subject: CN=1f4e215e-de59-41a6-ba8c-1cd62014b854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d5:b4:09:25:bc:b6:80:55:51:4c:69:c0:2a: 1f:fe:76:1a:c9:06:18:4e:81:d6:2f:a0:06:c8:56: db:97:bf:e4:45:fd:95:6e:8d:9e:18:e3:2b:6d:c0: d3:83:0c:f0:34:36:3f:01:28:65:9a:f1:c2:2d:af: df:4e:26:f1:7f:e3:62:8c:f7:a9:8b:d9:66:0e:d3: c9:70:65:c0:87:5d:19:0f:8f:66:01:65:6b:1c:90: 44:39:22:26:9e:09:b8:71:88:61:f9:42:e4:66:bc: 30:0d:f3:03:c7:d1:c9:0e:54:bf:9c:55:87:e9:cf: 0d:fb:39:bb:34:1a:72:21:fc:9f:31:25:cb:dd:31: 4f:95:8b:e8:3c:e6:fd:81:ef:8c:42:2e:a7:f8:1d: 97:d8:2c:77:69:fc:cc:c2:f3:f7:c5:f7:11:68:34: 7b:44:e2:62:f7:b6:0e:5d:85:95:9b:85:f6:71:74: 6e:4a:78:da:e0:84:43:58:f3:33:6d:e2:c4:1b:3a: 01:ae:45:24:8f:2e:43:b3:f5:f4:90:10:23:20:51: 51:b5:9d:a9:5c:8c:a7:87:87:20:0f:bb:2a:4f:dd: 75:b4:89:2c:a0:6b:ec:d9:5f:f0:df:45:7b:9c:1b: 86:ac:a2:4a:05:a9:c9:a1:07:0d:52:8b:0b:c0:67: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:84:D2:D6:A2:2F:BA:86:12:59:AC:38:B4:BF:13:4A:CA:9B:D3:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f4e215e-de59-41a6-ba8c-1cd62014b854/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f4e215e-de59-41a6-ba8c-1cd62014b854/1f4e215e-de59-41a6-ba8c-1cd62014b854.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 170.62.82.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400525 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:22:26:09:5d:26:1e:fc:ee:06:d8:ab:b8:b0:85:86:9f:67: cd:19:2e:f3:9b:48:61:f8:78:21:32:c4:f6:26:cc:7b:a4:73: db:c1:af:b1:10:7c:09:02:97:85:b7:a2:6d:a4:33:d9:a3:a8: 5c:a7:bc:30:cb:b2:0d:82:82:6e:84:da:44:09:86:cc:f4:f7: 7b:b6:3e:09:06:79:6b:aa:15:f7:89:d8:83:98:06:74:2d:15: 47:6b:c6:de:c2:69:ac:d0:b7:4e:48:e4:8b:ae:6c:eb:e5:bf: 65:21:da:41:41:70:00:b8:22:f6:c0:14:f1:db:0a:9b:6e:03: 6f:ca:7d:ee:59:13:ac:44:1b:15:75:3f:f4:89:59:4c:ad:c8: 72:c4:78:5e:8f:b7:46:6e:54:24:61:b4:20:7a:67:d5:77:d8: fc:d4:02:a7:21:0e:50:cb:8f:86:c9:46:a4:30:a3:23:17:bb: 55:a3:f9:b9:81:d3:9e:3b:03:0b:1d:cb:b5:a8:af:57:d0:35: 14:c6:71:a6:f5:cd:fd:ba:78:a2:d9:3a:8a:6f:7c:78:05:d1: 1c:2b:c7:db:59:99:f2:4b:ec:5c:e3:e8:dd:46:01:cf:37:b4: 58:82:89:a8:37:19:c6:1c:cc:97:66:06:e9:96:27:41:7e:f8: 60:4f:67:a9 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9GSp8JZiiWKisjngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzIxNTIyM1oXDTI4MTIyNjIyNTIyM1owLzEtMCsGA1UEAxMk MWY0ZTIxNWUtZGU1OS00MWE2LWJhOGMtMWNkNjIwMTRiODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdW0CSW8toBVUUxpwCof/nYayQYYToHWL6AG yFbbl7/kRf2Vbo2eGOMrbcDTgwzwNDY/AShlmvHCLa/fTibxf+NijPepi9lmDtPJ cGXAh10ZD49mAWVrHJBEOSImngm4cYhh+ULkZrwwDfMDx9HJDlS/nFWH6c8N+zm7 NBpyIfyfMSXL3TFPlYvoPOb9ge+MQi6n+B2X2Cx3afzMwvP3xfcRaDR7ROJi97YO XYWVm4X2cXRuSnja4IRDWPMzbeLEGzoBrkUkjy5Ds/X0kBAjIFFRtZ2pXIynh4cg D7sqT911tIksoGvs2V/w30V7nBuGrKJKBanJoQcNUosLwGfzswIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBqE0taiL7qGElmsOLS/E0rKm9OfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x ZjRlMjE1ZS1kZTU5LTQxYTYtYmE4Yy0xY2Q2MjAxNGI4NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzFmNGUyMTVlLWRlNTktNDFhNi1i YThjLTFjZDYyMDE0Yjg1NC8xZjRlMjE1ZS1kZTU5LTQxYTYtYmE4Yy0xY2Q2MjAx NGI4NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGqPlIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhyNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAEiJgldJh787gbYq7iwhYafZ80ZLvObSGH4eCEyxPYmzHuk c9vBr7EQfAkCl4W3om2kM9mjqFynvDDLsg2Cgm6E2kQJhsz093u2PgkGeWuqFfeJ 2IOYBnQtFUdrxt7CaazQt05I5IuubOvlv2Uh2kFBcAC4IvbAFPHbCptuA2/Kfe5Z E6xEGxV1P/SJWUytyHLEeF6Pt0ZuVCRhtCB6Z9V32PzUAqchDlDLj4bJRqQwoyMX u1Wj+bmB0547Awsdy7Wor1fQNRTGcab1zf26eKLZOopvfHgF0Rwrx9tZmfJL7Fzj 6N1GAc83tFiCiag3GcYczJdmBumWJ0F++GBPZ6k= -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:00 2026 by rpki-client