$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1fa7fb33-b576-4d29-9f69-bf83447ae6c6.cer File: 1fa7fb33-b576-4d29-9f69-bf83447ae6c6.cer (raw, json) Hash identifier: qcwRZIMDIPz4m6TLQjpYLjfdd/0QqjBC9/pyYSkW0S4= Subject key identifier: 54:FA:C3:D1:EC:70:BB:97:19:E5:BE:64:C5:6E:6C:54:0A:20:CE:7F Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6AD2A229DC036D5C3A1F4B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1fa7fb33-b576-4d29-9f69-bf83447ae6c6/1fa7fb33-b576-4d29-9f69-bf83447ae6c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1fa7fb33-b576-4d29-9f69-bf83447ae6c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 23:55:32 +0000 Certificate not after: Tue 09 Jan 2029 00:55:32 +0000 Subordinate resources: IP: 208.68.44.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:d2:a2:29:dc:03:6d:5c:3a:1f:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 6 23:55:32 2026 GMT Not After : Jan 9 00:55:32 2029 GMT Subject: CN=1fa7fb33-b576-4d29-9f69-bf83447ae6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:36:28:db:bd:cd:9b:05:05:13:44:93:8e: 03:ec:7f:58:f2:e6:7d:47:a4:4c:19:d7:41:a5:49: c1:7e:a8:88:e1:16:0e:c9:00:05:23:bf:d5:4b:b8: d2:37:cb:c3:b6:20:42:8f:12:09:2a:32:42:69:4d: 77:f4:1f:4a:46:ae:b5:24:e4:c4:af:95:55:99:91: 72:fb:4f:bc:97:99:8f:1f:61:75:c5:8c:e4:c0:86: e7:24:8a:da:d6:b5:1c:27:2e:aa:39:77:3c:53:72: b8:5c:20:28:b8:f7:48:d1:ea:43:10:43:2b:14:22: 47:ae:96:7d:e6:90:28:43:41:85:f0:f4:23:33:75: 22:fe:47:f4:19:9d:fe:07:39:eb:1a:8e:31:e6:c8: 07:99:eb:6a:d5:8c:2f:76:bb:24:24:a5:36:4a:66: 3d:74:03:24:ae:72:21:9e:be:3b:d0:c2:0d:c6:9c: 1d:b4:24:31:02:54:eb:ac:ac:9f:bb:29:f7:ed:31: 3f:77:73:99:3e:e7:bb:8a:6c:47:54:44:b7:12:67: 96:e1:66:e7:f3:46:d1:bf:4a:4d:53:58:cc:36:d2: 19:e0:1d:19:29:e1:b2:0c:84:98:f5:97:2a:fe:e7: 65:9c:32:ff:79:f6:25:82:cd:7a:57:4e:a3:7c:0d: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FA:C3:D1:EC:70:BB:97:19:E5:BE:64:C5:6E:6C:54:0A:20:CE:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1fa7fb33-b576-4d29-9f69-bf83447ae6c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1fa7fb33-b576-4d29-9f69-bf83447ae6c6/1fa7fb33-b576-4d29-9f69-bf83447ae6c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 208.68.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:92:95:f7:22:4e:82:4b:08:98:64:76:89:c1:85:3c:fb:66: 18:1f:ee:e8:4a:a7:ae:fb:9c:c9:7d:a1:24:64:8d:28:46:63: 6f:4d:65:d4:9e:db:d3:3a:c1:d9:eb:81:9e:37:a9:ed:30:4c: 14:c3:bf:07:59:1e:68:64:6b:5e:22:63:e0:17:e5:ea:fc:70: 6c:b2:3a:ce:9e:dd:4f:73:48:e9:23:b5:4e:0c:38:b7:0c:e7: ef:2d:f9:52:51:70:d3:d7:a6:8a:ff:7d:c9:a6:06:d9:51:c0: 43:32:73:66:4a:22:fe:96:4f:82:f5:99:2c:00:98:69:5f:0b: 12:1e:50:1e:af:bb:2b:4f:d4:6b:31:b2:b6:9f:60:bc:9f:00: fd:89:ed:f1:38:fc:e2:1d:80:d1:2d:7a:24:99:0b:19:2f:43: 8f:82:d6:9a:06:ca:22:92:9f:1f:da:0d:da:dd:ee:1f:10:f3: 9d:a2:b2:93:dc:ce:fe:05:27:8f:21:37:6e:f4:21:1c:b1:a6: 4d:d3:19:5c:f0:bf:be:00:d3:ca:91:58:66:71:f4:bc:ca:bc: 72:69:6e:20:0d:a2:f3:f0:db:0b:70:e5:06:4f:e2:45:e9:8d: 4d:5a:f8:95:78:16:2b:2b:e5:52:70:71:c9:ce:61:eb:9b:10: d1:9e:18:1f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9q0qIp3ANtXDofSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNjIzNTUzMloXDTI5MDEwOTAwNTUzMlowLzEtMCsGA1UEAxMk MWZhN2ZiMzMtYjU3Ni00ZDI5LTlmNjktYmY4MzQ0N2FlNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwI2KNu9zZsFBRNEk44D7H9Y8uZ9R6RMGddB pUnBfqiI4RYOyQAFI7/VS7jSN8vDtiBCjxIJKjJCaU139B9KRq61JOTEr5VVmZFy +0+8l5mPH2F1xYzkwIbnJIra1rUcJy6qOXc8U3K4XCAouPdI0epDEEMrFCJHrpZ9 5pAoQ0GF8PQjM3Ui/kf0GZ3+BznrGo4x5sgHmetq1YwvdrskJKU2SmY9dAMkrnIh nr470MINxpwdtCQxAlTrrKyfuyn37TE/d3OZPue7imxHVES3EmeW4Wbn80bRv0pN U1jMNtIZ4B0ZKeGyDISY9Zcq/udlnDL/efYlgs16V06jfA1w+QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFT6w9HscLuXGeW+ZMVubFQKIM5/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x ZmE3ZmIzMy1iNTc2LTRkMjktOWY2OS1iZjgzNDQ3YWU2YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzFmYTdmYjMzLWI1NzYtNGQyOS05 ZjY5LWJmODM0NDdhZTZjNi8xZmE3ZmIzMy1iNTc2LTRkMjktOWY2OS1iZjgzNDQ3 YWU2YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQRCwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUpKV9yJOgksImGR2icGF PPtmGB/u6EqnrvucyX2hJGSNKEZjb01l1J7b0zrB2euBnjep7TBMFMO/B1keaGRr XiJj4Bfl6vxwbLI6zp7dT3NI6SO1Tgw4twzn7y35UlFw09emiv99yaYG2VHAQzJz Zkoi/pZPgvWZLACYaV8LEh5QHq+7K0/UazGytp9gvJ8A/Ynt8Tj84h2A0S16JJkL GS9Dj4LWmgbKIpKfH9oN2t3uHxDznaKyk9zO/gUnjyE3bvQhHLGmTdMZXPC/vgDT ypFYZnH0vMq8cmluIA2i8/DbC3DlBk/iRemNTVr4lXgWKyvlUnBxyc5h65sQ0Z4Y Hw== -----END CERTIFICATE-----Generated at Sat Oct 24 10:35:00 2026 by rpki-client