$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f.cer File: 21880881-3fac-44ff-9432-16f3262c2c4f.cer (raw, json) Hash identifier: BidN7G63bLr5KKjXNEsPKr0qiWQ8ZsqV8eSlE0+dvdA= Subject key identifier: 59:9A:79:9A:21:CC:38:DE:D3:53:D6:31:44:27:F1:3B:B5:BA:5E:BC Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F98F428422A9C8879CCDF0DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Oct 2026 12:30:16 +0000 Certificate not after: Thu 11 Jan 2029 04:14:58 +0000 Subordinate resources: AS: 403065 IP: 23.166.76.0/24 IP: 2602:f2b5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:98:f4:28:42:2a:9c:88:79:cc:df:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 23 12:30:16 2026 GMT Not After : Jan 11 04:14:58 2029 GMT Subject: CN=21880881-3fac-44ff-9432-16f3262c2c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:c8:63:28:be:c6:72:47:d6:9b:d1:95:b6: 7d:bb:65:49:0f:7c:b9:94:8a:84:4c:37:64:fc:47: 2c:4e:32:bd:d8:15:41:45:dc:56:b2:55:bc:b1:d4: 5d:c5:b1:94:ea:c1:cd:b2:c0:8b:51:ae:e9:c0:5d: fe:d9:5a:aa:d6:3a:3b:91:6a:7f:32:79:25:fb:ac: 54:e2:4a:fb:c8:b1:ff:95:9a:ab:f6:63:e1:d2:8c: 0b:6f:15:04:59:02:bc:a2:ff:41:c6:c8:84:e0:2d: 50:a0:00:34:d5:33:22:50:b1:6b:98:b7:24:3d:d2: de:b9:c9:38:9a:ab:9b:65:64:14:59:bc:2f:50:ca: d4:7a:be:93:10:a1:b0:d8:8a:8d:60:92:18:3f:04: ab:b3:8b:2b:ff:cd:a4:33:4b:e2:69:81:8f:ad:f0: ce:63:44:ca:32:4e:d4:fa:5f:bc:d0:f8:19:93:44: 83:f3:1f:92:87:63:2d:c5:04:a3:41:3a:59:94:5c: 97:2b:b4:10:14:30:12:5e:8e:5b:6d:21:c4:5f:98: 31:05:85:54:a9:7b:58:9f:e1:c4:b9:3a:53:4f:23: 91:92:1d:b5:00:7d:1a:9e:97:4a:27:ec:b8:cb:a9: 36:26:52:f1:53:de:aa:18:2b:17:e9:fe:49:e6:8e: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9A:79:9A:21:CC:38:DE:D3:53:D6:31:44:27:F1:3B:B5:BA:5E:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21880881-3fac-44ff-9432-16f3262c2c4f/21880881-3fac-44ff-9432-16f3262c2c4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.166.76.0/24 IPv6: 2602:f2b5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403065 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1e:75:3b:93:2f:58:f8:dd:0a:61:e2:49:6c:be:ff:4b:42: 33:b9:76:6d:d3:8b:4c:19:64:8c:34:a3:76:c3:1e:44:d0:d9: c3:a9:08:ca:5d:56:84:43:5d:77:d2:56:af:85:c1:38:f9:9f: 4c:1d:b1:1b:47:25:c4:2f:65:70:40:9b:fa:20:66:d4:ed:69: 99:64:93:90:81:bc:89:99:77:4b:32:27:d6:27:60:6d:9b:0e: 84:a8:c7:b5:76:ec:bd:eb:75:63:69:79:32:8b:7b:ba:4e:b3: d5:31:99:ba:8d:1d:43:bf:a2:6f:b2:7f:3a:a1:6e:cb:21:9f: 7e:c5:57:1d:a7:72:23:48:67:ac:67:58:42:97:a6:e2:2f:1f: 28:ae:6e:6c:73:f6:aa:05:28:1b:59:5e:b9:cd:75:79:b0:0f: 1c:27:95:b1:84:11:b3:65:b8:14:34:70:c0:3d:37:07:b4:f2: ed:f2:ad:f9:f8:60:8c:72:9f:de:04:93:68:06:ba:88:70:2c: f6:ef:7e:96:4c:f8:a4:09:2f:3b:42:0d:e3:43:bc:ea:fb:d1: e0:41:e6:31:e1:6e:c1:81:d5:58:42:be:04:f6:bd:32:f5:20: 68:20:d6:8e:55:14:a9:48:53:db:40:c5:75:6f:89:49:33:58: e0:5d:78:a9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+Y9ChCKpyIeczfDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMzEyMzAxNloXDTI5MDExMTA0MTQ1OFowLzEtMCsGA1UEAxMk MjE4ODA4ODEtM2ZhYy00NGZmLTk0MzItMTZmMzI2MmMyYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrfIYyi+xnJH1pvRlbZ9u2VJD3y5lIqETDdk /EcsTjK92BVBRdxWslW8sdRdxbGU6sHNssCLUa7pwF3+2Vqq1jo7kWp/Mnkl+6xU 4kr7yLH/lZqr9mPh0owLbxUEWQK8ov9BxsiE4C1QoAA01TMiULFrmLckPdLeuck4 mqubZWQUWbwvUMrUer6TEKGw2IqNYJIYPwSrs4sr/82kM0viaYGPrfDOY0TKMk7U +l+80PgZk0SD8x+Sh2MtxQSjQTpZlFyXK7QQFDASXo5bbSHEX5gxBYVUqXtYn+HE uTpTTyORkh21AH0anpdKJ+y4y6k2JlLxU96qGCsX6f5J5o5r7QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFmaeZohzDje01PWMUQn8Tu1ul68MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y MTg4MDg4MS0zZmFjLTQ0ZmYtOTQzMi0xNmYzMjYyYzJjNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzIxODgwODgxLTNmYWMtNDRmZi05 NDMyLTE2ZjMyNjJjMmM0Zi8yMTg4MDg4MS0zZmFjLTQ0ZmYtOTQzMi0xNmYzMjYy YzJjNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpkwwDgQCAAIwCAMGACYC8rUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmeTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjHnU7ky9Y+N0KYeJJbL7/S0Iz uXZt04tMGWSMNKN2wx5E0NnDqQjKXVaEQ1130lavhcE4+Z9MHbEbRyXEL2VwQJv6 IGbU7WmZZJOQgbyJmXdLMifWJ2Btmw6EqMe1duy963VjaXkyi3u6TrPVMZm6jR1D v6Jvsn86oW7LIZ9+xVcdp3IjSGesZ1hCl6biLx8orm5sc/aqBSgbWV65zXV5sA8c J5WxhBGzZbgUNHDAPTcHtPLt8q35+GCMcp/eBJNoBrqIcCz2736WTPikCS87Qg3j Q7zq+9HgQeYx4W7BgdVYQr4E9r0y9SBoINaOVRSpSFPbQMV1b4lJM1jgXXip -----END CERTIFICATE-----Generated at Sun Nov 1 10:26:53 2026 by rpki-client