$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21e5996d-d862-4125-93c2-735b721e2a66.cer File: 21e5996d-d862-4125-93c2-735b721e2a66.cer (raw, json) Hash identifier: wFEQXdh85jhGDpzUIHXV/gBrfLTTXnkPN6mY2b23mwY= Subject key identifier: 7A:59:DC:DE:D2:78:16:5E:99:91:3B:3A:CB:E3:F6:27:76:85:03:96 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F72C1F97E143F3DD8024C2550 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21e5996d-d862-4125-93c2-735b721e2a66/21e5996d-d862-4125-93c2-735b721e2a66.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21e5996d-d862-4125-93c2-735b721e2a66/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 20:08:26 +0000 Certificate not after: Thu 11 Jan 2029 21:08:26 +0000 Subordinate resources: AS: 402956 IP: 107.6.84.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:c1:f9:7e:14:3f:3d:d8:02:4c:25:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 20:08:26 2026 GMT Not After : Jan 11 21:08:26 2029 GMT Subject: CN=21e5996d-d862-4125-93c2-735b721e2a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:f9:e9:d9:0d:2c:6b:c1:a6:81:1a:62:78: ab:6f:cc:f6:93:b6:6d:16:67:f1:80:c9:f5:e8:b5: 13:70:7f:43:e4:14:92:15:49:68:59:a0:98:b3:76: 73:76:d7:ba:e4:2b:c9:b0:9a:26:8d:a4:6c:88:be: ea:ff:1e:63:66:fb:62:a8:35:95:7e:5e:73:e6:2f: 6b:b5:e6:a9:57:43:05:5e:6a:71:71:d0:44:1e:01: a1:76:e4:fe:55:72:c4:05:3b:2b:be:9e:4c:51:e6: d7:c6:06:26:38:ee:53:e7:8e:f2:46:50:45:58:9f: e2:48:d3:92:57:41:93:f6:9d:74:9e:eb:57:cb:ec: 7f:c2:48:bf:bc:53:61:db:95:8d:00:f5:b5:44:d3: 47:16:5c:71:79:db:7b:39:86:53:c2:4a:11:15:71: 7c:39:8e:ed:a1:c5:42:b6:ea:3e:a8:4d:e9:e0:1d: 8c:d4:56:51:29:67:b6:cb:2c:6c:ba:fe:37:df:2b: 1b:a2:79:16:4e:aa:03:43:0b:2b:1f:fc:bf:5a:03: b9:50:19:de:af:f8:f0:6e:4f:dd:e2:1c:b4:4e:2c: da:bf:75:46:8b:90:38:61:c5:7d:30:6c:90:d9:2a: 32:38:07:15:91:3d:17:b7:a8:e5:75:ab:9d:27:e9: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:59:DC:DE:D2:78:16:5E:99:91:3B:3A:CB:E3:F6:27:76:85:03:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21e5996d-d862-4125-93c2-735b721e2a66/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21e5996d-d862-4125-93c2-735b721e2a66/21e5996d-d862-4125-93c2-735b721e2a66.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 107.6.84.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4d:09:1f:15:fb:e6:f8:e0:6a:18:39:d3:17:91:5f:a7:b1: f8:e4:15:10:93:ce:bc:87:98:1a:30:0d:68:ab:13:ba:b2:26: 0e:30:b4:84:af:26:fa:78:27:98:ac:4d:b8:48:10:7d:be:6f: c7:0b:f0:92:0c:9f:aa:35:68:2b:2b:dd:10:f3:91:98:c5:11: 87:87:9c:00:28:25:b8:e2:3a:a2:7e:1f:7f:10:56:34:20:66: 67:0a:f8:71:62:71:43:1a:03:5e:8d:ec:e4:ea:ce:f7:23:b4: 0a:0b:67:8f:1f:ee:7f:24:07:8c:92:62:43:3e:ae:35:2f:17: 36:2a:b8:2d:6b:98:ff:c4:9b:af:7d:cc:75:09:b4:dc:1e:a3: 8a:63:96:7e:90:9e:bc:4c:59:3d:26:8a:b4:2a:21:07:08:74: 64:7e:42:0d:3f:f2:55:17:8a:4b:55:94:24:f9:65:d1:82:ea: b5:e7:41:2e:e2:e1:37:85:8d:21:9a:4f:cc:07:c7:10:2e:bb: ef:b7:4f:e9:32:a3:aa:30:50:73:1a:46:e5:b9:7d:96:d4:36: b2:6a:f8:9a:8d:2f:f3:b7:6b:0a:5b:48:ec:bb:03:56:24:4b: fc:0e:e2:f4:94:6d:e1:9f:11:a8:bd:78:c0:a7:b1:fc:37:6d: 7e:9b:17:eb -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9ywfl+FD892AJMJVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTIwMDgyNloXDTI5MDExMTIxMDgyNlowLzEtMCsGA1UEAxMk MjFlNTk5NmQtZDg2Mi00MTI1LTkzYzItNzM1YjcyMWUyYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAr56dkNLGvBpoEaYnirb8z2k7ZtFmfxgMn1 6LUTcH9D5BSSFUloWaCYs3Zzdte65CvJsJomjaRsiL7q/x5jZvtiqDWVfl5z5i9r teapV0MFXmpxcdBEHgGhduT+VXLEBTsrvp5MUebXxgYmOO5T547yRlBFWJ/iSNOS V0GT9p10nutXy+x/wki/vFNh25WNAPW1RNNHFlxxedt7OYZTwkoRFXF8OY7tocVC tuo+qE3p4B2M1FZRKWe2yyxsuv433ysbonkWTqoDQwsrH/y/WgO5UBner/jwbk/d 4hy0Tizav3VGi5A4YcV9MGyQ2SoyOAcVkT0Xt6jldaudJ+mDGQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHpZ3N7SeBZemZE7Osvj9id2hQOWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y MWU1OTk2ZC1kODYyLTQxMjUtOTNjMi03MzViNzIxZTJhNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzIxZTU5OTZkLWQ4NjItNDEyNS05 M2MyLTczNWI3MjFlMmE2Ni8yMWU1OTk2ZC1kODYyLTQxMjUtOTNjMi03MzViNzIx ZTJhNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABrBlQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiYMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACpNCR8V++b44GoYOdMXkV+nsfjkFRCTzryHmBowDWirE7qy Jg4wtISvJvp4J5isTbhIEH2+b8cL8JIMn6o1aCsr3RDzkZjFEYeHnAAoJbjiOqJ+ H38QVjQgZmcK+HFicUMaA16N7OTqzvcjtAoLZ48f7n8kB4ySYkM+rjUvFzYquC1r mP/Em699zHUJtNweo4pjln6QnrxMWT0mirQqIQcIdGR+Qg0/8lUXiktVlCT5ZdGC 6rXnQS7i4TeFjSGaT8wHxxAuu++3T+kyo6owUHMaRuW5fZbUNrJq+JqNL/O3awpb SOy7A1YkS/wO4vSUbeGfEai9eMCnsfw3bX6bF+s= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:58 2026 by rpki-client