$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/28c98bdf-4fed-45db-967d-c399c9a625cf.cer File: 28c98bdf-4fed-45db-967d-c399c9a625cf.cer (raw, json) Hash identifier: jmXFqQyK9MZHxK4tvtK5D9ZIld/SmHRmP4qGC7u+Goc= Subject key identifier: 75:A2:D7:AA:CE:D9:A4:B5:FF:5F:5A:AF:62:89:7F:79:6B:D8:38:DA Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F857B5582F0DDF388927D2600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/28c98bdf-4fed-45db-967d-c399c9a625cf/28c98bdf-4fed-45db-967d-c399c9a625cf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/28c98bdf-4fed-45db-967d-c399c9a625cf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Oct 2026 13:06:28 +0000 Certificate not after: Thu 18 Jan 2029 14:06:28 +0000 Subordinate resources: IP: 205.176.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:7b:55:82:f0:dd:f3:88:92:7d:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 16 13:06:28 2026 GMT Not After : Jan 18 14:06:28 2029 GMT Subject: CN=28c98bdf-4fed-45db-967d-c399c9a625cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:8c:4d:39:65:4e:4c:f7:97:85:3d:8c:4a: f8:e1:36:64:cf:1d:da:b9:40:2f:6c:ab:d6:6c:25: 12:c6:03:17:28:2c:4e:8a:13:55:24:a0:3a:c8:43: 5b:51:45:3a:c3:dc:2b:75:4b:d7:37:ba:67:d7:5e: 46:fc:14:bd:31:ae:a4:7e:d7:f1:b1:b8:ff:e1:9e: f3:fd:66:cb:8f:0a:e0:e6:0b:95:e9:6f:bf:24:ed: ba:85:8a:76:fd:eb:0b:7f:fc:78:8d:3d:18:39:fa: 7d:79:d9:2b:1b:e9:1b:b6:8b:54:0a:15:3d:c4:73: d0:e5:7a:f5:a3:fd:d2:90:82:5d:e3:17:4e:1f:19: 19:6d:ca:49:62:8e:4f:2a:c3:73:9f:ea:90:89:8a: 9e:30:c5:c0:f6:11:99:50:44:40:49:1e:7a:a5:e6: c1:6a:3d:61:10:11:b1:0b:55:03:02:a2:8e:50:61: af:da:98:d6:75:c3:7c:8d:02:3a:a5:02:75:7e:a0: f7:c2:d5:da:fb:7c:64:53:96:a3:c6:cc:d8:f2:7f: 60:63:4b:8d:60:8c:11:ee:39:f2:78:d7:2e:92:8a: e2:7c:0d:5b:bf:a2:cd:1f:ab:9b:ea:17:24:f8:61: 74:db:8a:a6:be:75:5c:47:41:f1:6c:59:1e:54:f0: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A2:D7:AA:CE:D9:A4:B5:FF:5F:5A:AF:62:89:7F:79:6B:D8:38:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/28c98bdf-4fed-45db-967d-c399c9a625cf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/28c98bdf-4fed-45db-967d-c399c9a625cf/28c98bdf-4fed-45db-967d-c399c9a625cf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 205.176.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f4:fa:78:24:96:77:2d:08:b2:3f:6d:bd:f3:aa:2f:b9:44: 8f:1e:54:aa:4a:eb:a6:15:06:67:6c:02:9e:4c:fb:b5:d3:b0: 99:c6:dd:3f:93:ff:ca:e0:eb:c3:4a:4d:59:bd:a0:e9:13:46: cc:f2:a7:55:9a:a8:a6:5f:f7:e1:59:b1:df:69:e6:da:a9:26: 68:be:da:94:b8:8b:d4:6f:12:30:bb:2a:d2:90:7e:49:87:cc: 76:c1:96:81:ee:5a:44:75:d1:67:16:7a:07:e5:c4:cd:2b:d3: ef:ea:75:27:1c:1f:44:d0:ba:3e:b4:be:b1:bd:ef:9d:1c:37: ed:5c:e7:0a:c8:81:59:e4:e9:99:d4:c5:58:40:3f:fc:84:9c: ea:c2:82:8a:09:20:92:d1:19:cc:ad:86:c9:1f:2c:1f:99:d2: db:c4:2c:e3:de:06:0d:06:84:cc:83:df:74:f2:76:6c:eb:c8: c1:94:70:5e:86:f9:47:d0:f5:32:5e:17:76:53:5d:19:9f:4c: bc:c0:30:dc:0a:c5:f5:cf:b8:04:74:45:7f:2d:31:37:cd:94: 64:b1:93:04:41:1f:fd:58:55:ac:13:b8:52:6d:e4:6e:b7:9b: 8a:3f:56:3f:7e:a1:a8:31:c3:c7:90:9f:ea:b5:70:74:50:17: 54:2c:71:8d -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE+Fe1WC8N3ziJJ9JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNjEzMDYyOFoXDTI5MDExODE0MDYyOFowLzEtMCsGA1UEAxMk MjhjOThiZGYtNGZlZC00NWRiLTk2N2QtYzM5OWM5YTYyNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEGMTTllTkz3l4U9jEr44TZkzx3auUAvbKvW bCUSxgMXKCxOihNVJKA6yENbUUU6w9wrdUvXN7pn115G/BS9Ma6kftfxsbj/4Z7z /WbLjwrg5guV6W+/JO26hYp2/esLf/x4jT0YOfp9edkrG+kbtotUChU9xHPQ5Xr1 o/3SkIJd4xdOHxkZbcpJYo5PKsNzn+qQiYqeMMXA9hGZUERASR56pebBaj1hEBGx C1UDAqKOUGGv2pjWdcN8jQI6pQJ1fqD3wtXa+3xkU5ajxszY8n9gY0uNYIwR7jny eNcukorifA1bv6LNH6ub6hck+GF024qmvnVcR0HxbFkeVPANZQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHWi16rO2aS1/19ar2KJf3lr2DjaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y OGM5OGJkZi00ZmVkLTQ1ZGItOTY3ZC1jMzk5YzlhNjI1Y2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzI4Yzk4YmRmLTRmZWQtNDVkYi05 NjdkLWMzOTljOWE2MjVjZi8yOGM5OGJkZi00ZmVkLTQ1ZGItOTY3ZC1jMzk5Yzlh NjI1Y2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwDNsDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf9Pp4JJZ3LQiyP22986ov uUSPHlSqSuumFQZnbAKeTPu107CZxt0/k//K4OvDSk1ZvaDpE0bM8qdVmqimX/fh WbHfaebaqSZovtqUuIvUbxIwuyrSkH5Jh8x2wZaB7lpEddFnFnoH5cTNK9Pv6nUn HB9E0Lo+tL6xve+dHDftXOcKyIFZ5OmZ1MVYQD/8hJzqwoKKCSCS0RnMrYbJHywf mdLbxCzj3gYNBoTMg9908nZs68jBlHBehvlH0PUyXhd2U10Zn0y8wDDcCsX1z7gE dEV/LTE3zZRksZMEQR/9WFWsE7hSbeRut5uKP1Y/fqGoMcPHkJ/qtXB0UBdULHGN -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:39 2026 by rpki-client