$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer File: 2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer (raw, json) Hash identifier: 93Akq6juudAVHQ0hJ9xAqhsbuqnZqPlRlUlr3o+YH1w= Subject key identifier: 80:3E:91:C6:B2:5A:07:2A:85:5F:CE:3A:5C:0A:A9:3C:89:48:10:0F Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8B2AE622EE2F1705466D4700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 Oct 2026 13:59:15 +0000 Certificate not after: Sat 20 Jan 2029 14:59:15 +0000 Subordinate resources: AS: 403067 IP: 156.9.88.0/22 IP: 2602:f2b6::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:2a:e6:22:ee:2f:17:05:46:6d:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 18 13:59:15 2026 GMT Not After : Jan 20 14:59:15 2029 GMT Subject: CN=2945dfb7-bd07-4995-89ee-f1ff169d4bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:e9:2d:4b:4b:fc:be:52:7f:6b:21:e7:15: 0c:ca:8c:e2:7a:6b:d7:dd:5f:26:dc:2c:9e:9b:1e: 99:bd:06:bf:86:f3:dc:23:a8:c0:89:07:18:70:2e: ca:ae:0c:bc:7b:f9:82:4f:23:2f:23:fd:d2:e0:81: 8b:71:c2:f9:33:e3:70:5a:e5:5b:07:aa:86:e4:3c: 82:7b:87:04:92:e9:b5:6a:03:2d:d6:81:ed:f5:8b: fe:80:4d:4e:53:e5:88:6a:2f:a7:80:df:36:32:dd: 40:2c:8b:d3:11:4c:10:0e:06:5e:ad:22:c2:94:ad: 10:44:21:6c:a0:d9:2d:3a:69:a7:12:c2:a1:83:94: 05:1e:33:ad:9c:a0:0d:2d:8c:02:9b:24:00:12:b0: 6c:7f:85:44:ca:49:44:4a:b7:0d:0c:4f:cd:7a:07: 99:9d:62:cf:ca:09:d2:ff:de:dd:4e:0e:79:5d:17: 31:7f:3c:94:87:7b:04:1e:5a:22:cf:a1:b2:82:ce: 6f:6a:a4:21:6c:bc:ee:c8:27:18:80:2e:e6:ec:81: 13:00:40:38:a7:08:29:36:26:1e:2a:5e:3e:44:92: f6:05:6b:63:12:6b:b4:e8:4b:92:06:11:8f:c9:e5: 38:67:ed:de:54:13:0c:98:88:ab:47:3e:a1:f8:7e: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3E:91:C6:B2:5A:07:2A:85:5F:CE:3A:5C:0A:A9:3C:89:48:10:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 156.9.88.0/22 IPv6: 2602:f2b6::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403067 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:60:a5:a5:24:a8:b9:34:b7:54:7c:ca:cf:18:df:8b:b3:22: f2:84:84:7a:bf:97:17:52:cd:42:82:bb:05:c2:7f:0e:65:bc: 3c:b2:58:8c:89:76:99:c1:86:15:72:de:75:37:8b:5e:64:cb: 17:d1:11:e9:0b:90:99:ce:4a:d2:18:49:d2:d0:7c:6c:34:ee: b9:c7:d7:be:6d:28:40:c8:d0:4f:ff:34:6b:f2:81:81:6e:89: c1:3b:dd:22:b6:4c:92:1c:48:94:c1:18:ae:14:61:55:c6:d3: 8c:45:92:a5:3e:d4:29:90:6a:11:31:d4:b0:e7:20:58:6d:3d: a0:e8:58:e7:93:90:3b:4a:36:34:2c:1b:9d:57:c3:18:c0:6e: 7f:83:50:90:d3:fd:05:f5:61:9b:42:6c:b9:bb:db:5c:71:aa: 83:78:ff:e0:82:82:f4:82:cd:3b:b1:bb:a7:4a:46:43:cf:c8: fa:b0:68:ea:57:34:f6:40:11:75:61:ea:05:b9:bc:f7:0e:56: e0:58:13:c4:b0:b0:22:d6:34:44:79:42:51:a1:65:26:7b:fb: a0:d1:06:10:f2:b5:5b:9e:35:15:1c:70:66:04:e0:a5:fa:ed: f6:b0:e5:69:4b:7f:a8:84:7d:81:32:3e:70:96:e7:80:31:02: cd:26:44:2d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+LKuYi7i8XBUZtRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxODEzNTkxNVoXDTI5MDEyMDE0NTkxNVowLzEtMCsGA1UEAxMk Mjk0NWRmYjctYmQwNy00OTk1LTg5ZWUtZjFmZjE2OWQ0YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHLpLUtL/L5Sf2sh5xUMyoziemvX3V8m3Cye mx6ZvQa/hvPcI6jAiQcYcC7Krgy8e/mCTyMvI/3S4IGLccL5M+NwWuVbB6qG5DyC e4cEkum1agMt1oHt9Yv+gE1OU+WIai+ngN82Mt1ALIvTEUwQDgZerSLClK0QRCFs oNktOmmnEsKhg5QFHjOtnKANLYwCmyQAErBsf4VEyklESrcNDE/NegeZnWLPygnS /97dTg55XRcxfzyUh3sEHloiz6Gygs5vaqQhbLzuyCcYgC7m7IETAEA4pwgpNiYe Kl4+RJL2BWtjEmu06EuSBhGPyeU4Z+3eVBMMmIirRz6h+H4AlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIA+kcayWgcqhV/OOlwKqTyJSBAPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y OTQ1ZGZiNy1iZDA3LTQ5OTUtODllZS1mMWZmMTY5ZDRiZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzI5NDVkZmI3LWJkMDctNDk5NS04 OWVlLWYxZmYxNjlkNGJkNC8yOTQ1ZGZiNy1iZDA3LTQ5OTUtODllZS1mMWZmMTY5 ZDRiZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKcCVgwDgQCAAIwCAMGBCYC8rYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmezBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhYKWlJKi5NLdUfMrPGN+LsyLy hIR6v5cXUs1CgrsFwn8OZbw8sliMiXaZwYYVct51N4teZMsX0RHpC5CZzkrSGEnS 0HxsNO65x9e+bShAyNBP/zRr8oGBbonBO90itkySHEiUwRiuFGFVxtOMRZKlPtQp kGoRMdSw5yBYbT2g6Fjnk5A7SjY0LBudV8MYwG5/g1CQ0/0F9WGbQmy5u9tccaqD eP/ggoL0gs07sbunSkZDz8j6sGjqVzT2QBF1YeoFubz3DlbgWBPEsLAi1jREeUJR oWUme/ug0QYQ8rVbnjUVHHBmBOCl+u32sOVpS3+ohH2BMj5wlueAMQLNJkQt -----END CERTIFICATE-----Generated at Wed Nov 4 05:38:36 2026 by rpki-client