$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609.cer File: 2ab18950-ebe0-431c-b5f9-e48842e85609.cer (raw, json) Hash identifier: 50F0xPCQ4NPH6JOcE0xUOmCtPnBWgRo7G85u9dOeSnA= Subject key identifier: 4A:30:A5:1C:B2:74:BF:14:08:A7:C1:0E:51:A9:40:F7:9B:18:73:9C Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F764F391C6D571936140B16C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/2ab18950-ebe0-431c-b5f9-e48842e85609.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 02:40:28 +0000 Certificate not after: Sat 13 Jan 2029 03:40:28 +0000 Subordinate resources: AS: 403081 IP: 199.89.252.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:4f:39:1c:6d:57:19:36:14:0b:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 11 02:40:28 2026 GMT Not After : Jan 13 03:40:28 2029 GMT Subject: CN=2ab18950-ebe0-431c-b5f9-e48842e85609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:cb:38:13:0e:01:a6:c0:b9:e5:b5:47:87: 91:09:e9:e3:06:b7:b8:33:a0:24:e0:dc:c6:a3:b7: c4:c1:e6:d1:43:a0:80:bf:b6:9e:05:f5:6f:cb:09: 88:79:ba:a6:ed:86:ba:24:9c:72:19:71:e0:12:e9: 45:36:2a:54:33:35:9b:9b:67:a3:9a:10:26:cb:c5: a3:8c:79:9f:11:98:63:66:6d:74:07:06:45:71:8e: 5a:08:60:8f:25:40:79:4a:69:3f:ed:e6:9d:f7:6e: b7:18:5f:f5:de:62:87:95:f0:e7:7c:9c:24:78:26: 58:c4:04:b1:b6:1a:e8:c9:d0:46:55:3d:95:3e:78: 1f:5e:de:3d:b3:4e:3d:1a:19:3c:5a:1b:bc:f5:ec: 6c:e5:ba:32:64:0f:ee:ec:7b:e9:39:f4:79:ee:7b: 26:9b:da:21:16:10:18:bb:2d:ec:4c:de:7d:99:6a: 4a:55:c9:17:c5:5a:b2:62:0e:7b:1f:20:26:1c:ab: 7b:48:a5:b6:cd:13:dc:18:df:e4:7d:0b:17:b2:4c: 43:72:8d:35:c9:c1:30:b3:e9:a9:a3:42:b3:ab:97: f0:fc:2f:dd:60:bc:ae:3f:8d:82:39:bb:1d:41:9f: cd:a5:eb:78:ef:1b:2f:5a:22:f9:a2:65:7a:2c:78: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:30:A5:1C:B2:74:BF:14:08:A7:C1:0E:51:A9:40:F7:9B:18:73:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/2ab18950-ebe0-431c-b5f9-e48842e85609.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.89.252.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403081 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f1:10:24:72:95:7a:01:f1:d7:20:36:a4:f7:53:cd:29:18: 38:2e:2a:68:8a:c3:14:0c:b4:f8:48:0e:70:04:4b:fe:2a:47: 72:bb:8d:d3:a4:d1:3e:67:8a:c9:3f:05:a1:f4:45:7c:f0:ad: 1f:c0:01:f7:66:6f:3e:d1:be:53:ba:ad:fc:3a:e6:1c:43:36: 6a:32:70:e3:d7:8f:fd:93:ed:73:e7:f8:d4:1c:82:83:f5:b7: 5e:d3:92:da:ea:8b:40:a8:3e:46:63:3e:b6:34:7b:c9:76:c8: 00:b9:c7:86:bc:8c:80:ac:66:3c:e9:14:63:33:e6:01:26:ca: 19:9a:e6:dd:a8:1b:48:05:17:67:e5:53:5a:29:e4:90:83:5b: 3c:28:24:b9:79:e3:79:58:f4:e3:be:ee:81:f2:29:42:30:65: 8a:6a:b5:86:33:0a:9f:73:d0:81:0e:d0:42:9a:a2:07:1f:64: 3a:de:62:4a:ee:f6:b4:98:5a:f1:e6:4b:52:d8:fa:34:32:25: f0:60:34:59:1d:9d:fa:0d:5f:ff:e3:57:f3:a6:84:21:9c:e0: 2a:5e:45:af:55:e1:2d:47:36:fd:04:8e:80:f6:ba:70:5a:6c: 8a:93:be:31:a9:0d:97:47:51:12:bf:fe:28:bb:2d:da:48:85: 3a:e9:58:fe -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE92TzkcbVcZNhQLFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMTAyNDAyOFoXDTI5MDExMzAzNDAyOFowLzEtMCsGA1UEAxMk MmFiMTg5NTAtZWJlMC00MzFjLWI1ZjktZTQ4ODQyZTg1NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN3LOBMOAabAueW1R4eRCenjBre4M6Ak4NzG o7fEwebRQ6CAv7aeBfVvywmIebqm7Ya6JJxyGXHgEulFNipUMzWbm2ejmhAmy8Wj jHmfEZhjZm10BwZFcY5aCGCPJUB5Smk/7ead9263GF/13mKHlfDnfJwkeCZYxASx throydBGVT2VPngfXt49s049Ghk8Whu89exs5boyZA/u7HvpOfR57nsmm9ohFhAY uy3sTN59mWpKVckXxVqyYg57HyAmHKt7SKW2zRPcGN/kfQsXskxDco01ycEws+mp o0Kzq5fw/C/dYLyuP42CObsdQZ/Npet47xsvWiL5omV6LHiVLQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEowpRyydL8UCKfBDlGpQPebGHOcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y YWIxODk1MC1lYmUwLTQzMWMtYjVmOS1lNDg4NDJlODU2MDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzJhYjE4OTUwLWViZTAtNDMxYy1i NWY5LWU0ODg0MmU4NTYwOS8yYWIxODk1MC1lYmUwLTQzMWMtYjVmOS1lNDg4NDJl ODU2MDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHWfwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiaJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABzxECRylXoB8dcgNqT3U80pGDguKmiKwxQMtPhIDnAES/4q R3K7jdOk0T5nisk/BaH0RXzwrR/AAfdmbz7RvlO6rfw65hxDNmoycOPXj/2T7XPn +NQcgoP1t17Tktrqi0CoPkZjPrY0e8l2yAC5x4a8jICsZjzpFGMz5gEmyhma5t2o G0gFF2flU1op5JCDWzwoJLl543lY9OO+7oHyKUIwZYpqtYYzCp9z0IEO0EKaogcf ZDreYkru9rSYWvHmS1LY+jQyJfBgNFkdnfoNX//jV/OmhCGc4CpeRa9V4S1HNv0E joD2unBabIqTvjGpDZdHURK//ii7LdpIhTrpWP4= -----END CERTIFICATE-----Generated at Wed Oct 14 06:45:57 2026 by rpki-client