$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b8f3b11-eb3f-48d3-9356-e471dca2eca1.cer File: 2b8f3b11-eb3f-48d3-9356-e471dca2eca1.cer (raw, json) Hash identifier: MpiROndHtw+emVja2ZTmwqyZBQ5+ZCgd5zN5UwZzT8U= Subject key identifier: 8F:D2:C6:B1:93:CA:3E:02:DE:EC:29:A8:88:C3:3A:CB:3C:E0:2B:82 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F839755800AB3F8FFFF213700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b8f3b11-eb3f-48d3-9356-e471dca2eca1/2b8f3b11-eb3f-48d3-9356-e471dca2eca1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b8f3b11-eb3f-48d3-9356-e471dca2eca1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 20:51:16 +0000 Certificate not after: Tue 09 Jan 2029 21:29:45 +0000 Subordinate resources: AS: 403100 IP: 198.134.247.0/24 IP: 2602:f2ab::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:83:97:55:80:0a:b3:f8:ff:ff:21:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 15 20:51:16 2026 GMT Not After : Jan 9 21:29:45 2029 GMT Subject: CN=2b8f3b11-eb3f-48d3-9356-e471dca2eca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:ab:94:c5:f6:c5:5f:d6:b0:a1:6c:dc:f6: 69:6c:74:1f:8c:54:f9:d3:82:50:e5:66:e1:21:a0: 75:1a:3c:37:fb:f0:92:9c:40:60:96:7d:31:6a:66: 00:1d:c9:54:9e:8b:d8:52:f2:ba:1e:eb:87:18:82: 64:3d:15:8d:e4:2d:13:ce:a4:2c:b0:ea:0f:04:9f: 15:1a:2a:04:34:83:c7:5c:dc:71:4d:d8:cc:16:28: 77:dd:47:4c:4e:08:a4:7d:0c:52:c4:79:ab:74:d7: a3:30:3b:2b:57:97:d8:59:95:4d:66:7a:9f:a5:b6: b1:cc:ad:19:9c:71:f2:1b:8a:7a:e6:98:63:90:cf: f8:f1:f7:b1:1e:da:db:36:e1:c2:e0:82:ca:4e:8a: 16:57:81:bf:c9:b8:fd:96:84:a6:2f:b1:95:b4:4f: 67:f6:c8:37:65:f5:33:1b:ae:e9:c5:27:e2:e0:4e: 8f:c9:d1:94:2e:87:c9:6c:fc:f1:e2:f2:7c:4c:2b: 8d:4d:4f:04:10:2d:90:24:ab:bb:df:a2:53:eb:8e: 02:b0:af:b5:c5:ea:f8:c3:ff:1c:3b:75:01:4d:1f: cd:60:c9:ba:03:31:c9:2d:97:ae:c9:a9:0a:e3:f2: f9:ad:d0:04:e7:48:9c:4e:6e:f9:aa:6a:54:b3:a8: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D2:C6:B1:93:CA:3E:02:DE:EC:29:A8:88:C3:3A:CB:3C:E0:2B:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b8f3b11-eb3f-48d3-9356-e471dca2eca1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b8f3b11-eb3f-48d3-9356-e471dca2eca1/2b8f3b11-eb3f-48d3-9356-e471dca2eca1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.134.247.0/24 IPv6: 2602:f2ab::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403100 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cd:55:40:23:51:36:e3:37:77:54:fa:33:a1:01:2b:6e:f6: 43:f1:69:ad:a7:31:62:de:ee:f5:a5:cd:ac:97:3d:1d:c4:c5: 76:d5:23:69:2e:9f:30:68:83:85:a7:47:fe:84:98:fc:e0:4d: ee:f4:52:dd:fb:90:51:5c:5f:4c:09:f1:07:1f:b8:df:e6:04: 4b:6f:bf:d2:97:df:6a:e9:fd:47:23:cd:d3:72:c0:8b:a2:fe: 27:f5:d4:09:3f:13:a4:66:73:4b:dd:35:b0:3a:87:ed:0e:be: 70:3a:98:d3:43:d0:3a:5b:fa:c6:a9:d7:52:91:00:94:4b:1f: 1b:50:4e:36:3d:02:a5:6c:58:17:a0:28:a3:4c:a1:fe:9d:31: 3e:be:21:e1:d6:e7:16:df:a2:0c:61:5a:df:b7:d2:1b:df:14: b4:67:ff:ac:50:d3:b6:31:1b:0d:00:13:52:be:8d:65:12:ac: b3:ac:a5:f1:f5:70:a1:63:6f:fc:df:07:f8:c0:15:5f:29:13: e6:92:cd:a9:3b:e1:21:57:3b:71:23:df:4c:23:1d:9f:56:be: f8:4a:c7:66:1b:25:0e:8d:70:11:16:e3:4f:4e:55:97:33:0a: 62:05:69:f6:08:2c:1f:4a:e6:6b:be:5d:d2:28:15:c9:37:9c: 47:15:de:ac -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+Dl1WACrP4//8hNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNTIwNTExNloXDTI5MDEwOTIxMjk0NVowLzEtMCsGA1UEAxMk MmI4ZjNiMTEtZWIzZi00OGQzLTkzNTYtZTQ3MWRjYTJlY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupyrlMX2xV/WsKFs3PZpbHQfjFT504JQ5Wbh IaB1Gjw3+/CSnEBgln0xamYAHclUnovYUvK6HuuHGIJkPRWN5C0TzqQssOoPBJ8V GioENIPHXNxxTdjMFih33UdMTgikfQxSxHmrdNejMDsrV5fYWZVNZnqfpbaxzK0Z nHHyG4p65phjkM/48fexHtrbNuHC4ILKTooWV4G/ybj9loSmL7GVtE9n9sg3ZfUz G67pxSfi4E6PydGULofJbPzx4vJ8TCuNTU8EEC2QJKu736JT644CsK+1xer4w/8c O3UBTR/NYMm6AzHJLZeuyakK4/L5rdAE50icTm75qmpUs6g8SwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFI/SxrGTyj4C3uwpqIjDOss84CuCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y YjhmM2IxMS1lYjNmLTQ4ZDMtOTM1Ni1lNDcxZGNhMmVjYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzJiOGYzYjExLWViM2YtNDhkMy05 MzU2LWU0NzFkY2EyZWNhMS8yYjhmM2IxMS1lYjNmLTQ4ZDMtOTM1Ni1lNDcxZGNh MmVjYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGhvcwDgQCAAIwCAMGACYC8qsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmnDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpzVVAI1E24zd3VPozoQErbvZD 8WmtpzFi3u71pc2slz0dxMV21SNpLp8waIOFp0f+hJj84E3u9FLd+5BRXF9MCfEH H7jf5gRLb7/Sl99q6f1HI83TcsCLov4n9dQJPxOkZnNL3TWwOoftDr5wOpjTQ9A6 W/rGqddSkQCUSx8bUE42PQKlbFgXoCijTKH+nTE+viHh1ucW36IMYVrft9Ib3xS0 Z/+sUNO2MRsNABNSvo1lEqyzrKXx9XChY2/83wf4wBVfKRPmks2pO+EhVztxI99M Ix2fVr74SsdmGyUOjXARFuNPTlWXMwpiBWn2CCwfSuZrvl3SKBXJN5xHFd6s -----END CERTIFICATE-----Generated at Mon Nov 2 22:26:21 2026 by rpki-client