$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce.cer File: 2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce.cer (raw, json) Hash identifier: 5S7y3Sa4NOHHRl+GIH5YG3sozWQNBGBJJwCO88m3iiE= Subject key identifier: EF:3E:62:11:31:91:01:3E:59:A3:B4:B1:61:2E:D5:75:43:5A:EB:A1 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA6F9F5C434B8C1E433D48B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce/2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Oct 2026 13:03:16 +0000 Certificate not after: Sun 07 Jan 2029 23:48:12 +0000 Subordinate resources: AS: 402445 IP: 198.134.175.0/24 IP: 2602:f288::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a6:f9:f5:c4:34:b8:c1:e4:33:d4:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 28 13:03:16 2026 GMT Not After : Jan 7 23:48:12 2029 GMT Subject: CN=2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:7e:19:12:a6:34:7e:1f:7b:a2:04:0c:02: bc:1a:a8:e8:35:f4:93:f4:80:b3:bd:d2:32:f1:e6: a1:f5:5f:84:32:f9:2c:f0:bd:2f:6c:00:34:5a:24: 1f:c2:83:ff:5e:5f:6f:d7:da:0c:d3:c6:60:ce:f4: 22:62:11:ac:f9:b7:67:ff:f3:17:f7:5f:3c:9f:06: 3a:ed:79:af:ed:45:cb:6d:ea:af:0c:f5:86:82:f0: 97:9e:72:4a:a3:58:28:a4:a2:2f:73:68:65:cc:e2: 1a:76:74:85:33:75:38:a6:c8:de:7c:06:ae:38:86: f2:11:91:76:b5:c8:f4:48:31:39:79:2d:32:36:ea: 52:e5:33:6c:19:0f:e8:42:06:0b:9b:ee:33:87:9e: 00:20:31:ff:c2:75:f6:30:e6:ed:5d:89:01:e1:03: c2:8e:fd:5c:99:4c:c5:9f:ff:f9:fd:64:9e:0c:d2: b8:ec:1e:ab:54:26:c2:78:ac:c7:47:1c:3a:1c:fe: 01:27:88:f4:1f:8d:8b:c0:cb:6c:08:60:76:97:19: 80:29:7e:88:50:20:26:22:20:2c:20:1d:7e:b9:6f: 77:dc:b6:92:76:a1:9f:a8:1b:8b:72:a5:0c:82:7d: 97:54:75:e5:01:ce:3b:58:89:79:f3:f4:1f:93:b2: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3E:62:11:31:91:01:3E:59:A3:B4:B1:61:2E:D5:75:43:5A:EB:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce/2f7a1c3b-d801-4a4d-a0fd-96201ff1a3ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.134.175.0/24 IPv6: 2602:f288::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402445 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f4:d0:79:d3:aa:90:b2:79:0b:b3:0c:71:8c:88:00:c9:1d: 94:92:ac:b3:6d:51:e7:b4:ff:f9:89:b2:b2:7b:b0:0b:63:25: 2c:bd:a8:0b:b4:91:82:50:6e:a8:23:02:54:7c:e9:7f:14:46: 80:b1:51:d4:4f:8d:d6:2b:cd:9e:77:95:00:9d:3b:7b:37:99: 02:a5:52:d8:b7:57:cf:2c:d5:b7:c8:fd:a1:b8:bb:ef:99:e3: 65:72:0b:94:bd:63:36:57:7e:28:e8:1c:22:67:75:5d:95:e8: d5:03:b9:be:4a:06:cc:5d:ad:75:58:c4:35:71:dd:3a:6d:2d: 08:a1:05:27:38:b0:34:2c:ad:d8:ba:0a:12:ec:bd:f0:ef:7f: dc:5a:fb:b4:3d:95:0c:08:dc:22:54:d0:04:7b:84:e8:33:29: 27:42:7f:1d:e9:7a:e8:f9:ea:60:ed:a7:30:b2:e6:aa:8b:95: ab:3e:c8:f8:c7:7d:7f:97:89:30:ba:1f:1e:49:93:32:c0:72: 28:11:74:e1:cf:cc:72:d0:63:fc:ca:e5:44:b7:c7:25:e6:bb: fa:c5:b0:bf:2a:cd:01:4f:34:77:de:0a:27:69:c7:63:64:e0: 8d:49:22:88:0d:32:5d:60:98:7e:15:bc:ae:06:11:18:9a:c8: 6f:e8:52:db -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+m+fXENLjB5DPUiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyODEzMDMxNloXDTI5MDEwNzIzNDgxMlowLzEtMCsGA1UEAxMk MmY3YTFjM2ItZDgwMS00YTRkLWEwZmQtOTYyMDFmZjFhM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsV+GRKmNH4fe6IEDAK8GqjoNfST9ICzvdIy 8eah9V+EMvks8L0vbAA0WiQfwoP/Xl9v19oM08ZgzvQiYhGs+bdn//MX9188nwY6 7Xmv7UXLbeqvDPWGgvCXnnJKo1gopKIvc2hlzOIadnSFM3U4psjefAauOIbyEZF2 tcj0SDE5eS0yNupS5TNsGQ/oQgYLm+4zh54AIDH/wnX2MObtXYkB4QPCjv1cmUzF n//5/WSeDNK47B6rVCbCeKzHRxw6HP4BJ4j0H42LwMtsCGB2lxmAKX6IUCAmIiAs IB1+uW933LaSdqGfqBuLcqUMgn2XVHXlAc47WIl58/Qfk7KTnwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFO8+YhExkQE+WaO0sWEu1XVDWuuhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y ZjdhMWMzYi1kODAxLTRhNGQtYTBmZC05NjIwMWZmMWEzY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzJmN2ExYzNiLWQ4MDEtNGE0ZC1h MGZkLTk2MjAxZmYxYTNjZS8yZjdhMWMzYi1kODAxLTRhNGQtYTBmZC05NjIwMWZm MWEzY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGhq8wDgQCAAIwCAMGACYC8ogAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH9NB506qQsnkLswxxjIgAyR2U kqyzbVHntP/5ibKye7ALYyUsvagLtJGCUG6oIwJUfOl/FEaAsVHUT43WK82ed5UA nTt7N5kCpVLYt1fPLNW3yP2huLvvmeNlcguUvWM2V34o6BwiZ3VdlejVA7m+SgbM Xa11WMQ1cd06bS0IoQUnOLA0LK3YugoS7L3w73/cWvu0PZUMCNwiVNAEe4ToMykn Qn8d6Xro+epg7acwsuaqi5WrPsj4x31/l4kwuh8eSZMywHIoEXThz8xy0GP8yuVE t8cl5rv6xbC/Ks0BTzR33gonacdjZOCNSSKIDTJdYJh+FbyuBhEYmshv6FLb -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:42 2026 by rpki-client