$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/313bbe7d-39a9-4568-b81a-784985bd301a.cer File: 313bbe7d-39a9-4568-b81a-784985bd301a.cer (raw, json) Hash identifier: /ED8pLbPUWv2mouVfqdojZxU4pE3EW5raQGGwbI21VE= Subject key identifier: 06:08:4A:49:F5:3B:06:0A:E5:01:62:5D:21:5D:AC:D7:43:E5:70:FA Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7FCEB2E780040A673E3CBE60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/313bbe7d-39a9-4568-b81a-784985bd301a/313bbe7d-39a9-4568-b81a-784985bd301a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/313bbe7d-39a9-4568-b81a-784985bd301a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 12:19:35 +0000 Certificate not after: Tue 16 Jan 2029 13:19:35 +0000 Subordinate resources: IP: 141.162.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:ce:b2:e7:80:04:0a:67:3e:3c:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 14 12:19:35 2026 GMT Not After : Jan 16 13:19:35 2029 GMT Subject: CN=313bbe7d-39a9-4568-b81a-784985bd301a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:1a:e9:00:27:f7:e4:54:6b:eb:d3:c8:72: 62:fd:e3:e9:40:85:ee:08:1e:af:2d:53:92:ed:f5: f2:0c:0c:00:06:69:97:a3:20:c2:6b:42:6f:a7:c5: f7:2c:40:9e:fc:18:65:ad:e6:bb:9d:6b:86:2b:f5: dc:cb:8a:97:f4:b3:5b:60:4b:c0:04:33:09:da:b9: 44:1e:3e:a1:4b:0d:01:ff:ce:2c:c1:21:a5:13:44: 99:df:92:32:f7:28:d8:d9:96:2f:46:dc:3b:35:76: 1f:8a:4c:8b:99:25:65:6d:58:c8:fd:75:8a:1c:ed: ae:a4:ac:af:f2:c3:7a:25:be:1b:f0:02:83:f9:98: 28:c8:64:b6:89:2c:e5:00:6c:8e:e2:7a:48:72:21: 50:11:20:8c:38:63:46:73:78:59:ef:04:66:e5:ef: a9:26:d4:fb:6d:67:2a:56:7b:d4:7d:c5:91:7b:9c: e7:33:45:38:3d:76:b3:1d:14:7c:d4:01:a4:d9:af: 98:1b:36:a8:40:e6:e6:a4:02:90:6d:15:3b:ba:fc: 83:57:be:a5:03:c7:58:2b:68:20:ce:f3:0a:cb:d3: 6d:50:d6:67:bd:69:53:c6:a1:63:d3:ff:07:7e:96: c1:69:f5:7f:f5:c9:21:f9:fb:2f:8f:5c:97:25:86: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:4A:49:F5:3B:06:0A:E5:01:62:5D:21:5D:AC:D7:43:E5:70:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/313bbe7d-39a9-4568-b81a-784985bd301a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/313bbe7d-39a9-4568-b81a-784985bd301a/313bbe7d-39a9-4568-b81a-784985bd301a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 141.162.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cc:ef:73:6d:15:7e:94:5c:c9:c4:23:14:4a:84:0b:d5:ed: b2:24:50:8f:3a:36:a6:8e:c4:c2:4d:31:26:35:4c:22:8a:d7: f1:e6:9a:b0:ba:e4:18:43:47:6d:bd:0e:54:86:f8:41:6a:90: 2d:b5:4c:0d:13:ee:5d:b9:25:7f:45:68:8c:29:2f:4a:d5:d0: 56:94:87:17:9d:b6:69:6d:b8:68:c6:b0:47:a4:b4:ba:35:49: e8:63:88:81:fd:3e:64:09:f7:77:01:f0:6d:62:e6:e7:33:2c: b0:6d:a6:68:db:6d:56:73:4b:15:31:a4:92:6f:de:24:13:41: 39:62:9f:64:aa:2f:ce:08:f2:9c:72:ad:05:29:56:16:61:aa: 1c:b9:d9:d1:0f:55:e0:b8:2d:1d:42:0f:53:3a:dc:26:c2:9c: 48:93:92:cd:f9:c0:8c:bc:79:20:6f:33:2a:14:5c:52:3b:2c: 16:1c:45:06:81:e7:c1:fe:ca:a4:cf:3b:9a:cf:61:25:d7:05: ea:db:60:74:f2:1d:a7:9a:67:88:9a:c2:b3:f8:97:ca:a1:3c: 2a:5b:45:02:bd:5f:e9:79:b3:7d:45:a8:73:57:f0:6a:c0:0c: 5f:a2:4e:b1:09:d2:9c:64:b5:92:e1:96:40:93:63:68:b2:a4: 4a:6d:c0:1f -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE9/zrLngAQKZz48vmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNDEyMTkzNVoXDTI5MDExNjEzMTkzNVowLzEtMCsGA1UEAxMk MzEzYmJlN2QtMzlhOS00NTY4LWI4MWEtNzg0OTg1YmQzMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUga6QAn9+RUa+vTyHJi/ePpQIXuCB6vLVOS 7fXyDAwABmmXoyDCa0Jvp8X3LECe/Bhlrea7nWuGK/Xcy4qX9LNbYEvABDMJ2rlE Hj6hSw0B/84swSGlE0SZ35Iy9yjY2ZYvRtw7NXYfikyLmSVlbVjI/XWKHO2upKyv 8sN6Jb4b8AKD+ZgoyGS2iSzlAGyO4npIciFQESCMOGNGc3hZ7wRm5e+pJtT7bWcq VnvUfcWRe5znM0U4PXazHRR81AGk2a+YGzaoQObmpAKQbRU7uvyDV76lA8dYK2gg zvMKy9NtUNZnvWlTxqFj0/8HfpbBafV/9ckh+fsvj1yXJYYOaQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFAYISkn1OwYK5QFiXSFdrNdD5XD6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z MTNiYmU3ZC0zOWE5LTQ1NjgtYjgxYS03ODQ5ODViZDMwMWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzMxM2JiZTdkLTM5YTktNDU2OC1i ODFhLTc4NDk4NWJkMzAxYS8zMTNiYmU3ZC0zOWE5LTQ1NjgtYjgxYS03ODQ5ODVi ZDMwMWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCNojBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBazO9zbRV+lFzJxCMUSoQL 1e2yJFCPOjamjsTCTTEmNUwiitfx5pqwuuQYQ0dtvQ5UhvhBapAttUwNE+5duSV/ RWiMKS9K1dBWlIcXnbZpbbhoxrBHpLS6NUnoY4iB/T5kCfd3AfBtYubnMyywbaZo 221Wc0sVMaSSb94kE0E5Yp9kqi/OCPKccq0FKVYWYaocudnRD1XguC0dQg9TOtwm wpxIk5LN+cCMvHkgbzMqFFxSOywWHEUGgefB/sqkzzuaz2El1wXq22B08h2nmmeI msKz+JfKoTwqW0UCvV/pebN9RahzV/BqwAxfok6xCdKcZLWS4ZZAk2NosqRKbcAf -----END CERTIFICATE-----Generated at Tue Nov 3 11:04:07 2026 by rpki-client