$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1.cer File: 36b69b3a-cb8e-410d-ac55-97551de9b9e1.cer (raw, json) Hash identifier: yKOMCTPPCt5dddDkhMsp/ZyroxBRPUF+Iopnf5XcHDE= Subject key identifier: 30:C9:1B:7E:BB:55:21:76:89:F7:2D:80:33:57:D6:8F:88:1A:B2:16 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F62708B49768A23AC4B7F5580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/36b69b3a-cb8e-410d-ac55-97551de9b9e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Oct 2026 23:51:26 +0000 Certificate not after: Sat 06 Jan 2029 00:51:26 +0000 Subordinate resources: AS: 19550 IP: 207.195.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:70:8b:49:76:8a:23:ac:4b:7f:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 3 23:51:26 2026 GMT Not After : Jan 6 00:51:26 2029 GMT Subject: CN=36b69b3a-cb8e-410d-ac55-97551de9b9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ba:0d:0e:57:2d:a9:fb:60:a9:ac:6b:c1:16: ad:54:41:df:85:ed:35:33:0d:6c:bd:17:c6:71:c3: 96:93:81:c2:1c:ce:fb:1f:2a:e2:73:03:ef:3b:3d: 6f:cf:02:62:86:83:53:63:8f:a1:5d:0e:5b:6c:07: 8c:4a:df:94:bc:76:dc:28:e5:35:76:70:69:0e:a0: 77:94:2f:de:91:1f:49:fe:d6:d0:55:e4:8d:10:47: 48:fc:fa:7b:fb:52:30:50:55:53:5e:b6:11:cb:4d: d3:b1:9e:06:6b:30:8a:01:2c:50:66:bb:12:8f:46: 22:7a:fe:74:8f:73:67:68:27:13:21:43:3d:e8:fe: fb:0f:92:4c:ff:62:be:9d:c0:dd:37:4d:5b:c0:f9: aa:76:7c:80:83:c4:5c:fd:46:73:a1:90:ef:53:d6: 5b:de:d4:57:64:d5:1c:f9:52:14:de:aa:c6:4f:01: b1:61:3f:8d:74:6c:bc:19:1e:90:68:84:8f:69:cc: df:89:36:ff:c1:c1:d6:0b:6c:32:e7:ac:59:26:32: 62:fd:c3:da:cb:d3:ed:e7:f7:c5:c4:a5:de:11:59: 85:02:75:5f:b3:d8:73:37:67:e4:d4:1d:ab:44:0d: a1:d6:11:f3:b5:a6:5b:ed:36:ef:91:85:54:08:0e: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C9:1B:7E:BB:55:21:76:89:F7:2D:80:33:57:D6:8F:88:1A:B2:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/36b69b3a-cb8e-410d-ac55-97551de9b9e1/36b69b3a-cb8e-410d-ac55-97551de9b9e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 207.195.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19550 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a2:a3:65:28:19:48:d6:21:51:43:ed:fe:23:51:bf:4d:cd: b5:47:9b:ad:05:d7:b7:4c:93:31:78:a4:f2:6d:f6:66:cf:28: fc:c9:71:20:ed:40:22:17:18:f9:71:6d:6d:6d:f0:5e:c7:bb: ee:e6:97:70:fc:89:7a:40:b5:f0:26:57:3f:f8:3b:50:ca:4f: 1f:e7:9c:85:c8:b9:0a:4f:ac:82:7b:05:03:25:ec:dd:f4:d7: d7:50:81:0e:ae:5d:49:7e:8c:fe:dc:38:dd:4b:7d:96:5d:5a: a8:45:65:af:03:ad:03:d6:01:a0:5f:90:18:d1:be:fe:b0:8c: d1:98:b1:f1:73:55:6b:52:84:5a:d2:27:37:b1:ff:79:82:7b: 40:fc:04:d7:47:fc:1c:a0:8c:8d:87:29:98:7b:14:e3:a3:c4: 50:e7:4b:9e:8a:ea:fc:d8:c0:84:32:f5:97:09:b9:e8:c3:08: d3:da:3e:e6:ff:73:23:90:4b:72:49:e0:9b:a1:a1:ff:e8:db: 03:32:41:a5:7b:af:db:5b:e6:60:e7:4c:a1:6a:dc:1c:c7:b3: b2:31:57:a5:83:a0:2f:59:7f:48:72:eb:e0:7e:58:76:7a:ee: 70:6a:c0:fe:8d:1c:0d:45:af:b4:7c:8c:36:46:f3:71:ea:4d: 4a:09:f1:37 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9icItJdoojrEt/VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMzIzNTEyNloXDTI5MDEwNjAwNTEyNlowLzEtMCsGA1UEAxMk MzZiNjliM2EtY2I4ZS00MTBkLWFjNTUtOTc1NTFkZTliOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkboNDlctqftgqaxrwRatVEHfhe01Mw1svRfG ccOWk4HCHM77HyricwPvOz1vzwJihoNTY4+hXQ5bbAeMSt+UvHbcKOU1dnBpDqB3 lC/ekR9J/tbQVeSNEEdI/Pp7+1IwUFVTXrYRy03TsZ4GazCKASxQZrsSj0Yiev50 j3NnaCcTIUM96P77D5JM/2K+ncDdN01bwPmqdnyAg8Rc/UZzoZDvU9Zb3tRXZNUc +VIU3qrGTwGxYT+NdGy8GR6QaISPaczfiTb/wcHWC2wy56xZJjJi/cPay9Pt5/fF xKXeEVmFAnVfs9hzN2fk1B2rRA2h1hHztaZb7TbvkYVUCA5dvwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDDJG367VSF2ifctgDNX1o+IGrIWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z NmI2OWIzYS1jYjhlLTQxMGQtYWM1NS05NzU1MWRlOWI5ZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzM2YjY5YjNhLWNiOGUtNDEwZC1h YzU1LTk3NTUxZGU5YjllMS8zNmI2OWIzYS1jYjhlLTQxMGQtYWM1NS05NzU1MWRl OWI5ZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXPw8AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TF4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAk6KjZSgZSNYhUUPt/iNRv03NtUebrQXXt0yTMXik8m32Zs8o /MlxIO1AIhcY+XFtbW3wXse77uaXcPyJekC18CZXP/g7UMpPH+echci5Ck+sgnsF AyXs3fTX11CBDq5dSX6M/tw43Ut9ll1aqEVlrwOtA9YBoF+QGNG+/rCM0Zix8XNV a1KEWtInN7H/eYJ7QPwE10f8HKCMjYcpmHsU46PEUOdLnorq/NjAhDL1lwm56MMI 09o+5v9zI5BLckngm6Gh/+jbAzJBpXuv21vmYOdMoWrcHMezsjFXpYOgL1l/SHLr 4H5YdnrucGrA/o0cDUWvtHyMNkbzcepNSgnxNw== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:47 2026 by rpki-client