$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer File: 37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer (raw, json) Hash identifier: QqjfW+2t+tqz7RfoKeUWErFqIvPa9cLm7p2J+/uOZcg= Subject key identifier: E8:23:3E:9B:35:2E:C5:1A:C5:7E:C0:C0:3C:64:7F:82:5C:91:96:67 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F71CCBAD96B7801BCF409E2F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 11:54:18 +0000 Certificate not after: Thu 11 Jan 2029 12:54:18 +0000 Subordinate resources: AS: 33028 IP: 162.253.52.0/22 IP: 199.19.212.0/22 IP: 199.204.44.0/22 IP: 2604:e100::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:cc:ba:d9:6b:78:01:bc:f4:09:e2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 11:54:18 2026 GMT Not After : Jan 11 12:54:18 2029 GMT Subject: CN=37bb4ae7-3e12-43f1-85d4-823603a9c0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:54:0a:b5:c2:f4:9a:ed:e5:d9:d8:60:81: dc:a9:83:f3:06:0e:b7:6e:03:af:f5:0b:16:65:71: f6:52:f1:51:33:cc:73:f5:82:c6:ae:81:29:4b:85: bd:76:7a:07:26:3a:bc:32:9d:f2:bb:59:2b:29:5b: 4e:ad:3f:9d:6d:54:2b:67:ff:91:e9:b1:81:3e:2c: 62:2c:1d:11:a4:43:62:8b:c8:44:c3:31:33:ba:09: 1c:5d:42:86:cb:5c:d5:9c:9c:6d:2e:8a:34:59:2a: 38:0a:83:66:f0:9f:59:36:6a:eb:f8:cb:36:00:e7: 74:e9:be:01:ea:c7:34:10:2d:a3:34:f1:39:ab:e3: 12:fa:7d:a6:8c:0b:f5:9d:0e:ed:ad:6a:a1:94:b0: 65:8d:7c:1c:af:68:31:a7:94:ea:72:08:a6:96:30: 77:81:c6:b0:36:e5:7b:6a:e4:cc:34:83:d0:2c:a9: 2e:f7:62:77:88:d8:35:2f:9d:12:e1:34:6d:df:b9: 11:af:90:eb:7f:65:e1:e4:70:83:c2:c6:4e:a2:d7: 82:83:8b:48:58:b1:24:5c:ba:e1:0f:52:10:e5:8a: d7:d1:84:0a:ce:96:a0:a9:f8:8e:89:70:12:10:43: 49:81:75:2b:94:6b:ea:b2:c6:04:90:24:d0:c5:6e: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:23:3E:9B:35:2E:C5:1A:C5:7E:C0:C0:3C:64:7F:82:5C:91:96:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 162.253.52.0/22 199.19.212.0/22 199.204.44.0/22 IPv6: 2604:e100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33028 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:8f:f6:3b:96:f6:8a:b5:76:b5:86:fd:79:d5:e8:d9:8d:18: 30:be:6f:88:62:70:74:27:ef:5f:02:a1:05:09:c7:d3:34:19: 37:24:d3:bb:f4:c1:b4:dc:f9:2e:20:00:c0:84:fd:25:00:7d: 93:6a:74:72:6e:92:f0:8f:91:bf:39:cc:c4:af:9e:47:dd:60: d5:4c:6a:8a:4d:ef:3a:d8:ee:cd:db:b8:fb:74:1f:ca:cc:5d: 44:e6:fb:04:fd:ee:0a:be:96:41:3b:8d:e2:2e:82:46:8b:ef: 05:d1:f0:12:b3:05:22:1a:a0:6a:cf:fa:d9:86:01:32:43:14: c5:25:2f:3c:97:d2:aa:fb:c1:73:b9:41:3e:88:4c:53:7b:1d: 90:e1:8d:4c:19:dd:06:66:89:f7:4e:34:47:0e:07:da:68:74: 0a:cb:0b:9e:f5:b4:b9:76:8b:68:d9:29:b8:f4:55:17:3d:ce: b6:da:15:9d:fd:4a:90:a5:c6:09:d0:a9:e1:c3:1c:40:cb:ca: 84:eb:21:8a:d5:40:51:74:c0:5b:b6:d5:9c:ef:7a:1b:1b:54: 22:00:c5:ba:19:19:d9:fc:60:0d:00:a1:e7:3f:15:8a:02:c6: 35:30:84:b6:e1:41:66:ed:a8:2e:b8:0e:a9:de:bd:85:47:f2: 48:b5:5e:ec -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9xzLrZa3gBvPQJ4vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTExNTQxOFoXDTI5MDExMTEyNTQxOFowLzEtMCsGA1UEAxMk MzdiYjRhZTctM2UxMi00M2YxLTg1ZDQtODIzNjAzYTljMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB1UCrXC9Jrt5dnYYIHcqYPzBg63bgOv9QsW ZXH2UvFRM8xz9YLGroEpS4W9dnoHJjq8Mp3yu1krKVtOrT+dbVQrZ/+R6bGBPixi LB0RpENii8hEwzEzugkcXUKGy1zVnJxtLoo0WSo4CoNm8J9ZNmrr+Ms2AOd06b4B 6sc0EC2jNPE5q+MS+n2mjAv1nQ7trWqhlLBljXwcr2gxp5TqcgimljB3gcawNuV7 auTMNIPQLKku92J3iNg1L50S4TRt37kRr5Drf2Xh5HCDwsZOoteCg4tIWLEkXLrh D1IQ5YrX0YQKzpagqfiOiXASEENJgXUrlGvqssYEkCTQxW7EuwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFOgjPps1LsUaxX7AwDxkf4JckZZnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z N2JiNGFlNy0zZTEyLTQzZjEtODVkNC04MjM2MDNhOWMwZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzM3YmI0YWU3LTNlMTItNDNmMS04 NWQ0LTgyMzYwM2E5YzBmMy8zN2JiNGFlNy0zZTEyLTQzZjEtODVkNC04MjM2MDNh OWMwZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKi/TQDBALHE9QDBALHzCwwDQQCAAIwBwMFACYE 4QAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIEEMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIaP9juW9oq1 drWG/XnV6NmNGDC+b4hicHQn718CoQUJx9M0GTck07v0wbTc+S4gAMCE/SUAfZNq dHJukvCPkb85zMSvnkfdYNVMaopN7zrY7s3buPt0H8rMXUTm+wT97gq+lkE7jeIu gkaL7wXR8BKzBSIaoGrP+tmGATJDFMUlLzyX0qr7wXO5QT6ITFN7HZDhjUwZ3QZm ifdONEcOB9podArLC571tLl2i2jZKbj0VRc9zrbaFZ39SpClxgnQqeHDHEDLyoTr IYrVQFF0wFu21ZzvehsbVCIAxboZGdn8YA0Aoec/FYoCxjUwhLbhQWbtqC64Dqne vYVH8ki1Xuw= -----END CERTIFICATE-----Generated at Sun Nov 1 01:40:27 2026 by rpki-client