$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37cd31f6-8bb8-4c59-b3eb-5650205cef75.cer File: 37cd31f6-8bb8-4c59-b3eb-5650205cef75.cer (raw, json) Hash identifier: yyV2EaT7DpsdJ/YvkKur7xf2hncKj6rKmsyB61RCkqA= Subject key identifier: 5C:3B:4D:AF:8E:22:1A:5E:42:21:20:98:40:C3:8F:9F:85:24:9F:1D Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7AB741B631CB1CA83FAB65A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37cd31f6-8bb8-4c59-b3eb-5650205cef75/37cd31f6-8bb8-4c59-b3eb-5650205cef75.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37cd31f6-8bb8-4c59-b3eb-5650205cef75/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 16:33:18 +0000 Certificate not after: Sun 14 Jan 2029 17:33:18 +0000 Subordinate resources: IP: 168.82.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:b7:41:b6:31:cb:1c:a8:3f:ab:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 12 16:33:18 2026 GMT Not After : Jan 14 17:33:18 2029 GMT Subject: CN=37cd31f6-8bb8-4c59-b3eb-5650205cef75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:55:96:b8:1d:35:72:54:44:14:ef:7b:c7:34: 1a:15:3c:91:4c:93:b2:66:4e:b0:e8:b1:b5:0b:46: 2e:58:db:0d:22:1a:63:33:da:e2:5e:6c:1a:27:92: cf:9d:79:28:88:76:85:ea:5e:37:8d:29:ea:62:5d: 0b:e4:f4:30:e6:ee:b4:2b:c0:66:62:d1:46:f8:6d: 74:b8:f5:fb:19:a8:4e:f9:2a:a4:10:66:e1:54:32: 18:dc:97:22:55:4d:14:f9:6b:11:35:69:50:6e:49: c0:36:26:bd:d7:39:af:50:4f:5d:59:5c:d5:a1:0a: ce:67:b4:39:ee:eb:76:17:61:11:18:89:38:2d:5a: 80:da:85:6e:51:b3:32:95:ce:5e:db:a6:c2:8f:37: b5:5f:d8:c4:07:21:62:eb:fb:c9:e5:02:3f:5a:9f: 6b:96:16:39:99:e1:5e:8c:90:1e:64:a5:b9:0a:20: dc:cc:dd:16:0e:f4:fa:55:b5:0a:7c:9e:c4:d6:54: 55:0e:87:59:6f:ed:b8:f6:e2:de:4b:93:01:10:51: 69:68:41:64:19:71:06:aa:b9:18:2a:ad:44:3b:f7: fa:46:cd:96:3e:e5:34:d0:a5:a5:62:a3:69:fb:e2: 67:67:11:8f:da:c5:85:46:e5:69:71:a5:7e:6e:19: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3B:4D:AF:8E:22:1A:5E:42:21:20:98:40:C3:8F:9F:85:24:9F:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37cd31f6-8bb8-4c59-b3eb-5650205cef75/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37cd31f6-8bb8-4c59-b3eb-5650205cef75/37cd31f6-8bb8-4c59-b3eb-5650205cef75.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 168.82.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ca:33:34:6b:92:73:03:f3:51:a1:3d:4c:8c:d2:6f:df:dd: 0e:8b:c9:ee:ae:ac:7d:bc:fb:ba:4b:3c:c7:8a:e7:e7:8d:e0: 7b:c1:f3:89:b3:7f:5b:d7:d1:d2:1e:d2:fd:b0:4c:d2:ff:bc: 5b:76:b9:12:90:ec:c5:84:66:b0:90:d0:e7:0e:23:33:71:09: 18:d8:08:53:62:23:30:f2:47:a6:ae:c1:86:72:89:56:e2:a0: 75:ac:83:43:e3:28:e2:e7:05:f3:0c:04:6d:de:b5:f7:fb:6a: ce:d7:f4:d4:55:71:4b:67:f7:5f:3a:21:9c:a6:21:f2:57:6a: 06:2a:eb:ab:62:ac:e6:c2:9c:01:0e:99:46:d2:b3:d0:b8:78: 48:8e:92:14:ca:35:d6:a2:4b:cf:a8:dc:24:af:6d:af:55:e6: ed:ff:9d:5e:bf:34:97:44:00:cb:b2:dd:8a:3f:9a:d9:6d:90: 66:aa:da:80:81:7b:7d:be:90:56:ed:c2:e3:5e:7b:90:0d:59: 1b:37:b2:41:2a:0b:77:d3:77:c9:29:0e:55:43:ef:7c:82:a8: d7:1a:68:2d:85:a2:4a:ac:a4:31:81:bc:34:5e:85:72:4b:21: 8c:da:42:8d:09:cb:00:7b:7e:4b:67:c3:bc:da:29:32:73:cb: 41:80:85:af -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE96t0G2McscqD+rZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMjE2MzMxOFoXDTI5MDExNDE3MzMxOFowLzEtMCsGA1UEAxMk MzdjZDMxZjYtOGJiOC00YzU5LWIzZWItNTY1MDIwNWNlZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllWWuB01clREFO97xzQaFTyRTJOyZk6w6LG1 C0YuWNsNIhpjM9riXmwaJ5LPnXkoiHaF6l43jSnqYl0L5PQw5u60K8BmYtFG+G10 uPX7GahO+SqkEGbhVDIY3JciVU0U+WsRNWlQbknANia91zmvUE9dWVzVoQrOZ7Q5 7ut2F2ERGIk4LVqA2oVuUbMylc5e26bCjze1X9jEByFi6/vJ5QI/Wp9rlhY5meFe jJAeZKW5CiDczN0WDvT6VbUKfJ7E1lRVDodZb+249uLeS5MBEFFpaEFkGXEGqrkY Kq1EO/f6Rs2WPuU00KWlYqNp++JnZxGP2sWFRuVpcaV+bhnqNQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFFw7Ta+OIhpeQiEgmEDDj5+FJJ8dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z N2NkMzFmNi04YmI4LTRjNTktYjNlYi01NjUwMjA1Y2VmNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzM3Y2QzMWY2LThiYjgtNGM1OS1i M2ViLTU2NTAyMDVjZWY3NS8zN2NkMzFmNi04YmI4LTRjNTktYjNlYi01NjUwMjA1 Y2VmNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCoUjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJyjM0a5JzA/NRoT1MjNJv 390Oi8nurqx9vPu6SzzHiufnjeB7wfOJs39b19HSHtL9sEzS/7xbdrkSkOzFhGaw kNDnDiMzcQkY2AhTYiMw8kemrsGGcolW4qB1rIND4yji5wXzDARt3rX3+2rO1/TU VXFLZ/dfOiGcpiHyV2oGKuurYqzmwpwBDplG0rPQuHhIjpIUyjXWokvPqNwkr22v Vebt/51evzSXRADLst2KP5rZbZBmqtqAgXt9vpBW7cLjXnuQDVkbN7JBKgt303fJ KQ5VQ+98gqjXGmgthaJKrKQxgbw0XoVySyGM2kKNCcsAe35LZ8O82ikyc8tBgIWv -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:57 2026 by rpki-client