$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer File: 38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer (raw, json) Hash identifier: kKJPM6rD2aigyww85IFmSypdbVuG2NFd3W0iM8CheWY= Subject key identifier: 87:E8:DE:48:38:97:AE:AF:1A:F8:10:69:1B:1C:A7:9F:CD:DC:FD:DC Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F75D82338594FD380F4E38A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Oct 2026 22:40:31 +0000 Certificate not after: Fri 12 Jan 2029 23:40:31 +0000 Subordinate resources: IP: 206.220.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:d8:23:38:59:4f:d3:80:f4:e3:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 10 22:40:31 2026 GMT Not After : Jan 12 23:40:31 2029 GMT Subject: CN=38e5faa8-b7d1-4835-a5a0-b17158745b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:5c:78:80:43:47:12:c7:65:57:c9:94:bd: bd:83:3f:3b:6b:70:8c:00:5c:73:cb:8a:e5:ab:a1: d5:a8:d7:08:19:22:a0:f5:67:1d:23:06:8f:2a:0e: a1:58:80:01:67:e4:32:24:13:39:78:16:3c:c2:c2: 68:90:b5:cf:02:e1:23:a3:06:94:37:28:45:8c:11: f7:10:5b:5e:72:4a:bd:6a:31:98:df:8a:27:66:ad: bf:be:c0:d0:3d:d2:48:1c:1a:24:87:5d:7a:60:18: ed:03:64:fa:8d:2b:ed:bb:ec:2a:c3:1a:cf:68:29: 4e:37:28:32:cf:d4:e0:cf:52:de:a2:95:5d:29:22: ad:41:6a:af:e6:57:f7:d7:aa:25:1e:98:37:af:a7: c1:bf:2f:93:0d:87:5c:0c:c8:bb:aa:fd:1d:90:d6: 41:13:cc:4d:d5:49:4b:11:e1:c5:2b:84:9c:46:68: 23:f1:ec:45:52:6b:06:08:71:92:09:28:d4:3a:c9: 62:a3:bf:3d:fa:8f:d1:dc:4f:cc:97:45:9a:64:06: e0:cb:23:0b:f4:a7:57:f1:07:ac:2a:6a:84:f6:68: 4c:7d:32:37:b3:4c:99:26:63:02:48:a2:81:7d:65: b8:82:42:3c:50:a2:39:32:db:e2:5b:b7:79:23:86: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:DE:48:38:97:AE:AF:1A:F8:10:69:1B:1C:A7:9F:CD:DC:FD:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 206.220.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:54:e1:91:ca:67:3f:0f:d1:4c:d9:b9:71:fc:9e:94:d4:31: 2e:1a:1a:4a:53:ab:49:97:6c:0b:4a:a4:99:ed:ca:2b:88:d9: 3a:4c:4f:bc:02:0f:89:40:3c:87:b3:b1:04:08:53:bc:47:aa: 08:dd:84:dc:e5:14:a1:5c:a6:70:66:e7:ab:0b:2b:6d:e8:bd: a2:b3:41:e4:6c:5b:3c:f1:cf:f7:49:5b:93:e8:1e:38:26:ee: e0:55:bb:c5:dd:49:ab:7b:b8:9e:c2:67:7f:76:ea:2e:5d:3c: 9e:cb:8a:be:24:a4:a1:3d:ec:b4:d8:b2:a2:0d:ff:80:f3:8c: fb:5a:02:07:ce:2a:e3:8d:8e:a9:27:37:04:73:cb:eb:1f:ed: 20:33:8a:c4:31:16:75:15:72:d7:7f:e8:2d:ee:47:a9:94:d5: 80:bf:96:09:27:05:a6:c4:77:7b:50:2e:8a:ff:2b:bb:ae:b0: 86:98:f9:1d:b6:ac:01:1a:33:aa:db:2b:75:47:a5:87:7f:ab: 44:92:7c:38:b5:94:2f:34:bc:75:00:be:2e:5d:92:a9:89:0b: 13:fd:38:69:a0:8f:91:cf:31:77:c5:36:a5:3c:c8:a4:05:31: e3:00:37:c8:9f:40:db:bf:54:88:76:27:04:e2:f7:61:13:92: 9a:3a:06:08 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE912CM4WU/TgPTjioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMDIyNDAzMVoXDTI5MDExMjIzNDAzMVowLzEtMCsGA1UEAxMk MzhlNWZhYTgtYjdkMS00ODM1LWE1YTAtYjE3MTU4NzQ1YjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CxceIBDRxLHZVfJlL29gz87a3CMAFxzy4rl q6HVqNcIGSKg9WcdIwaPKg6hWIABZ+QyJBM5eBY8wsJokLXPAuEjowaUNyhFjBH3 EFteckq9ajGY34onZq2/vsDQPdJIHBokh116YBjtA2T6jSvtu+wqwxrPaClONygy z9Tgz1LeopVdKSKtQWqv5lf316olHpg3r6fBvy+TDYdcDMi7qv0dkNZBE8xN1UlL EeHFK4ScRmgj8exFUmsGCHGSCSjUOslio789+o/R3E/Ml0WaZAbgyyML9KdX8Qes KmqE9mhMfTI3s0yZJmMCSKKBfWW4gkI8UKI5MtviW7d5I4bVVwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIfo3kg4l66vGvgQaRscp5/N3P3cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z OGU1ZmFhOC1iN2QxLTQ4MzUtYTVhMC1iMTcxNTg3NDViM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzM4ZTVmYWE4LWI3ZDEtNDgzNS1h NWEwLWIxNzE1ODc0NWIzZS8zOGU1ZmFhOC1iN2QxLTQ4MzUtYTVhMC1iMTcxNTg3 NDViM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALO3AwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ1ThkcpnPw/RTNm5cfye lNQxLhoaSlOrSZdsC0qkme3KK4jZOkxPvAIPiUA8h7OxBAhTvEeqCN2E3OUUoVym cGbnqwsrbei9orNB5GxbPPHP90lbk+geOCbu4FW7xd1Jq3u4nsJnf3bqLl08nsuK viSkoT3stNiyog3/gPOM+1oCB84q442OqSc3BHPL6x/tIDOKxDEWdRVy13/oLe5H qZTVgL+WCScFpsR3e1Auiv8ru66whpj5HbasARozqtsrdUelh3+rRJJ8OLWULzS8 dQC+Ll2SqYkLE/04aaCPkc8xd8U2pTzIpAUx4wA3yJ9A279UiHYnBOL3YROSmjoG CA== -----END CERTIFICATE-----Generated at Tue Oct 20 19:29:25 2026 by rpki-client