$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3f14fe6d-e35a-43fa-850c-be7e4b40dc24.cer File: 3f14fe6d-e35a-43fa-850c-be7e4b40dc24.cer (raw, json) Hash identifier: JDdUL9nNkzJqflF3R8izOG/QRne46jKu6YjoEChg0PM= Subject key identifier: 23:04:52:D8:C4:32:12:9B:B2:3E:67:AD:98:B4:23:2B:E8:7B:2B:26 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F593BC75740775B0614694BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3f14fe6d-e35a-43fa-850c-be7e4b40dc24/3f14fe6d-e35a-43fa-850c-be7e4b40dc24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3f14fe6d-e35a-43fa-850c-be7e4b40dc24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 16:42:50 +0000 Certificate not after: Tue 02 Jan 2029 17:42:50 +0000 Subordinate resources: AS: 54349 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:3b:c7:57:40:77:5b:06:14:69:4b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 30 16:42:50 2026 GMT Not After : Jan 2 17:42:50 2029 GMT Subject: CN=3f14fe6d-e35a-43fa-850c-be7e4b40dc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:a1:3e:40:46:df:e9:75:c0:de:a9:cd:7e: 46:7b:76:da:38:e8:bf:df:48:c8:54:94:a8:35:73: 93:2f:9b:50:b7:65:97:97:2c:a2:42:1e:9b:af:d0: 71:2e:ca:ec:4f:ec:51:79:4a:3d:f8:f1:d0:d5:21: 39:66:fa:d5:8d:29:d5:ce:c4:70:5e:23:68:68:17: 5b:46:6b:a6:94:26:ad:e0:7b:c7:08:21:27:04:42: d8:92:1f:d9:ba:8f:f0:53:df:d8:ee:55:bf:38:20: a3:ec:f7:1c:c8:05:b5:b7:cd:4d:6b:42:6a:4e:7f: e0:11:3b:13:cd:cb:d7:95:0b:35:a8:01:93:f9:f8: ee:1d:b7:bd:2a:a4:b7:8f:8e:3d:4a:9e:31:6c:e2: 9d:5d:50:94:44:1d:89:22:9f:a4:4f:65:38:5b:a4: 8e:26:70:b9:39:30:6b:eb:ac:b3:e5:23:3c:5f:eb: 9e:60:1e:62:ce:6f:ae:b8:12:88:94:fb:1b:6d:7d: d3:e0:78:f6:1f:98:84:57:19:6f:53:dc:20:17:73: cb:0f:b8:46:63:c8:d5:98:f7:37:49:5a:73:fb:f7: 06:71:f3:aa:2c:7d:bd:b9:a6:42:3c:9e:49:b5:e2: c4:b4:04:7d:3e:10:43:46:1f:1d:74:c5:73:f4:63: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:04:52:D8:C4:32:12:9B:B2:3E:67:AD:98:B4:23:2B:E8:7B:2B:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3f14fe6d-e35a-43fa-850c-be7e4b40dc24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3f14fe6d-e35a-43fa-850c-be7e4b40dc24/3f14fe6d-e35a-43fa-850c-be7e4b40dc24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 54349 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9c:3b:5a:b2:d9:da:62:cd:72:a7:b2:d6:dc:8d:d8:60:0b: 1b:c8:82:72:86:4e:8c:90:4f:79:59:a9:71:a4:9d:be:a7:0e: fa:df:60:c7:e5:65:28:50:04:03:7b:13:d4:a9:d5:8c:bd:72: 19:b5:2c:2f:07:56:9a:bc:24:45:97:1b:93:da:d6:74:7f:94: 63:2c:5f:33:24:a1:e8:35:5d:1a:1a:0b:bc:f7:52:cb:d1:eb: d1:86:d0:19:9e:9e:15:a3:3b:92:43:90:77:60:a1:6e:98:bd: 0b:c6:31:6e:76:c7:c7:38:1c:15:e3:fd:d0:05:74:f2:24:09: a5:d8:b3:6d:f5:3b:51:cc:fb:b3:07:57:2f:69:c4:5a:8b:4d: e1:d2:83:0f:27:1b:86:76:98:33:9c:33:69:62:cf:f9:14:33: ef:2d:8c:9c:d7:5e:2c:3c:2d:19:ed:2d:ac:c6:11:91:fe:b3: 8e:c7:0b:ca:23:41:f0:ff:77:69:45:3e:f2:ce:29:2c:68:0f: 22:bd:e0:41:ab:42:b7:f1:53:96:ad:e0:a8:d0:ca:3a:3a:a0: 99:9c:5f:b2:8f:c4:05:c3:d5:19:ec:d1:f7:8f:dc:25:b9:58: af:e1:84:03:58:8a:ef:d6:b3:e1:4e:e2:8e:df:7e:4d:8f:5d: 21:1f:1b:16 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE9ZO8dXQHdbBhRpS6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkzMDE2NDI1MFoXDTI5MDEwMjE3NDI1MFowLzEtMCsGA1UEAxMk M2YxNGZlNmQtZTM1YS00M2ZhLTg1MGMtYmU3ZTRiNDBkYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTOhPkBG3+l1wN6pzX5Ge3baOOi/30jIVJSo NXOTL5tQt2WXlyyiQh6br9BxLsrsT+xReUo9+PHQ1SE5ZvrVjSnVzsRwXiNoaBdb RmumlCat4HvHCCEnBELYkh/Zuo/wU9/Y7lW/OCCj7PccyAW1t81Na0JqTn/gETsT zcvXlQs1qAGT+fjuHbe9KqS3j449Sp4xbOKdXVCURB2JIp+kT2U4W6SOJnC5OTBr 66yz5SM8X+ueYB5izm+uuBKIlPsbbX3T4Hj2H5iEVxlvU9wgF3PLD7hGY8jVmPc3 SVpz+/cGcfOqLH29uaZCPJ5JteLEtAR9PhBDRh8ddMVz9GMaowIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFCMEUtjEMhKbsj5nrZi0IyvoeysmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z ZjE0ZmU2ZC1lMzVhLTQzZmEtODUwYy1iZTdlNGI0MGRjMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzNmMTRmZTZkLWUzNWEtNDNmYS04 NTBjLWJlN2U0YjQwZGMyNC8zZjE0ZmU2ZC1lMzVhLTQzZmEtODUwYy1iZTdlNGI0 MGRjMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANRNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKGcO1qy2dpizXKnstbcjdhgCxvI gnKGToyQT3lZqXGknb6nDvrfYMflZShQBAN7E9Sp1Yy9chm1LC8HVpq8JEWXG5Pa 1nR/lGMsXzMkoeg1XRoaC7z3UsvR69GG0BmenhWjO5JDkHdgoW6YvQvGMW52x8c4 HBXj/dAFdPIkCaXYs231O1HM+7MHVy9pxFqLTeHSgw8nG4Z2mDOcM2liz/kUM+8t jJzXXiw8LRntLazGEZH+s47HC8ojQfD/d2lFPvLOKSxoDyK94EGrQrfxU5at4KjQ yjo6oJmcX7KPxAXD1Rns0feP3CW5WK/hhANYiu/Ws+FO4o7ffk2PXSEfGxY= -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:14 2026 by rpki-client