$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea.cer File: 42cd32e9-d79f-4259-9025-ee33e1446dea.cer (raw, json) Hash identifier: wexZTr0kH+Yq7CQEBHq+Qv6WO79oT2hlbFbPmnZHd3o= Subject key identifier: 42:B7:33:13:70:F0:C2:D1:C6:E6:C5:30:5C:6B:C0:71:C6:CB:65:81 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F2F32D3E7410F580D3D78E5F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Sep 2026 15:20:51 +0000 Certificate not after: Mon 18 Dec 2028 16:20:51 +0000 Subordinate resources: AS: 40849 IP: 208.72.30.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:32:d3:e7:41:0f:58:0d:3d:78:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 15 15:20:51 2026 GMT Not After : Dec 18 16:20:51 2028 GMT Subject: CN=42cd32e9-d79f-4259-9025-ee33e1446dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:b6:a4:f8:8f:4f:39:3e:08:a0:a4:6d:7c: 6e:f0:5f:bf:8c:46:c4:bd:ab:07:84:d0:df:27:14: a3:29:f4:a4:db:b4:15:17:78:07:93:fd:6d:61:8b: 72:7e:84:56:22:ee:1d:34:0b:fb:09:c8:64:59:06: 8d:d2:b5:e4:e0:d8:8e:09:db:27:61:fd:ff:f8:5c: 53:c4:d5:b4:ee:02:c5:8d:70:32:28:64:a2:24:05: 7b:ae:05:ac:ce:16:7c:9b:08:a3:15:39:da:3c:af: c9:77:d6:b6:8a:99:bd:e3:5c:af:ce:b6:a6:fa:7b: d5:91:42:4a:a1:4f:54:76:88:66:b7:99:83:64:8d: 1f:ce:a3:02:b0:51:ab:08:bf:de:1a:0a:a5:ee:13: 27:61:33:cd:06:d0:df:9d:38:03:3a:09:b8:05:46: a3:fa:39:c1:2b:ef:da:f7:28:f0:9e:b3:ce:51:1e: 36:ae:ba:78:df:68:8d:f5:0e:6b:ef:ac:44:7d:80: 74:a1:13:f7:e1:ad:0b:14:85:44:2d:46:4c:14:e1: 57:f6:8d:d0:b4:ac:8e:e4:cd:c0:14:1d:d2:a4:ca: 6f:35:41:d9:f0:21:78:89:94:09:2e:cd:1d:f9:d6: b0:2c:c7:13:cf:8e:78:a7:2a:b4:64:90:06:bd:de: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B7:33:13:70:F0:C2:D1:C6:E6:C5:30:5C:6B:C0:71:C6:CB:65:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/42cd32e9-d79f-4259-9025-ee33e1446dea/42cd32e9-d79f-4259-9025-ee33e1446dea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 208.72.30.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40849 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:63:31:ca:32:8d:df:a5:62:f5:63:ed:0a:1f:54:90:11:c8: 94:d3:27:15:89:92:ba:5d:78:be:fa:a9:4c:66:dd:06:23:c8: 2c:f7:6f:4b:9a:34:19:ac:9e:04:bf:23:cb:a4:90:bf:03:bd: 54:85:e4:54:75:e3:e5:bc:97:2f:70:e0:a1:c5:d7:f0:c1:0c: 21:ab:e3:e5:5c:a9:8a:6e:a9:c7:9d:d9:50:b2:74:5a:81:f5: b5:32:2b:21:8f:6f:a5:89:8a:e4:d2:de:92:2e:da:c0:5d:14: 0b:a3:73:03:df:39:26:81:af:21:23:b6:62:ee:74:23:9e:0c: 21:41:07:da:b9:64:70:b7:45:20:9a:89:eb:0b:2b:08:12:c9: 02:89:f3:14:4b:dc:07:d2:d8:89:f1:51:ab:46:dd:e9:cd:63: 6c:50:bf:ea:41:d4:30:4d:ed:69:ba:b9:19:ea:ab:22:3c:52: 5b:23:3d:8f:19:df:2f:b4:3d:34:f8:ea:12:3b:ad:0b:98:14: 83:28:a5:ec:10:f6:37:66:66:68:02:65:d8:5b:26:d1:bc:5e: a7:d0:01:49:96:ee:c5:17:d6:43:83:25:55:4d:b3:fa:69:5c: b6:0f:db:bd:fa:9e:b4:94:65:f2:2e:07:67:f7:ed:10:16:47: 5f:32:77:42 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE8vMtPnQQ9YDT145fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNTE1MjA1MVoXDTI4MTIxODE2MjA1MVowLzEtMCsGA1UEAxMk NDJjZDMyZTktZDc5Zi00MjU5LTkwMjUtZWUzM2UxNDQ2ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn62pPiPTzk+CKCkbXxu8F+/jEbEvasHhNDf JxSjKfSk27QVF3gHk/1tYYtyfoRWIu4dNAv7CchkWQaN0rXk4NiOCdsnYf3/+FxT xNW07gLFjXAyKGSiJAV7rgWszhZ8mwijFTnaPK/Jd9a2ipm941yvzram+nvVkUJK oU9Udohmt5mDZI0fzqMCsFGrCL/eGgql7hMnYTPNBtDfnTgDOgm4BUaj+jnBK+/a 9yjwnrPOUR42rrp432iN9Q5r76xEfYB0oRP34a0LFIVELUZMFOFX9o3QtKyO5M3A FB3SpMpvNUHZ8CF4iZQJLs0d+dawLMcTz454pyq0ZJAGvd7x5wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEK3MxNw8MLRxubFMFxrwHHGy2WBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 MmNkMzJlOS1kNzlmLTQyNTktOTAyNS1lZTMzZTE0NDZkZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQyY2QzMmU5LWQ3OWYtNDI1OS05 MDI1LWVlMzNlMTQ0NmRlYS80MmNkMzJlOS1kNzlmLTQyNTktOTAyNS1lZTMzZTE0 NDZkZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHQSB4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJ+RMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG9jMcoyjd+lYvVj7QofVJARyJTTJxWJkrpdeL76qUxm3QYj yCz3b0uaNBmsngS/I8ukkL8DvVSF5FR14+W8ly9w4KHF1/DBDCGr4+VcqYpuqced 2VCydFqB9bUyKyGPb6WJiuTS3pIu2sBdFAujcwPfOSaBryEjtmLudCOeDCFBB9q5 ZHC3RSCaiesLKwgSyQKJ8xRL3AfS2InxUatG3enNY2xQv+pB1DBN7Wm6uRnqqyI8 UlsjPY8Z3y+0PTT46hI7rQuYFIMopewQ9jdmZmgCZdhbJtG8XqfQAUmW7sUX1kOD JVVNs/ppXLYP2736nrSUZfIuB2f37RAWR18yd0I= -----END CERTIFICATE-----Generated at Wed Sep 16 11:28:49 2026 by rpki-client