$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47112fad-c45e-4cbe-aa1a-b3d16847f014.cer File: 47112fad-c45e-4cbe-aa1a-b3d16847f014.cer (raw, json) Hash identifier: YNNAvlLag4g2I0zzwebfmWQ5aqO/m2ML2rGneD2Aim8= Subject key identifier: E2:E6:9B:93:7E:45:5E:6C:EF:61:FB:FF:A2:3D:82:F6:20:64:F0:B4 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA1A2B22024373B143ED6A700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47112fad-c45e-4cbe-aa1a-b3d16847f014/47112fad-c45e-4cbe-aa1a-b3d16847f014.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47112fad-c45e-4cbe-aa1a-b3d16847f014/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 15:08:24 +0000 Certificate not after: Sun 28 Jan 2029 16:08:24 +0000 Subordinate resources: AS: 12074 IP: 216.52.233.0/24 IP: 216.52.249.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:a2:b2:20:24:37:3b:14:3e:d6:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 26 15:08:24 2026 GMT Not After : Jan 28 16:08:24 2029 GMT Subject: CN=47112fad-c45e-4cbe-aa1a-b3d16847f014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:03:74:a0:53:0d:68:a6:7d:eb:c9:0b:45: fd:f4:7e:fc:1e:4d:fb:9c:c0:69:59:f9:f4:86:a7: 44:6e:85:94:03:51:c7:4d:ff:56:a7:59:c1:8f:3f: 0a:23:f7:6c:f0:fb:5e:62:0a:07:be:03:ac:cb:0f: 74:fb:ed:4a:3d:bd:ed:0f:67:b7:79:c8:fc:b0:59: b7:e3:ac:23:1c:d6:0d:05:70:44:08:de:37:be:5d: 04:ae:1a:c1:0e:b6:fc:7e:d8:86:0f:95:24:a0:c8: d1:60:a2:00:b9:a3:2a:fb:41:11:ab:10:bd:db:27: 23:1d:32:f2:15:ac:7c:5d:eb:30:b4:90:3f:b3:08: ff:84:19:f0:e4:39:96:7f:9a:74:13:db:2b:26:d0: 37:f1:f2:8e:13:f1:bb:38:72:ed:b9:d6:e0:47:f0: 2f:63:48:97:1b:f2:97:e9:42:da:7b:cf:37:f2:fb: 3e:9b:dc:67:8a:01:ec:82:dc:cd:c4:c6:57:8a:35: 40:6b:dc:a2:a5:10:b6:c0:a3:01:49:2b:26:ff:49: 92:4a:69:99:a9:0d:73:b0:20:9d:fd:b6:77:95:57: 32:9a:68:e6:da:ad:d3:1e:57:f2:b8:32:31:5f:e1: fa:bd:29:8e:f4:bb:88:c5:93:9d:98:a2:ad:f8:f2: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:9B:93:7E:45:5E:6C:EF:61:FB:FF:A2:3D:82:F6:20:64:F0:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47112fad-c45e-4cbe-aa1a-b3d16847f014/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47112fad-c45e-4cbe-aa1a-b3d16847f014/47112fad-c45e-4cbe-aa1a-b3d16847f014.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 216.52.233.0/24 216.52.249.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12074 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3a:57:fe:c8:e6:74:0e:39:44:c0:72:bf:c1:4f:8a:7c:a1: 06:06:f8:91:20:0b:d2:ae:67:c4:a3:d2:58:1c:a3:81:f9:2f: 4e:6b:c8:7f:b1:17:c8:d4:b7:bc:16:ef:4e:ba:c1:45:bc:0f: c9:91:5f:1b:b4:7e:ba:5d:f8:93:7a:d3:0f:94:84:23:f1:be: f0:17:ec:06:2e:0d:72:fb:0a:a8:3e:52:6d:58:f2:01:81:c6: 08:63:20:38:23:20:5a:97:16:22:dc:83:d0:bd:4b:ba:db:04: 52:5c:4f:d0:9a:eb:c5:3e:4d:01:44:95:5b:ac:a7:f2:2f:d1: e9:92:65:b2:e2:c4:78:be:95:3b:4f:32:00:c1:a1:d6:b3:1f: 92:7f:8a:0d:d4:6c:50:bd:17:fc:0f:13:1d:99:73:6e:d7:05: 72:a1:8e:98:4c:5c:e0:e7:6e:71:1f:5f:28:8c:4f:6b:4b:95: a6:ac:31:c1:61:fc:7a:f3:84:c8:a7:11:d0:c2:bf:74:39:87: 2a:6a:e6:27:24:ff:c1:6b:0d:39:39:f5:62:fb:33:af:c5:f7: 3e:cf:d9:8b:c4:2f:32:65:e6:94:51:83:e5:19:01:fa:0a:f4: 4d:c1:04:21:57:99:33:74:dc:2b:c5:c6:a5:4b:a8:cf:21:0f: f7:59:db:8a -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE+horIgJDc7FD7WpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNjE1MDgyNFoXDTI5MDEyODE2MDgyNFowLzEtMCsGA1UEAxMk NDcxMTJmYWQtYzQ1ZS00Y2JlLWFhMWEtYjNkMTY4NDdmMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHMDdKBTDWimfevJC0X99H78Hk37nMBpWfn0 hqdEboWUA1HHTf9Wp1nBjz8KI/ds8PteYgoHvgOsyw90++1KPb3tD2e3ecj8sFm3 46wjHNYNBXBECN43vl0ErhrBDrb8ftiGD5UkoMjRYKIAuaMq+0ERqxC92ycjHTLy Fax8XeswtJA/swj/hBnw5DmWf5p0E9srJtA38fKOE/G7OHLtudbgR/AvY0iXG/KX 6ULae8838vs+m9xnigHsgtzNxMZXijVAa9yipRC2wKMBSSsm/0mSSmmZqQ1zsCCd /bZ3lVcymmjm2q3THlfyuDIxX+H6vSmO9LuIxZOdmKKt+PKW7QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOLmm5N+RV5s72H7/6I9gvYgZPC0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 NzExMmZhZC1jNDVlLTRjYmUtYWExYS1iM2QxNjg0N2YwMTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQ3MTEyZmFkLWM0NWUtNGNiZS1h YTFhLWIzZDE2ODQ3ZjAxNC80NzExMmZhZC1jNDVlLTRjYmUtYWExYS1iM2QxNjg0 N2YwMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADYNOkDBADYNPkwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICLyowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAYzpX/sjmdA45RMByv8FPinyhBgb4kSAL0q5nxKPS WByjgfkvTmvIf7EXyNS3vBbvTrrBRbwPyZFfG7R+ul34k3rTD5SEI/G+8BfsBi4N cvsKqD5SbVjyAYHGCGMgOCMgWpcWItyD0L1LutsEUlxP0JrrxT5NAUSVW6yn8i/R 6ZJlsuLEeL6VO08yAMGh1rMfkn+KDdRsUL0X/A8THZlzbtcFcqGOmExc4OducR9f KIxPa0uVpqwxwWH8evOEyKcR0MK/dDmHKmrmJyT/wWsNOTn1Yvszr8X3Ps/Zi8Qv MmXmlFGD5RkB+gr0TcEEIVeZM3TcK8XGpUuozyEP91nbig== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:38 2026 by rpki-client