$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/473ef813-39b2-4492-b466-8ea8b99a371d.cer File: 473ef813-39b2-4492-b466-8ea8b99a371d.cer (raw, json) Hash identifier: P8sRdywh5CBfC1XxVy9cJ3SA/Q6Rh8xITE0Ce35cpuk= Subject key identifier: EE:87:A3:24:F8:E0:9E:5C:02:7C:5F:2E:11:D4:63:3F:49:CF:F4:70 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F855ED32BAFF6C12862A36780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/473ef813-39b2-4492-b466-8ea8b99a371d/473ef813-39b2-4492-b466-8ea8b99a371d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/473ef813-39b2-4492-b466-8ea8b99a371d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Oct 2026 12:09:01 +0000 Certificate not after: Thu 18 Jan 2029 13:09:01 +0000 Subordinate resources: AS: 402915 IP: 23.163.36.0/24 IP: 2602:f30b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:5e:d3:2b:af:f6:c1:28:62:a3:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 16 12:09:01 2026 GMT Not After : Jan 18 13:09:01 2029 GMT Subject: CN=473ef813-39b2-4492-b466-8ea8b99a371d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bf:13:82:3e:22:d5:5d:33:d7:2f:e8:bc:cb: 07:1a:a8:a6:80:a2:06:46:d7:c4:fc:1c:e4:f6:d5: 11:e8:e6:d6:a1:c5:7f:08:06:2c:f9:7d:26:be:4f: 3d:20:9c:9d:a6:67:60:0b:91:45:3e:5a:4c:1b:2d: 5e:5b:c9:3f:39:df:74:4e:c2:4a:5f:68:49:d3:b0: 55:7d:f6:fa:ef:05:cd:8b:13:50:49:df:67:fe:3b: ab:5c:8a:34:6f:25:b9:e0:b6:44:57:ec:0c:b1:aa: 31:89:00:f5:00:cb:4d:9f:54:2f:3b:ea:92:6c:c7: 50:55:b0:f3:f4:d2:d5:c4:80:96:6f:28:db:42:d0: ab:c8:2e:f3:a3:f8:35:14:64:d8:d5:69:a4:d1:a7: 39:53:ee:84:61:88:fb:dd:b1:e0:8d:eb:de:2c:9c: 2c:fb:24:d4:7d:c8:3d:13:06:3f:f1:79:b1:25:cf: e7:19:42:88:be:06:0e:97:9c:fd:a7:eb:a5:c0:0e: ee:5a:ef:69:2c:20:8a:c0:45:43:1e:4d:02:66:b3: 71:d9:18:79:f1:75:d1:23:0a:40:de:7a:10:0a:8c: 74:ad:ae:c2:04:43:2d:97:95:45:54:23:15:4d:83: 60:f2:29:33:40:b0:0e:3a:8f:79:42:e1:d5:fb:bf: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:87:A3:24:F8:E0:9E:5C:02:7C:5F:2E:11:D4:63:3F:49:CF:F4:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/473ef813-39b2-4492-b466-8ea8b99a371d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/473ef813-39b2-4492-b466-8ea8b99a371d/473ef813-39b2-4492-b466-8ea8b99a371d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.163.36.0/24 IPv6: 2602:f30b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402915 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2b:48:1e:e2:d8:49:98:78:cb:cc:b6:b5:ec:06:eb:7e:c7: 5d:75:20:a7:65:42:63:31:f8:70:e3:dc:6f:a6:37:22:27:15: 4c:12:32:25:1f:9c:21:45:45:cd:52:ca:c7:0c:67:c1:f9:0d: fe:ad:b5:e4:a8:5f:d4:cf:a9:ef:e6:93:b7:cd:3c:4a:05:1d: b0:40:f5:43:77:0d:b1:57:20:38:21:70:2c:90:d8:5e:5f:f8: ca:38:8f:2a:91:7b:0e:ed:a8:db:60:a4:b8:03:8b:23:61:a1: 7f:a7:9f:67:ff:d3:63:03:44:42:fd:ce:72:ab:b7:d4:f0:dc: 13:98:5e:6e:e9:06:4a:21:31:b5:cc:9d:6a:4d:25:f7:dd:51: 20:4f:36:8b:9c:69:fa:d0:76:e2:b7:17:59:6e:e6:eb:90:6d: 30:3a:f7:0b:74:36:8a:bb:14:0d:b2:3b:6c:e9:e2:6d:0c:30: 1e:14:bb:08:b8:37:1b:f0:4c:74:1d:8c:d4:e0:7a:1c:d0:f8: 06:e8:aa:22:41:81:2a:54:06:05:c6:af:f1:ac:52:4f:24:59: d8:4b:74:40:31:d7:ff:9f:0a:00:38:49:10:f3:6c:75:9f:b7: 1a:3a:05:5c:00:5c:d6:ca:9a:3a:bb:bd:38:07:29:a3:79:ec: 4e:65:36:a2 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+FXtMrr/bBKGKjZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNjEyMDkwMVoXDTI5MDExODEzMDkwMVowLzEtMCsGA1UEAxMk NDczZWY4MTMtMzliMi00NDkyLWI0NjYtOGVhOGI5OWEzNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9r8Tgj4i1V0z1y/ovMsHGqimgKIGRtfE/Bzk 9tUR6ObWocV/CAYs+X0mvk89IJydpmdgC5FFPlpMGy1eW8k/Od90TsJKX2hJ07BV ffb67wXNixNQSd9n/jurXIo0byW54LZEV+wMsaoxiQD1AMtNn1QvO+qSbMdQVbDz 9NLVxICWbyjbQtCryC7zo/g1FGTY1Wmk0ac5U+6EYYj73bHgjeveLJws+yTUfcg9 EwY/8XmxJc/nGUKIvgYOl5z9p+ulwA7uWu9pLCCKwEVDHk0CZrNx2Rh58XXRIwpA 3noQCox0ra7CBEMtl5VFVCMVTYNg8ikzQLAOOo95QuHV+78BvwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFO6HoyT44J5cAnxfLhHUYz9Jz/RwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 NzNlZjgxMy0zOWIyLTQ0OTItYjQ2Ni04ZWE4Yjk5YTM3MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQ3M2VmODEzLTM5YjItNDQ5Mi1i NDY2LThlYThiOTlhMzcxZC80NzNlZjgxMy0zOWIyLTQ0OTItYjQ2Ni04ZWE4Yjk5 YTM3MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoyQwDgQCAAIwCAMGACYC8wsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYl4zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYK0ge4thJmHjLzLa17Abrfsdd dSCnZUJjMfhw49xvpjciJxVMEjIlH5whRUXNUsrHDGfB+Q3+rbXkqF/Uz6nv5pO3 zTxKBR2wQPVDdw2xVyA4IXAskNheX/jKOI8qkXsO7ajbYKS4A4sjYaF/p59n/9Nj A0RC/c5yq7fU8NwTmF5u6QZKITG1zJ1qTSX33VEgTzaLnGn60HbitxdZbubrkG0w OvcLdDaKuxQNsjts6eJtDDAeFLsIuDcb8Ex0HYzU4Hoc0PgG6KoiQYEqVAYFxq/x rFJPJFnYS3RAMdf/nwoAOEkQ82x1n7caOgVcAFzWypo6u704BymjeexOZTai -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:56 2026 by rpki-client