$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07.cer File: 48207a98-128a-4c02-af42-d019fc1b8f07.cer (raw, json) Hash identifier: eRWGHMSIcOnjxm1JgL3S38wEy+q9CtPNi9JxJvd8BC0= Subject key identifier: FE:33:28:CC:8E:F3:9B:00:C1:3E:5F:94:BF:AA:AE:69:D0:09:90:42 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F454369BD48ABD0104D71E3F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/48207a98-128a-4c02-af42-d019fc1b8f07.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 13:02:03 +0000 Certificate not after: Tue 26 Dec 2028 14:02:03 +0000 Subordinate resources: AS: 401066 IP: 23.164.108.0/24 IP: 2602:f2e0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:43:69:bd:48:ab:d0:10:4d:71:e3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 13:02:03 2026 GMT Not After : Dec 26 14:02:03 2028 GMT Subject: CN=48207a98-128a-4c02-af42-d019fc1b8f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:ff:b2:eb:45:1a:8c:5b:77:80:cf:73:c6: ab:f9:32:69:b0:cc:ec:3e:21:28:d8:d7:19:d7:4e: 5a:6f:c8:75:c3:9b:da:c2:19:49:38:18:53:a3:24: 04:2b:d1:ca:d3:7e:ee:6d:ad:bb:f6:6f:53:94:8a: 24:bc:99:e2:49:4d:24:40:ad:0e:f1:18:75:79:61: 43:71:80:a4:97:cc:fe:a2:70:0d:ed:aa:72:f1:8f: f1:3a:0b:5c:ba:c8:cd:8d:8d:70:b1:56:12:39:37: 64:8e:95:15:c8:ee:4a:1e:0e:cb:a8:45:d4:f3:83: 4e:1a:2d:8f:4d:c3:29:e9:df:d4:ce:2f:9b:b8:0d: 0b:2c:2a:a2:7b:35:90:25:12:66:3a:39:ca:c3:3d: d3:91:a8:17:e8:a5:87:36:5a:f9:fb:42:fe:a1:19: a7:f0:92:dd:1e:91:97:84:51:77:d7:1b:9b:e1:db: 01:c6:e3:56:d5:8f:c7:42:3e:2d:d5:7d:7a:ca:6e: 4a:59:0f:6c:cd:bc:9e:85:47:6b:27:58:dd:96:b9: de:4c:d5:83:34:af:e2:82:7e:8e:92:f4:9e:eb:e8: f0:e8:67:3c:1e:8f:62:fa:c9:5d:83:1e:c8:55:9f: bc:43:97:4c:7a:0f:12:e2:3f:30:19:18:95:2d:37: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:33:28:CC:8E:F3:9B:00:C1:3E:5F:94:BF:AA:AE:69:D0:09:90:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/48207a98-128a-4c02-af42-d019fc1b8f07.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.164.108.0/24 IPv6: 2602:f2e0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401066 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:71:1a:22:f6:28:c0:1f:90:d3:d9:0f:1e:82:6c:e0:05:da: c8:95:bc:bf:4f:ae:a8:ae:c1:62:da:c4:c1:25:55:22:93:b7: 9f:c8:c7:bc:72:d0:02:8a:56:a9:b3:44:22:77:d4:e2:c0:3e: 64:00:dd:2f:2d:cc:a1:18:8d:f3:77:ff:03:83:e2:0c:87:94: 32:76:29:ba:da:0c:0b:e2:9c:44:6a:f0:81:1e:ec:41:71:73: 32:a3:8a:64:d1:8f:d1:0a:61:ac:39:8b:18:aa:4c:2a:55:a6: de:06:1e:a0:64:73:b1:67:b2:7d:e5:71:0d:96:02:0c:b2:79: 75:d5:43:60:b8:12:1d:d1:ff:c0:c4:96:90:56:ad:0f:ba:e4: 06:2d:95:45:69:f7:d2:80:38:ac:b3:64:b9:88:b1:a3:cf:f6: c5:c4:42:41:f1:22:cf:af:a5:5f:3d:66:61:19:a3:35:6c:90: 5a:7c:3f:85:64:8f:da:38:c2:0e:af:cf:51:ac:9e:f8:b5:bc: 99:15:fe:1c:38:74:3f:57:28:ad:22:ce:de:1f:d1:32:c3:ee: ce:6d:f8:51:2e:65:c3:18:3d:89:66:f6:90:61:4b:bd:12:70: 09:f8:3a:07:1c:71:dc:75:77:7b:e8:64:83:4f:fe:35:4d:76: 7d:49:29:3d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9FQ2m9SKvQEE1x4/YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzEzMDIwM1oXDTI4MTIyNjE0MDIwM1owLzEtMCsGA1UEAxMk NDgyMDdhOTgtMTI4YS00YzAyLWFmNDItZDAxOWZjMWI4ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg7/sutFGoxbd4DPc8ar+TJpsMzsPiEo2NcZ 105ab8h1w5vawhlJOBhToyQEK9HK037uba279m9TlIokvJniSU0kQK0O8Rh1eWFD cYCkl8z+onAN7apy8Y/xOgtcusjNjY1wsVYSOTdkjpUVyO5KHg7LqEXU84NOGi2P TcMp6d/Uzi+buA0LLCqiezWQJRJmOjnKwz3TkagX6KWHNlr5+0L+oRmn8JLdHpGX hFF31xub4dsBxuNW1Y/HQj4t1X16ym5KWQ9szbyehUdrJ1jdlrneTNWDNK/ign6O kvSe6+jw6Gc8Ho9i+sldgx7IVZ+8Q5dMeg8S4j8wGRiVLTcKIwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFP4zKMyO85sAwT5flL+qrmnQCZBCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 ODIwN2E5OC0xMjhhLTRjMDItYWY0Mi1kMDE5ZmMxYjhmMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQ4MjA3YTk4LTEyOGEtNGMwMi1h ZjQyLWQwMTlmYzFiOGYwNy80ODIwN2E5OC0xMjhhLTRjMDItYWY0Mi1kMDE5ZmMx YjhmMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpGwwDgQCAAIwCAMGACYC8uAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYeqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAscRoi9ijAH5DT2Q8egmzgBdrI lby/T66orsFi2sTBJVUik7efyMe8ctACilaps0Qid9TiwD5kAN0vLcyhGI3zd/8D g+IMh5Qydim62gwL4pxEavCBHuxBcXMyo4pk0Y/RCmGsOYsYqkwqVabeBh6gZHOx Z7J95XENlgIMsnl11UNguBId0f/AxJaQVq0PuuQGLZVFaffSgDiss2S5iLGjz/bF xEJB8SLPr6VfPWZhGaM1bJBafD+FZI/aOMIOr89RrJ74tbyZFf4cOHQ/VyitIs7e H9Eyw+7ObfhRLmXDGD2JZvaQYUu9EnAJ+DoHHHHcdXd76GSDT/41TXZ9SSk9 -----END CERTIFICATE-----Generated at Sun Oct 4 16:52:53 2026 by rpki-client