$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48976029-e2d3-48f1-a88f-76117c95d520.cer File: 48976029-e2d3-48f1-a88f-76117c95d520.cer (raw, json) Hash identifier: vl9TWaP98KvYxPl44R6r/szmmJ/QvwBlr55jbOyqPy0= Subject key identifier: AB:21:C1:68:3F:64:29:CF:5D:59:51:5C:CC:EF:39:4D:3E:FD:15:AE Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4B17D03BEFC2FEA28B87C380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48976029-e2d3-48f1-a88f-76117c95d520/48976029-e2d3-48f1-a88f-76117c95d520.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48976029-e2d3-48f1-a88f-76117c95d520/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 15:09:03 +0000 Certificate not after: Thu 28 Dec 2028 16:09:03 +0000 Subordinate resources: IP: 69.25.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:17:d0:3b:ef:c2:fe:a2:8b:87:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 25 15:09:03 2026 GMT Not After : Dec 28 16:09:03 2028 GMT Subject: CN=48976029-e2d3-48f1-a88f-76117c95d520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:59:4b:96:0c:d2:fa:22:90:40:42:38:05: 33:42:f8:fd:a4:e0:a1:d3:65:f2:6d:b0:8c:26:a0: 04:b9:a4:7b:61:aa:3e:fb:b2:71:f8:be:cc:95:20: a5:5f:03:2c:44:60:b0:fb:74:80:39:66:7a:f8:9b: 02:51:32:3e:d9:00:0d:cc:d6:91:10:7d:5b:02:d4: 22:97:b3:60:95:26:c3:51:50:e0:21:ee:6a:0b:fa: 7d:a6:dc:53:92:41:1b:17:10:3f:05:4c:9a:81:6d: 55:f4:c1:8e:a9:dd:bc:e8:89:8a:de:6d:bd:af:aa: 94:7b:39:19:b7:74:32:b4:5c:b9:70:5a:2a:90:cb: b9:a4:6b:fc:31:d0:df:73:8c:b3:bf:1d:ca:3b:34: 1f:7f:66:94:53:6b:58:c7:df:7d:2d:a2:70:ec:2c: 69:51:da:3a:cf:fc:a3:1b:fa:38:f1:45:ae:31:d1: 65:d3:a4:16:db:6f:a5:10:ff:0e:01:a4:97:1d:5f: 2f:cf:68:6a:d7:78:cb:f3:0e:a1:8e:fa:4a:ee:3f: 86:c9:2b:d5:85:ac:5d:9a:cb:2e:90:c0:d3:11:f9: 80:3b:5c:8c:2a:84:1d:d8:0b:4f:93:2a:8a:b0:d6: e5:bf:b8:c0:72:f7:1c:35:11:df:f8:5e:bf:b4:e3: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:21:C1:68:3F:64:29:CF:5D:59:51:5C:CC:EF:39:4D:3E:FD:15:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48976029-e2d3-48f1-a88f-76117c95d520/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48976029-e2d3-48f1-a88f-76117c95d520/48976029-e2d3-48f1-a88f-76117c95d520.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 69.25.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e3:b7:f6:5d:b3:ec:7b:a1:eb:e7:b7:70:59:27:a8:37:54: 81:d4:b0:6c:6f:7f:66:f8:4b:6a:ba:88:62:00:20:95:7f:50: 01:1f:e7:b8:f7:85:88:3e:db:cd:71:82:ec:68:2c:31:35:02: 09:ad:e7:76:58:54:b7:a3:d1:6e:3c:32:7c:33:7e:5e:95:d2: 6e:d7:08:3e:50:2f:29:b0:03:77:f5:f3:08:2b:a0:df:a5:74: 09:b4:eb:9e:6d:61:c3:a7:1c:7b:5e:ac:92:8d:ab:01:7b:4b: 48:1b:03:c5:91:d6:c9:7a:ae:12:05:42:17:a8:21:83:82:97: 67:a5:14:b9:83:e4:b4:f3:5e:02:c4:06:7c:8e:f8:4d:bb:2a: 5e:84:ca:4e:13:93:ef:cc:e0:9b:a3:be:c3:f6:27:a1:66:b4: b3:c0:6d:dc:01:d6:67:97:f4:05:73:c5:f1:ab:b5:b9:3f:4e: e0:a1:52:b1:49:4d:af:42:14:28:ac:b6:2b:23:4c:6d:5a:27: 6f:c0:cc:56:8f:76:9f:5c:4e:41:dd:f1:55:60:1d:57:b3:07: 24:cc:92:0e:f4:51:0b:47:00:b7:46:c0:36:e1:af:6d:b6:49: 12:55:da:cc:3c:c6:97:04:91:6b:28:c6:83:99:3c:5e:6b:0f: 02:b1:f3:f7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9LF9A778L+oouHw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyNTE1MDkwM1oXDTI4MTIyODE2MDkwM1owLzEtMCsGA1UEAxMk NDg5NzYwMjktZTJkMy00OGYxLWE4OGYtNzYxMTdjOTVkNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil9ZS5YM0voikEBCOAUzQvj9pOCh02XybbCM JqAEuaR7Yao++7Jx+L7MlSClXwMsRGCw+3SAOWZ6+JsCUTI+2QANzNaREH1bAtQi l7NglSbDUVDgIe5qC/p9ptxTkkEbFxA/BUyagW1V9MGOqd286ImK3m29r6qUezkZ t3QytFy5cFoqkMu5pGv8MdDfc4yzvx3KOzQff2aUU2tYx999LaJw7CxpUdo6z/yj G/o48UWuMdFl06QW22+lEP8OAaSXHV8vz2hq13jL8w6hjvpK7j+GySvVhaxdmssu kMDTEfmAO1yMKoQd2AtPkyqKsNblv7jAcvccNRHf+F6/tOOmXQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKshwWg/ZCnPXVlRXMzvOU0+/RWuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 ODk3NjAyOS1lMmQzLTQ4ZjEtYTg4Zi03NjExN2M5NWQ1MjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQ4OTc2MDI5LWUyZDMtNDhmMS1h ODhmLTc2MTE3Yzk1ZDUyMC80ODk3NjAyOS1lMmQzLTQ4ZjEtYTg4Zi03NjExN2M5 NWQ1MjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJFGdAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbeO39l2z7Huh6+e3cFkn qDdUgdSwbG9/ZvhLarqIYgAglX9QAR/nuPeFiD7bzXGC7GgsMTUCCa3ndlhUt6PR bjwyfDN+XpXSbtcIPlAvKbADd/XzCCug36V0CbTrnm1hw6cce16sko2rAXtLSBsD xZHWyXquEgVCF6ghg4KXZ6UUuYPktPNeAsQGfI74TbsqXoTKThOT78zgm6O+w/Yn oWa0s8Bt3AHWZ5f0BXPF8au1uT9O4KFSsUlNr0IUKKy2KyNMbVonb8DMVo92n1xO Qd3xVWAdV7MHJMySDvRRC0cAt0bANuGvbbZJElXazDzGlwSRayjGg5k8XmsPArHz 9w== -----END CERTIFICATE-----Generated at Wed Oct 7 17:10:28 2026 by rpki-client