$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947.cer File: 4d4e7d5c-55ee-4e50-a203-b95963b37947.cer (raw, json) Hash identifier: R68ISaU3Mue6ilSsCzZM4SsxQC4fBo9WmSRKcgTRwVc= Subject key identifier: 02:C6:E6:67:9B:AC:02:64:BA:1A:C6:5D:A9:B4:44:FD:64:46:49:73 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7286A1BC020511826C604C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/4d4e7d5c-55ee-4e50-a203-b95963b37947.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 18:08:52 +0000 Certificate not after: Thu 11 Jan 2029 19:08:52 +0000 Subordinate resources: IP: 162.252.195.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:86:a1:bc:02:05:11:82:6c:60:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 18:08:52 2026 GMT Not After : Jan 11 19:08:52 2029 GMT Subject: CN=4d4e7d5c-55ee-4e50-a203-b95963b37947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:a8:43:ae:73:ab:36:d8:a2:5f:05:95:af: 74:67:7a:90:94:cc:79:25:33:a6:04:b5:de:0b:79: db:76:8f:02:de:f0:92:27:7e:a4:13:9d:a2:97:26: 28:d0:51:83:40:04:8b:3f:00:05:5e:41:da:96:e9: d1:5d:48:ce:79:b4:b6:80:4d:d1:e5:0b:1c:20:fd: 37:4d:8c:0d:38:87:8f:12:93:6b:0b:45:6c:0e:f8: e3:0a:f1:a0:26:83:18:7e:16:7e:6f:ee:21:bf:7d: 1b:2e:4b:08:14:d7:1c:8e:04:c0:66:7f:cd:15:3a: 75:57:5e:5a:0c:09:eb:f8:30:d6:80:a6:d3:65:b1: 06:86:ab:84:ae:af:c4:be:d0:41:89:7b:59:f0:b3: 12:83:12:6f:bc:77:2f:6f:08:dc:b8:63:76:6d:37: 30:6c:d2:e2:d5:ac:e2:da:07:77:62:13:76:0e:3c: ba:b1:09:92:9a:13:87:89:38:16:3e:f6:56:70:ad: 39:6a:78:a8:02:8b:79:68:7a:e8:55:b2:fb:ff:d8: 7a:8e:05:c9:c3:a0:74:55:16:98:5c:05:65:54:14: dd:26:75:c8:45:f0:0c:63:d9:6b:b5:fe:f3:eb:60: b5:aa:3f:19:59:7a:d4:07:b9:fc:83:77:f2:9a:1c: c0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C6:E6:67:9B:AC:02:64:BA:1A:C6:5D:A9:B4:44:FD:64:46:49:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4d4e7d5c-55ee-4e50-a203-b95963b37947/4d4e7d5c-55ee-4e50-a203-b95963b37947.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 162.252.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1f:12:86:0a:4e:4c:4a:47:ae:30:e2:8e:a0:38:b2:23:37: 28:03:4e:16:68:2d:14:98:93:af:7f:43:48:4d:ca:d8:0f:39: e4:1d:a4:9b:a8:af:ce:d9:08:96:d7:d2:12:65:ca:90:b1:a7: b6:4a:2f:b7:db:e9:50:11:5f:50:39:9a:46:a5:8a:61:87:ee: ed:4b:9b:26:59:4c:1d:07:32:b5:58:55:8a:6f:bd:09:da:35: 80:27:c8:aa:e2:36:6c:ee:82:60:2a:72:2c:03:80:01:15:49: 06:98:c9:01:3b:00:5e:22:42:d8:86:96:d6:aa:d4:fb:82:08: 25:f5:f2:b5:13:b7:36:19:76:2f:8b:c6:24:fe:b5:c9:3f:bd: 64:59:7d:7d:0b:7e:5f:f1:0a:c1:8d:b4:53:b3:e7:0d:c7:4b: 2f:ad:66:3a:30:81:a2:de:d5:7d:1b:00:22:e1:2c:f5:dd:bf: 8e:df:6a:d1:e9:13:bd:83:c5:32:e5:a0:16:a1:f2:28:4b:f1: 8c:db:15:b5:0c:14:7a:e9:7b:98:cc:79:6b:3c:0c:ab:78:87: 0c:33:d3:3a:80:75:ee:06:0f:10:c7:ea:bf:9d:af:4a:09:e3: 9b:2b:aa:d9:00:8b:61:2a:61:f3:e7:71:6f:d0:38:00:a0:e4: 89:be:e8:14 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9yhqG8AgURgmxgTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTE4MDg1MloXDTI5MDExMTE5MDg1MlowLzEtMCsGA1UEAxMk NGQ0ZTdkNWMtNTVlZS00ZTUwLWEyMDMtYjk1OTYzYjM3OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiCoQ65zqzbYol8Fla90Z3qQlMx5JTOmBLXe C3nbdo8C3vCSJ36kE52ilyYo0FGDQASLPwAFXkHalunRXUjOebS2gE3R5QscIP03 TYwNOIePEpNrC0VsDvjjCvGgJoMYfhZ+b+4hv30bLksIFNccjgTAZn/NFTp1V15a DAnr+DDWgKbTZbEGhquErq/EvtBBiXtZ8LMSgxJvvHcvbwjcuGN2bTcwbNLi1azi 2gd3YhN2Djy6sQmSmhOHiTgWPvZWcK05anioAot5aHroVbL7/9h6jgXJw6B0VRaY XAVlVBTdJnXIRfAMY9lrtf7z62C1qj8ZWXrUB7n8g3fymhzAwwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFALG5mebrAJkuhrGXam0RP1kRklzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 ZDRlN2Q1Yy01NWVlLTRlNTAtYTIwMy1iOTU5NjNiMzc5NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzRkNGU3ZDVjLTU1ZWUtNGU1MC1h MjAzLWI5NTk2M2IzNzk0Ny80ZDRlN2Q1Yy01NWVlLTRlNTAtYTIwMy1iOTU5NjNi Mzc5NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACi/MMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALh8ShgpOTEpHrjDijqA4 siM3KANOFmgtFJiTr39DSE3K2A855B2km6ivztkIltfSEmXKkLGntkovt9vpUBFf UDmaRqWKYYfu7UubJllMHQcytVhVim+9Cdo1gCfIquI2bO6CYCpyLAOAARVJBpjJ ATsAXiJC2IaW1qrU+4IIJfXytRO3Nhl2L4vGJP61yT+9ZFl9fQt+X/EKwY20U7Pn DcdLL61mOjCBot7VfRsAIuEs9d2/jt9q0ekTvYPFMuWgFqHyKEvxjNsVtQwUeul7 mMx5azwMq3iHDDPTOoB17gYPEMfqv52vSgnjmyuq2QCLYSph8+dxb9A4AKDkib7o FA== -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:26 2026 by rpki-client