$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5a0d07a8-763b-4ccf-8cae-e01ad66af2e5.cer File: 5a0d07a8-763b-4ccf-8cae-e01ad66af2e5.cer (raw, json) Hash identifier: PAK+G7WiQSxl17C8WxlzwY46KUJYoJaKCxPk6Gjn+SI= Subject key identifier: 34:F3:40:BA:6A:9A:53:36:33:1A:0A:2A:CD:77:3A:0A:0B:52:ED:4B Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8DBD82ED30D8E3F2081C6B8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5a0d07a8-763b-4ccf-8cae-e01ad66af2e5/5a0d07a8-763b-4ccf-8cae-e01ad66af2e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5a0d07a8-763b-4ccf-8cae-e01ad66af2e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 12:06:16 +0000 Certificate not after: Wed 10 Jan 2029 04:59:41 +0000 Subordinate resources: AS: 403060 IP: 23.166.28.0/24 IP: 2602:81f:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:bd:82:ed:30:d8:e3:f2:08:1c:6b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 12:06:16 2026 GMT Not After : Jan 10 04:59:41 2029 GMT Subject: CN=5a0d07a8-763b-4ccf-8cae-e01ad66af2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:36:5b:46:74:64:71:60:0d:d2:79:35:d0: d0:69:14:d2:c7:f1:25:a2:12:6f:7b:ef:5c:5d:5d: 4d:e3:73:86:33:bd:ca:5d:d3:7a:59:2b:20:52:eb: a7:4a:fe:86:63:ad:82:bd:fb:b5:10:67:c6:1f:cf: 63:95:46:5e:dc:f3:3d:6d:86:cb:4b:50:e1:04:e2: 86:f7:3d:15:f6:bc:c5:34:a4:dc:ce:0f:7e:fa:39: 8d:9e:cc:38:29:24:bc:79:73:13:1d:ee:e6:fe:77: d5:51:e6:86:96:e9:84:6f:65:65:06:59:be:ab:16: dc:ba:3f:0a:af:8c:96:40:61:59:4f:ea:61:c5:0d: e7:81:6f:e2:e8:67:c5:6e:51:5f:f7:18:c0:e4:04: 7a:52:95:4e:f7:c4:92:c3:6d:3f:4e:c3:81:96:65: db:c5:3b:de:d6:d8:85:2d:2f:b6:3a:fd:56:1b:10: a4:c0:e9:b9:9e:4a:09:28:af:e4:d6:39:bb:fc:8f: 90:bf:cc:4f:8c:6f:79:d7:28:99:a4:f7:9b:a9:26: 3d:6b:20:7c:d9:de:dc:2d:11:0b:e9:62:45:72:14: d3:00:54:74:42:ef:e8:81:e3:d1:ae:92:7e:f9:4b: a5:4d:36:6c:89:77:8a:01:1d:f4:d9:0a:d9:08:91: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F3:40:BA:6A:9A:53:36:33:1A:0A:2A:CD:77:3A:0A:0B:52:ED:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5a0d07a8-763b-4ccf-8cae-e01ad66af2e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/5a0d07a8-763b-4ccf-8cae-e01ad66af2e5/5a0d07a8-763b-4ccf-8cae-e01ad66af2e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.166.28.0/24 IPv6: 2602:81f:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403060 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:66:a6:d8:9d:d9:a1:07:13:eb:9c:22:5b:32:18:cf:65:cb: bb:f0:0c:8e:d6:79:24:74:58:c9:8d:18:b3:2d:6d:cd:0c:db: 31:5e:7a:b7:d7:9f:2f:da:1e:9c:38:50:f9:cd:a9:9f:12:55: a9:5b:18:e8:49:7d:af:b4:2c:e8:bd:f4:7b:93:a2:6a:8d:fb: b3:cc:a3:cd:9f:74:b5:6d:a3:61:1f:2b:99:e8:92:63:b4:d0: e8:51:47:c4:6f:84:22:dd:76:38:71:db:2c:f9:76:be:1f:b0: 50:af:0a:95:5d:7e:84:42:89:d9:6c:73:f3:fb:1f:d9:9b:84: 1c:28:44:58:12:a3:25:f2:e8:19:ef:0d:c2:60:48:40:c4:dc: fc:9b:2d:ec:e7:a5:89:8d:7a:93:8a:b6:f3:13:41:f4:04:e3: 17:bd:16:28:29:35:ee:d6:69:28:b6:ab:10:2d:92:97:4d:de: 40:5e:e3:3e:2d:9f:8f:70:46:88:e1:35:b9:41:b1:26:66:ad: 10:54:c3:57:d6:0e:90:46:a0:29:5c:30:0d:b4:b4:55:cb:25: 3e:94:f7:70:a4:07:88:2a:59:df:b4:63:18:65:bd:ed:73:3d: be:58:73:3c:f3:e6:5f:0b:28:28:45:9f:69:c5:c6:9a:22:f5: ee:93:0d:e1 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE+NvYLtMNjj8ggca4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTEyMDYxNloXDTI5MDExMDA0NTk0MVowLzEtMCsGA1UEAxMk NWEwZDA3YTgtNzYzYi00Y2NmLThjYWUtZTAxYWQ2NmFmMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDU2W0Z0ZHFgDdJ5NdDQaRTSx/ElohJve+9c XV1N43OGM73KXdN6WSsgUuunSv6GY62Cvfu1EGfGH89jlUZe3PM9bYbLS1DhBOKG 9z0V9rzFNKTczg9++jmNnsw4KSS8eXMTHe7m/nfVUeaGlumEb2VlBlm+qxbcuj8K r4yWQGFZT+phxQ3ngW/i6GfFblFf9xjA5AR6UpVO98SSw20/TsOBlmXbxTve1tiF LS+2Ov1WGxCkwOm5nkoJKK/k1jm7/I+Qv8xPjG951yiZpPebqSY9ayB82d7cLREL 6WJFchTTAFR0Qu/ogePRrpJ++UulTTZsiXeKAR302QrZCJEu5QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDTzQLpqmlM2MxoKKs13OgoLUu1LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS81 YTBkMDdhOC03NjNiLTRjY2YtOGNhZS1lMDFhZDY2YWYyZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzVhMGQwN2E4LTc2M2ItNGNjZi04 Y2FlLWUwMWFkNjZhZjJlNS81YTBkMDdhOC03NjNiLTRjY2YtOGNhZS1lMDFhZDY2 YWYyZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXphwwDwQCAAIwCQMHBCYCCB9AADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGJnQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFWam2J3ZoQcT65wiWzIYz2XL u/AMjtZ5JHRYyY0Ysy1tzQzbMV56t9efL9oenDhQ+c2pnxJVqVsY6El9r7Qs6L30 e5Oiao37s8yjzZ90tW2jYR8rmeiSY7TQ6FFHxG+EIt12OHHbLPl2vh+wUK8KlV1+ hEKJ2Wxz8/sf2ZuEHChEWBKjJfLoGe8NwmBIQMTc/Jst7OeliY16k4q28xNB9ATj F70WKCk17tZpKLarEC2Sl03eQF7jPi2fj3BGiOE1uUGxJmatEFTDV9YOkEagKVww DbS0VcslPpT3cKQHiCpZ37RjGGW97XM9vlhzPPPmXwsoKEWfacXGmiL17pMN4Q== -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:17 2026 by rpki-client