$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65.cer File: 600a0c34-b295-4a8a-881f-3680b0957d65.cer (raw, json) Hash identifier: 2Rc2muAC+nDpbWMwxMHejkP/1k6x2pTO2diAxh8w/Yg= Subject key identifier: CF:1E:6D:31:0E:A9:F7:89:CF:5F:F7:84:CD:F8:40:3E:89:48:CD:D3 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4584A747650D03CEE365D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/600a0c34-b295-4a8a-881f-3680b0957d65.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 15:13:30 +0000 Certificate not after: Tue 26 Dec 2028 16:13:30 +0000 Subordinate resources: AS: 395071 IP: 104.192.120.0/21 IP: 161.129.96.0/19 IP: 192.64.128.0/20 IP: 2604:16a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:84:a7:47:65:0d:03:ce:e3:65:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 15:13:30 2026 GMT Not After : Dec 26 16:13:30 2028 GMT Subject: CN=600a0c34-b295-4a8a-881f-3680b0957d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:68:56:85:e0:f1:6c:97:8c:78:30:f2:15:27: 26:b7:b7:80:6a:d0:f6:95:d8:88:03:a0:b3:cc:68: f3:e8:ae:74:b9:89:d7:fb:49:a6:4d:0b:40:c6:64: 9e:22:62:7e:76:a6:9e:e2:8e:09:32:d0:a6:2c:6a: 4a:1d:58:3a:98:68:3c:19:f1:61:b0:9f:de:d0:e6: 51:df:85:8c:6a:5b:e1:53:4f:76:21:d4:a4:1f:cc: 7a:95:59:cd:07:b8:fc:6c:08:95:c9:c4:08:05:cb: 30:f4:3b:54:3d:a4:c0:bd:95:4c:55:70:5e:71:38: 19:31:bc:5a:cc:2f:90:1a:e5:d9:34:38:81:ef:b8: f5:b2:68:33:fe:f7:ec:01:83:fd:32:d7:49:4d:b2: 80:c8:da:c0:f4:ba:fd:dd:1a:8f:19:52:ff:1d:3b: 5f:1c:da:a4:25:ec:70:2e:79:4f:2e:4b:b5:fd:3d: c8:38:53:0b:45:a4:11:66:d7:55:b5:1d:19:41:50: 2e:ab:03:7a:76:7d:cf:df:28:a3:9c:f4:09:7f:62: 6e:ac:a6:03:a2:d1:08:5b:20:41:59:f3:38:05:2c: 11:93:57:9d:a9:92:a6:b0:83:03:4a:83:e8:15:64: 01:cd:38:78:a0:2d:09:b5:30:6b:6e:97:0c:38:b2: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1E:6D:31:0E:A9:F7:89:CF:5F:F7:84:CD:F8:40:3E:89:48:CD:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/600a0c34-b295-4a8a-881f-3680b0957d65.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 104.192.120.0/21 161.129.96.0/19 192.64.128.0/20 IPv6: 2604:16a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a7:82:7f:d4:8f:bb:5c:92:02:e3:6c:68:7f:c9:ef:83:b4: 67:38:1d:a3:b5:be:30:af:ae:76:d7:6c:f7:4a:f2:01:af:49: 65:2f:cb:9d:fc:4b:1b:f4:3b:19:e3:56:91:73:fa:c8:4a:9f: dc:46:ce:d0:a4:f3:26:d1:02:8e:89:ab:65:a2:09:ba:e9:c1: ef:58:66:49:7b:9b:f2:32:bc:5d:c9:5b:de:21:d3:cd:ae:3d: 8f:86:8a:c1:48:38:14:1d:a9:54:38:0a:5d:4b:10:5f:ed:c5: 7f:00:7c:90:45:32:b7:e6:ca:c6:43:b2:c6:d8:32:b4:9d:7e: 5f:42:c8:d3:3b:a3:e2:e3:ed:cd:6e:36:df:ab:00:71:aa:fc: 02:1e:a7:16:96:06:bd:50:fd:f2:a4:29:77:0e:1e:39:55:59: 7f:b3:f8:dc:39:ac:17:35:8c:2b:47:f3:b9:d1:a8:c0:80:7b: e1:d6:e4:65:3f:f7:b7:46:f4:10:1c:5e:82:4f:cb:a8:04:20: 63:a7:eb:11:8f:18:e0:84:a4:8a:86:fd:cf:9e:d8:8c:04:f8: 08:99:94:5c:ef:53:02:c4:8b:1a:5f:f4:d6:4e:67:47:61:13: 11:2a:6c:d4:e8:8b:a5:40:7d:c6:ba:54:4b:ba:39:37:2a:0c: c7:d0:30:7b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9FhKdHZQ0DzuNl2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzE1MTMzMFoXDTI4MTIyNjE2MTMzMFowLzEtMCsGA1UEAxMk NjAwYTBjMzQtYjI5NS00YThhLTg4MWYtMzY4MGIwOTU3ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GhWheDxbJeMeDDyFScmt7eAatD2ldiIA6Cz zGjz6K50uYnX+0mmTQtAxmSeImJ+dqae4o4JMtCmLGpKHVg6mGg8GfFhsJ/e0OZR 34WMalvhU092IdSkH8x6lVnNB7j8bAiVycQIBcsw9DtUPaTAvZVMVXBecTgZMbxa zC+QGuXZNDiB77j1smgz/vfsAYP9MtdJTbKAyNrA9Lr93RqPGVL/HTtfHNqkJexw LnlPLku1/T3IOFMLRaQRZtdVtR0ZQVAuqwN6dn3P3yijnPQJf2JurKYDotEIWyBB WfM4BSwRk1edqZKmsIMDSoPoFWQBzTh4oC0JtTBrbpcMOLKXZwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFM8ebTEOqfeJz1/3hM34QD6JSM3TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82 MDBhMGMzNC1iMjk1LTRhOGEtODgxZi0zNjgwYjA5NTdkNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzYwMGEwYzM0LWIyOTUtNGE4YS04 ODFmLTM2ODBiMDk1N2Q2NS82MDBhMGMzNC1iMjk1LTRhOGEtODgxZi0zNjgwYjA5 NTdkNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANowHgDBAWhgWADBATAQIAwDQQCAAIwBwMFACYE FqAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgc/MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABSngn/Uj7tc kgLjbGh/ye+DtGc4HaO1vjCvrnbXbPdK8gGvSWUvy538Sxv0OxnjVpFz+shKn9xG ztCk8ybRAo6Jq2WiCbrpwe9YZkl7m/IyvF3JW94h082uPY+GisFIOBQdqVQ4Cl1L EF/txX8AfJBFMrfmysZDssbYMrSdfl9CyNM7o+Lj7c1uNt+rAHGq/AIepxaWBr1Q /fKkKXcOHjlVWX+z+Nw5rBc1jCtH87nRqMCAe+HW5GU/97dG9BAcXoJPy6gEIGOn 6xGPGOCEpIqG/c+e2IwE+AiZlFzvUwLEixpf9NZOZ0dhExEqbNToi6VAfca6VEu6 OTcqDMfQMHs= -----END CERTIFICATE-----Generated at Sun Nov 1 01:40:37 2026 by rpki-client