$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/630625d3-e164-453a-962f-89aed4d771f0.cer File: 630625d3-e164-453a-962f-89aed4d771f0.cer (raw, json) Hash identifier: +EMt9jGTot78lw/NtK7jhWPxCYi9/XczyXUHH/u9Y4I= Subject key identifier: DC:57:C4:15:2E:C9:B6:C3:A2:20:6C:DB:9C:84:D5:7B:36:F8:BC:A1 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F72AE0B3DCFA9824E6B135080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/630625d3-e164-453a-962f-89aed4d771f0/630625d3-e164-453a-962f-89aed4d771f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/630625d3-e164-453a-962f-89aed4d771f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 19:28:17 +0000 Certificate not after: Thu 11 Jan 2029 20:28:17 +0000 Subordinate resources: AS: 402405 IP: 139.64.146.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:ae:0b:3d:cf:a9:82:4e:6b:13:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 19:28:17 2026 GMT Not After : Jan 11 20:28:17 2029 GMT Subject: CN=630625d3-e164-453a-962f-89aed4d771f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:24:9f:62:b3:d1:12:fd:9f:f8:f9:95:56: 90:46:17:ae:af:c1:bc:3f:00:2b:4b:4a:e5:56:e9: df:10:46:26:d0:84:ec:8a:36:45:f9:a0:3f:e2:ec: d9:70:1c:21:a5:8f:1f:0c:9a:2d:a0:f5:4b:3d:eb: 93:c3:47:04:0b:0d:96:89:6e:85:47:da:12:0f:eb: de:77:a3:cd:79:02:44:9d:4f:a8:74:52:25:ee:53: b8:98:56:d4:dc:64:7c:65:cb:79:83:23:b6:67:fd: 82:83:f8:d5:ee:00:a9:5c:cf:e3:58:d8:ac:52:e3: 77:d8:46:d4:be:54:f3:a7:08:ed:44:c1:82:7b:6f: ca:80:fb:4f:31:f2:37:3d:3f:3d:f0:60:8a:ec:3c: 3c:6a:04:3f:ca:da:36:36:fe:e8:24:91:6f:d2:ae: cf:30:a9:dc:4b:92:6b:f6:2d:c6:0b:46:45:02:47: 1a:7a:65:47:df:d9:71:1d:c6:86:b4:a0:b4:64:49: cf:80:b0:f8:27:46:d0:bc:de:0c:7c:3b:ae:8c:63: b6:e5:25:d3:b3:90:d3:d6:10:aa:02:b0:ae:15:9a: 59:73:b4:1e:04:dc:5e:ec:9b:d4:6c:3a:8a:a0:81: af:2f:27:ad:49:b9:64:4b:1a:4e:4c:18:a3:c9:b7: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:57:C4:15:2E:C9:B6:C3:A2:20:6C:DB:9C:84:D5:7B:36:F8:BC:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/630625d3-e164-453a-962f-89aed4d771f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/630625d3-e164-453a-962f-89aed4d771f0/630625d3-e164-453a-962f-89aed4d771f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 139.64.146.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402405 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:79:31:65:8f:11:2a:30:07:74:97:82:c3:89:69:2c:51:7b: 61:e2:8d:60:4b:d0:15:aa:f0:0d:98:91:22:3a:28:0a:18:51: 0d:d7:4d:f2:6d:10:15:32:c4:ee:7f:d7:2c:71:7a:22:3b:76: 12:c0:fe:1d:93:10:1d:72:18:1d:fd:10:82:c7:1b:3e:a2:50: 3e:c6:8d:4e:35:dd:67:d1:5f:af:f6:e3:91:21:80:69:87:a5: 75:62:ed:37:a5:2c:87:5c:3c:df:f2:15:43:11:fd:ea:90:be: 4e:31:47:f3:79:6b:5d:48:86:bc:b7:84:6b:54:bb:28:0c:f0: b6:c3:7e:db:20:e1:46:62:20:79:37:db:f9:a5:d4:25:91:89: 91:ea:2a:38:fb:5a:22:ef:d5:60:1a:89:61:a2:05:87:c9:73: ce:2f:a7:70:05:05:c4:d5:4f:2a:6b:da:6f:8e:b9:f8:f1:3f: 03:5f:32:94:4c:0e:4c:35:bf:ad:a7:57:0b:03:3f:ff:71:c6: 15:de:8d:ef:5e:fb:4f:5d:ad:19:31:3e:cd:37:0e:c7:5a:ac: c0:81:09:c7:09:18:eb:6f:93:74:47:83:5a:62:8f:eb:5d:31: 85:e9:1a:b6:2f:11:ef:ac:19:41:5d:1b:db:61:89:3c:94:fb: fa:1e:96:67 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9yrgs9z6mCTmsTUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTE5MjgxN1oXDTI5MDExMTIwMjgxN1owLzEtMCsGA1UEAxMk NjMwNjI1ZDMtZTE2NC00NTNhLTk2MmYtODlhZWQ0ZDc3MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM0kn2Kz0RL9n/j5lVaQRheur8G8PwArS0rl VunfEEYm0ITsijZF+aA/4uzZcBwhpY8fDJotoPVLPeuTw0cECw2WiW6FR9oSD+ve d6PNeQJEnU+odFIl7lO4mFbU3GR8Zct5gyO2Z/2Cg/jV7gCpXM/jWNisUuN32EbU vlTzpwjtRMGCe2/KgPtPMfI3PT898GCK7Dw8agQ/yto2Nv7oJJFv0q7PMKncS5Jr 9i3GC0ZFAkcaemVH39lxHcaGtKC0ZEnPgLD4J0bQvN4MfDuujGO25SXTs5DT1hCq ArCuFZpZc7QeBNxe7JvUbDqKoIGvLyetSblkSxpOTBijybdesQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNxXxBUuybbDoiBs25yE1Xs2+LyhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82 MzA2MjVkMy1lMTY0LTQ1M2EtOTYyZi04OWFlZDRkNzcxZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzYzMDYyNWQzLWUxNjQtNDUzYS05 NjJmLTg5YWVkNGQ3NzFmMC82MzA2MjVkMy1lMTY0LTQ1M2EtOTYyZi04OWFlZDRk NzcxZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACLQJIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiPlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC15MWWPESowB3SXgsOJaSxRe2HijWBL0BWq8A2YkSI6KAoY UQ3XTfJtEBUyxO5/1yxxeiI7dhLA/h2TEB1yGB39EILHGz6iUD7GjU413WfRX6/2 45EhgGmHpXVi7TelLIdcPN/yFUMR/eqQvk4xR/N5a11Ihry3hGtUuygM8LbDftsg 4UZiIHk32/ml1CWRiZHqKjj7WiLv1WAaiWGiBYfJc84vp3AFBcTVTypr2m+Oufjx PwNfMpRMDkw1v62nVwsDP/9xxhXeje9e+09drRkxPs03DsdarMCBCccJGOtvk3RH g1pij+tdMYXpGrYvEe+sGUFdG9thiTyU+/oelmc= -----END CERTIFICATE-----Generated at Thu Oct 22 21:24:31 2026 by rpki-client