$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/773679d9-e904-46b3-9fd7-25d3c0a3c63d.cer File: 773679d9-e904-46b3-9fd7-25d3c0a3c63d.cer (raw, json) Hash identifier: GFTXmeAxgaqShTQn3JxGLSIZRSKukT69Mm9pRGBYuqc= Subject key identifier: 3A:5B:60:E8:4C:56:BF:3D:1F:74:1B:4A:FF:E4:96:80:5C:17:B6:39 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5EEF5E67A846E50951DA5D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/773679d9-e904-46b3-9fd7-25d3c0a3c63d/773679d9-e904-46b3-9fd7-25d3c0a3c63d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/773679d9-e904-46b3-9fd7-25d3c0a3c63d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 17:43:44 +0000 Certificate not after: Thu 04 Jan 2029 18:43:44 +0000 Subordinate resources: AS: 399549 IP: 205.167.20.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:ef:5e:67:a8:46:e5:09:51:da:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 17:43:44 2026 GMT Not After : Jan 4 18:43:44 2029 GMT Subject: CN=773679d9-e904-46b3-9fd7-25d3c0a3c63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:42:16:d1:2b:e7:3b:b8:e3:51:a6:eb:c5: c9:b7:51:22:42:7d:88:98:95:01:21:31:69:90:52: 90:72:6a:ac:10:9a:3b:06:b8:28:58:c4:c6:c2:a2: ce:d6:b2:b2:01:b8:ef:a4:55:6a:75:4a:03:7f:77: 06:ec:e7:11:0d:fd:b0:41:55:83:3b:45:e4:1c:7c: 34:0f:75:39:8a:f9:52:d7:55:13:f1:0b:b4:4d:b7: 3d:02:9d:3d:80:0e:5f:69:80:47:ef:e0:ad:dc:a0: 41:51:e7:60:d0:ff:22:bb:32:8c:e2:fa:10:8d:ae: 29:20:71:0a:a4:95:fa:83:96:1c:9c:18:6c:17:44: db:cb:50:0c:5c:a7:4a:ee:cf:60:72:8e:ac:ad:78: 28:fe:9a:b3:22:c7:7e:b6:d2:e5:ea:4b:b6:5b:fb: 30:ab:8c:cd:cb:aa:6a:4f:c1:97:79:59:2f:ea:6a: f4:2f:03:ac:17:bd:e2:f1:f8:9e:22:3a:0f:7e:4f: 05:1a:c7:56:08:19:cb:3d:74:df:a1:05:36:51:51: 48:69:df:c4:65:e6:86:a8:8c:af:b4:4e:64:48:11: 44:be:25:29:fd:4c:ae:7a:da:4d:39:c8:f0:40:74: 0e:cf:4a:6d:8f:07:e7:72:40:82:2f:28:7a:df:0c: c0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5B:60:E8:4C:56:BF:3D:1F:74:1B:4A:FF:E4:96:80:5C:17:B6:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/773679d9-e904-46b3-9fd7-25d3c0a3c63d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/773679d9-e904-46b3-9fd7-25d3c0a3c63d/773679d9-e904-46b3-9fd7-25d3c0a3c63d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 205.167.20.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399549 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7e:20:7c:61:e4:58:41:2f:b4:2a:da:4f:94:96:74:61:8f: f0:15:31:f8:44:56:8d:3b:2f:18:dc:19:26:f4:6e:3c:18:48: 39:e2:a3:93:87:fe:7e:97:b6:c6:da:b2:c5:b1:26:cf:00:03: 7c:47:0c:4b:9e:63:84:51:f6:ed:64:e9:26:ca:8e:da:f4:12: be:9f:05:94:05:fd:a2:21:d6:31:b2:dc:63:82:8e:da:47:52: 68:de:46:82:67:e5:43:5f:9b:8a:b9:85:10:8b:79:67:66:b1: 92:48:46:bd:20:3c:5d:47:ec:6e:de:dc:0b:49:43:37:46:91: 17:06:16:df:41:7b:58:86:85:bd:6b:27:5a:8e:57:d6:bf:fc: 75:5e:29:74:88:ad:af:7b:56:d2:34:0e:35:43:c0:6d:f1:2d: 9a:8d:af:a2:a5:bb:f7:e5:69:91:27:49:a9:c2:dc:d2:9d:dd: 11:fb:42:4a:e8:e2:0f:e2:51:51:70:93:18:d6:17:fe:ac:6b: d0:02:d9:d8:fb:74:23:94:27:73:a4:56:c9:5a:ab:2d:e2:77: 9a:69:a7:cb:a6:d8:ba:61:06:05:b3:b8:2f:13:4e:9b:d2:be: 05:6b:83:af:13:3b:82:3e:1d:37:dd:87:36:1e:2e:c5:11:45: f5:33:c0:5c -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9e715nqEblCVHaXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjE3NDM0NFoXDTI5MDEwNDE4NDM0NFowLzEtMCsGA1UEAxMk NzczNjc5ZDktZTkwNC00NmIzLTlmZDctMjVkM2MwYTNjNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2BCFtEr5zu441Gm68XJt1EiQn2ImJUBITFp kFKQcmqsEJo7BrgoWMTGwqLO1rKyAbjvpFVqdUoDf3cG7OcRDf2wQVWDO0XkHHw0 D3U5ivlS11UT8Qu0Tbc9Ap09gA5faYBH7+Ct3KBBUedg0P8iuzKM4voQja4pIHEK pJX6g5YcnBhsF0Tby1AMXKdK7s9gco6srXgo/pqzIsd+ttLl6ku2W/swq4zNy6pq T8GXeVkv6mr0LwOsF73i8fieIjoPfk8FGsdWCBnLPXTfoQU2UVFIad/EZeaGqIyv tE5kSBFEviUp/UyuetpNOcjwQHQOz0ptjwfnckCCLyh63wzAvQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDpbYOhMVr89H3QbSv/kloBcF7Y5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 NzM2NzlkOS1lOTA0LTQ2YjMtOWZkNy0yNWQzYzBhM2M2M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzc3MzY3OWQ5LWU5MDQtNDZiMy05 ZmQ3LTI1ZDNjMGEzYzYzZC83NzM2NzlkOS1lOTA0LTQ2YjMtOWZkNy0yNWQzYzBh M2M2M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHNpxQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhi9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA1+IHxh5FhBL7Qq2k+UlnRhj/AVMfhEVo07LxjcGSb0bjwY SDnio5OH/n6XtsbassWxJs8AA3xHDEueY4RR9u1k6SbKjtr0Er6fBZQF/aIh1jGy 3GOCjtpHUmjeRoJn5UNfm4q5hRCLeWdmsZJIRr0gPF1H7G7e3AtJQzdGkRcGFt9B e1iGhb1rJ1qOV9a//HVeKXSIra97VtI0DjVDwG3xLZqNr6Klu/flaZEnSanC3NKd 3RH7Qkro4g/iUVFwkxjWF/6sa9AC2dj7dCOUJ3OkVslaqy3id5ppp8um2LphBgWz uC8TTpvSvgVrg68TO4I+HTfdhzYeLsURRfUzwFw= -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:38 2026 by rpki-client