$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7a69da94-0ede-4d0a-8329-f3c33e688778.cer File: 7a69da94-0ede-4d0a-8329-f3c33e688778.cer (raw, json) Hash identifier: mGyCj/AsSXip3Q3mM8u8aH6X6UQTDArs0UG/sqEPAr0= Subject key identifier: 8C:E1:59:4B:5C:62:DD:67:47:D5:26:D4:E2:06:1A:5E:EB:E7:C5:73 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4BBA37CCDF35EBB26C864A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7a69da94-0ede-4d0a-8329-f3c33e688778/7a69da94-0ede-4d0a-8329-f3c33e688778.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7a69da94-0ede-4d0a-8329-f3c33e688778/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 20:36:17 +0000 Certificate not after: Thu 28 Dec 2028 21:36:17 +0000 Subordinate resources: AS: 40646 IP: 199.188.158.0/24 IP: 2602:fe67::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:ba:37:cc:df:35:eb:b2:6c:86:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 25 20:36:17 2026 GMT Not After : Dec 28 21:36:17 2028 GMT Subject: CN=7a69da94-0ede-4d0a-8329-f3c33e688778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8f:ea:2c:86:e6:98:9c:8f:30:53:2a:81:7e: b6:01:60:8a:17:ac:1a:4c:0d:19:18:93:ff:5b:de: 55:ed:5d:29:dc:a6:b7:71:71:93:b5:f4:56:65:5a: 0a:03:a6:ac:e4:f0:21:14:ae:18:18:52:67:e3:f0: 2a:dc:c2:b3:1b:1e:c0:50:20:64:f0:92:cd:91:f2: 8a:4b:16:f6:3f:e7:39:49:04:b0:0c:e5:6c:48:db: e9:79:28:11:fe:78:50:28:7f:ee:60:99:1b:5b:48: ee:7a:7d:bc:04:a9:94:a9:ea:ca:a9:ba:06:32:6a: 97:f6:d4:fb:83:7d:e3:8a:bd:04:3c:51:f9:92:c8: 76:53:a0:fc:c2:71:4f:db:71:37:a4:3e:6a:7f:68: 5c:59:5b:79:16:e2:fc:26:81:fc:eb:51:e7:40:f0: 03:31:4f:77:a9:5e:fe:cb:96:8d:53:66:7d:9e:a6: ef:25:73:ec:7e:7c:c4:28:bc:9a:2b:8e:47:e8:50: a8:89:1d:f7:f9:a3:9e:e1:49:81:53:f4:64:71:a8: a7:43:05:56:7a:76:98:23:c8:cd:77:e9:83:a0:f2: 19:42:c8:bf:a4:0a:b1:da:27:66:bd:2f:66:5b:86: 93:4a:e9:8c:33:ca:1e:ae:94:0e:7e:90:43:72:4a: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E1:59:4B:5C:62:DD:67:47:D5:26:D4:E2:06:1A:5E:EB:E7:C5:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7a69da94-0ede-4d0a-8329-f3c33e688778/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7a69da94-0ede-4d0a-8329-f3c33e688778/7a69da94-0ede-4d0a-8329-f3c33e688778.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.188.158.0/24 IPv6: 2602:fe67::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40646 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:00:cf:1a:69:5c:7e:2b:6e:27:0e:c7:87:51:f4:c3:9c:98: aa:51:5b:3c:31:90:03:ed:a0:37:52:ce:12:b6:48:b1:d5:ca: 52:94:a0:31:16:02:ef:a5:d1:f7:dd:7f:f6:ed:25:0e:cb:ce: 58:66:09:8a:66:3f:5f:c1:08:7f:6f:ae:e2:bf:b4:ba:75:df: ee:7b:b3:7f:b3:8a:f5:8a:6c:67:3d:e8:06:9b:a1:42:69:75: 11:a1:d8:da:a0:ba:eb:cf:3b:ad:59:33:05:f5:a5:51:88:cb: 54:e2:ea:9a:cb:5d:96:74:d9:0c:80:45:ae:4b:f9:4c:75:aa: 45:cf:76:cb:21:24:51:e5:6f:e1:6f:7c:28:22:28:48:26:c3: 5f:8f:3f:f5:90:bb:45:eb:2f:ac:4e:2a:f0:82:96:14:4a:99: 41:ac:2e:c8:a9:8d:6d:43:e5:fc:bb:2b:96:07:8d:2f:14:06: 0f:b3:4e:33:79:5a:93:47:39:76:b2:7a:04:1c:8d:ac:1f:89: 76:7d:35:7b:c9:d5:77:21:e1:84:9f:be:63:46:4e:2a:4d:bb: 4e:4a:88:dd:d2:3c:bb:4e:d7:66:8c:27:0d:fa:4b:f5:74:be: f7:65:84:36:42:6d:d6:33:83:be:c8:e0:c5:10:6b:0d:c1:0d: 69:38:01:2c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9LujfM3zXrsmyGSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyNTIwMzYxN1oXDTI4MTIyODIxMzYxN1owLzEtMCsGA1UEAxMk N2E2OWRhOTQtMGVkZS00ZDBhLTgzMjktZjNjMzNlNjg4Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo/qLIbmmJyPMFMqgX62AWCKF6waTA0ZGJP/ W95V7V0p3Ka3cXGTtfRWZVoKA6as5PAhFK4YGFJn4/Aq3MKzGx7AUCBk8JLNkfKK Sxb2P+c5SQSwDOVsSNvpeSgR/nhQKH/uYJkbW0juen28BKmUqerKqboGMmqX9tT7 g33jir0EPFH5ksh2U6D8wnFP23E3pD5qf2hcWVt5FuL8JoH861HnQPADMU93qV7+ y5aNU2Z9nqbvJXPsfnzEKLyaK45H6FCoiR33+aOe4UmBU/RkcainQwVWenaYI8jN d+mDoPIZQsi/pAqx2idmvS9mW4aTSumMM8oerpQOfpBDckph/wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIzhWUtcYt1nR9Um1OIGGl7r58VzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 YTY5ZGE5NC0wZWRlLTRkMGEtODMyOS1mM2MzM2U2ODg3NzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzdhNjlkYTk0LTBlZGUtNGQwYS04 MzI5LWYzYzMzZTY4ODc3OC83YTY5ZGE5NC0wZWRlLTRkMGEtODMyOS1mM2MzM2U2 ODg3NzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHvJ4wDgQCAAIwCAMGBCYC/mcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCexjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrAM8aaVx+K24nDseHUfTDnJiq UVs8MZAD7aA3Us4Stkix1cpSlKAxFgLvpdH33X/27SUOy85YZgmKZj9fwQh/b67i v7S6dd/ue7N/s4r1imxnPegGm6FCaXURodjaoLrrzzutWTMF9aVRiMtU4uqay12W dNkMgEWuS/lMdapFz3bLISRR5W/hb3woIihIJsNfjz/1kLtF6y+sTirwgpYUSplB rC7IqY1tQ+X8uyuWB40vFAYPs04zeVqTRzl2snoEHI2sH4l2fTV7ydV3IeGEn75j Rk4qTbtOSojd0jy7TtdmjCcN+kv1dL73ZYQ2Qm3WM4O+yODFEGsNwQ1pOAEs -----END CERTIFICATE-----Generated at Sun Nov 1 08:31:06 2026 by rpki-client