$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7acd97b3-296a-4705-908e-4796b126b13a.cer File: 7acd97b3-296a-4705-908e-4796b126b13a.cer (raw, json) Hash identifier: U06eg2Ottl16TWH3e4awxAUbqfn0G8h4Qo7bMgRJ6yA= Subject key identifier: 93:E1:E1:6F:C1:BE:B9:0F:9C:80:9D:03:F6:B1:3B:03:BE:F7:2A:AF Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6F9398565EAE79F4A848A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7acd97b3-296a-4705-908e-4796b126b13a/7acd97b3-296a-4705-908e-4796b126b13a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7acd97b3-296a-4705-908e-4796b126b13a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 16:47:34 +0000 Certificate not after: Wed 10 Jan 2029 17:47:34 +0000 Subordinate resources: AS: 398316 IP: 64.32.42.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:93:98:56:5e:ae:79:f4:a8:48:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 16:47:34 2026 GMT Not After : Jan 10 17:47:34 2029 GMT Subject: CN=7acd97b3-296a-4705-908e-4796b126b13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:3b:1d:67:38:0f:91:94:c4:1b:f5:6f:6d: bf:09:94:4d:9f:9c:9c:a0:02:86:70:5f:4a:16:42: 04:97:e9:ba:26:31:27:9c:f4:17:b4:d2:05:44:5e: d9:51:a8:bc:18:fa:70:82:26:43:80:04:14:a7:66: 55:96:71:46:fb:b8:6e:e2:ce:99:b5:54:c7:88:e5: fc:c2:c7:d2:7a:f7:1e:3c:c8:f7:35:03:ea:c4:40: a2:a0:1b:cd:83:7e:3c:29:f2:70:d6:41:f3:fe:84: 8b:13:87:62:fc:70:cd:bd:b4:9a:6c:0b:c8:ca:f7: 2a:a9:f2:dc:b5:b4:6b:81:e2:15:7e:cb:e5:8f:c2: 1e:88:6e:d5:5a:12:ae:7d:07:2b:95:e1:b0:5b:61: 13:96:43:fa:13:76:c8:18:b4:a6:b4:5a:39:7b:15: 6d:8a:2e:f9:5e:37:10:e9:7b:1c:2a:3a:55:a5:d9: ae:5f:2b:e5:17:f9:e6:9c:d3:54:f8:ba:50:66:0b: 37:db:a2:c4:9b:51:26:c9:42:af:de:74:75:3d:51: 24:1e:f0:0b:1e:26:c5:7c:63:71:cc:e6:30:bf:d2: f7:b0:9a:40:fe:5b:6e:cd:23:51:12:7b:6c:ea:e1: 3a:91:b9:18:5b:88:14:ad:b5:a7:35:e2:97:9a:6b: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E1:E1:6F:C1:BE:B9:0F:9C:80:9D:03:F6:B1:3B:03:BE:F7:2A:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7acd97b3-296a-4705-908e-4796b126b13a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7acd97b3-296a-4705-908e-4796b126b13a/7acd97b3-296a-4705-908e-4796b126b13a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 64.32.42.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398316 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:16:23:e2:2f:64:50:ed:d9:bd:bc:d6:ab:95:08:82:c1:dd: b8:9f:fd:51:40:77:97:00:15:71:36:32:2c:70:9c:b2:22:f4: 4d:84:d6:e7:d8:ef:6b:c0:ea:01:86:a5:7c:e1:e2:2d:00:51: 59:9c:97:49:2b:8b:29:73:bf:e5:81:fb:9d:d7:39:26:68:2d: 03:9b:21:03:8e:bb:37:5c:ce:a0:ed:ea:ac:44:a2:15:51:d8: 95:68:6f:8c:e9:64:ff:da:b5:12:94:0a:0f:32:53:ef:fa:96: e6:a1:24:db:47:14:25:a0:8e:dd:9d:1c:84:0f:cc:41:44:56: 4f:f9:b4:c3:a4:5d:ed:70:6b:40:6e:1d:8c:cd:19:74:b2:bd: 68:29:ae:ae:b5:1a:0c:37:10:91:78:03:9d:58:c5:c6:19:4d: 97:ef:41:48:46:d7:de:1f:e9:5c:a3:09:ca:77:09:16:e3:12: b3:78:b0:96:36:03:95:74:1a:eb:8a:4c:ac:f6:e8:d1:53:70: 05:f7:83:c9:61:eb:7a:24:e8:55:6b:6e:2b:73:e6:67:1a:63: 23:15:19:a5:8d:bf:91:61:52:34:6c:52:58:4f:76:7e:0a:1a: 7d:32:6e:5b:5c:18:5e:5d:0c:2a:76:f6:45:55:34:1c:74:14: 32:3c:86:5b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9vk5hWXq559KhIqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODE2NDczNFoXDTI5MDExMDE3NDczNFowLzEtMCsGA1UEAxMk N2FjZDk3YjMtMjk2YS00NzA1LTkwOGUtNDc5NmIxMjZiMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPU7HWc4D5GUxBv1b22/CZRNn5ycoAKGcF9K FkIEl+m6JjEnnPQXtNIFRF7ZUai8GPpwgiZDgAQUp2ZVlnFG+7hu4s6ZtVTHiOX8 wsfSevcePMj3NQPqxECioBvNg348KfJw1kHz/oSLE4di/HDNvbSabAvIyvcqqfLc tbRrgeIVfsvlj8IeiG7VWhKufQcrleGwW2ETlkP6E3bIGLSmtFo5exVtii75XjcQ 6XscKjpVpdmuXyvlF/nmnNNU+LpQZgs326LEm1EmyUKv3nR1PVEkHvALHibFfGNx zOYwv9L3sJpA/ltuzSNREnts6uE6kbkYW4gUrbWnNeKXmmta+wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJPh4W/BvrkPnICdA/axOwO+9yqvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 YWNkOTdiMy0yOTZhLTQ3MDUtOTA4ZS00Nzk2YjEyNmIxM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzdhY2Q5N2IzLTI5NmEtNDcwNS05 MDhlLTQ3OTZiMTI2YjEzYS83YWNkOTdiMy0yOTZhLTQ3MDUtOTA4ZS00Nzk2YjEy NmIxM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABAICowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhPsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABkWI+IvZFDt2b281quVCILB3bif/VFAd5cAFXE2MixwnLIi 9E2E1ufY72vA6gGGpXzh4i0AUVmcl0kriylzv+WB+53XOSZoLQObIQOOuzdczqDt 6qxEohVR2JVob4zpZP/atRKUCg8yU+/6luahJNtHFCWgjt2dHIQPzEFEVk/5tMOk Xe1wa0BuHYzNGXSyvWgprq61Ggw3EJF4A51YxcYZTZfvQUhG194f6VyjCcp3CRbj ErN4sJY2A5V0GuuKTKz26NFTcAX3g8lh63ok6FVrbitz5mcaYyMVGaWNv5FhUjRs UlhPdn4KGn0ybltcGF5dDCp29kVVNBx0FDI8hls= -----END CERTIFICATE-----Generated at Wed Nov 4 05:38:37 2026 by rpki-client