$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7c41562a-0a5b-4e48-989e-4e5ee0b3fc35.cer File: 7c41562a-0a5b-4e48-989e-4e5ee0b3fc35.cer (raw, json) Hash identifier: 2PMz9OrLapH3tjFfWLmEfxEtYL786W86C5tuRqzxpNw= Subject key identifier: 13:87:7C:8E:17:E9:5A:B3:B0:0F:4D:26:88:6C:8E:54:4B:7A:01:E3 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F457A7A24F0CD8F5E0E87D800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7c41562a-0a5b-4e48-989e-4e5ee0b3fc35/7c41562a-0a5b-4e48-989e-4e5ee0b3fc35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7c41562a-0a5b-4e48-989e-4e5ee0b3fc35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 14:53:00 +0000 Certificate not after: Tue 26 Dec 2028 15:53:00 +0000 Subordinate resources: AS: 18621 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:7a:7a:24:f0:cd:8f:5e:0e:87:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 14:53:00 2026 GMT Not After : Dec 26 15:53:00 2028 GMT Subject: CN=7c41562a-0a5b-4e48-989e-4e5ee0b3fc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:be:4a:ac:69:aa:4b:6a:6b:2f:4e:60:f2: c2:ea:18:50:fe:ef:43:ca:ed:f9:fa:98:6b:bc:08: 92:c3:18:1e:c0:83:84:dd:75:17:a5:8e:5d:1c:3b: 0b:ea:41:2b:22:c0:70:7c:45:e7:02:29:25:1e:f5: 09:bd:ac:25:89:ae:f8:25:c0:ea:43:91:f2:11:9d: 81:64:69:39:b8:53:90:6e:05:72:ff:6e:3b:29:24: 50:6f:83:94:f1:f8:0c:4a:be:3d:f9:24:e6:2c:64: fb:64:f5:41:e6:02:2d:3c:7b:93:54:93:18:3c:c2: 16:c4:4c:19:d9:ea:e8:51:c4:40:72:e9:fb:cd:2a: d1:7c:e0:ac:98:f2:7e:0f:e5:d9:77:3f:ee:33:fd: 47:5e:6e:28:b5:c2:e7:6f:8d:53:d8:f4:89:c5:76: c7:4e:32:cb:73:03:01:de:46:89:3f:b0:6d:10:6a: 28:3e:3b:e0:32:83:32:29:08:3a:0d:89:d4:7c:36: af:d8:de:f1:9f:5b:ab:25:8f:f9:82:76:22:ff:3d: 0d:5e:14:e6:30:50:73:52:59:41:ea:d6:e8:94:24: 76:6d:a1:7c:de:e9:c3:6c:f7:07:24:e7:60:a2:43: 6d:80:a6:f3:9f:0a:e3:ad:4f:1e:71:ea:98:48:68: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:87:7C:8E:17:E9:5A:B3:B0:0F:4D:26:88:6C:8E:54:4B:7A:01:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7c41562a-0a5b-4e48-989e-4e5ee0b3fc35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7c41562a-0a5b-4e48-989e-4e5ee0b3fc35/7c41562a-0a5b-4e48-989e-4e5ee0b3fc35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 18621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:db:42:e3:56:36:73:9c:9c:63:7e:b5:d9:e9:3b:7b:c9:7f: ca:1b:2e:e0:c4:b8:eb:31:df:01:54:85:e1:05:49:21:74:ec: ee:02:d2:4b:cc:00:d1:17:91:b9:a3:6d:f1:75:f9:5b:d8:45: 10:71:00:c1:58:3a:53:1a:a8:f8:be:6d:fc:23:53:e6:69:11: 7b:23:cc:a6:44:bb:80:96:a0:84:95:c5:66:81:1d:c3:82:72: 33:fa:00:16:ce:98:13:72:6c:95:c6:fb:5e:ea:9d:7f:b3:3b: 89:6a:d6:58:42:cc:b0:b3:aa:39:cb:4e:f0:2b:52:9a:7f:54: a9:bb:66:55:68:fd:f4:aa:a8:51:13:4c:d2:9d:69:01:a0:d5: bd:a1:f2:a2:1b:ca:6c:2b:8e:79:4b:bf:f0:67:95:8a:89:e1: 76:2d:11:a5:d2:4d:b7:c2:a6:fe:2f:39:bf:24:80:05:de:eb: 5c:a0:88:9f:70:e9:2c:fc:34:6c:c4:f7:3e:59:85:d2:b2:97: 9e:3f:70:bf:86:01:8c:8b:15:f1:f2:6e:8a:86:2a:ef:8c:45: 83:b7:ff:0c:d2:b3:b6:a6:2c:62:bc:f5:21:72:fc:e5:5c:8c: 3e:4a:e2:11:6f:6a:cc:d3:18:26:3d:21:86:1e:98:98:9d:29: f6:e4:04:eb -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE9Fenok8M2PXg6H2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzE0NTMwMFoXDTI4MTIyNjE1NTMwMFowLzEtMCsGA1UEAxMk N2M0MTU2MmEtMGE1Yi00ZTQ4LTk4OWUtNGU1ZWUwYjNmYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzi+Sqxpqktqay9OYPLC6hhQ/u9Dyu35+phr vAiSwxgewIOE3XUXpY5dHDsL6kErIsBwfEXnAiklHvUJvawlia74JcDqQ5HyEZ2B ZGk5uFOQbgVy/247KSRQb4OU8fgMSr49+STmLGT7ZPVB5gItPHuTVJMYPMIWxEwZ 2eroUcRAcun7zSrRfOCsmPJ+D+XZdz/uM/1HXm4otcLnb41T2PSJxXbHTjLLcwMB 3kaJP7BtEGooPjvgMoMyKQg6DYnUfDav2N7xn1urJY/5gnYi/z0NXhTmMFBzUllB 6tbolCR2baF83unDbPcHJOdgokNtgKbznwrjrU8eceqYSGgJaQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFBOHfI4X6VqzsA9NJohsjlRLegHjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 YzQxNTYyYS0wYTViLTRlNDgtOTg5ZS00ZTVlZTBiM2ZjMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzdjNDE1NjJhLTBhNWItNGU0OC05 ODllLTRlNWVlMGIzZmMzNS83YzQxNTYyYS0wYTViLTRlNDgtOTg5ZS00ZTVlZTBi M2ZjMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSL0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlNtC41Y2c5ycY3612ek7e8l/yhsu 4MS46zHfAVSF4QVJIXTs7gLSS8wA0ReRuaNt8XX5W9hFEHEAwVg6Uxqo+L5t/CNT 5mkReyPMpkS7gJaghJXFZoEdw4JyM/oAFs6YE3Jslcb7Xuqdf7M7iWrWWELMsLOq OctO8CtSmn9UqbtmVWj99KqoURNM0p1pAaDVvaHyohvKbCuOeUu/8GeVionhdi0R pdJNt8Km/i85vySABd7rXKCIn3DpLPw0bMT3PlmF0rKXnj9wv4YBjIsV8fJuioYq 74xFg7f/DNKztqYsYrz1IXL85VyMPkriEW9qzNMYJj0hhh6YmJ0p9uQE6w== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:11 2026 by rpki-client