$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7fb92e2d-5fa5-47ab-900f-20437f252c5f.cer File: 7fb92e2d-5fa5-47ab-900f-20437f252c5f.cer (raw, json) Hash identifier: pE5oBVbbQ2OoMH6CEHscAUFe2viJyifcbZz/UQEYAP0= Subject key identifier: C3:C6:ED:EE:C2:11:8C:29:AB:55:AF:1D:6E:1B:8E:78:0F:C0:13:3C Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F53243E06DCB197D3E751D6A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7fb92e2d-5fa5-47ab-900f-20437f252c5f/7fb92e2d-5fa5-47ab-900f-20437f252c5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7fb92e2d-5fa5-47ab-900f-20437f252c5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 12:20:34 +0000 Certificate not after: Sun 31 Dec 2028 13:20:34 +0000 Subordinate resources: AS: 402984 IP: 23.164.220.0/24 IP: 2602:f2d6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:24:3e:06:dc:b1:97:d3:e7:51:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 28 12:20:34 2026 GMT Not After : Dec 31 13:20:34 2028 GMT Subject: CN=7fb92e2d-5fa5-47ab-900f-20437f252c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:e1:83:e0:d2:aa:97:db:19:a1:fa:21:fd: 77:76:47:2b:19:d1:11:d4:8e:05:6b:d0:f2:bb:b1: f2:64:13:b6:f0:ff:e2:b7:4c:32:d7:7e:26:73:32: f3:89:0d:02:b4:3b:37:7a:fa:f8:ca:db:cb:41:a9: d8:03:64:50:d8:a7:38:db:81:69:83:a4:fe:fe:8f: 7c:d6:c0:bf:5c:ff:5e:6e:b1:f6:44:76:46:74:f6: b6:1a:bb:06:22:f0:15:ec:3e:48:fd:10:2f:e1:a4: 5c:66:bb:33:65:27:7d:ff:2d:37:79:95:0c:9c:eb: 93:1b:50:94:41:37:64:ef:04:0b:46:41:90:6b:6c: c8:6b:d0:b3:51:38:41:3d:7e:0e:90:6d:a3:23:05: f3:a6:c0:a8:50:52:16:30:3c:63:08:f0:2f:8f:27: 5b:79:46:87:77:ce:1e:87:39:b6:92:e4:63:e4:89: 5e:7b:4b:1f:34:a3:21:45:ea:c6:40:6b:f9:ae:f7: 27:cc:30:d3:c4:7e:59:54:43:68:66:b0:d6:62:86: 4a:4f:ef:b0:2e:1c:99:af:7c:72:4b:73:e0:45:75: ed:c5:26:82:f8:5f:4d:ad:4f:0e:a9:50:c2:98:4b: 8e:d0:f4:2a:6c:6a:48:c5:62:3c:40:01:70:7d:f2: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:ED:EE:C2:11:8C:29:AB:55:AF:1D:6E:1B:8E:78:0F:C0:13:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7fb92e2d-5fa5-47ab-900f-20437f252c5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7fb92e2d-5fa5-47ab-900f-20437f252c5f/7fb92e2d-5fa5-47ab-900f-20437f252c5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.164.220.0/24 IPv6: 2602:f2d6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402984 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e0:ca:46:7c:97:ed:54:ae:45:77:17:31:cb:95:6d:cf:d9: 4d:bb:be:b5:b4:f7:a6:de:c2:0d:96:df:ca:d0:75:5b:ce:83: 7c:eb:7f:4b:78:68:f2:8a:ec:d5:94:c0:d3:e5:a5:f9:53:a0: 52:9c:f1:08:a4:ac:2d:d8:b4:57:31:f1:9a:e8:91:29:fd:f1: 03:44:4c:e0:dd:2c:e8:a4:a4:c5:17:69:8f:19:a0:20:2e:d9: 48:f2:96:c5:4e:c7:fc:2e:fa:29:e2:43:28:a6:b9:d3:aa:7d: c9:18:50:59:97:10:c1:1e:8d:80:ff:5e:92:55:dc:1a:c9:20: 69:a2:03:44:c0:e5:4e:4b:76:8a:ed:51:ff:b8:27:e7:7e:19: 31:80:83:cc:e3:16:63:06:05:b4:25:ab:7a:e4:f8:41:0b:f9: c3:2a:66:d8:e7:3b:d9:1e:a7:13:32:91:8c:d9:7e:1f:8e:9b: 29:ef:e5:a4:f9:f5:3b:11:71:9c:52:95:65:2c:66:3d:ea:93: 07:e8:33:35:d1:10:e0:0d:80:78:f5:66:9a:a1:1a:b6:8a:ec: 08:67:41:47:68:ed:27:0f:23:e5:19:fb:a9:a5:06:58:d6:46: 8c:00:1b:e9:7d:b5:84:70:22:21:3d:30:bf:04:2d:5c:fb:05: 25:bb:71:db -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9TJD4G3LGX0+dR1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyODEyMjAzNFoXDTI4MTIzMTEzMjAzNFowLzEtMCsGA1UEAxMk N2ZiOTJlMmQtNWZhNS00N2FiLTkwMGYtMjA0MzdmMjUyYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp83hg+DSqpfbGaH6If13dkcrGdER1I4Fa9Dy u7HyZBO28P/it0wy134mczLziQ0CtDs3evr4ytvLQanYA2RQ2Kc424Fpg6T+/o98 1sC/XP9ebrH2RHZGdPa2GrsGIvAV7D5I/RAv4aRcZrszZSd9/y03eZUMnOuTG1CU QTdk7wQLRkGQa2zIa9CzUThBPX4OkG2jIwXzpsCoUFIWMDxjCPAvjydbeUaHd84e hzm2kuRj5Ilee0sfNKMhRerGQGv5rvcnzDDTxH5ZVENoZrDWYoZKT++wLhyZr3xy S3PgRXXtxSaC+F9NrU8OqVDCmEuO0PQqbGpIxWI8QAFwffKMTQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMPG7e7CEYwpq1WvHW4bjngPwBM8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS83 ZmI5MmUyZC01ZmE1LTQ3YWItOTAwZi0yMDQzN2YyNTJjNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzdmYjkyZTJkLTVmYTUtNDdhYi05 MDBmLTIwNDM3ZjI1MmM1Zi83ZmI5MmUyZC01ZmE1LTQ3YWItOTAwZi0yMDQzN2Yy NTJjNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpNwwDgQCAAIwCAMGACYC8tYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg4MpGfJftVK5Fdxcxy5Vtz9lN u761tPem3sINlt/K0HVbzoN8639LeGjyiuzVlMDT5aX5U6BSnPEIpKwt2LRXMfGa 6JEp/fEDREzg3SzopKTFF2mPGaAgLtlI8pbFTsf8Lvop4kMoprnTqn3JGFBZlxDB Ho2A/16SVdwaySBpogNEwOVOS3aK7VH/uCfnfhkxgIPM4xZjBgW0Jat65PhBC/nD KmbY5zvZHqcTMpGM2X4fjpsp7+Wk+fU7EXGcUpVlLGY96pMH6DM10RDgDYB49Waa oRq2iuwIZ0FHaO0nDyPlGfuppQZY1kaMABvpfbWEcCIhPTC/BC1c+wUlu3Hb -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:03 2026 by rpki-client