$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/81eef54f-9361-44fb-9d95-eb9f076ffe4d.cer File: 81eef54f-9361-44fb-9d95-eb9f076ffe4d.cer (raw, json) Hash identifier: T99I4tYnlErA3MbGF94BOtf+iAtmYmoH4g1bQ6/7ekk= Subject key identifier: 25:B4:42:46:A0:F1:60:EE:99:D1:21:0D:ED:BD:E6:6C:0E:3A:4D:19 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F747D32D0E06B71408C183E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/81eef54f-9361-44fb-9d95-eb9f076ffe4d/81eef54f-9361-44fb-9d95-eb9f076ffe4d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/81eef54f-9361-44fb-9d95-eb9f076ffe4d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Oct 2026 11:01:29 +0000 Certificate not after: Fri 12 Jan 2029 12:01:29 +0000 Subordinate resources: AS: 17337 IP: 198.200.12.0/22 IP: 2602:fa51::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:7d:32:d0:e0:6b:71:40:8c:18:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 10 11:01:29 2026 GMT Not After : Jan 12 12:01:29 2029 GMT Subject: CN=81eef54f-9361-44fb-9d95-eb9f076ffe4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:70:48:26:ec:38:bb:45:f5:1d:f0:65:c0: ce:7b:81:0f:57:15:5c:ee:38:84:d2:0a:d8:4a:5f: 8f:32:ca:63:9d:d9:98:36:3c:9a:a5:17:42:2b:53: 69:b0:04:25:16:7e:25:90:d0:95:8c:48:70:ba:cd: 40:a1:b2:4b:2e:22:37:6a:f0:2f:be:52:be:c4:9a: 0d:65:de:50:ff:72:89:7b:a7:11:15:59:89:3e:28: ee:cf:b5:6b:d9:f3:7e:f4:65:5d:db:9b:46:84:b9: 42:25:d3:cb:31:0f:90:ef:18:e5:8d:14:01:04:5b: d8:47:35:e3:57:9e:38:8c:05:d4:1c:8d:e8:ab:d4: 53:6d:32:6e:3b:10:08:34:ce:cb:f6:ac:68:ae:dd: 5f:d3:07:1b:75:73:d8:c0:30:2c:93:2a:c7:f8:2c: 42:1e:ce:b5:18:4c:31:dc:93:3b:6c:9d:80:30:38: 6a:90:57:42:fd:ba:5e:81:1b:1c:97:4c:ac:c6:79: 4c:4a:f1:a1:2d:b9:65:a0:bb:41:c5:cd:e8:5f:6e: 12:25:36:6d:e4:a1:ea:ef:13:f1:09:31:dd:56:46: e7:e6:ba:15:69:b2:84:fb:94:1e:04:b3:08:ee:08: e8:d0:0a:de:ca:46:93:be:67:e6:29:e1:22:5b:15: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:42:46:A0:F1:60:EE:99:D1:21:0D:ED:BD:E6:6C:0E:3A:4D:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/81eef54f-9361-44fb-9d95-eb9f076ffe4d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/81eef54f-9361-44fb-9d95-eb9f076ffe4d/81eef54f-9361-44fb-9d95-eb9f076ffe4d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.200.12.0/22 IPv6: 2602:fa51::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17337 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ef:5e:37:a2:2e:55:6b:f8:7e:e5:ce:44:c3:02:29:21:ef: 5a:76:79:f2:90:e1:5b:39:db:e6:df:5c:4a:c8:ad:c5:95:cc: aa:fd:6e:07:0e:a4:e5:53:9b:4c:a1:37:d1:18:a7:2e:15:40: a0:15:a7:c4:b8:26:45:e9:b8:02:7f:3d:87:25:4b:9a:74:bf: cf:72:0f:87:e3:8c:c1:d0:de:22:f3:34:66:8d:5a:55:ec:92: 59:23:8e:9b:d6:20:c2:a1:c8:23:53:5c:ea:21:e3:f8:bf:a9: f0:3a:41:9c:39:99:7e:ce:a0:3d:e2:41:63:94:da:35:dc:da: a9:7d:bf:34:66:e1:10:08:69:b6:d9:0d:a6:c8:ac:c4:44:80: 4d:e1:f0:17:e3:3f:d7:e2:c8:b5:16:d1:44:5b:2a:cd:27:3b: b9:52:07:bb:d9:f7:9d:6e:79:68:ab:1a:a7:69:18:84:02:13: 7f:88:f5:93:71:ce:49:2b:6c:61:46:35:60:52:ff:7a:f8:4c: 1e:1b:4d:fc:4b:65:2f:1b:4c:19:fb:58:ad:45:3a:28:1c:21: 5a:de:45:74:7e:c3:fe:c1:67:7f:19:95:d4:ff:99:e3:56:ff: af:c3:a9:d0:94:58:61:4a:41:a9:5a:ab:24:98:d1:9f:e6:b2: 28:80:f5:60 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE90fTLQ4GtxQIwYPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMDExMDEyOVoXDTI5MDExMjEyMDEyOVowLzEtMCsGA1UEAxMk ODFlZWY1NGYtOTM2MS00NGZiLTlkOTUtZWI5ZjA3NmZmZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouRwSCbsOLtF9R3wZcDOe4EPVxVc7jiE0grY Sl+PMspjndmYNjyapRdCK1NpsAQlFn4lkNCVjEhwus1AobJLLiI3avAvvlK+xJoN Zd5Q/3KJe6cRFVmJPijuz7Vr2fN+9GVd25tGhLlCJdPLMQ+Q7xjljRQBBFvYRzXj V544jAXUHI3oq9RTbTJuOxAINM7L9qxort1f0wcbdXPYwDAskyrH+CxCHs61GEwx 3JM7bJ2AMDhqkFdC/bpegRscl0ysxnlMSvGhLblloLtBxc3oX24SJTZt5KHq7xPx CTHdVkbn5roVabKE+5QeBLMI7gjo0AreykaTvmfmKeEiWxUQuwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCW0Qkag8WDumdEhDe295mwOOk0ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 MWVlZjU0Zi05MzYxLTQ0ZmItOWQ5NS1lYjlmMDc2ZmZlNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzgxZWVmNTRmLTkzNjEtNDRmYi05 ZDk1LWViOWYwNzZmZmU0ZC84MWVlZjU0Zi05MzYxLTQ0ZmItOWQ5NS1lYjlmMDc2 ZmZlNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALGyAwwDgQCAAIwCAMGACYC+lEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkO5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAADvXjeiLlVr+H7lzkTDAikh71p2 efKQ4Vs52+bfXErIrcWVzKr9bgcOpOVTm0yhN9EYpy4VQKAVp8S4JkXpuAJ/PYcl S5p0v89yD4fjjMHQ3iLzNGaNWlXsklkjjpvWIMKhyCNTXOoh4/i/qfA6QZw5mX7O oD3iQWOU2jXc2ql9vzRm4RAIabbZDabIrMREgE3h8BfjP9fiyLUW0URbKs0nO7lS B7vZ951ueWirGqdpGIQCE3+I9ZNxzkkrbGFGNWBS/3r4TB4bTfxLZS8bTBn7WK1F OigcIVreRXR+w/7BZ38ZldT/meNW/6/DqdCUWGFKQalaqySY0Z/msiiA9WA= -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:06 2026 by rpki-client