$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer File: 82f36e71-6ecb-4315-846e-5cbc1f4770fe.cer (raw, json) Hash identifier: p5Ao20brP3V6TXSVzoM63zhQhTfiIkhqxTQ7dPQsnac= Subject key identifier: E9:0D:30:C9:87:25:36:29:94:22:73:AC:19:C8:9A:C5:B1:7A:5C:5B Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4B4FCCCDF132892DEE29FA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 17:01:52 +0000 Certificate not after: Thu 28 Dec 2028 18:01:52 +0000 Subordinate resources: AS: 14016 IP: 198.203.173.0/24 IP: 207.174.208.0/23 IP: 2602:fbcb::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:4f:cc:cd:f1:32:89:2d:ee:29:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 25 17:01:52 2026 GMT Not After : Dec 28 18:01:52 2028 GMT Subject: CN=82f36e71-6ecb-4315-846e-5cbc1f4770fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:a5:f9:c9:24:80:cb:b5:0f:a1:13:ea:27: c9:06:8d:16:c6:80:08:43:b4:1e:69:b9:66:cc:2a: f9:ba:ad:81:7d:08:c5:0a:ca:29:59:cd:65:e6:09: 01:1a:45:74:cb:15:79:78:f6:82:39:2c:a3:c5:76: e2:50:7c:de:06:6c:83:5e:49:3c:67:8c:f5:b7:94: 39:f7:08:03:48:18:b4:fb:b0:77:73:82:9d:92:c3: 3e:fc:e7:fe:3f:96:1b:bd:cd:f9:d7:50:1d:d8:5a: 12:42:28:e9:4c:90:93:2b:61:e5:7d:ad:60:ed:c8: df:5e:3a:95:ac:1f:a8:07:f7:39:a5:48:94:8e:cb: cc:72:8d:f3:9a:d9:43:13:31:ab:9d:f6:2f:35:1a: 0a:f3:0c:90:f6:5e:e2:fd:50:d7:0f:df:b5:54:8b: ff:d7:47:7b:64:ef:8f:c4:83:26:3c:23:21:b0:ff: 0a:e2:d8:ac:04:3f:fb:00:3e:aa:b9:8d:45:c6:97: c6:15:43:f4:91:aa:78:59:2f:66:71:1c:f7:34:c2: 2e:c3:3f:4c:6a:75:ff:00:0c:20:7e:59:ae:a2:a4: 94:50:a4:1e:61:20:96:bd:c6:25:e9:5c:0c:7c:cf: 2d:ab:d2:ae:e0:4c:4a:76:cf:27:62:f3:59:fc:0e: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0D:30:C9:87:25:36:29:94:22:73:AC:19:C8:9A:C5:B1:7A:5C:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/82f36e71-6ecb-4315-846e-5cbc1f4770fe/82f36e71-6ecb-4315-846e-5cbc1f4770fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.203.173.0/24 207.174.208.0/23 IPv6: 2602:fbcb::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14016 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d5:20:93:48:5c:63:99:7f:3b:f1:7f:1b:2c:a4:7d:9b:68: 50:dd:c4:ed:01:a2:1e:42:8a:12:f0:0e:ef:be:01:a8:32:d7: 87:4d:a0:33:c5:11:f3:0f:8f:1a:5c:7a:6c:0a:40:ff:12:3c: b8:15:ae:8c:fa:3b:9c:b9:50:c3:5e:b6:a4:6d:80:88:8a:8d: b4:c8:b1:75:dc:14:26:9b:75:91:a6:f0:97:80:87:62:fb:e5: 4e:ae:de:8b:85:ca:8b:32:59:df:1b:08:c3:0d:c9:50:cf:97: 5e:8d:0d:ae:2f:6b:d8:c2:9c:14:c4:19:58:d6:c6:03:77:2e: 89:45:2c:e4:98:99:cf:fc:47:35:a5:e2:a8:41:ad:f0:06:d3: 4b:92:e6:c5:a4:c4:5a:d2:97:63:20:a1:b8:50:79:16:aa:04: 43:75:db:5b:c5:4a:4b:01:20:7e:24:d7:2e:16:95:01:ad:2f: a0:48:b6:03:99:01:23:7c:0b:a3:e9:5e:20:6f:2f:42:51:93: ae:de:b7:5a:de:17:a1:d7:56:4d:3c:f8:2d:6d:b3:98:d2:e9: f2:11:9f:31:df:f4:0d:c3:bb:23:7b:9c:4f:e6:64:84:5c:d9: 3f:2d:8d:4d:84:a8:9f:d1:01:33:2c:a1:89:4b:9b:27:4b:5b: 31:64:0f:cf -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9LT8zN8TKJLe4p+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyNTE3MDE1MloXDTI4MTIyODE4MDE1MlowLzEtMCsGA1UEAxMk ODJmMzZlNzEtNmVjYi00MzE1LTg0NmUtNWNiYzFmNDc3MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllel+ckkgMu1D6ET6ifJBo0WxoAIQ7Qeablm zCr5uq2BfQjFCsopWc1l5gkBGkV0yxV5ePaCOSyjxXbiUHzeBmyDXkk8Z4z1t5Q5 9wgDSBi0+7B3c4KdksM+/Of+P5Ybvc3511Ad2FoSQijpTJCTK2Hlfa1g7cjfXjqV rB+oB/c5pUiUjsvMco3zmtlDEzGrnfYvNRoK8wyQ9l7i/VDXD9+1VIv/10d7ZO+P xIMmPCMhsP8K4tisBD/7AD6quY1FxpfGFUP0kap4WS9mcRz3NMIuwz9ManX/AAwg flmuoqSUUKQeYSCWvcYl6VwMfM8tq9Ku4ExKds8nYvNZ/A7lYwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOkNMMmHJTYplCJzrBnImsWxelxbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 MmYzNmU3MS02ZWNiLTQzMTUtODQ2ZS01Y2JjMWY0NzcwZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzgyZjM2ZTcxLTZlY2ItNDMxNS04 NDZlLTVjYmMxZjQ3NzBmZS84MmYzNmU3MS02ZWNiLTQzMTUtODQ2ZS01Y2JjMWY0 NzcwZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBADGy60DBAHPrtAwDgQCAAIwCAMGACYC+8sAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjbAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAATVIJNIXGOZfzvxfxss pH2baFDdxO0Boh5CihLwDu++Aagy14dNoDPFEfMPjxpcemwKQP8SPLgVroz6O5y5 UMNetqRtgIiKjbTIsXXcFCabdZGm8JeAh2L75U6u3ouFyosyWd8bCMMNyVDPl16N Da4va9jCnBTEGVjWxgN3LolFLOSYmc/8RzWl4qhBrfAG00uS5sWkxFrSl2MgobhQ eRaqBEN121vFSksBIH4k1y4WlQGtL6BItgOZASN8C6PpXiBvL0JRk67et1reF6HX Vk08+C1ts5jS6fIRnzHf9A3DuyN7nE/mZIRc2T8tjU2EqJ/RATMsoYlLmydLWzFk D88= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:44 2026 by rpki-client