$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/838d6437-ee14-422b-87e6-11c57897a27e.cer File: 838d6437-ee14-422b-87e6-11c57897a27e.cer (raw, json) Hash identifier: 3fSViybZGLM7XtFRXPN90lNf4Grz4+JVTyN30E23B00= Subject key identifier: 6F:E8:CD:F9:55:65:27:48:44:FA:B4:EF:7F:94:3F:10:47:01:5A:26 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F72FADE618042153C9F571B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/838d6437-ee14-422b-87e6-11c57897a27e/838d6437-ee14-422b-87e6-11c57897a27e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/838d6437-ee14-422b-87e6-11c57897a27e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Oct 2026 22:03:04 +0000 Certificate not after: Thu 11 Jan 2029 23:03:04 +0000 Subordinate resources: AS: 400286 IP: 205.196.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:fa:de:61:80:42:15:3c:9f:57:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 9 22:03:04 2026 GMT Not After : Jan 11 23:03:04 2029 GMT Subject: CN=838d6437-ee14-422b-87e6-11c57897a27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:af:70:5a:07:96:44:11:a5:08:b0:1b:be: ec:62:9f:2c:18:d5:9b:21:3e:fe:78:bb:3e:5c:15: de:7b:94:ef:2b:5b:7a:0f:93:46:c6:40:2d:6b:0d: 1b:23:2c:c6:19:12:5c:37:09:85:26:72:49:f4:a4: 65:c4:de:69:67:d7:4c:49:3f:04:b6:c6:d6:09:2b: a6:27:b9:2b:51:43:f4:76:e9:a2:04:a1:d1:2b:aa: 43:bd:2c:12:f7:9e:c3:a1:23:82:79:da:58:dc:33: c5:e0:b6:34:69:57:87:f2:d1:72:b1:70:85:eb:97: 2c:35:f2:65:7a:4b:1e:5b:2c:9c:1d:e8:7b:ed:7b: ef:50:a4:3e:e0:79:41:cb:bc:af:e7:cc:3e:15:24: ec:22:7c:08:21:d5:e2:8d:6d:75:41:71:ee:04:f1: dd:eb:f4:03:5d:b0:3a:ea:2a:ed:15:47:ec:b6:3f: d1:e8:24:93:c6:fe:fb:15:f3:26:39:ab:cb:97:6f: be:86:78:f3:e2:e9:9e:ba:35:0f:9b:cc:55:d9:35: a7:98:5e:93:b7:1d:69:3d:f9:16:c7:50:97:29:50: 55:7e:5c:ff:ab:f1:94:89:70:a1:6e:0f:cc:2f:6e: a9:2a:65:bb:61:2d:59:eb:e2:fa:10:93:9d:7a:ce: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E8:CD:F9:55:65:27:48:44:FA:B4:EF:7F:94:3F:10:47:01:5A:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/838d6437-ee14-422b-87e6-11c57897a27e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/838d6437-ee14-422b-87e6-11c57897a27e/838d6437-ee14-422b-87e6-11c57897a27e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 205.196.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400286 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:43:51:b3:fa:94:e7:88:6d:65:f4:41:85:04:13:9b:81:3b: 8c:ba:8a:37:13:44:c7:e4:6e:bb:67:20:5e:e2:67:02:6c:38: fb:a9:80:9e:1e:3b:8f:4f:ed:26:38:3d:4f:07:56:eb:e8:62: 21:03:48:71:c6:f0:de:23:0b:ec:3f:d0:db:c6:84:5b:26:4c: 8d:46:64:87:ce:2b:2e:7c:41:0c:0d:b1:cc:55:43:78:11:84: bb:85:a4:02:a2:69:80:51:25:90:7f:97:e9:60:15:7a:53:89: 10:5b:52:c1:3b:db:c1:99:51:17:53:13:6c:ba:5b:18:54:a9: f2:bd:5e:b4:bc:7c:45:68:fe:df:eb:b2:1e:b0:8b:2e:d7:91: 86:a4:9c:16:6d:ca:27:e8:f2:d8:d4:98:dd:bc:af:f0:41:dc: 13:77:44:ae:ac:8f:36:c9:5c:ae:24:29:6a:30:63:03:79:94: 1b:35:54:56:74:db:d8:bd:fb:ee:8d:68:21:e8:37:fb:f1:ae: 5e:39:07:e7:02:12:da:b0:55:a7:b9:bd:4d:47:08:55:34:67: 1e:21:8d:d6:6b:33:f5:27:e0:73:d4:ad:b6:89:d0:c2:86:55: 4e:b1:9c:10:f5:de:f0:85:54:b7:8e:c6:c5:89:9c:a6:3f:e9: 28:5d:23:01 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9y+t5hgEIVPJ9XG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwOTIyMDMwNFoXDTI5MDExMTIzMDMwNFowLzEtMCsGA1UEAxMk ODM4ZDY0MzctZWUxNC00MjJiLTg3ZTYtMTFjNTc4OTdhMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkuvcFoHlkQRpQiwG77sYp8sGNWbIT7+eLs+ XBXee5TvK1t6D5NGxkAtaw0bIyzGGRJcNwmFJnJJ9KRlxN5pZ9dMST8EtsbWCSum J7krUUP0dumiBKHRK6pDvSwS957DoSOCedpY3DPF4LY0aVeH8tFysXCF65csNfJl ekseWyycHeh77XvvUKQ+4HlBy7yv58w+FSTsInwIIdXijW11QXHuBPHd6/QDXbA6 6irtFUfstj/R6CSTxv77FfMmOavLl2++hnjz4umeujUPm8xV2TWnmF6Ttx1pPfkW x1CXKVBVflz/q/GUiXChbg/ML26pKmW7YS1Z6+L6EJOdes6M+QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFG/ozflVZSdIRPq073+UPxBHAVomMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 MzhkNjQzNy1lZTE0LTQyMmItODdlNi0xMWM1Nzg5N2EyN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzgzOGQ2NDM3LWVlMTQtNDIyYi04 N2U2LTExYzU3ODk3YTI3ZS84MzhkNjQzNy1lZTE0LTQyMmItODdlNi0xMWM1Nzg5 N2EyN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALNxBwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhueMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAINDUbP6lOeIbWX0QYUEE5uBO4y6ijcTRMfkbrtnIF7iZwJs OPupgJ4eO49P7SY4PU8HVuvoYiEDSHHG8N4jC+w/0NvGhFsmTI1GZIfOKy58QQwN scxVQ3gRhLuFpAKiaYBRJZB/l+lgFXpTiRBbUsE728GZURdTE2y6WxhUqfK9XrS8 fEVo/t/rsh6wiy7XkYaknBZtyifo8tjUmN28r/BB3BN3RK6sjzbJXK4kKWowYwN5 lBs1VFZ029i9++6NaCHoN/vxrl45B+cCEtqwVae5vU1HCFU0Zx4hjdZrM/Un4HPU rbaJ0MKGVU6xnBD13vCFVLeOxsWJnKY/6ShdIwE= -----END CERTIFICATE-----Generated at Sun Nov 1 13:31:09 2026 by rpki-client