$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.cer File: 83a5c70f-d53f-43e4-96c3-41cf2b9c0372.cer (raw, json) Hash identifier: VBbPGOsZMxJqX8H1kzjxiI33JcIYggq6OpHJ6uXzDZY= Subject key identifier: 15:59:8F:32:42:B3:6E:81:53:44:F9:84:B8:AD:7C:BD:21:96:4D:19 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7DCE514336A819179BB84580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 19:07:12 +0000 Certificate not after: Mon 15 Jan 2029 20:07:12 +0000 Subordinate resources: IP: 169.157.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:ce:51:43:36:a8:19:17:9b:b8:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 13 19:07:12 2026 GMT Not After : Jan 15 20:07:12 2029 GMT Subject: CN=83a5c70f-d53f-43e4-96c3-41cf2b9c0372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:8a:be:39:b7:c3:f2:6e:13:d6:a8:76:13: 45:11:a3:b6:15:d5:0b:22:38:68:89:2c:ef:7a:94: d2:0b:b3:45:e0:9b:0c:1a:80:f6:bb:db:13:b1:0d: 40:3c:4a:6f:3c:b7:68:28:71:f8:c1:eb:33:2e:c5: 5f:fc:4b:aa:57:bb:67:88:5a:80:e1:e1:64:7d:c8: a4:b9:1b:c9:c5:51:94:59:ec:86:78:8b:dd:ff:d7: ee:8d:8b:5f:f2:09:ea:b0:e9:6f:2a:63:c0:77:ec: cd:f6:1e:4f:ff:af:0c:8d:ae:87:a8:c2:ce:d4:61: 8d:b7:6d:7e:2c:6d:32:16:ab:86:e3:af:12:71:2a: 39:62:53:82:37:d6:b3:82:db:00:41:89:0e:fb:9f: 66:18:68:e5:c5:ee:74:6d:5a:4a:db:5b:8f:16:c7: 65:1f:47:b8:e9:45:9c:0b:4c:e6:61:fe:a3:a8:33: b3:b6:ea:2c:79:0a:fa:ab:b2:1e:be:79:95:84:5c: 9a:15:00:ca:67:26:05:0a:50:ee:c6:cd:15:38:7c: 8d:11:d3:9c:bf:4f:36:46:47:4a:cc:49:2c:27:ab: 3a:39:ed:8e:f9:dc:b3:4d:02:6e:fc:0f:5c:f5:b6: f9:c4:29:1c:e0:b4:5c:42:d6:b5:96:c3:c6:cb:9d: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:59:8F:32:42:B3:6E:81:53:44:F9:84:B8:AD:7C:BD:21:96:4D:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/83a5c70f-d53f-43e4-96c3-41cf2b9c0372/83a5c70f-d53f-43e4-96c3-41cf2b9c0372.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 169.157.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b3:61:a2:32:b7:05:fe:af:b2:5c:a4:e3:81:ad:a5:a7:41: 23:5e:20:cd:81:bf:df:3e:cb:ed:c1:9c:44:03:3a:c5:4c:33: 2a:2e:2e:6a:c9:8d:35:a5:74:5d:3d:b4:1c:98:30:95:4f:37: 81:32:0e:1c:df:8b:93:01:85:67:d9:86:95:f9:21:3a:ac:1a: 74:5f:8b:ee:d4:4d:99:8b:27:d9:cd:dd:a0:88:80:12:b9:20: bc:22:ec:6f:0d:38:cf:9f:89:6a:dd:aa:b7:b9:cd:4b:78:bd: 77:31:69:19:88:a4:eb:74:2e:b2:c8:de:56:83:65:88:55:4f: 11:87:24:1b:b4:5a:d9:29:64:36:ac:9f:6f:46:02:8d:77:a8: 82:37:5f:58:b5:0f:12:f2:0f:23:ef:54:d9:3f:f1:ee:22:11: cc:c9:89:fe:7a:c8:a6:9d:87:fe:aa:e8:54:71:a2:37:16:1c: ee:0d:89:96:24:10:ff:e2:97:ac:3c:24:a1:f1:39:82:6d:f4: 1b:b1:d6:ab:96:82:69:d4:8a:00:ba:59:e5:02:af:f5:71:f4: 60:4a:0b:d3:e9:75:a6:61:8d:b9:c4:ba:3d:4b:b4:6c:3d:36: f7:df:59:02:06:0b:2f:1c:d6:12:f5:4a:75:85:6a:82:92:e2: d6:ff:bc:f5 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE99zlFDNqgZF5u4RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMzE5MDcxMloXDTI5MDExNTIwMDcxMlowLzEtMCsGA1UEAxMk ODNhNWM3MGYtZDUzZi00M2U0LTk2YzMtNDFjZjJiOWMwMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkqKvjm3w/JuE9aodhNFEaO2FdULIjhoiSzv epTSC7NF4JsMGoD2u9sTsQ1APEpvPLdoKHH4weszLsVf/EuqV7tniFqA4eFkfcik uRvJxVGUWeyGeIvd/9fujYtf8gnqsOlvKmPAd+zN9h5P/68Mja6HqMLO1GGNt21+ LG0yFquG468ScSo5YlOCN9azgtsAQYkO+59mGGjlxe50bVpK21uPFsdlH0e46UWc C0zmYf6jqDOztuoseQr6q7IevnmVhFyaFQDKZyYFClDuxs0VOHyNEdOcv082RkdK zEksJ6s6Oe2O+dyzTQJu/A9c9bb5xCkc4LRcQta1lsPGy50QswIDAQABo4ID/jCC A/owHQYDVR0OBBYEFBVZjzJCs26BU0T5hLitfL0hlk0ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 M2E1YzcwZi1kNTNmLTQzZTQtOTZjMy00MWNmMmI5YzAzNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzgzYTVjNzBmLWQ1M2YtNDNlNC05 NmMzLTQxY2YyYjljMDM3Mi84M2E1YzcwZi1kNTNmLTQzZTQtOTZjMy00MWNmMmI5 YzAzNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCpnTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqs2GiMrcF/q+yXKTjga2l p0EjXiDNgb/fPsvtwZxEAzrFTDMqLi5qyY01pXRdPbQcmDCVTzeBMg4c34uTAYVn 2YaV+SE6rBp0X4vu1E2ZiyfZzd2giIASuSC8IuxvDTjPn4lq3aq3uc1LeL13MWkZ iKTrdC6yyN5Wg2WIVU8RhyQbtFrZKWQ2rJ9vRgKNd6iCN19YtQ8S8g8j71TZP/Hu IhHMyYn+esimnYf+quhUcaI3FhzuDYmWJBD/4pesPCSh8TmCbfQbsdarloJp1IoA ulnlAq/1cfRgSgvT6XWmYY25xLo9S7RsPTb331kCBgsvHNYS9Up1hWqCkuLW/7z1 -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:39 2026 by rpki-client