$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/88bebc25-cb07-41e3-846f-aac9ed856535.cer File: 88bebc25-cb07-41e3-846f-aac9ed856535.cer (raw, json) Hash identifier: oNnN8KbGEntMK/nglulFDfkNE4oeCR2+KebKQb6hyTE= Subject key identifier: B2:15:16:A9:66:D6:B4:0F:1A:E1:D3:E8:63:04:F1:61:3C:5A:CB:94 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA39A53B917DE08E5F86D9560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/88bebc25-cb07-41e3-846f-aac9ed856535/88bebc25-cb07-41e3-846f-aac9ed856535.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/88bebc25-cb07-41e3-846f-aac9ed856535/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Oct 2026 08:03:10 +0000 Certificate not after: Mon 29 Jan 2029 09:03:10 +0000 Subordinate resources: IP: 23.166.84.0/24 IP: 2602:f296::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:9a:53:b9:17:de:08:e5:f8:6d:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 27 08:03:10 2026 GMT Not After : Jan 29 09:03:10 2029 GMT Subject: CN=88bebc25-cb07-41e3-846f-aac9ed856535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:da:25:52:fc:14:e4:88:62:64:e8:91:ba:04: 91:b8:be:d5:80:2f:2b:78:aa:35:21:6c:4f:be:0c: a6:8d:d8:ee:10:f2:2a:9b:91:4b:51:91:be:b3:74: 8e:48:19:71:9f:ed:e4:ac:5f:16:a6:53:cf:45:57: be:7b:bf:59:31:02:67:6b:4f:6b:aa:80:be:d2:73: aa:ae:a2:72:4d:77:75:ba:4d:d5:9e:ce:61:b0:c3: 8c:68:60:7f:d1:2e:20:03:30:da:4b:59:e4:53:73: 0a:66:45:70:31:5d:21:cd:b4:8c:4f:d8:94:a4:2c: 75:ac:5a:19:d0:15:d0:8f:ce:15:7e:cf:61:5a:6a: 28:b0:f8:44:07:a2:8a:c8:e9:7c:d4:73:29:2b:0f: db:2a:72:8b:dd:4b:f5:31:b8:c9:6d:d9:08:ac:64: 5e:a4:cb:94:fa:ba:a0:55:bb:6c:64:2c:c3:0e:22: bf:3e:dd:65:83:fa:76:76:60:29:b8:83:a2:ef:dc: 81:61:21:41:bc:95:e7:e5:07:e7:d5:6d:c9:94:17: 19:77:3b:9f:92:29:f0:37:88:42:29:ea:b6:84:d3: 58:fd:ff:88:f2:c3:d0:07:ba:06:c6:69:18:1a:d5: bc:db:67:d0:f5:73:aa:40:82:7e:a7:67:07:3c:c3: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:15:16:A9:66:D6:B4:0F:1A:E1:D3:E8:63:04:F1:61:3C:5A:CB:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/88bebc25-cb07-41e3-846f-aac9ed856535/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/88bebc25-cb07-41e3-846f-aac9ed856535/88bebc25-cb07-41e3-846f-aac9ed856535.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.166.84.0/24 IPv6: 2602:f296::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:74:14:d8:ee:10:87:83:83:a5:92:85:0f:b2:13:80:8f:d9: f7:ae:53:22:3a:07:10:ce:a2:a6:f5:67:ed:f9:00:c3:81:e1: fc:2a:36:9f:4f:08:bf:ad:d2:db:e7:f2:de:41:d5:d8:47:ce: 5d:9d:1d:a3:f5:fa:51:9b:f8:ac:3a:7b:f2:0c:04:54:be:d7: b7:3f:49:06:62:d5:92:84:6f:76:2b:f8:93:34:1e:87:03:cd: ab:dc:e5:f3:f4:47:b6:ce:3a:fb:c5:13:86:34:00:5b:b4:ca: a2:9f:2c:27:7c:33:88:f4:f6:9b:11:aa:a5:37:0b:da:3d:f7: a1:e8:c0:48:7f:ef:67:e3:a3:9a:96:2a:9b:f7:b0:34:28:c1: 8f:8a:e4:a1:b1:3d:8d:76:13:52:90:a4:67:c7:d6:93:d3:77: 7d:4a:6b:be:a4:09:3f:7e:04:b9:1b:e1:e5:dd:dd:9a:0e:d1: 48:68:1b:e0:f3:f2:00:fb:7d:30:ca:fa:3a:f5:f5:67:2e:aa: cd:ac:2d:8e:10:29:f0:46:3d:9c:ff:ca:b2:e8:e9:e2:5e:3c: b5:b7:23:c9:d5:42:c4:bf:35:6d:9d:d8:be:82:81:b8:01:b1: 3e:02:6e:dc:fd:bb:58:3a:6c:0e:c0:9d:c4:36:26:0f:7d:fd: 84:94:70:8d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+jmlO5F94I5fhtlWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNzA4MDMxMFoXDTI5MDEyOTA5MDMxMFowLzEtMCsGA1UEAxMk ODhiZWJjMjUtY2IwNy00MWUzLTg0NmYtYWFjOWVkODU2NTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9olUvwU5IhiZOiRugSRuL7VgC8reKo1IWxP vgymjdjuEPIqm5FLUZG+s3SOSBlxn+3krF8WplPPRVe+e79ZMQJna09rqoC+0nOq rqJyTXd1uk3Vns5hsMOMaGB/0S4gAzDaS1nkU3MKZkVwMV0hzbSMT9iUpCx1rFoZ 0BXQj84Vfs9hWmoosPhEB6KKyOl81HMpKw/bKnKL3Uv1MbjJbdkIrGRepMuU+rqg VbtsZCzDDiK/Pt1lg/p2dmApuIOi79yBYSFBvJXn5Qfn1W3JlBcZdzufkinwN4hC Keq2hNNY/f+I8sPQB7oGxmkYGtW822fQ9XOqQIJ+p2cHPMPzdQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLIVFqlm1rQPGuHT6GME8WE8WsuUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 OGJlYmMyNS1jYjA3LTQxZTMtODQ2Zi1hYWM5ZWQ4NTY1MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzg4YmViYzI1LWNiMDctNDFlMy04 NDZmLWFhYzllZDg1NjUzNS84OGJlYmMyNS1jYjA3LTQxZTMtODQ2Zi1hYWM5ZWQ4 NTY1MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXplQwDgQCAAIwCAMGACYC8pYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACt0FNjuEIeDg6WShQ+yE4CP2feuUyI6BxDOoqb1Z+35AMOB4fwqNp9PCL+t0tvn 8t5B1dhHzl2dHaP1+lGb+Kw6e/IMBFS+17c/SQZi1ZKEb3Yr+JM0HocDzavc5fP0 R7bOOvvFE4Y0AFu0yqKfLCd8M4j09psRqqU3C9o996HowEh/72fjo5qWKpv3sDQo wY+K5KGxPY12E1KQpGfH1pPTd31Ka76kCT9+BLkb4eXd3ZoO0UhoG+Dz8gD7fTDK +jr19Wcuqs2sLY4QKfBGPZz/yrLo6eJePLW3I8nVQsS/NW2d2L6CgbgBsT4Cbtz9 u1g6bA7AncQ2Jg99/YSUcI0= -----END CERTIFICATE-----Generated at Sun Nov 1 01:45:00 2026 by rpki-client