$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/893bad54-a17d-449a-b357-7124ebebf1e3.cer File: 893bad54-a17d-449a-b357-7124ebebf1e3.cer (raw, json) Hash identifier: VLcngWcMfCsjmBF/+ch0IaxUbl060DxRSX9KQ8uxTfU= Subject key identifier: 7E:43:D8:A3:68:CE:A4:EB:A9:62:6E:7C:31:B9:20:93:D6:6E:15:A8 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6FB04B01FC921E90262C9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/893bad54-a17d-449a-b357-7124ebebf1e3/893bad54-a17d-449a-b357-7124ebebf1e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/893bad54-a17d-449a-b357-7124ebebf1e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 17:45:23 +0000 Certificate not after: Wed 10 Jan 2029 18:45:23 +0000 Subordinate resources: AS: 25823 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:b0:4b:01:fc:92:1e:90:26:2c:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 17:45:23 2026 GMT Not After : Jan 10 18:45:23 2029 GMT Subject: CN=893bad54-a17d-449a-b357-7124ebebf1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:21:1c:35:59:d9:5a:3d:ae:34:d9:6e:eb:da: 6f:e8:22:30:3e:7a:fc:61:50:37:08:d5:e2:c5:03: b6:44:e2:f6:2c:d6:ca:ec:93:e7:77:35:98:d3:af: b9:b3:99:84:79:ca:81:8d:98:0f:89:a3:2d:8c:ca: 38:fa:44:bc:d5:c2:b7:80:67:5b:3b:3a:31:72:72: c3:72:8a:62:7f:c2:6a:1c:47:9d:84:e6:91:6d:e9: 86:9b:89:85:0d:ff:e4:f5:ca:0a:31:b9:54:1f:70: 6c:22:83:4e:8c:d5:a7:fd:a3:4e:e5:0c:0d:36:11: af:88:81:5f:a9:bd:5a:72:3f:3a:23:07:58:7c:b0: 0d:ba:f8:80:9e:d8:a0:1b:26:13:94:81:4f:43:2b: 57:dc:5c:46:01:44:b7:65:f1:e2:44:74:87:28:91: 89:0f:89:eb:f0:df:2a:d8:33:fd:99:63:2f:6a:4b: 26:75:49:ac:1b:26:a2:6b:63:63:70:cc:96:02:03: 7e:4e:56:4f:91:e5:46:a0:88:4c:1b:85:48:5b:55: 04:c7:e7:89:7c:f8:20:43:77:94:1d:18:69:c9:50: 31:8d:de:3c:08:0c:82:f8:e6:df:d1:28:95:f2:63: c9:68:4b:0a:26:4a:1b:f7:fb:9a:9f:68:58:a5:59: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:43:D8:A3:68:CE:A4:EB:A9:62:6E:7C:31:B9:20:93:D6:6E:15:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/893bad54-a17d-449a-b357-7124ebebf1e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/893bad54-a17d-449a-b357-7124ebebf1e3/893bad54-a17d-449a-b357-7124ebebf1e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 25823 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:da:28:bc:c1:f5:31:c3:a8:9e:f5:83:ec:f0:ab:ec:1b:99: f4:94:91:67:8d:55:86:2a:46:c9:78:23:8b:5e:6e:f1:41:21: 72:d2:03:a2:c9:6d:5d:51:19:f7:79:ae:07:e5:73:d4:76:79: 05:a1:dd:4f:cf:b5:27:32:24:5d:17:4a:3a:82:91:fb:93:63: ec:8d:1d:3d:1c:e6:5c:a5:07:2d:8a:bf:f6:98:a6:a7:1d:0f: 43:15:63:fd:d9:74:9b:a4:52:be:e8:75:7c:b0:16:26:c6:8a: 0e:dd:54:6a:62:82:24:c4:43:4b:57:f3:11:90:4b:6a:e2:d4: 7c:44:f6:f2:84:a3:1c:1e:47:c6:c7:90:30:5c:74:e4:e9:36: a5:2d:b0:40:a0:4a:ed:bd:c4:3a:d7:8d:20:79:71:81:5d:a5: 62:45:f9:ce:2c:08:77:71:07:2e:a7:68:ed:72:78:26:58:1f: 91:32:7c:cb:3d:fa:60:7c:f8:e5:bb:04:e8:34:d4:a1:10:8a: 4e:4b:3f:3e:47:34:93:be:c4:75:59:21:15:9f:ac:2c:cc:7e: 74:be:fb:4d:f2:04:2d:b3:84:d7:c9:09:9d:b0:dc:d1:f8:48: 7e:b8:37:60:1f:ba:29:b9:17:62:d4:3d:51:fe:94:54:dc:76: 96:0a:72:54 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE9vsEsB/JIekCYskAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODE3NDUyM1oXDTI5MDExMDE4NDUyM1owLzEtMCsGA1UEAxMk ODkzYmFkNTQtYTE3ZC00NDlhLWIzNTctNzEyNGViZWJmMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCEcNVnZWj2uNNlu69pv6CIwPnr8YVA3CNXi xQO2ROL2LNbK7JPndzWY06+5s5mEecqBjZgPiaMtjMo4+kS81cK3gGdbOzoxcnLD copif8JqHEedhOaRbemGm4mFDf/k9coKMblUH3BsIoNOjNWn/aNO5QwNNhGviIFf qb1acj86IwdYfLANuviAntigGyYTlIFPQytX3FxGAUS3ZfHiRHSHKJGJD4nr8N8q 2DP9mWMvaksmdUmsGyaia2NjcMyWAgN+TlZPkeVGoIhMG4VIW1UEx+eJfPggQ3eU HRhpyVAxjd48CAyC+Obf0SiV8mPJaEsKJkob9/uan2hYpVmd8QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFH5D2KNozqTrqWJufDG5IJPWbhWoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 OTNiYWQ1NC1hMTdkLTQ0OWEtYjM1Ny03MTI0ZWJlYmYxZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzg5M2JhZDU0LWExN2QtNDQ5YS1i MzU3LTcxMjRlYmViZjFlMy84OTNiYWQ1NC1hMTdkLTQ0OWEtYjM1Ny03MTI0ZWJl YmYxZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZN8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC9oovMH1McOonvWD7PCr7BuZ9JSR Z41VhipGyXgji15u8UEhctIDosltXVEZ93muB+Vz1HZ5BaHdT8+1JzIkXRdKOoKR +5Nj7I0dPRzmXKUHLYq/9pimpx0PQxVj/dl0m6RSvuh1fLAWJsaKDt1UamKCJMRD S1fzEZBLauLUfET28oSjHB5HxseQMFx05Ok2pS2wQKBK7b3EOteNIHlxgV2lYkX5 ziwId3EHLqdo7XJ4JlgfkTJ8yz36YHz45bsE6DTUoRCKTks/Pkc0k77EdVkhFZ+s LMx+dL77TfIELbOE18kJnbDc0fhIfrg3YB+6KbkXYtQ9Uf6UVNx2lgpyVA== -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:04 2026 by rpki-client