$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec.cer File: 8b30d66c-004f-49f1-a57c-c10abb20b1ec.cer (raw, json) Hash identifier: E1LSMi3X5XoMTDTB/hUYMGU09+83ep1pxEAVDNHPRWw= Subject key identifier: 16:51:41:E0:18:B0:10:DC:56:A9:BD:DA:AC:B6:BE:E5:D7:B3:66:C0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4825055321290FEB4A742D50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/8b30d66c-004f-49f1-a57c-c10abb20b1ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 13:48:15 +0000 Certificate not after: Sun 24 Dec 2028 14:23:05 +0000 Subordinate resources: AS: 20414 IP: 148.170.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:25:05:53:21:29:0f:eb:4a:74:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 24 13:48:15 2026 GMT Not After : Dec 24 14:23:05 2028 GMT Subject: CN=8b30d66c-004f-49f1-a57c-c10abb20b1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:41:5d:22:6f:db:b8:df:d8:d2:99:51:0e: d9:d2:54:2b:72:cd:d8:3b:fd:68:4d:30:5c:aa:22: d6:80:3d:09:e0:04:ed:68:b9:6b:18:2a:3a:1b:cc: 2c:70:43:4a:52:23:4d:86:1e:37:80:5b:5c:01:29: 17:59:01:16:a4:43:8d:47:d0:b5:fb:ec:3f:3e:76: f8:a0:fd:8d:f6:fa:50:20:e9:f9:ae:54:6a:2b:fc: 9f:b0:b2:61:45:ee:e7:9b:4c:5e:7e:37:2a:91:57: 52:85:4d:61:be:a7:c5:53:1e:a6:2d:c9:04:97:b8: 15:6a:15:9b:2e:dd:1f:d5:1c:99:e2:cd:61:3d:78: 3f:35:54:96:92:89:71:da:d2:41:3a:ce:e0:54:8b: 82:d9:9c:9a:fe:93:51:39:e7:c6:27:73:e2:77:97: e0:04:bb:4c:cd:70:02:ed:2b:3a:28:de:89:67:e1: 15:36:e8:bd:4c:5e:fe:59:ee:f6:f7:5c:ec:78:1b: 57:96:79:23:33:84:92:f0:73:43:c6:42:7d:38:9f: b2:f6:5f:39:92:3e:0d:27:2a:f7:22:ef:27:8f:e8: 8b:83:a4:1d:d0:81:bb:41:bd:ea:35:9c:7b:43:5e: b7:3d:7e:a2:08:57:a1:86:22:d1:02:a1:0b:b0:b1: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:41:E0:18:B0:10:DC:56:A9:BD:DA:AC:B6:BE:E5:D7:B3:66:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/8b30d66c-004f-49f1-a57c-c10abb20b1ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 148.170.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20414 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6a:4c:f2:0e:99:bc:1d:d9:fa:96:1d:b1:d2:bd:aa:2b:89: ad:78:a8:15:ca:ed:07:3f:1b:de:d2:76:97:43:99:3e:c9:4b: 58:a6:a1:41:84:d1:33:71:22:1a:22:79:54:a8:c7:19:4b:07: f1:24:8c:5f:b0:08:dc:88:6a:2a:f5:68:86:fb:a8:c5:7a:25: 55:ec:9e:4a:2e:aa:75:2a:cf:cb:94:72:e9:48:1b:d0:d7:ae: 42:54:f0:6e:12:46:20:85:07:1b:5a:52:9a:31:0d:a8:57:cb: c0:a6:dc:bc:0e:de:6a:58:98:28:a0:fe:4d:2e:84:36:5d:e6: 21:67:60:7d:85:da:33:f1:68:f6:5f:bf:93:ec:13:17:79:0b: 6a:47:85:3a:cf:85:a3:1c:2d:b9:64:f2:73:a3:ac:e7:5f:80: 6a:7f:21:ff:db:d6:e8:42:c1:55:36:80:86:65:e2:fb:17:19: e8:83:27:24:68:86:f5:61:bf:03:6f:aa:3a:cb:1f:b0:1a:01: b0:7d:e3:29:51:f8:6d:58:34:27:fa:e6:74:ff:2d:8d:64:f4: fe:f7:6f:9b:9d:f7:10:53:b5:d3:8c:7b:4d:b4:03:cc:f1:44: 67:a6:2c:92:b0:40:28:ad:3a:b0:90:6a:8a:f8:9a:38:a1:d7: b9:77:b5:bd -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9IJQVTISkP60p0LVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyNDEzNDgxNVoXDTI4MTIyNDE0MjMwNVowLzEtMCsGA1UEAxMk OGIzMGQ2NmMtMDA0Zi00OWYxLWE1N2MtYzEwYWJiMjBiMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWBBXSJv27jf2NKZUQ7Z0lQrcs3YO/1oTTBc qiLWgD0J4ATtaLlrGCo6G8wscENKUiNNhh43gFtcASkXWQEWpEONR9C1++w/Pnb4 oP2N9vpQIOn5rlRqK/yfsLJhRe7nm0xefjcqkVdShU1hvqfFUx6mLckEl7gVahWb Lt0f1RyZ4s1hPXg/NVSWkolx2tJBOs7gVIuC2Zya/pNROefGJ3Pid5fgBLtMzXAC 7Ss6KN6JZ+EVNui9TF7+We7291zseBtXlnkjM4SS8HNDxkJ9OJ+y9l85kj4NJyr3 Iu8nj+iLg6Qd0IG7Qb3qNZx7Q163PX6iCFehhiLRAqELsLE2JQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBZRQeAYsBDcVqm92qy2vuXXs2bAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 YjMwZDY2Yy0wMDRmLTQ5ZjEtYTU3Yy1jMTBhYmIyMGIxZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhiMzBkNjZjLTAwNGYtNDlmMS1h NTdjLWMxMGFiYjIwYjFlYy84YjMwZDY2Yy0wMDRmLTQ5ZjEtYTU3Yy1jMTBhYmIy MGIxZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASUqvAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC T74wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARGpM8g6ZvB3Z+pYdsdK9qiuJrXioFcrtBz8b3tJ2l0OZPslL WKahQYTRM3EiGiJ5VKjHGUsH8SSMX7AI3IhqKvVohvuoxXolVeyeSi6qdSrPy5Ry 6Ugb0NeuQlTwbhJGIIUHG1pSmjENqFfLwKbcvA7ealiYKKD+TS6ENl3mIWdgfYXa M/Fo9l+/k+wTF3kLakeFOs+FoxwtuWTyc6Os51+Aan8h/9vW6ELBVTaAhmXi+xcZ 6IMnJGiG9WG/A2+qOssfsBoBsH3jKVH4bVg0J/rmdP8tjWT0/vdvm533EFO104x7 TbQDzPFEZ6YskrBAKK06sJBqiviaOKHXuXe1vQ== -----END CERTIFICATE-----Generated at Sun Nov 1 01:45:00 2026 by rpki-client