$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b392982-3845-4b81-999c-a97c19632be5.cer File: 8b392982-3845-4b81-999c-a97c19632be5.cer (raw, json) Hash identifier: no7WjZtRfQsyKrpy4U6i5TFFU2w3a/EYmr2jiIDT7/E= Subject key identifier: B8:D7:CE:82:EF:17:0B:48:A2:25:1A:CE:F4:5E:07:A2:E4:67:A4:E6 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8D4463F05020D8FD2C52B470 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b392982-3845-4b81-999c-a97c19632be5/8b392982-3845-4b81-999c-a97c19632be5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b392982-3845-4b81-999c-a97c19632be5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 08:02:14 +0000 Certificate not after: Sun 21 Jan 2029 09:02:14 +0000 Subordinate resources: IP: 23.165.204.0/24 IP: 2602:f2bc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:44:63:f0:50:20:d8:fd:2c:52:b4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 08:02:14 2026 GMT Not After : Jan 21 09:02:14 2029 GMT Subject: CN=8b392982-3845-4b81-999c-a97c19632be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:98:86:71:37:ab:16:f5:9e:4f:6d:51:cb: ed:e1:ef:24:d5:10:65:72:ba:ea:ea:6e:04:31:b3: 62:e1:8c:26:11:1a:70:81:5a:e1:68:33:3a:b6:dd: 7f:6f:b2:a5:6a:61:db:55:6b:37:31:89:02:93:c2: bf:e8:d9:94:3d:e3:be:57:28:fc:fd:b5:bf:98:bd: ac:57:07:a6:c5:07:16:51:23:fc:7f:84:43:04:02: 61:29:22:b6:89:0d:99:8d:de:b0:ef:0d:5b:94:3f: f1:0e:ed:b6:60:6d:ee:42:67:25:56:37:98:d9:90: 9e:a0:f2:68:7d:69:1d:9c:9d:1d:aa:ea:7c:d7:e4: 20:fb:48:50:cd:26:03:05:da:3f:5d:40:42:e2:aa: 8a:9b:55:ed:99:c6:c3:d2:a0:07:89:ef:fc:08:b2: 5b:4f:64:7e:78:e2:37:1a:e2:08:a7:c3:36:05:ce: f8:66:d4:69:ee:66:ae:b4:65:1e:0e:52:71:9a:8d: 65:b5:e4:f8:cf:4f:52:22:a8:7a:65:97:9f:98:b7: fd:11:1a:0f:f3:f2:67:b1:78:4c:27:2c:57:fd:e6: 33:71:74:a5:6f:65:49:b4:b2:99:a9:65:a8:97:a1: f7:c5:dc:8b:53:24:52:6e:56:64:10:4b:b4:b2:15: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D7:CE:82:EF:17:0B:48:A2:25:1A:CE:F4:5E:07:A2:E4:67:A4:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b392982-3845-4b81-999c-a97c19632be5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b392982-3845-4b81-999c-a97c19632be5/8b392982-3845-4b81-999c-a97c19632be5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.165.204.0/24 IPv6: 2602:f2bc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:eb:a9:d1:89:d4:c1:53:a7:b8:96:74:8a:4f:2c:8b:dd:16: 99:4c:57:ab:5e:18:bf:58:bc:52:e6:d3:3f:0f:bc:d9:74:e9: fe:f1:ec:c4:ce:7e:95:eb:dd:cd:df:7d:74:78:a4:4e:7d:38: 90:96:f7:ef:3a:ff:bb:17:dc:c0:66:64:92:0c:3c:d2:a1:1b: 26:1a:48:c1:47:0a:a2:d2:33:7c:8f:34:c3:cd:c1:ab:e0:a5: ed:60:10:aa:75:a2:a5:18:14:43:15:bb:30:f9:89:e6:d7:7d: 90:35:d3:21:09:79:fe:93:ec:c0:68:f9:5d:51:6a:e1:ce:68: 59:d4:7b:8d:ac:fa:64:55:18:36:34:dd:21:5d:cd:cc:74:c5: 78:db:78:3e:e9:3c:16:ae:63:05:03:4a:90:de:2f:9f:d3:4b: c5:92:4b:7b:bf:e2:07:4c:ce:16:c5:8d:6b:81:c5:e1:d7:03: 2f:2a:03:ed:f4:c6:c7:9c:8c:2e:45:90:11:94:f8:46:0a:d4: b2:82:b3:39:ba:5e:3c:23:ac:fe:67:bf:b9:8e:8c:97:ab:5a: 34:78:9a:0d:e8:55:95:09:39:09:6d:a2:c1:77:ba:ea:d4:9c: e2:0f:eb:d0:f6:00:5a:1b:6e:8e:a0:4c:18:d1:03:8a:cc:15: 1b:76:6c:eb -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+NRGPwUCDY/SxStHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTA4MDIxNFoXDTI5MDEyMTA5MDIxNFowLzEtMCsGA1UEAxMk OGIzOTI5ODItMzg0NS00YjgxLTk5OWMtYTk3YzE5NjMyYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRGYhnE3qxb1nk9tUcvt4e8k1RBlcrrq6m4E MbNi4YwmERpwgVrhaDM6tt1/b7KlamHbVWs3MYkCk8K/6NmUPeO+Vyj8/bW/mL2s VwemxQcWUSP8f4RDBAJhKSK2iQ2Zjd6w7w1blD/xDu22YG3uQmclVjeY2ZCeoPJo fWkdnJ0dqup81+Qg+0hQzSYDBdo/XUBC4qqKm1XtmcbD0qAHie/8CLJbT2R+eOI3 GuIIp8M2Bc74ZtRp7mautGUeDlJxmo1lteT4z09SIqh6ZZefmLf9ERoP8/JnsXhM JyxX/eYzcXSlb2VJtLKZqWWol6H3xdyLUyRSblZkEEu0shVmSwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLjXzoLvFwtIoiUazvReB6LkZ6TmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 YjM5Mjk4Mi0zODQ1LTRiODEtOTk5Yy1hOTdjMTk2MzJiZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhiMzkyOTgyLTM4NDUtNGI4MS05 OTljLWE5N2MxOTYzMmJlNS84YjM5Mjk4Mi0zODQ1LTRiODEtOTk5Yy1hOTdjMTk2 MzJiZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpcwwDgQCAAIwCAMGACYC8rwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGvrqdGJ1MFTp7iWdIpPLIvdFplMV6teGL9YvFLm0z8PvNl06f7x7MTOfpXr3c3f fXR4pE59OJCW9+86/7sX3MBmZJIMPNKhGyYaSMFHCqLSM3yPNMPNwavgpe1gEKp1 oqUYFEMVuzD5iebXfZA10yEJef6T7MBo+V1RauHOaFnUe42s+mRVGDY03SFdzcx0 xXjbeD7pPBauYwUDSpDeL5/TS8WSS3u/4gdMzhbFjWuBxeHXAy8qA+30xsecjC5F kBGU+EYK1LKCszm6XjwjrP5nv7mOjJerWjR4mg3oVZUJOQltosF3uurUnOIP69D2 AFobbo6gTBjRA4rMFRt2bOs= -----END CERTIFICATE-----Generated at Mon Nov 2 14:28:28 2026 by rpki-client