$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9.cer File: 8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9.cer (raw, json) Hash identifier: as19zGtLcZ6I2oXEwfGuv0rLqlVQnixdnJZ8PBj4jTg= Subject key identifier: E6:F7:24:9F:B7:38:E5:CA:E9:9C:D9:6E:61:46:23:27:D4:7E:4B:F8 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F997D1F3BE4C51598F3A6CA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9/8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Oct 2026 17:06:14 +0000 Certificate not after: Thu 18 Jan 2029 17:07:14 +0000 Subordinate resources: AS: 403094 IP: 198.102.16.0/22 IP: 2602:f28e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:7d:1f:3b:e4:c5:15:98:f3:a6:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 23 17:06:14 2026 GMT Not After : Jan 18 17:07:14 2029 GMT Subject: CN=8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:78:c9:12:1b:2a:67:53:a2:42:a8:b7:a1: 05:e6:63:65:8f:12:82:d2:1b:4e:65:38:eb:08:76: 8d:67:de:1c:7f:7c:35:38:80:a7:67:14:bf:5c:d3: e7:9b:d2:bf:bc:86:26:7c:47:1f:a9:fa:de:51:21: a7:96:70:a5:cb:39:03:80:e1:05:94:be:dd:0a:17: 47:23:98:a4:30:a0:bb:e2:2b:b1:ec:30:70:17:eb: 34:b8:98:24:02:8b:3a:78:55:8a:f6:e7:84:2c:a8: 47:ce:34:47:70:38:9f:9f:65:96:2d:d2:cd:f6:d0: fc:78:6f:26:65:36:3e:de:92:a3:06:e6:cf:f3:e8: 4d:e7:9e:1d:09:45:9e:02:3b:a5:ea:b8:67:1d:b5: 87:b9:03:6c:b6:4b:04:48:7a:9f:fe:dd:dc:31:53: 50:34:66:69:a1:5c:15:35:9c:33:2a:8f:52:6e:66: 89:93:77:c7:c3:40:54:ec:2d:e8:92:d2:d5:e5:e0: dd:18:48:a5:41:96:b0:f4:5c:bd:a3:44:23:ab:3c: 16:a7:3e:12:22:b8:6f:d0:f5:3f:d1:9d:25:b0:16: 30:6b:d3:35:78:7d:5e:a4:43:ab:1a:b5:f7:7c:3b: c8:b2:8d:b0:e9:26:f9:b5:b5:c3:e9:d2:80:54:29: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F7:24:9F:B7:38:E5:CA:E9:9C:D9:6E:61:46:23:27:D4:7E:4B:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9/8b8c9a3e-4aca-4930-85fb-c1bd557bd6d9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.102.16.0/22 IPv6: 2602:f28e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403094 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:05:46:ec:38:ec:ae:5d:c7:2c:0d:c0:a4:6a:d4:50:77:ef: 63:08:90:b4:d1:20:90:06:12:a9:e3:18:d7:80:7e:37:58:a4: fd:93:b3:55:d7:5c:f9:c7:8e:ae:25:81:e5:25:89:5f:4b:61: bf:69:37:51:15:e3:a0:0e:b6:cf:f6:ff:90:93:b4:ab:38:f3: cc:34:1b:c5:03:ab:70:ef:8c:ec:ee:2a:9d:11:fc:ad:ec:c5: c9:f0:b0:de:ca:28:e7:26:40:98:c8:99:d0:4b:0f:80:e7:9b: 2d:91:a1:6d:95:d9:24:9d:d1:97:29:39:dc:a6:23:1f:c1:f9: a4:96:c6:bc:b4:01:4a:23:b7:d9:4c:f2:4c:b5:63:ab:39:e1: d5:8e:31:b1:c6:e0:ed:10:2a:bf:00:96:1c:ff:d7:c5:45:9e: 29:ad:7c:6b:30:5a:f6:64:ba:70:5b:1d:25:9f:28:09:55:8a: 0d:dc:6a:ab:16:79:c5:73:88:e7:93:43:f5:aa:15:eb:3c:81: 68:76:6f:b5:16:a6:4c:e2:3f:94:24:60:e6:7d:43:ad:3b:d3: 47:99:e8:f6:70:69:51:28:45:ad:55:a0:20:28:19:55:77:d4: 74:c6:9d:96:37:b9:25:99:b3:aa:b6:98:0e:59:09:7d:61:9c: c1:c3:74:ee -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+ZfR875MUVmPOmyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMzE3MDYxNFoXDTI5MDExODE3MDcxNFowLzEtMCsGA1UEAxMk OGI4YzlhM2UtNGFjYS00OTMwLTg1ZmItYzFiZDU1N2JkNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DV4yRIbKmdTokKot6EF5mNljxKC0htOZTjr CHaNZ94cf3w1OICnZxS/XNPnm9K/vIYmfEcfqfreUSGnlnClyzkDgOEFlL7dChdH I5ikMKC74iux7DBwF+s0uJgkAos6eFWK9ueELKhHzjRHcDifn2WWLdLN9tD8eG8m ZTY+3pKjBubP8+hN554dCUWeAjul6rhnHbWHuQNstksESHqf/t3cMVNQNGZpoVwV NZwzKo9SbmaJk3fHw0BU7C3oktLV5eDdGEilQZaw9Fy9o0QjqzwWpz4SIrhv0PU/ 0Z0lsBYwa9M1eH1epEOrGrX3fDvIso2w6Sb5tbXD6dKAVClEWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOb3JJ+3OOXK6ZzZbmFGIyfUfkv4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 YjhjOWEzZS00YWNhLTQ5MzAtODVmYi1jMWJkNTU3YmQ2ZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhiOGM5YTNlLTRhY2EtNDkzMC04 NWZiLWMxYmQ1NTdiZDZkOS84YjhjOWEzZS00YWNhLTQ5MzAtODVmYi1jMWJkNTU3 YmQ2ZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALGZhAwDgQCAAIwCAMGBCYC8o4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmljBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1BUbsOOyuXccsDcCkatRQd+9j CJC00SCQBhKp4xjXgH43WKT9k7NV11z5x46uJYHlJYlfS2G/aTdRFeOgDrbP9v+Q k7SrOPPMNBvFA6tw74zs7iqdEfyt7MXJ8LDeyijnJkCYyJnQSw+A55stkaFtldkk ndGXKTncpiMfwfmklsa8tAFKI7fZTPJMtWOrOeHVjjGxxuDtECq/AJYc/9fFRZ4p rXxrMFr2ZLpwWx0lnygJVYoN3GqrFnnFc4jnk0P1qhXrPIFodm+1FqZM4j+UJGDm fUOtO9NHmej2cGlRKEWtVaAgKBlVd9R0xp2WN7klmbOqtpgOWQl9YZzBw3Tu -----END CERTIFICATE-----Generated at Wed Nov 4 05:35:43 2026 by rpki-client