$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8.cer File: 8c81591e-5a57-4cd1-a89c-84e52719ceb8.cer (raw, json) Hash identifier: 0TdiblAF7pBF+kyBnBAa5h6sv/2dZKWZ9IH0gWfmyPo= Subject key identifier: D8:88:61:A5:FC:53:60:7D:F6:E9:9E:24:18:7C:84:83:E7:E6:A7:DB Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F458FD135DB1A8CA6F8A91E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/8c81591e-5a57-4cd1-a89c-84e52719ceb8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 15:36:00 +0000 Certificate not after: Tue 26 Dec 2028 16:36:00 +0000 Subordinate resources: AS: 30512 IP: 198.207.129.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:8f:d1:35:db:1a:8c:a6:f8:a9:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 15:36:00 2026 GMT Not After : Dec 26 16:36:00 2028 GMT Subject: CN=8c81591e-5a57-4cd1-a89c-84e52719ceb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:31:c3:b2:c0:12:70:c1:85:72:77:8d:5e:78: 91:dd:d8:2f:81:48:31:b7:d2:b8:eb:6b:e4:9d:7b: 81:55:bc:a1:2e:8e:2e:7f:0d:ca:b9:a2:e2:63:8c: ac:4e:2a:d9:2f:58:0e:77:7f:e1:37:44:e1:a1:b8: b3:77:08:ee:66:4f:f7:e3:96:cb:de:f4:f2:7f:2e: e3:10:b4:eb:19:05:7a:8a:09:32:70:66:ab:ea:a7: bd:a5:f9:b0:6e:6d:9d:da:e5:37:64:1a:c2:5b:03: d1:14:53:01:8a:48:fd:a2:8a:57:b0:4e:ee:c2:9f: 0c:d2:3f:02:34:8c:b3:24:d0:93:d0:0e:31:7e:1e: 64:77:60:cb:64:a6:a7:22:4f:e0:1b:5d:e6:10:5b: 31:c5:6c:77:d8:0f:55:48:e7:d6:d6:4d:ee:86:71: 22:d2:b2:25:01:f7:d0:6d:96:15:1f:59:a8:46:c2: 6b:27:a8:f1:0f:1c:e9:cc:63:59:5a:5f:25:b1:ad: a9:8e:8b:f7:bc:93:28:2c:35:a7:16:ac:ad:d9:f2: 01:4c:80:8a:f0:d3:c6:3b:03:f5:26:e3:9b:1c:29: d5:28:10:a9:97:88:bd:f8:41:d3:ba:9e:d8:9f:d0: ce:47:78:04:a6:d5:bd:71:0a:e9:45:bb:b3:c4:1c: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:61:A5:FC:53:60:7D:F6:E9:9E:24:18:7C:84:83:E7:E6:A7:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8c81591e-5a57-4cd1-a89c-84e52719ceb8/8c81591e-5a57-4cd1-a89c-84e52719ceb8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.207.129.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30512 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ef:49:49:ac:6b:fa:36:a3:ef:e2:be:75:65:ec:fb:21:e6: 21:81:ce:fb:68:6f:01:25:59:9a:2e:02:c9:50:dc:ad:b0:71: f6:31:61:45:d5:ac:6c:92:7b:9f:70:40:d5:22:30:a3:59:07: 65:0c:3a:89:18:b7:83:20:80:4c:72:96:99:6f:34:0a:0e:d7: c2:96:c5:3b:21:bb:e3:1d:3c:58:4e:c1:fd:1e:7a:c3:88:38: 44:62:ff:bb:d5:fb:27:75:6a:4a:11:12:18:73:fa:4b:91:f8: b9:70:66:4b:a8:7e:dc:9e:b4:03:51:85:6e:fa:e3:ca:f7:ac: fc:76:2c:ed:f9:1e:46:af:a4:b3:ca:9a:1a:94:e6:3b:9b:8b: f9:c9:31:0c:6f:18:2c:d8:da:c6:3a:71:f9:2e:24:0a:19:3f: 5e:ba:28:ef:c9:5d:bc:cb:10:9b:4b:45:fc:11:92:30:5f:81: 56:38:3b:15:b1:5f:84:c1:e7:1f:af:70:06:bd:9c:32:12:2e: 74:68:b3:f9:21:6d:74:40:2f:03:78:27:87:80:82:23:9e:04: df:aa:a0:b0:f6:c2:c9:2c:91:92:3a:d4:0e:1d:30:13:a8:71: 51:1b:02:8a:a2:27:74:0b:2a:0e:f5:30:bb:d3:62:0d:82:68: 44:90:16:2f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9Fj9E12xqMpvipHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzE1MzYwMFoXDTI4MTIyNjE2MzYwMFowLzEtMCsGA1UEAxMk OGM4MTU5MWUtNWE1Ny00Y2QxLWE4OWMtODRlNTI3MTljZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizHDssAScMGFcneNXniR3dgvgUgxt9K462vk nXuBVbyhLo4ufw3KuaLiY4ysTirZL1gOd3/hN0ThobizdwjuZk/345bL3vTyfy7j ELTrGQV6igkycGar6qe9pfmwbm2d2uU3ZBrCWwPRFFMBikj9oopXsE7uwp8M0j8C NIyzJNCT0A4xfh5kd2DLZKanIk/gG13mEFsxxWx32A9VSOfW1k3uhnEi0rIlAffQ bZYVH1moRsJrJ6jxDxzpzGNZWl8lsa2pjov3vJMoLDWnFqyt2fIBTICK8NPGOwP1 JuObHCnVKBCpl4i9+EHTup7Yn9DOR3gEptW9cQrpRbuzxBxlTQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNiIYaX8U2B99umeJBh8hIPn5qfbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 YzgxNTkxZS01YTU3LTRjZDEtYTg5Yy04NGU1MjcxOWNlYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhjODE1OTFlLTVhNTctNGNkMS1h ODljLTg0ZTUyNzE5Y2ViOC84YzgxNTkxZS01YTU3LTRjZDEtYTg5Yy04NGU1Mjcx OWNlYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGz4EwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dzAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAou9JSaxr+jaj7+K+dWXs+yHmIYHO+2hvASVZmi4CyVDcrbBx 9jFhRdWsbJJ7n3BA1SIwo1kHZQw6iRi3gyCATHKWmW80Cg7XwpbFOyG74x08WE7B /R56w4g4RGL/u9X7J3VqShESGHP6S5H4uXBmS6h+3J60A1GFbvrjyves/HYs7fke Rq+ks8qaGpTmO5uL+ckxDG8YLNjaxjpx+S4kChk/Xroo78ldvMsQm0tF/BGSMF+B Vjg7FbFfhMHnH69wBr2cMhIudGiz+SFtdEAvA3gnh4CCI54E36qgsPbCySyRkjrU Dh0wE6hxURsCiqIndAsqDvUwu9NiDYJoRJAWLw== -----END CERTIFICATE-----Generated at Wed Nov 4 05:38:33 2026 by rpki-client