$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.cer File: 8ced82ce-8cf1-4562-b4ac-b572b7c8639a.cer (raw, json) Hash identifier: NOzRVemD1qqp+aZP8R9yHYEUD63EpDdpE5mSs2uhGxE= Subject key identifier: FB:8A:7B:15:D1:BC:E3:EF:45:2E:64:D2:8E:22:2D:2A:38:AE:C4:00 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA0EF04722B0DCC1EE8CA8790 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 09:06:23 +0000 Certificate not after: Sun 28 Jan 2029 10:06:23 +0000 Subordinate resources: IP: 216.120.131.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a0:ef:04:72:2b:0d:cc:1e:e8:ca:87:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 26 09:06:23 2026 GMT Not After : Jan 28 10:06:23 2029 GMT Subject: CN=8ced82ce-8cf1-4562-b4ac-b572b7c8639a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:18:3b:71:50:93:f1:15:51:66:87:18:45: ac:63:d0:d9:72:8e:68:09:9b:a2:db:b3:fa:e2:88: be:6f:3c:1f:d9:12:79:ce:5d:77:2c:dc:96:1a:60: 0c:d6:12:06:fe:89:87:40:74:32:dc:af:0e:b3:ea: c8:28:09:5b:0c:d9:70:ae:72:90:9a:f4:5c:94:2b: e4:5d:1f:f6:4b:09:49:1d:70:5e:7d:e7:b2:6b:bb: 7f:36:54:33:66:25:a8:9d:37:72:4e:10:82:e3:6c: 4b:5b:c9:8f:51:52:77:0b:e8:e7:0c:10:b3:2f:c5: e8:94:19:2f:d9:bf:30:8f:93:d3:47:8d:25:c5:69: e7:81:c6:37:d7:98:c7:61:a8:46:22:03:33:bc:3f: 1e:48:6e:51:20:22:bd:ee:bc:a8:3c:1e:b4:35:ce: 95:ac:e0:8b:eb:07:2f:c0:22:ad:3d:1b:a1:38:cb: c7:cd:e6:bd:88:b9:d8:24:a1:1f:d5:de:6b:82:66: 13:4a:54:e9:95:de:ec:3e:f0:3e:20:1c:30:b9:4d: 4b:26:66:7b:ef:60:7e:7c:1b:21:c8:fd:20:fd:d1: 5c:bb:9a:11:2c:4e:6f:5a:7f:4a:36:4f:39:4d:58: 3a:17:51:19:04:91:ce:42:96:cd:54:32:6e:79:b1: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8A:7B:15:D1:BC:E3:EF:45:2E:64:D2:8E:22:2D:2A:38:AE:C4:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ced82ce-8cf1-4562-b4ac-b572b7c8639a/8ced82ce-8cf1-4562-b4ac-b572b7c8639a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 216.120.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:af:66:72:2a:da:bc:47:83:5e:5b:3e:39:34:2b:7f:90:10: 6b:ed:c9:d9:76:d8:40:ec:2f:af:40:ff:66:2e:bf:3c:db:e2: 4a:71:6c:a2:ba:c0:f7:2f:a6:7c:cc:13:70:1b:3b:1c:4e:e5: 67:0b:ec:10:3d:db:c0:6e:28:d8:20:b9:f3:c1:fd:9e:37:b0: 7e:a2:fd:b5:66:a9:5c:12:55:a7:44:01:35:46:08:b0:5c:37: 5c:ed:ef:2c:f4:70:9f:b8:77:61:04:ad:14:3b:e0:20:fc:19: a6:9b:65:6a:0d:cb:fc:09:2f:13:28:76:37:6d:cd:fb:90:39: 48:00:b7:20:5d:e8:b3:bd:d3:77:cd:8a:29:54:0d:de:7f:95: 61:c4:04:ea:79:12:48:f2:aa:a7:f1:d2:80:53:99:67:24:4b: c0:a0:02:11:0b:28:96:5c:fe:6b:1f:6b:b8:18:e7:0f:47:55: 9f:16:51:8c:57:65:e3:a0:04:40:7c:41:b2:37:c3:1c:eb:7d: 5d:ca:40:3b:3e:53:2f:02:e8:72:2d:5d:50:83:dc:df:13:38: e4:9e:91:e6:44:9d:fc:8c:a7:8e:57:9b:ec:9d:25:35:c8:12: 8c:88:f7:f2:f9:09:62:d8:56:b1:32:41:8e:04:3c:c0:cc:45: 8d:45:a6:2d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+g7wRyKw3MHujKh5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNjA5MDYyM1oXDTI5MDEyODEwMDYyM1owLzEtMCsGA1UEAxMk OGNlZDgyY2UtOGNmMS00NTYyLWI0YWMtYjU3MmI3Yzg2MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLkYO3FQk/EVUWaHGEWsY9DZco5oCZui27P6 4oi+bzwf2RJ5zl13LNyWGmAM1hIG/omHQHQy3K8Os+rIKAlbDNlwrnKQmvRclCvk XR/2SwlJHXBefeeya7t/NlQzZiWonTdyThCC42xLW8mPUVJ3C+jnDBCzL8XolBkv 2b8wj5PTR40lxWnngcY315jHYahGIgMzvD8eSG5RICK97ryoPB60Nc6VrOCL6wcv wCKtPRuhOMvHzea9iLnYJKEf1d5rgmYTSlTpld7sPvA+IBwwuU1LJmZ772B+fBsh yP0g/dFcu5oRLE5vWn9KNk85TVg6F1EZBJHOQpbNVDJuebFwzwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPuKexXRvOPvRS5k0o4iLSo4rsQAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 Y2VkODJjZS04Y2YxLTQ1NjItYjRhYy1iNTcyYjdjODYzOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhjZWQ4MmNlLThjZjEtNDU2Mi1i NGFjLWI1NzJiN2M4NjM5YS84Y2VkODJjZS04Y2YxLTQ1NjItYjRhYy1iNTcyYjdj ODYzOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADYeIMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAL69mciravEeDXls+OTQr f5AQa+3J2XbYQOwvr0D/Zi6/PNviSnFsorrA9y+mfMwTcBs7HE7lZwvsED3bwG4o 2CC588H9njewfqL9tWapXBJVp0QBNUYIsFw3XO3vLPRwn7h3YQStFDvgIPwZpptl ag3L/AkvEyh2N23N+5A5SAC3IF3os73Td82KKVQN3n+VYcQE6nkSSPKqp/HSgFOZ ZyRLwKACEQsollz+ax9ruBjnD0dVnxZRjFdl46AEQHxBsjfDHOt9XcpAOz5TLwLo ci1dUIPc3xM45J6R5kSd/Iynjleb7J0lNcgSjIj38vkJYthWsTJBjgQ8wMxFjUWm LQ== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:59 2026 by rpki-client