$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer File: 8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.cer (raw, json) Hash identifier: lwPsmtaalDGk3lw8gyWSJR6eScKBc8qoCHOQEaCN73I= Subject key identifier: 3B:0F:EC:F5:5E:7B:56:78:89:03:1E:C2:76:12:33:6A:B6:43:D4:2D Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6FE7F5DAB26EAE780D067E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 19:37:33 +0000 Certificate not after: Wed 10 Jan 2029 20:37:33 +0000 Subordinate resources: AS: 32576 IP: 199.188.128.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:e7:f5:da:b2:6e:ae:78:0d:06:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 19:37:33 2026 GMT Not After : Jan 10 20:37:33 2029 GMT Subject: CN=8d1e98c1-8c5d-4b39-a869-8752e6d77e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:4b:64:41:82:8b:c0:be:9d:6c:74:86:5f: fd:4e:83:58:43:79:19:41:63:f1:be:65:10:7d:f6: de:7c:fc:6e:ac:1a:24:7c:ae:a0:9e:d6:f0:5e:7a: f5:98:d4:aa:5b:e4:e1:19:94:bb:42:81:8e:d0:46: 8b:6b:ce:18:af:98:99:8e:63:60:63:bb:d8:40:18: e2:87:41:ab:e2:f4:44:1e:42:3c:00:57:c7:d0:c5: 3d:f5:8c:73:12:ec:eb:65:f7:56:b4:4c:5e:2a:bc: 25:d1:72:91:36:ae:9c:6e:dd:98:4c:b3:0a:2d:5a: 67:b7:32:90:8b:69:1a:97:7f:a4:fc:7e:66:5b:27: 5b:70:23:9f:30:c9:f0:19:26:99:15:0a:31:60:85: eb:9f:a1:00:87:0b:17:56:b6:ad:49:e6:f0:a8:4d: 65:4b:fe:16:be:14:8a:03:17:8d:68:93:ac:0b:d2: 04:d7:0c:0e:62:b8:c8:9c:34:6a:99:e0:e6:56:17: 26:7b:ed:23:86:8d:59:bd:a7:1e:14:1f:e6:2c:e7: ee:42:0d:97:b5:8c:25:c1:05:ef:3b:31:6e:69:64: 32:3c:8f:ad:df:74:ab:74:83:fa:1c:ba:a1:b7:c2: 64:ee:cb:d6:39:27:e3:6c:c4:b6:83:57:43:d7:d2: ea:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:EC:F5:5E:7B:56:78:89:03:1E:C2:76:12:33:6A:B6:43:D4:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b/8d1e98c1-8c5d-4b39-a869-8752e6d77e6b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.188.128.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32576 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4a:ac:a8:4f:96:4c:c0:dd:6e:84:d7:78:b9:b2:38:7b:a2: 42:24:61:cd:1d:e0:9d:09:82:c8:a0:ac:c7:87:3a:95:ad:cd: b6:ab:db:a6:8d:ec:18:b9:a0:57:2e:bf:db:c5:26:81:86:3f: 17:b3:97:99:15:8c:2d:8a:9f:65:fa:19:2a:d3:bb:33:a7:79: b4:c5:6e:1a:81:4b:b4:46:c0:e4:28:63:d5:50:5f:77:f8:ce: 16:9d:10:f8:fa:01:f0:e9:c2:c5:9b:3d:67:77:0f:ac:99:d1: 63:be:9f:1f:a9:a2:9a:33:3e:ba:d9:86:23:88:38:f0:cd:e1: c6:76:e2:7e:59:2e:2c:77:9e:14:d9:67:a6:ee:89:76:af:b6: 5f:91:04:10:90:8c:ca:80:79:8d:5c:22:d1:66:88:f6:c8:26: e8:22:cc:5f:73:67:ec:0f:27:39:26:28:da:4b:e3:85:3b:6c: aa:a0:de:19:1b:09:7f:20:2e:4d:22:92:07:d5:8a:06:31:fc: 97:72:1c:d7:df:2a:5a:75:cf:43:9d:87:38:ec:95:f8:8a:f3: 86:d2:fc:c5:aa:4d:98:c4:41:0a:62:99:ce:8b:95:94:fd:1d: 55:3e:06:7d:35:ab:68:0a:61:76:15:ae:44:6d:81:ac:65:41: a6:a7:56:16 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9v5/Xasm6ueA0GfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODE5MzczM1oXDTI5MDExMDIwMzczM1owLzEtMCsGA1UEAxMk OGQxZTk4YzEtOGM1ZC00YjM5LWE4NjktODc1MmU2ZDc3ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0JLZEGCi8C+nWx0hl/9ToNYQ3kZQWPxvmUQ ffbefPxurBokfK6gntbwXnr1mNSqW+ThGZS7QoGO0EaLa84Yr5iZjmNgY7vYQBji h0Gr4vREHkI8AFfH0MU99YxzEuzrZfdWtExeKrwl0XKRNq6cbt2YTLMKLVpntzKQ i2kal3+k/H5mWydbcCOfMMnwGSaZFQoxYIXrn6EAhwsXVratSebwqE1lS/4WvhSK AxeNaJOsC9IE1wwOYrjInDRqmeDmVhcme+0jho1ZvaceFB/mLOfuQg2XtYwlwQXv OzFuaWQyPI+t33SrdIP6HLqht8Jk7svWOSfjbMS2g1dD19Lq6wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFDsP7PVee1Z4iQMewnYSM2q2Q9QtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 ZDFlOThjMS04YzVkLTRiMzktYTg2OS04NzUyZTZkNzdlNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhkMWU5OGMxLThjNWQtNGIzOS1h ODY5LTg3NTJlNmQ3N2U2Yi84ZDFlOThjMS04YzVkLTRiMzktYTg2OS04NzUyZTZk NzdlNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHvIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC f0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAlkqsqE+WTMDdboTXeLmyOHuiQiRhzR3gnQmCyKCsx4c6la3N tqvbpo3sGLmgVy6/28UmgYY/F7OXmRWMLYqfZfoZKtO7M6d5tMVuGoFLtEbA5Chj 1VBfd/jOFp0Q+PoB8OnCxZs9Z3cPrJnRY76fH6mimjM+utmGI4g48M3hxnbiflku LHeeFNlnpu6Jdq+2X5EEEJCMyoB5jVwi0WaI9sgm6CLMX3Nn7A8nOSYo2kvjhTts qqDeGRsJfyAuTSKSB9WKBjH8l3Ic198qWnXPQ52HOOyV+IrzhtL8xapNmMRBCmKZ zouVlP0dVT4GfTWraAphdhWuRG2BrGVBpqdWFg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:22 2026 by rpki-client