$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8e3ce46e-57de-4abf-9316-087f9e2fc931.cer File: 8e3ce46e-57de-4abf-9316-087f9e2fc931.cer (raw, json) Hash identifier: IZV+qAnAbvnQupkJ9SgjrUKwcDH39BgcLNy14JDFFXo= Subject key identifier: F8:F9:9A:65:EF:E4:30:41:B9:6A:AD:E2:50:74:26:FF:7D:C1:80:A1 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5253512E8017AF5165B4A210 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8e3ce46e-57de-4abf-9316-087f9e2fc931/8e3ce46e-57de-4abf-9316-087f9e2fc931.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8e3ce46e-57de-4abf-9316-087f9e2fc931/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 05:19:36 +0000 Certificate not after: Sun 31 Dec 2028 06:19:36 +0000 Subordinate resources: AS: 14078 IP: 23.138.64.0/23 IP: 161.129.156.0/22 IP: 2604:5c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:52:53:51:2e:80:17:af:51:65:b4:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 28 05:19:36 2026 GMT Not After : Dec 31 06:19:36 2028 GMT Subject: CN=8e3ce46e-57de-4abf-9316-087f9e2fc931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bb:aa:94:89:c2:ba:12:6d:27:00:6b:ad:99: 68:df:6d:0c:62:fa:4c:40:d2:b5:67:ea:65:3a:cc: db:a6:60:97:ee:66:18:04:1a:87:15:c8:52:dc:71: e8:43:2b:a2:14:00:24:81:ae:c2:c0:e7:98:41:ce: d9:81:4b:b2:13:ff:92:99:dc:60:16:b9:0d:2e:24: 90:62:7a:96:e4:5f:a8:f0:6f:89:f6:ff:c7:96:fd: a8:92:57:39:37:0b:69:e9:02:fd:d9:2a:3e:73:42: 9c:b4:e5:46:1a:f1:a6:6c:e8:15:b8:1c:dd:4d:30: 45:b8:7f:4c:e7:90:63:ce:8c:79:5e:69:c1:d2:2e: ce:44:a9:17:a9:1f:7c:98:72:4b:2e:f2:3b:48:56: 4b:81:75:91:5c:2e:d1:c2:4a:75:d6:cc:71:e9:29: ec:81:a8:93:88:a1:b7:52:67:14:67:a1:e0:64:a8: 3f:04:e3:d9:f5:7a:7f:4d:19:73:d8:c2:27:44:3a: d1:c0:51:78:db:db:51:93:3b:50:77:b5:9f:c7:36: 21:38:67:9d:e1:49:f6:85:21:88:ab:7c:5f:e2:29: 20:26:ed:e3:c2:c0:36:01:92:ed:9b:93:76:cf:a4: ed:f9:d5:60:6f:ec:5c:cc:55:f2:2f:97:d5:45:99: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F9:9A:65:EF:E4:30:41:B9:6A:AD:E2:50:74:26:FF:7D:C1:80:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8e3ce46e-57de-4abf-9316-087f9e2fc931/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8e3ce46e-57de-4abf-9316-087f9e2fc931/8e3ce46e-57de-4abf-9316-087f9e2fc931.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.138.64.0/23 161.129.156.0/22 IPv6: 2604:5c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14078 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:01:29:fc:f7:70:99:e1:11:8e:16:9d:21:d6:43:ab:5c:ad: 88:d4:fb:44:a0:c7:b9:e1:a8:76:76:c6:e6:99:f7:19:62:a5: cd:96:85:b6:ee:42:8e:c1:56:32:ed:01:20:63:8e:cb:47:43: f3:a0:5d:e7:97:18:43:2d:8a:b2:33:ee:c3:26:44:7d:8d:ef: fb:07:15:93:00:ed:2c:67:26:07:19:17:9b:ff:32:3d:f2:0f: 00:09:76:c6:83:83:a0:68:e2:f4:6e:a8:42:32:f7:f5:fb:c7: 44:95:08:26:b5:9a:c3:77:36:8d:93:cd:91:40:39:d3:a0:21: c9:74:56:38:0d:f3:a7:d2:ee:1d:f9:b7:8b:a6:8f:fe:68:be: af:9f:91:81:61:13:f0:9e:e0:d5:11:0d:7f:e9:64:7e:56:83: d0:d5:c5:ea:b9:a2:77:eb:5b:85:f2:da:27:be:b3:23:0f:92: 24:a3:e3:88:24:de:e1:fc:45:86:7f:f3:20:f7:9d:ef:e4:1c: bc:b8:a7:95:b5:8a:a3:c7:b2:9a:a1:c0:c3:ab:af:9e:f9:7d: e3:9d:0d:c7:9c:26:2b:7a:c2:d1:45:d6:d0:ac:78:61:fb:36: 47:df:6a:8e:41:a2:e2:77:b6:1c:c4:f7:e8:1b:04:b2:2d:15: c7:3e:01:6b -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE9SU1EugBevUWW0ohAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyODA1MTkzNloXDTI4MTIzMTA2MTkzNlowLzEtMCsGA1UEAxMk OGUzY2U0NmUtNTdkZS00YWJmLTkzMTYtMDg3ZjllMmZjOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgruqlInCuhJtJwBrrZlo320MYvpMQNK1Z+pl OszbpmCX7mYYBBqHFchS3HHoQyuiFAAkga7CwOeYQc7ZgUuyE/+SmdxgFrkNLiSQ YnqW5F+o8G+J9v/Hlv2oklc5Nwtp6QL92So+c0KctOVGGvGmbOgVuBzdTTBFuH9M 55Bjzox5XmnB0i7ORKkXqR98mHJLLvI7SFZLgXWRXC7Rwkp11sxx6SnsgaiTiKG3 UmcUZ6HgZKg/BOPZ9Xp/TRlz2MInRDrRwFF429tRkztQd7WfxzYhOGed4Un2hSGI q3xf4ikgJu3jwsA2AZLtm5N2z6Tt+dVgb+xczFXyL5fVRZl7gQIDAQABo4IELzCC BCswHQYDVR0OBBYEFPj5mmXv5DBBuWqt4lB0Jv99wYChMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 ZTNjZTQ2ZS01N2RlLTRhYmYtOTMxNi0wODdmOWUyZmM5MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhlM2NlNDZlLTU3ZGUtNGFiZi05 MzE2LTA4N2Y5ZTJmYzkzMS84ZTNjZTQ2ZS01N2RlLTRhYmYtOTMxNi0wODdmOWUy ZmM5MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAEXikADBAKhgZwwDQQCAAIwBwMFACYEXEAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICNv4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADAEp/PdwmeERjhadIdZD q1ytiNT7RKDHueGodnbG5pn3GWKlzZaFtu5CjsFWMu0BIGOOy0dD86Bd55cYQy2K sjPuwyZEfY3v+wcVkwDtLGcmBxkXm/8yPfIPAAl2xoODoGji9G6oQjL39fvHRJUI JrWaw3c2jZPNkUA506AhyXRWOA3zp9LuHfm3i6aP/mi+r5+RgWET8J7g1RENf+lk flaD0NXF6rmid+tbhfLaJ76zIw+SJKPjiCTe4fxFhn/zIPed7+QcvLinlbWKo8ey mqHAw6uvnvl9450Nx5wmK3rC0UXW0Kx4Yfs2R99qjkGi4ne2HMT36BsEsi0Vxz4B aw== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:24 2026 by rpki-client