$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95e80a73-4c9d-4ea8-a24a-f3468bc072ee.cer File: 95e80a73-4c9d-4ea8-a24a-f3468bc072ee.cer (raw, json) Hash identifier: aJvLjITXLlfnCf0Fg6W9laHXjgrQXPriELUkoHiFHhQ= Subject key identifier: 59:C3:1B:BA:CC:4D:DA:D9:5B:F4:FB:2B:B6:88:0F:75:D8:0F:C5:D5 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F9162824F7930A0E0D92A81C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95e80a73-4c9d-4ea8-a24a-f3468bc072ee/95e80a73-4c9d-4ea8-a24a-f3468bc072ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95e80a73-4c9d-4ea8-a24a-f3468bc072ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 19:26:09 +0000 Certificate not after: Mon 22 Jan 2029 20:26:09 +0000 Subordinate resources: AS: 35901 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:62:82:4f:79:30:a0:e0:d9:2a:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 20 19:26:09 2026 GMT Not After : Jan 22 20:26:09 2029 GMT Subject: CN=95e80a73-4c9d-4ea8-a24a-f3468bc072ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:b9:c9:d4:69:9f:da:42:3b:50:99:08:06: bf:c4:8d:c0:43:4b:1a:ee:41:bf:dd:a0:5e:25:4d: 19:09:9a:50:a9:fc:2c:9b:19:37:35:26:7b:83:6d: 28:f3:97:3c:ca:e8:8a:06:52:f2:25:51:e9:c1:d2: f4:1d:d2:08:77:cd:74:28:ab:4c:9c:5e:de:ba:ea: d3:5d:02:53:5b:78:0f:91:92:a8:aa:5d:52:93:a9: 49:57:71:6d:11:d1:ca:2f:7e:6c:4d:30:68:af:8b: dc:a3:19:20:f3:eb:6d:3a:0e:31:ff:e0:ce:8d:e0: 2e:20:88:81:76:58:29:15:c4:f4:fb:16:c9:d1:1c: f8:3b:61:ed:44:8f:06:c6:f8:9b:3c:00:57:1e:51: 37:9d:31:59:f0:28:ef:20:62:eb:7f:90:f0:8e:fa: 4c:65:74:38:a6:38:5e:9e:8f:a9:83:2a:89:57:36: 15:24:db:27:57:c3:f8:f0:aa:4e:dd:d9:20:9b:53: a1:95:6f:94:ea:68:5a:5c:cb:83:8d:e0:3b:37:e7: 63:a5:25:52:3c:ac:34:89:02:10:32:7c:57:5c:44: 1d:63:05:40:93:8c:30:0d:0d:f7:75:e1:43:9e:06: 61:22:6b:8d:3d:ab:fb:da:cc:b9:f8:d3:76:39:c1: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C3:1B:BA:CC:4D:DA:D9:5B:F4:FB:2B:B6:88:0F:75:D8:0F:C5:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95e80a73-4c9d-4ea8-a24a-f3468bc072ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/95e80a73-4c9d-4ea8-a24a-f3468bc072ee/95e80a73-4c9d-4ea8-a24a-f3468bc072ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 35901 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6d:1f:e6:33:c0:f4:8a:7d:59:b9:e8:21:09:1e:82:15:e6: 66:92:9a:e7:1b:c0:89:69:42:e2:c3:20:57:1b:6f:f1:8f:b3: d8:e9:cf:fb:71:30:da:65:ca:0f:ba:20:bd:34:96:8d:71:92: 24:9f:9f:9e:af:a3:9e:e2:f2:53:ff:b9:1f:73:83:2b:90:cd: e4:d0:85:72:f1:8b:25:48:d1:9f:fd:c5:e1:25:d8:59:99:49: 0f:dd:1e:a1:b8:dc:bf:be:69:b0:7c:ad:f0:97:6a:21:98:35: f4:3b:72:ef:f6:5f:85:71:8d:cf:93:7e:2b:23:fa:41:f6:ba: 5d:87:e3:c7:be:55:93:a5:ca:f1:98:d6:2e:9e:5f:b9:b4:64: bb:af:7b:b7:05:dc:e5:3b:b4:8d:46:0f:64:e9:2a:1d:51:ca: 52:42:0a:e4:9b:32:0d:7a:ce:9f:e8:cc:7a:9e:9a:7f:47:47: 5a:27:ad:c7:8d:fa:b5:2f:7b:72:78:c5:f6:f3:3f:b3:f5:26: 0c:e9:ee:c0:f6:e4:04:b3:2e:08:68:50:44:dc:c7:ff:4d:53: 1d:b7:1b:1c:2a:88:76:c4:d0:be:7d:8e:bc:fe:1c:fc:d7:4d: 83:55:31:a9:d1:18:df:8e:83:85:31:76:f6:4a:94:8f:69:84: 8d:6c:ca:5b -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE+RYoJPeTCg4NkqgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMDE5MjYwOVoXDTI5MDEyMjIwMjYwOVowLzEtMCsGA1UEAxMk OTVlODBhNzMtNGM5ZC00ZWE4LWEyNGEtZjM0NjhiYzA3MmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr25ydRpn9pCO1CZCAa/xI3AQ0sa7kG/3aBe JU0ZCZpQqfwsmxk3NSZ7g20o85c8yuiKBlLyJVHpwdL0HdIId810KKtMnF7euurT XQJTW3gPkZKoql1Sk6lJV3FtEdHKL35sTTBor4vcoxkg8+ttOg4x/+DOjeAuIIiB dlgpFcT0+xbJ0Rz4O2HtRI8GxvibPABXHlE3nTFZ8CjvIGLrf5DwjvpMZXQ4pjhe no+pgyqJVzYVJNsnV8P48KpO3dkgm1OhlW+U6mhaXMuDjeA7N+djpSVSPKw0iQIQ MnxXXEQdYwVAk4wwDQ33deFDngZhImuNPav72sy5+NN2OcEbUwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFFnDG7rMTdrZW/T7K7aID3XYD8XVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 NWU4MGE3My00YzlkLTRlYTgtYTI0YS1mMzQ2OGJjMDcyZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzk1ZTgwYTczLTRjOWQtNGVhOC1h MjRhLWYzNDY4YmMwNzJlZS85NWU4MGE3My00YzlkLTRlYTgtYTI0YS1mMzQ2OGJj MDcyZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIw9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB5tH+YzwPSKfVm56CEJHoIV5maS mucbwIlpQuLDIFcbb/GPs9jpz/txMNplyg+6IL00lo1xkiSfn56vo57i8lP/uR9z gyuQzeTQhXLxiyVI0Z/9xeEl2FmZSQ/dHqG43L++abB8rfCXaiGYNfQ7cu/2X4Vx jc+Tfisj+kH2ul2H48e+VZOlyvGY1i6eX7m0ZLuve7cF3OU7tI1GD2TpKh1RylJC CuSbMg16zp/ozHqemn9HR1onrceN+rUve3J4xfbzP7P1Jgzp7sD25ASzLghoUETc x/9NUx23GxwqiHbE0L59jrz+HPzXTYNVManRGN+Og4UxdvZKlI9phI1syls= -----END CERTIFICATE-----Generated at Sun Nov 1 17:30:30 2026 by rpki-client