$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/994d7aea-7ed8-4040-a22d-5b06c2f5f2b8.cer File: 994d7aea-7ed8-4040-a22d-5b06c2f5f2b8.cer (raw, json) Hash identifier: NRr4TFpSlqLcR8nX8nCtuUfat31GXVW8NNk6unJlS64= Subject key identifier: DD:57:68:4A:F1:46:A0:11:DE:1A:B5:F0:D6:EB:8D:94:D2:0C:92:DB Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7A3D4D3E7B3FA307178EFDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/994d7aea-7ed8-4040-a22d-5b06c2f5f2b8/994d7aea-7ed8-4040-a22d-5b06c2f5f2b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/994d7aea-7ed8-4040-a22d-5b06c2f5f2b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 12:27:35 +0000 Certificate not after: Sun 14 Jan 2029 13:27:35 +0000 Subordinate resources: AS: 403075 IP: 23.165.36.0/24 IP: 2602:f2ce::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:3d:4d:3e:7b:3f:a3:07:17:8e:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 12 12:27:35 2026 GMT Not After : Jan 14 13:27:35 2029 GMT Subject: CN=994d7aea-7ed8-4040-a22d-5b06c2f5f2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:07:bc:9b:52:11:d6:fe:85:64:75:c6:69: 0e:00:ff:9a:6b:c3:a2:08:5d:5c:c0:b3:94:eb:c2: 07:eb:2b:66:47:05:8c:c3:80:41:1d:70:fa:39:d4: 96:23:ad:b8:d6:c0:e2:8d:b8:61:bc:48:aa:f6:a0: 5e:b7:0d:ad:0d:67:39:4b:02:e2:a0:50:aa:38:4a: 6d:95:1f:fe:e6:e8:1f:b2:f5:8c:88:f0:d8:87:b3: 17:ed:32:be:ef:63:f9:f5:d4:f8:4a:74:7e:bf:28: 40:7e:60:2c:de:69:16:4f:3f:d6:eb:2d:b4:08:fe: b2:18:6a:5f:84:0b:f4:4c:12:5e:c3:b5:cc:e1:aa: 39:1a:57:56:91:93:ad:a4:91:18:e9:79:32:a9:29: 6c:c7:3d:ba:18:55:20:1d:f2:46:3c:06:6a:b5:5d: b9:dc:14:96:42:7b:66:df:83:32:bd:1b:be:c5:2c: 81:64:96:5c:81:c8:59:a2:f0:2b:97:60:62:20:35: d9:f3:26:30:44:dd:e7:48:f5:8b:95:44:6b:12:34: 97:13:5c:3a:95:e4:da:bf:0d:36:9f:aa:ad:e8:01: 5c:7a:6b:d8:e6:51:51:87:81:9b:6e:5a:f0:77:48: 26:e1:e7:3e:62:34:01:e5:e0:ed:98:51:94:75:90: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:57:68:4A:F1:46:A0:11:DE:1A:B5:F0:D6:EB:8D:94:D2:0C:92:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/994d7aea-7ed8-4040-a22d-5b06c2f5f2b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/994d7aea-7ed8-4040-a22d-5b06c2f5f2b8/994d7aea-7ed8-4040-a22d-5b06c2f5f2b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.165.36.0/24 IPv6: 2602:f2ce::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403075 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1f:e1:c3:ed:4a:ce:41:a0:80:fb:18:e5:25:6f:6a:36:be: f4:a1:d9:c4:39:5e:d8:55:ac:a3:01:e2:67:f5:6b:f2:78:a5: 4c:17:ad:63:5a:fb:4c:ce:05:81:ee:be:04:1c:da:11:19:da: 54:83:be:72:02:48:24:04:e1:2a:b9:aa:dd:e8:66:fd:36:51: 11:5f:a7:b8:d0:da:82:41:ec:5b:29:39:47:af:f8:9e:3a:3e: 92:d6:e3:ff:ea:b0:54:a5:59:7e:74:42:96:f0:17:c9:ab:d6: 7c:07:01:e2:e2:9f:4c:6d:a9:62:7e:8b:52:f7:5d:ce:75:d3: b3:e4:86:db:c6:9f:ba:07:9c:4a:96:f8:0c:16:c5:c5:20:ba: 32:43:7d:d7:01:57:30:9c:ca:f8:d2:c4:49:96:ab:8d:35:3d: 76:cd:2c:51:97:28:7e:37:a7:f7:c7:eb:87:e6:90:ec:ea:50: ea:9f:30:4c:25:7c:56:6a:ef:b2:df:cb:59:d7:c3:ef:ed:2b: ec:ea:bd:0f:77:db:bd:b6:6a:43:75:ce:8f:3c:e9:92:0c:02: 60:71:35:c7:8c:0e:bf:34:90:89:77:19:77:9b:03:31:63:78: b3:d6:5a:6a:5e:44:31:fc:85:ed:e7:3d:4e:d1:2b:f2:3d:3d: 92:8b:8d:93 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE96PU0+ez+jBxeO/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMjEyMjczNVoXDTI5MDExNDEzMjczNVowLzEtMCsGA1UEAxMk OTk0ZDdhZWEtN2VkOC00MDQwLWEyMmQtNWIwNmMyZjVmMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHsHvJtSEdb+hWR1xmkOAP+aa8OiCF1cwLOU 68IH6ytmRwWMw4BBHXD6OdSWI6241sDijbhhvEiq9qBetw2tDWc5SwLioFCqOEpt lR/+5ugfsvWMiPDYh7MX7TK+72P59dT4SnR+vyhAfmAs3mkWTz/W6y20CP6yGGpf hAv0TBJew7XM4ao5GldWkZOtpJEY6XkyqSlsxz26GFUgHfJGPAZqtV253BSWQntm 34MyvRu+xSyBZJZcgchZovArl2BiIDXZ8yYwRN3nSPWLlURrEjSXE1w6leTavw02 n6qt6AFcemvY5lFRh4Gbblrwd0gm4ec+YjQB5eDtmFGUdZD2MwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN1XaErxRqAR3hq18NbrjZTSDJLbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 OTRkN2FlYS03ZWQ4LTQwNDAtYTIyZC01YjA2YzJmNWYyYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5Lzk5NGQ3YWVhLTdlZDgtNDA0MC1h MjJkLTViMDZjMmY1ZjJiOC85OTRkN2FlYS03ZWQ4LTQwNDAtYTIyZC01YjA2YzJm NWYyYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpSQwDgQCAAIwCAMGACYC8s4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmgzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6H+HD7UrOQaCA+xjlJW9qNr70 odnEOV7YVayjAeJn9WvyeKVMF61jWvtMzgWB7r4EHNoRGdpUg75yAkgkBOEquard 6Gb9NlERX6e40NqCQexbKTlHr/ieOj6S1uP/6rBUpVl+dEKW8BfJq9Z8BwHi4p9M balifotS913OddOz5Ibbxp+6B5xKlvgMFsXFILoyQ33XAVcwnMr40sRJlquNNT12 zSxRlyh+N6f3x+uH5pDs6lDqnzBMJXxWau+y38tZ18Pv7Svs6r0Pd9u9tmpDdc6P POmSDAJgcTXHjA6/NJCJdxl3mwMxY3iz1lpqXkQx/IXt5z1O0SvyPT2Si42T -----END CERTIFICATE-----Generated at Thu Oct 22 13:58:42 2026 by rpki-client