$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337.cer File: 9a2e3f1b-2744-4836-add1-df84bd7c8337.cer (raw, json) Hash identifier: 7+uFz6PFBxL5Pdk7RldXFJMv/VC8Y6iMNE2O0CXjKAg= Subject key identifier: 4B:39:5C:8D:E5:8A:59:F9:50:0E:C8:79:C5:10:09:45:BE:46:B4:42 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F900652CDBA3E115563E3AA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/9a2e3f1b-2744-4836-add1-df84bd7c8337.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 07:44:36 +0000 Certificate not after: Mon 22 Jan 2029 08:44:36 +0000 Subordinate resources: AS: 400130 IP: 23.247.253.0/24 IP: 131.143.89.0/24 IP: 2602:fb53::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:06:52:cd:ba:3e:11:55:63:e3:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 20 07:44:36 2026 GMT Not After : Jan 22 08:44:36 2029 GMT Subject: CN=9a2e3f1b-2744-4836-add1-df84bd7c8337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:7a:37:e4:69:3d:a9:63:5b:f8:71:f1:22: b3:ac:14:23:04:7f:2f:ee:74:27:ac:4e:eb:96:f6: 6a:92:b7:23:89:e6:00:8b:9f:a5:a1:4b:39:a3:4b: 48:8c:df:46:7b:f3:bf:f8:3e:36:e4:ad:5b:cc:62: dd:9f:8a:b0:75:f8:66:f6:6e:d5:41:6c:67:20:21: fa:06:1a:66:65:ff:bd:94:65:dd:4b:2c:a0:8e:e2: 21:12:76:37:cd:ff:47:81:02:99:de:18:fc:27:21: cf:b7:60:26:01:24:94:4d:2f:ec:cd:ff:7f:f1:d3: c8:3d:c1:86:28:09:93:84:c7:d3:45:a9:d4:71:51: a7:61:27:96:8f:ba:ed:4e:4b:9e:29:c8:91:73:09: 63:59:c3:4e:17:d9:2c:61:d6:90:6e:17:b5:57:cb: b0:f0:7b:89:f2:48:e6:13:88:b3:93:76:50:bc:23: c8:5f:62:0a:96:32:97:6d:0a:3a:01:11:8e:40:8d: e8:77:73:5e:4d:74:56:f1:89:4b:b7:b7:65:8d:48: 75:81:15:82:0f:92:b4:58:68:a7:02:2b:e4:52:77: c2:2b:fe:89:58:bc:1a:2b:37:85:86:15:3a:02:15: ad:69:37:f0:01:60:e7:f6:74:b8:f4:73:41:62:36: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:39:5C:8D:E5:8A:59:F9:50:0E:C8:79:C5:10:09:45:BE:46:B4:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9a2e3f1b-2744-4836-add1-df84bd7c8337/9a2e3f1b-2744-4836-add1-df84bd7c8337.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.247.253.0/24 131.143.89.0/24 IPv6: 2602:fb53::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400130 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:63:20:39:93:a3:dc:83:ee:ca:d6:c4:9b:76:64:50:f2:f5: a1:83:97:c7:e4:94:84:d4:62:14:dc:a2:ca:75:1b:8c:7f:83: 8f:8d:da:fd:2e:e8:8b:ea:96:e8:6a:80:a7:e8:3a:95:8a:6b: 63:7d:e6:1a:cc:a0:c7:a1:45:6f:b3:53:81:23:84:72:49:9d: 62:d2:f9:16:ce:2a:d5:fd:07:c1:5b:1e:d9:52:6d:d2:00:e6: 02:36:2c:a7:37:04:46:54:6e:74:39:ad:0b:67:30:04:01:f9: 22:a5:56:e7:b6:13:c5:a6:0f:e9:c1:1c:d9:5c:35:46:13:a6: b6:60:fc:80:87:53:4d:a2:db:e1:32:52:4e:a4:2f:69:aa:ef: 1e:81:66:7c:86:71:60:e0:7b:c4:d1:ca:26:40:91:7d:86:9b: e8:06:83:08:7f:6d:1e:0a:69:40:c0:1f:c5:87:34:e1:ff:52: 24:3e:22:28:93:ea:39:e3:00:d1:bb:79:e7:57:e9:d4:47:42: 31:cf:b7:18:4d:0e:eb:9c:7c:81:44:3b:99:49:8d:81:29:a5: 8d:4b:7e:ff:37:db:86:5f:cc:bf:27:d8:f3:c6:81:32:64:70: 99:77:8a:74:bb:0a:ee:17:bc:92:18:68:05:e2:ab:a4:1d:4a: 71:e7:d2:fe -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE+QBlLNuj4RVWPjqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMDA3NDQzNloXDTI5MDEyMjA4NDQzNlowLzEtMCsGA1UEAxMk OWEyZTNmMWItMjc0NC00ODM2LWFkZDEtZGY4NGJkN2M4MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8J6N+RpPaljW/hx8SKzrBQjBH8v7nQnrE7r lvZqkrcjieYAi5+loUs5o0tIjN9Ge/O/+D425K1bzGLdn4qwdfhm9m7VQWxnICH6 BhpmZf+9lGXdSyygjuIhEnY3zf9HgQKZ3hj8JyHPt2AmASSUTS/szf9/8dPIPcGG KAmThMfTRanUcVGnYSeWj7rtTkueKciRcwljWcNOF9ksYdaQbhe1V8uw8HuJ8kjm E4izk3ZQvCPIX2IKljKXbQo6ARGOQI3od3NeTXRW8YlLt7dljUh1gRWCD5K0WGin AivkUnfCK/6JWLwaKzeFhhU6AhWtaTfwAWDn9nS49HNBYjZJ0wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEs5XI3liln5UA7IecUQCUW+RrRCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 YTJlM2YxYi0yNzQ0LTQ4MzYtYWRkMS1kZjg0YmQ3YzgzMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzlhMmUzZjFiLTI3NDQtNDgzNi1h ZGQxLWRmODRiZDdjODMzNy85YTJlM2YxYi0yNzQ0LTQ4MzYtYWRkMS1kZjg0YmQ3 YzgzMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAX9/0DBACDj1kwDgQCAAIwCAMGACYC+1MAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYbAjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZYyA5k6Pcg+7K1sSb dmRQ8vWhg5fH5JSE1GIU3KLKdRuMf4OPjdr9LuiL6pboaoCn6DqVimtjfeYazKDH oUVvs1OBI4RySZ1i0vkWzirV/QfBWx7ZUm3SAOYCNiynNwRGVG50Oa0LZzAEAfki pVbnthPFpg/pwRzZXDVGE6a2YPyAh1NNotvhMlJOpC9pqu8egWZ8hnFg4HvE0com QJF9hpvoBoMIf20eCmlAwB/FhzTh/1IkPiIok+o54wDRu3nnV+nUR0Ixz7cYTQ7r nHyBRDuZSY2BKaWNS37/N9uGX8y/J9jzxoEyZHCZd4p0uwruF7ySGGgF4qukHUpx 59L+ -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:32 2026 by rpki-client