$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b842d7f-64e4-4973-b08f-9c0e1ab62cda.cer File: 9b842d7f-64e4-4973-b08f-9c0e1ab62cda.cer (raw, json) Hash identifier: U6nQp/qHn6sGfANORt5a97l/yUcLANjxUArnjzHq+I0= Subject key identifier: EF:B6:16:C5:21:3D:24:EA:1F:EB:58:CA:25:39:23:19:70:0C:FC:22 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F9427650782FB1424303E1340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b842d7f-64e4-4973-b08f-9c0e1ab62cda/9b842d7f-64e4-4973-b08f-9c0e1ab62cda.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b842d7f-64e4-4973-b08f-9c0e1ab62cda/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 19:14:28 +0000 Certificate not after: Tue 23 Jan 2029 20:14:28 +0000 Subordinate resources: AS: 400673 IP: 69.77.32.0/19 IP: 158.120.64.0/21 IP: 2607:1b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:27:65:07:82:fb:14:24:30:3e:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 21 19:14:28 2026 GMT Not After : Jan 23 20:14:28 2029 GMT Subject: CN=9b842d7f-64e4-4973-b08f-9c0e1ab62cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:1e:20:c0:10:a0:e5:8c:6e:42:bd:98:7f: ee:a2:6d:37:bc:f3:93:d7:5b:f3:30:db:13:c8:5f: 48:07:6d:e1:c8:13:ee:b0:c2:fd:3d:0e:ab:9a:73: 58:4c:c6:12:73:b3:82:4f:97:14:57:77:a1:d6:de: 1b:7b:8f:33:5b:57:f5:25:8b:7e:83:af:07:e3:1c: fa:88:31:45:db:3b:2e:cf:ef:d1:d2:7a:c3:08:81: 70:00:63:1e:88:b3:3b:2e:c8:6f:2d:56:54:f9:f9: b5:56:79:03:43:f2:fa:cf:ad:a6:ac:49:c9:8b:95: 14:ae:ed:25:ca:23:0d:ea:3d:34:b8:0d:b0:fb:c5: e2:ec:5a:fb:3a:b8:12:ec:5d:bb:92:01:80:17:bf: c4:7b:28:e2:b3:12:5c:69:ba:18:58:fb:37:fd:a8: 2b:d3:38:cb:c9:a3:f4:b6:f8:96:91:2a:0d:20:c2: a2:73:97:8e:e2:c8:46:05:3c:36:83:f4:1c:dc:6b: ba:26:db:90:4c:67:fe:80:57:ba:c6:ac:07:af:c2: 21:50:6e:19:d1:82:64:55:dd:c5:75:b2:51:7e:6e: 5b:4f:3c:db:88:ae:ef:89:e8:f2:42:af:8f:e1:dc: 4b:7c:7f:2b:1f:ab:0d:d3:16:44:27:59:c8:7d:74: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:16:C5:21:3D:24:EA:1F:EB:58:CA:25:39:23:19:70:0C:FC:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b842d7f-64e4-4973-b08f-9c0e1ab62cda/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9b842d7f-64e4-4973-b08f-9c0e1ab62cda/9b842d7f-64e4-4973-b08f-9c0e1ab62cda.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 69.77.32.0/19 158.120.64.0/21 IPv6: 2607:1b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400673 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:46:ea:2e:66:59:80:ff:51:0c:40:02:ec:64:c1:e8:a6:c6: f7:91:b8:86:b9:f6:f8:ce:fd:f3:0a:4e:db:ce:cd:60:09:a1: 41:3e:1d:85:f3:43:e2:44:e6:98:df:1a:ba:cc:9e:6c:06:f3: 26:b6:10:c7:3d:1e:13:6b:b7:4a:0b:5e:2b:b8:31:ac:b9:fb: 30:ed:19:03:6b:03:9f:38:8d:5c:d4:1c:35:fe:de:fc:5f:60: d0:1c:37:ac:7e:a4:28:6e:14:0c:a4:3f:4b:33:24:14:b7:db: e7:d7:90:d2:a4:d5:e4:03:5a:39:bb:52:14:89:22:82:4a:70: 88:ee:b7:99:f2:a4:9b:7e:ce:b6:8b:c6:61:d8:14:84:b1:0f: 99:44:80:92:2c:4d:b0:85:ac:75:3d:1e:95:b6:72:49:50:18: 18:45:94:a0:ae:68:dd:82:57:99:c0:1a:65:2a:30:bf:28:02: 41:41:69:31:d9:15:92:8a:ca:43:a5:22:a7:7e:55:e7:07:57: 30:9e:cd:0d:c4:34:f1:69:65:7a:15:c5:eb:b6:0e:95:9e:f8: 0e:e4:4a:07:dd:99:7a:41:85:f3:73:19:8b:f4:eb:a4:39:dc: 62:a9:b3:cc:6e:f4:80:cd:95:3b:29:a4:f8:7e:d3:65:99:a2: 00:ef:ad:56 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE+UJ2UHgvsUJDA+E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMTE5MTQyOFoXDTI5MDEyMzIwMTQyOFowLzEtMCsGA1UEAxMk OWI4NDJkN2YtNjRlNC00OTczLWIwOGYtOWMwZTFhYjYyY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDQeIMAQoOWMbkK9mH/uom03vPOT11vzMNsT yF9IB23hyBPusML9PQ6rmnNYTMYSc7OCT5cUV3eh1t4be48zW1f1JYt+g68H4xz6 iDFF2zsuz+/R0nrDCIFwAGMeiLM7LshvLVZU+fm1VnkDQ/L6z62mrEnJi5UUru0l yiMN6j00uA2w+8Xi7Fr7OrgS7F27kgGAF7/EeyjisxJcaboYWPs3/agr0zjLyaP0 tviWkSoNIMKic5eO4shGBTw2g/Qc3Gu6JtuQTGf+gFe6xqwHr8IhUG4Z0YJkVd3F dbJRfm5bTzzbiK7viejyQq+P4dxLfH8rH6sN0xZEJ1nIfXSDuQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFO+2FsUhPSTqH+tYyiU5IxlwDPwiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 Yjg0MmQ3Zi02NGU0LTQ5NzMtYjA4Zi05YzBlMWFiNjJjZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzliODQyZDdmLTY0ZTQtNDk3My1i MDhmLTljMGUxYWI2MmNkYS85Yjg0MmQ3Zi02NGU0LTQ5NzMtYjA4Zi05YzBlMWFi NjJjZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVFTSADBAOeeEAwDQQCAAIwBwMFACYHG0AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBh0hMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEtG6i5mWYD/UQxAAuxk weimxveRuIa59vjO/fMKTtvOzWAJoUE+HYXzQ+JE5pjfGrrMnmwG8ya2EMc9HhNr t0oLXiu4May5+zDtGQNrA584jVzUHDX+3vxfYNAcN6x+pChuFAykP0szJBS32+fX kNKk1eQDWjm7UhSJIoJKcIjut5nypJt+zraLxmHYFISxD5lEgJIsTbCFrHU9HpW2 cklQGBhFlKCuaN2CV5nAGmUqML8oAkFBaTHZFZKKykOlIqd+VecHVzCezQ3ENPFp ZXoVxeu2DpWe+A7kSgfdmXpBhfNzGYv066Q53GKps8xu9IDNlTsppPh+02WZogDv rVY= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:36 2026 by rpki-client