$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer File: 9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.cer (raw, json) Hash identifier: w1Q9CNRB9i0DlAHO28kTsFAiW28cX6zGbD6T0xRd7Fk= Subject key identifier: 13:50:B9:A1:1C:E1:3C:58:B0:D8:3D:F0:77:18:FC:6B:79:01:DC:B0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8357B5BBEEEA55D37AF2CCA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Oct 2026 18:43:04 +0000 Certificate not after: Wed 17 Jan 2029 19:43:04 +0000 Subordinate resources: AS: 30662 IP: 69.48.210.0/24 IP: 2620:cc:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:83:57:b5:bb:ee:ea:55:d3:7a:f2:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 15 18:43:04 2026 GMT Not After : Jan 17 19:43:04 2029 GMT Subject: CN=9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:20:b7:07:22:2b:b1:7c:c0:00:a3:49:86: 17:79:94:e9:80:51:ec:aa:ca:f1:2f:bd:4a:99:23: 26:5c:d4:19:a9:09:6e:1e:b6:c6:0f:ed:d9:07:f1: 5c:5d:7b:62:0d:43:30:08:9c:f0:3d:06:fc:0f:82: 8c:8b:f5:0d:95:25:de:a1:a5:41:9c:a2:0a:aa:e4: 6b:9e:23:29:2f:17:de:bc:c7:ce:54:89:6a:b8:55: 46:c4:c7:72:f5:40:0c:23:f5:91:7c:c8:b2:d9:1f: 53:34:68:ed:86:2f:df:e1:04:a8:ff:5a:01:17:d4: 6d:39:7e:67:dc:07:17:5a:a0:fc:ba:59:d1:c1:31: 36:71:44:cd:be:07:06:4a:c9:07:58:a3:35:df:12: f8:74:a1:e5:85:11:4e:5e:66:07:ec:c3:f5:13:61: 34:a1:63:a2:72:c4:cf:71:b9:65:c8:2f:8b:0e:0d: 95:c3:24:28:14:d9:52:fb:71:33:e4:de:28:bc:46: 21:94:81:f2:6f:6a:d1:5d:ea:63:4a:30:11:89:8c: 5e:00:60:92:e5:9e:b8:bd:33:11:10:7a:ea:c7:51: 15:d6:cf:d2:a0:5d:3e:5b:cf:e6:d7:93:37:f1:65: 42:68:04:24:1b:66:49:00:98:8e:ec:c2:f7:ff:5f: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:50:B9:A1:1C:E1:3C:58:B0:D8:3D:F0:77:18:FC:6B:79:01:DC:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d/9c85fbfd-1d42-4d7c-b4d2-4a12b97bf51d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 69.48.210.0/24 IPv6: 2620:cc:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30662 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:10:bc:89:a2:5e:8b:c5:64:36:b6:d9:d1:b6:53:cb:89:ae: 2f:69:63:48:a1:ab:60:63:80:d4:1e:4c:16:48:31:5e:85:62: f5:5d:5b:1a:3a:84:8f:24:3f:c7:c4:80:5d:80:43:02:3f:bd: 33:8e:e5:1b:c6:f8:21:76:c5:4f:55:d5:27:d0:db:14:17:d7: db:f8:dd:e4:f3:e5:f3:26:5f:48:da:68:c7:d5:cd:dd:ff:ef: 86:9e:63:0e:3e:d8:f3:90:05:e2:3e:00:e6:7a:37:6c:36:0e: ac:3d:50:8f:1f:6b:f5:90:b0:8a:51:cd:9b:90:03:a1:5f:cf: 8c:b6:5c:72:e3:cb:28:b2:d3:61:58:25:53:2f:60:b3:55:75: c4:e6:11:0c:06:b4:89:87:02:00:7d:61:09:00:28:83:bf:34: 13:ea:62:ae:86:0d:46:58:c7:55:78:8b:3e:ec:ef:44:4d:7e: 08:18:8b:1a:b5:20:08:be:ab:e7:48:a6:96:cb:93:96:8b:57: 7f:54:33:71:f2:da:be:85:f6:91:6d:86:3b:b4:dc:e1:a6:97: 8d:5c:48:73:49:62:2f:6c:30:1b:20:dd:6c:21:f6:d9:47:a2: 1c:11:f7:11:04:f0:ce:3b:4b:b3:44:ae:b5:17:63:ce:f5:6a: a0:69:ca:77 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+DV7W77upV03ryzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNTE4NDMwNFoXDTI5MDExNzE5NDMwNFowLzEtMCsGA1UEAxMk OWM4NWZiZmQtMWQ0Mi00ZDdjLWI0ZDItNGExMmI5N2JmNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtAgtwciK7F8wACjSYYXeZTpgFHsqsrxL71K mSMmXNQZqQluHrbGD+3ZB/FcXXtiDUMwCJzwPQb8D4KMi/UNlSXeoaVBnKIKquRr niMpLxfevMfOVIlquFVGxMdy9UAMI/WRfMiy2R9TNGjthi/f4QSo/1oBF9RtOX5n 3AcXWqD8ulnRwTE2cUTNvgcGSskHWKM13xL4dKHlhRFOXmYH7MP1E2E0oWOicsTP cbllyC+LDg2VwyQoFNlS+3Ez5N4ovEYhlIHyb2rRXepjSjARiYxeAGCS5Z64vTMR EHrqx1EV1s/SoF0+W8/m15M38WVCaAQkG2ZJAJiO7ML3/1/nXQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBNQuaEc4TxYsNg98HcY/Gt5AdywMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 Yzg1ZmJmZC0xZDQyLTRkN2MtYjRkMi00YTEyYjk3YmY1MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzljODVmYmZkLTFkNDItNGQ3Yy1i NGQyLTRhMTJiOTdiZjUxZC85Yzg1ZmJmZC0xZDQyLTRkN2MtYjRkMi00YTEyYjk3 YmY1MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABFMNIwDwQCAAIwCQMHACYgAMygADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ3xjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTELyJol6LxWQ2ttnRtlPLia4v aWNIoatgY4DUHkwWSDFehWL1XVsaOoSPJD/HxIBdgEMCP70zjuUbxvghdsVPVdUn 0NsUF9fb+N3k8+XzJl9I2mjH1c3d/++GnmMOPtjzkAXiPgDmejdsNg6sPVCPH2v1 kLCKUc2bkAOhX8+Mtlxy48sostNhWCVTL2CzVXXE5hEMBrSJhwIAfWEJACiDvzQT 6mKuhg1GWMdVeIs+7O9ETX4IGIsatSAIvqvnSKaWy5OWi1d/VDNx8tq+hfaRbYY7 tNzhppeNXEhzSWIvbDAbIN1sIfbZR6IcEfcRBPDOO0uzRK61F2PO9Wqgacp3 -----END CERTIFICATE-----Generated at Tue Nov 3 22:32:56 2026 by rpki-client