$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997.cer File: 9d7690aa-afcb-478c-bf49-5bc20314d997.cer (raw, json) Hash identifier: Om2s1nLoAxcfRRtFxjRkDYM0mqMmc/7zWU+jhTWFnyc= Subject key identifier: B8:A4:77:FC:9E:DA:8A:11:81:99:F9:97:1C:47:43:8D:4A:FC:EB:DC Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8E30A5318E18A2E877A39100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/9d7690aa-afcb-478c-bf49-5bc20314d997.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 15:58:15 +0000 Certificate not after: Sun 21 Jan 2029 16:58:15 +0000 Subordinate resources: AS: 397434 IP: 52.119.12.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:30:a5:31:8e:18:a2:e8:77:a3:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 15:58:15 2026 GMT Not After : Jan 21 16:58:15 2029 GMT Subject: CN=9d7690aa-afcb-478c-bf49-5bc20314d997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:2d:a6:a8:e4:58:09:72:e6:13:64:cb:0a: f7:c7:57:31:93:da:df:f7:01:12:3d:3a:dd:bc:84: 6f:a3:57:48:c6:e3:59:30:83:4d:09:c9:e7:58:f2: 33:4d:ba:92:56:7d:68:06:ea:d1:a6:65:57:fc:aa: af:6d:7c:52:8f:c4:cd:2f:92:31:a2:51:fc:6f:99: 37:bd:ec:c6:01:8e:b8:25:94:0d:10:f2:9d:b5:5a: 6f:26:ff:e0:13:2c:ef:04:8c:e7:1f:17:00:0d:53: d2:53:2e:64:0c:8c:90:3e:84:01:a7:cf:82:18:e0: 89:95:7e:a6:14:ef:93:03:bb:23:34:00:5d:b0:5e: e0:94:7e:9e:c1:4b:0e:24:45:bc:93:a3:b0:33:76: 22:1a:ef:42:79:30:ad:35:c9:4f:44:33:6d:25:a3: 92:c1:2e:cc:43:ca:10:1a:f8:e2:9e:ea:31:3a:4a: 5d:f6:3f:7c:2e:7a:75:82:98:8a:ad:ec:9d:24:a0: c1:3c:68:06:bf:8a:9b:e8:cb:f2:8f:3e:27:09:6e: 38:51:ca:d3:7f:29:f0:b7:d7:bc:32:9c:3d:b7:12: 67:d0:8b:f7:0b:af:a9:2b:3b:6c:a8:92:fe:75:79: 7f:4a:4f:7e:6d:bb:c7:3f:1d:8c:0b:b1:ff:80:19: fd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A4:77:FC:9E:DA:8A:11:81:99:F9:97:1C:47:43:8D:4A:FC:EB:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/9d7690aa-afcb-478c-bf49-5bc20314d997.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 52.119.12.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397434 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:12:6b:28:0b:5f:24:d0:c5:a4:a4:1e:81:ca:b8:0e:b3:06: 38:ac:66:71:65:57:fb:4e:4c:d6:d0:7e:5d:2d:8e:c0:46:39: 57:02:84:50:f0:a8:03:4b:0c:94:8e:59:18:6f:9a:90:da:d8: bb:d1:4c:86:1c:f2:1b:a7:b5:b2:56:bb:5c:47:e8:c0:9f:ea: 40:c9:4d:ba:6b:03:25:7c:5e:26:91:89:59:2c:f5:f1:5e:d7: e9:01:bb:d0:56:15:1b:92:c4:b4:44:f8:e8:f0:96:f1:7f:da: 59:f7:e3:60:8f:61:2f:a0:e1:68:ec:a1:19:7d:aa:5f:ac:d9: a1:21:62:87:b8:4a:0b:3d:01:34:c1:27:61:0c:36:3a:67:5d: bb:13:98:7a:a1:68:d1:59:3b:28:53:20:4e:6b:06:95:59:88: ca:01:7b:6c:43:fe:06:bc:aa:78:79:af:92:02:ef:2d:28:c8: cb:87:a3:7f:05:00:8e:8c:b9:82:d9:1f:e1:6b:85:66:08:a3: 87:7f:d5:2d:41:65:d2:02:e4:4c:81:c6:f9:81:7a:90:2d:b2: a0:87:61:77:75:50:e4:d0:15:4e:63:89:80:72:16:c0:bd:96: f9:c7:e3:f4:26:1b:ba:9f:13:3f:8c:df:d0:59:25:91:d7:25: 52:a5:1e:c7 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE+OMKUxjhii6HejkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTE1NTgxNVoXDTI5MDEyMTE2NTgxNVowLzEtMCsGA1UEAxMk OWQ3NjkwYWEtYWZjYi00NzhjLWJmNDktNWJjMjAzMTRkOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe8tpqjkWAly5hNkywr3x1cxk9rf9wESPTrd vIRvo1dIxuNZMINNCcnnWPIzTbqSVn1oBurRpmVX/KqvbXxSj8TNL5IxolH8b5k3 vezGAY64JZQNEPKdtVpvJv/gEyzvBIznHxcADVPSUy5kDIyQPoQBp8+CGOCJlX6m FO+TA7sjNABdsF7glH6ewUsOJEW8k6OwM3YiGu9CeTCtNclPRDNtJaOSwS7MQ8oQ GvjinuoxOkpd9j98Lnp1gpiKreydJKDBPGgGv4qb6Mvyjz4nCW44UcrTfynwt9e8 Mpw9txJn0Iv3C6+pKztsqJL+dXl/Sk9+bbvHPx2MC7H/gBn9fQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLikd/ye2ooRgZn5lxxHQ41K/OvcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 ZDc2OTBhYS1hZmNiLTQ3OGMtYmY0OS01YmMyMDMxNGQ5OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzlkNzY5MGFhLWFmY2ItNDc4Yy1i ZjQ5LTViYzIwMzE0ZDk5Ny85ZDc2OTBhYS1hZmNiLTQ3OGMtYmY0OS01YmMyMDMx NGQ5OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAA0dwwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhB6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAoSaygLXyTQxaSkHoHKuA6zBjisZnFlV/tOTNbQfl0tjsBG OVcChFDwqANLDJSOWRhvmpDa2LvRTIYc8huntbJWu1xH6MCf6kDJTbprAyV8XiaR iVks9fFe1+kBu9BWFRuSxLRE+OjwlvF/2ln342CPYS+g4WjsoRl9ql+s2aEhYoe4 Sgs9ATTBJ2EMNjpnXbsTmHqhaNFZOyhTIE5rBpVZiMoBe2xD/ga8qnh5r5IC7y0o yMuHo38FAI6MuYLZH+FrhWYIo4d/1S1BZdIC5EyBxvmBepAtsqCHYXd1UOTQFU5j iYByFsC9lvnH4/QmG7qfEz+M39BZJZHXJVKlHsc= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:53 2026 by rpki-client