$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9e8fee6c-0f85-4ec8-881f-2862c906ccbf.cer File: 9e8fee6c-0f85-4ec8-881f-2862c906ccbf.cer (raw, json) Hash identifier: AjAi7BGY34wxsEhLIvwLwYM5lQHIe20HRduCBb8QvLY= Subject key identifier: E1:EB:F6:6E:67:CD:71:19:58:D6:CD:C4:90:F6:0B:3D:3E:A4:70:36 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F2E856D73310C083B6ECFAD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9e8fee6c-0f85-4ec8-881f-2862c906ccbf/9e8fee6c-0f85-4ec8-881f-2862c906ccbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9e8fee6c-0f85-4ec8-881f-2862c906ccbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Sep 2026 09:31:28 +0000 Certificate not after: Mon 18 Dec 2028 10:31:28 +0000 Subordinate resources: IP: 198.228.96.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:85:6d:73:31:0c:08:3b:6e:cf:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 15 09:31:28 2026 GMT Not After : Dec 18 10:31:28 2028 GMT Subject: CN=9e8fee6c-0f85-4ec8-881f-2862c906ccbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:cb:9f:37:95:1f:ee:06:50:ee:8a:38:fb: d3:1a:b9:5c:57:42:3f:db:9d:a0:ba:8e:fe:2a:3a: 4a:fb:63:06:e4:ee:77:ef:71:8b:1b:81:d4:2d:95: be:68:58:05:0e:d7:4a:80:a6:56:e3:f7:70:a3:75: 00:5e:95:d8:d4:cf:e1:d2:1c:7c:98:3f:78:db:23: 6f:f2:89:45:bc:2f:27:23:4b:50:c7:71:cf:19:b7: da:ff:9a:1c:cc:ee:92:33:e7:15:62:0b:f8:e0:ec: a3:b3:e3:de:1f:17:eb:2c:ae:61:a2:a2:50:f0:04: 42:22:ad:c7:ef:7c:39:14:a2:d9:bc:06:eb:a7:56: e8:72:e6:83:54:b2:09:9c:7b:df:f8:b3:f7:ee:38: e0:f5:23:f3:f7:3f:79:dd:14:90:1d:10:e4:fa:8e: 9e:bb:68:ee:94:d9:7b:89:15:b9:32:a0:b6:3d:30: 49:cd:fe:1d:b1:40:a4:7f:b0:34:61:c1:e0:ce:3c: 4c:2c:93:2f:af:0b:0c:89:3d:c9:d9:dd:b9:cd:f1: a3:b6:97:d8:0c:6b:b8:8f:40:14:ce:62:38:18:0a: 93:d6:80:76:b3:89:66:a9:fa:44:b6:d0:50:9f:ca: b7:19:fc:99:11:d8:08:9d:6e:cf:69:45:34:bc:03: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EB:F6:6E:67:CD:71:19:58:D6:CD:C4:90:F6:0B:3D:3E:A4:70:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9e8fee6c-0f85-4ec8-881f-2862c906ccbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9e8fee6c-0f85-4ec8-881f-2862c906ccbf/9e8fee6c-0f85-4ec8-881f-2862c906ccbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.228.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:38:41:c6:d4:7c:88:fc:92:62:58:4f:79:23:69:f5:36:ac: 71:55:28:e4:f8:cf:c0:8e:c4:44:3c:66:03:27:07:c1:98:1e: 7c:a0:c9:f2:d5:18:ee:21:14:91:69:8a:5b:c5:e3:30:dd:99: 57:e1:4c:31:6b:05:c7:48:be:40:12:03:0c:74:48:08:fb:b7: 5f:ca:0d:11:fd:25:5f:58:1b:7e:f1:de:8a:a6:e8:ec:6f:43: 94:00:67:62:02:de:63:b0:d8:ee:0d:0f:43:75:45:b7:97:9a: 91:27:e4:94:4a:b6:8c:30:97:32:0c:cb:08:10:64:bb:57:1d: 7a:5f:af:5d:5e:71:80:14:df:5e:62:52:fd:39:8a:09:99:7a: 99:85:8f:a4:d9:0b:dd:88:0e:df:4a:1b:d6:34:78:17:e6:61: a4:c6:b8:0e:52:bd:80:64:80:0d:17:90:a8:c0:1f:8b:3b:3f: 74:ce:f0:0e:ec:fb:90:c3:a6:0c:dd:fc:d8:3a:76:01:04:dc: 05:82:25:b3:99:a4:37:6e:39:b4:f9:20:97:f9:a7:55:a1:51: 5d:da:b9:2c:81:75:f6:fe:dd:7b:cc:0b:8d:d5:fd:1b:9e:f4: c6:11:df:d1:f4:e2:a0:ea:41:d2:20:2e:5c:ae:a7:df:08:cc: b5:36:ce:2a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE8uhW1zMQwIO27PrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNTA5MzEyOFoXDTI4MTIxODEwMzEyOFowLzEtMCsGA1UEAxMk OWU4ZmVlNmMtMGY4NS00ZWM4LTg4MWYtMjg2MmM5MDZjY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFHLnzeVH+4GUO6KOPvTGrlcV0I/252guo7+ KjpK+2MG5O5373GLG4HULZW+aFgFDtdKgKZW4/dwo3UAXpXY1M/h0hx8mD942yNv 8olFvC8nI0tQx3HPGbfa/5oczO6SM+cVYgv44Oyjs+PeHxfrLK5hoqJQ8ARCIq3H 73w5FKLZvAbrp1bocuaDVLIJnHvf+LP37jjg9SPz9z953RSQHRDk+o6eu2julNl7 iRW5MqC2PTBJzf4dsUCkf7A0YcHgzjxMLJMvrwsMiT3J2d25zfGjtpfYDGu4j0AU zmI4GAqT1oB2s4lmqfpEttBQn8q3GfyZEdgInW7PaUU0vAMFRQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOHr9m5nzXEZWNbNxJD2Cz0+pHA2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85 ZThmZWU2Yy0wZjg1LTRlYzgtODgxZi0yODYyYzkwNmNjYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzllOGZlZTZjLTBmODUtNGVjOC04 ODFmLTI4NjJjOTA2Y2NiZi85ZThmZWU2Yy0wZjg1LTRlYzgtODgxZi0yODYyYzkw NmNjYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALG5GAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfDhBxtR8iPySYlhPeSNp 9TascVUo5PjPwI7ERDxmAycHwZgefKDJ8tUY7iEUkWmKW8XjMN2ZV+FMMWsFx0i+ QBIDDHRICPu3X8oNEf0lX1gbfvHeiqbo7G9DlABnYgLeY7DY7g0PQ3VFt5eakSfk lEq2jDCXMgzLCBBku1cdel+vXV5xgBTfXmJS/TmKCZl6mYWPpNkL3YgO30ob1jR4 F+ZhpMa4DlK9gGSADReQqMAfizs/dM7wDuz7kMOmDN382Dp2AQTcBYIls5mkN245 tPkgl/mnVaFRXdq5LIF19v7de8wLjdX9G570xhHf0fTioOpB0iAuXK6n3wjMtTbO Kg== -----END CERTIFICATE-----Generated at Wed Sep 16 11:28:26 2026 by rpki-client