$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71.cer File: a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71.cer (raw, json) Hash identifier: 6Cm4iDXl/5tdNAsqpWwuru8M5YgcnNOW+vwCvDhVKoA= Subject key identifier: E3:EE:31:D4:91:05:26:09:C4:F6:C5:27:E1:12:CE:64:4A:BB:34:2F Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7DA7799E6749CBB642539D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71/a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 17:48:56 +0000 Certificate not after: Mon 15 Jan 2029 18:48:56 +0000 Subordinate resources: AS: 400053 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:a7:79:9e:67:49:cb:b6:42:53:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 13 17:48:56 2026 GMT Not After : Jan 15 18:48:56 2029 GMT Subject: CN=a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:ed:f6:23:3a:d2:ed:d9:ac:7d:52:92:88: 90:32:be:93:3a:42:89:62:cb:36:4e:8e:db:31:72: b2:23:e9:d1:b3:0a:8e:de:69:e5:28:8c:e6:11:58: 20:c0:32:f2:d2:71:1a:c7:f5:7e:51:41:18:68:e7: 4a:08:1c:02:26:26:cb:52:4d:4f:c0:68:8d:c2:21: b1:2f:3a:61:7d:30:54:33:fe:2b:10:c1:98:e2:85: 62:45:7d:6c:cb:c1:e7:ac:62:5d:da:d3:4e:10:e3: 5a:81:e0:0f:b3:d3:81:07:c1:51:01:ad:51:b8:5a: 3a:46:48:f3:82:41:2d:f8:ba:49:15:69:ac:f6:d5: 10:98:25:a8:3d:b6:7b:5e:2e:4b:18:f0:fd:35:2a: dc:f7:24:5c:10:99:c3:ab:9d:db:d6:d5:74:25:3d: ed:af:1c:bf:ca:c1:58:82:81:0e:7d:0f:b0:06:9d: 5e:4a:20:be:cd:01:0e:1b:b3:e7:64:18:63:ba:01: 57:ae:21:65:c2:75:ee:ba:3f:fa:fa:85:9a:51:a2: fa:7c:87:38:7a:22:b5:21:d5:27:8f:4e:62:94:6b: eb:8c:a7:44:69:94:3e:71:ae:8c:d6:f9:f5:61:e8: e5:23:f6:8a:68:de:21:6f:e1:a4:1f:e7:d1:43:b4: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EE:31:D4:91:05:26:09:C4:F6:C5:27:E1:12:CE:64:4A:BB:34:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71/a29b28ea-e5fb-4bd5-a6e4-acaf1c795e71.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 400053 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:09:1f:1d:74:0e:31:35:b3:78:46:9d:e5:18:68:02:44:33: 60:b4:33:ff:5b:33:70:98:b3:38:dd:4d:93:56:62:db:55:08: 0f:da:4f:ed:a3:20:88:51:c8:29:88:da:d3:24:52:dc:d5:5f: 22:12:a5:ce:8a:45:21:f8:b6:21:8c:73:ea:0f:5e:14:2a:b6: f2:c0:d0:31:82:8d:35:cb:c6:dd:15:98:97:ae:19:f7:c5:ed: 13:2d:c2:e0:af:cf:f0:51:29:ad:44:13:ab:ca:c3:1c:a1:cd: 6d:43:46:c2:d9:e4:7f:0d:db:cb:46:92:8c:31:66:5d:fd:72: 88:a2:ae:32:a4:42:ac:6d:d3:dc:0f:36:ee:d7:d1:d4:38:c2: a8:70:56:0f:bb:26:4a:05:86:a6:b0:e4:15:3f:e9:11:78:57: 91:cb:cf:e3:e0:15:be:01:c4:ff:77:5f:81:70:48:e6:19:18: 0f:81:28:98:e1:3a:a4:a8:a5:a1:88:7a:eb:de:8b:5b:35:22: 5a:67:7e:24:9b:05:6a:ee:0e:a5:c9:65:1a:c5:57:0d:4c:78: 5f:6e:04:08:6f:a3:da:7f:65:63:e4:14:1a:a5:ee:34:67:00: e9:29:40:96:a4:c7:5b:ed:44:ff:ae:cb:91:94:b5:85:82:64: b1:a1:e2:d9 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE99p3meZ0nLtkJTnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMzE3NDg1NloXDTI5MDExNTE4NDg1NlowLzEtMCsGA1UEAxMk YTI5YjI4ZWEtZTVmYi00YmQ1LWE2ZTQtYWNhZjFjNzk1ZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsrt9iM60u3ZrH1SkoiQMr6TOkKJYss2To7b MXKyI+nRswqO3mnlKIzmEVggwDLy0nEax/V+UUEYaOdKCBwCJibLUk1PwGiNwiGx LzphfTBUM/4rEMGY4oViRX1sy8HnrGJd2tNOEONageAPs9OBB8FRAa1RuFo6Rkjz gkEt+LpJFWms9tUQmCWoPbZ7Xi5LGPD9NSrc9yRcEJnDq53b1tV0JT3trxy/ysFY goEOfQ+wBp1eSiC+zQEOG7PnZBhjugFXriFlwnXuuj/6+oWaUaL6fIc4eiK1IdUn j05ilGvrjKdEaZQ+ca6M1vn1YejlI/aKaN4hb+GkH+fRQ7ReHwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFOPuMdSRBSYJxPbFJ+ESzmRKuzQvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h MjliMjhlYS1lNWZiLTRiZDUtYTZlNC1hY2FmMWM3OTVlNzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2EyOWIyOGVhLWU1ZmItNGJkNS1h NmU0LWFjYWYxYzc5NWU3MS9hMjliMjhlYS1lNWZiLTRiZDUtYTZlNC1hY2FmMWM3 OTVlNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhq1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACkJHx10DjE1s3hGneUYaAJEM2C0 M/9bM3CYszjdTZNWYttVCA/aT+2jIIhRyCmI2tMkUtzVXyISpc6KRSH4tiGMc+oP XhQqtvLA0DGCjTXLxt0VmJeuGffF7RMtwuCvz/BRKa1EE6vKwxyhzW1DRsLZ5H8N 28tGkowxZl39coiirjKkQqxt09wPNu7X0dQ4wqhwVg+7JkoFhqaw5BU/6RF4V5HL z+PgFb4BxP93X4FwSOYZGA+BKJjhOqSopaGIeuvei1s1IlpnfiSbBWruDqXJZRrF Vw1MeF9uBAhvo9p/ZWPkFBql7jRnAOkpQJakx1vtRP+uy5GUtYWCZLGh4tk= -----END CERTIFICATE-----Generated at Mon Nov 2 22:26:35 2026 by rpki-client