$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a36156ae-1907-46ef-805d-320e7205beaa.cer File: a36156ae-1907-46ef-805d-320e7205beaa.cer (raw, json) Hash identifier: lhUZActCSwjrno3i2jHJnapUKMnKPInEBH9ny6XXyJI= Subject key identifier: D8:79:42:92:A2:15:19:6B:9D:21:16:B1:49:A4:4C:68:3D:4C:A9:B8 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6CB0BA9286DC02B407F1D800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a36156ae-1907-46ef-805d-320e7205beaa/a36156ae-1907-46ef-805d-320e7205beaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a36156ae-1907-46ef-805d-320e7205beaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 15:58:50 +0000 Certificate not after: Tue 09 Jan 2029 16:58:50 +0000 Subordinate resources: AS: 62884 IP: 192.206.255.0/24 IP: 198.97.204.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:b0:ba:92:86:dc:02:b4:07:f1:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 7 15:58:50 2026 GMT Not After : Jan 9 16:58:50 2029 GMT Subject: CN=a36156ae-1907-46ef-805d-320e7205beaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:e3:66:4b:7f:c5:f0:de:5a:6d:22:4f:f7: 12:81:db:0d:34:52:b5:00:4c:31:64:4b:dc:55:45: 0e:c9:50:07:bd:12:60:cf:99:c5:aa:9c:f1:a6:ed: b8:e0:5b:41:47:bc:b7:75:25:2b:9b:a0:98:1d:9c: 5a:d6:30:0e:c1:f4:dd:22:aa:e7:5e:49:1d:0f:4d: 8d:69:09:e5:56:20:86:47:d2:61:8e:a9:68:61:33: 75:3c:44:ae:55:d1:67:2d:67:c4:3d:2f:4a:a4:68: c0:c5:31:c5:70:ea:f3:d7:f6:d0:7d:a2:6b:b4:83: 17:f1:83:c5:0e:06:21:78:7b:47:d7:ff:8e:81:c1: b1:6b:04:3f:ad:98:11:7d:61:ca:0d:22:e7:6b:51: 58:ab:26:0c:5b:c2:b0:17:fb:43:e8:6d:a1:96:b4: f1:1d:0a:4d:5f:29:67:fe:93:ad:65:6e:c1:fa:63: cf:e4:85:06:a3:9c:7f:10:78:4b:56:2d:79:03:7f: 31:ec:c0:f5:38:24:9b:e4:09:94:ff:3c:da:94:45: 4d:10:74:72:6e:b9:5c:2f:62:98:67:c0:8e:11:87: 33:7a:3c:ce:60:c0:eb:f1:0d:a8:dc:f4:df:ae:dd: 4c:38:3b:ee:1e:ad:c3:fd:29:fa:fc:76:05:47:96: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:79:42:92:A2:15:19:6B:9D:21:16:B1:49:A4:4C:68:3D:4C:A9:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a36156ae-1907-46ef-805d-320e7205beaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a36156ae-1907-46ef-805d-320e7205beaa/a36156ae-1907-46ef-805d-320e7205beaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.206.255.0/24 198.97.204.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62884 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1f:c9:02:a3:55:18:47:01:bf:83:9e:5b:d8:eb:0d:cb:ff: bb:4d:c7:35:31:9f:d2:17:c3:f0:56:b4:24:a0:4a:ba:d6:78: 65:08:31:2d:ed:3c:66:69:0a:b2:87:03:1b:be:b8:24:65:42: 80:c0:bb:6b:c9:9f:2a:83:31:7c:2b:5c:49:2d:2e:8c:52:f2: b5:5f:27:68:0d:48:bd:3f:38:91:7b:5c:c9:95:28:71:08:f5: 53:68:e0:da:86:1e:2d:05:62:01:a6:23:12:d5:a2:dd:e9:24: 1a:9e:33:cf:bb:ed:e5:17:a5:8d:cb:31:18:68:ba:c2:a2:e3: 89:e0:83:18:06:c3:70:31:06:3c:b6:36:5f:e9:15:a2:e4:38: 4f:1b:50:3f:ad:46:d7:31:19:65:5a:31:02:8e:4d:a9:8a:b8: 2a:27:ce:a9:21:de:3b:f6:d4:3a:ea:12:cf:0b:05:64:97:a0: f0:96:13:7e:e3:7d:db:23:6e:ea:b9:19:f2:37:4b:bb:68:60: 6e:79:0e:e3:67:b3:90:9a:c3:78:c8:ad:9b:f9:1c:8c:6d:ca: 05:30:28:65:35:ed:eb:aa:02:ac:54:87:94:db:2e:b3:06:31: 7d:0d:97:e4:4c:e0:ad:26:32:79:4e:01:56:64:85:71:e2:4f: d8:64:e9:c9 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE9ssLqShtwCtAfx2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNzE1NTg1MFoXDTI5MDEwOTE2NTg1MFowLzEtMCsGA1UEAxMk YTM2MTU2YWUtMTkwNy00NmVmLTgwNWQtMzIwZTcyMDViZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZjjZkt/xfDeWm0iT/cSgdsNNFK1AEwxZEvc VUUOyVAHvRJgz5nFqpzxpu244FtBR7y3dSUrm6CYHZxa1jAOwfTdIqrnXkkdD02N aQnlViCGR9JhjqloYTN1PESuVdFnLWfEPS9KpGjAxTHFcOrz1/bQfaJrtIMX8YPF DgYheHtH1/+OgcGxawQ/rZgRfWHKDSLna1FYqyYMW8KwF/tD6G2hlrTxHQpNXyln /pOtZW7B+mPP5IUGo5x/EHhLVi15A38x7MD1OCSb5AmU/zzalEVNEHRybrlcL2KY Z8COEYczejzOYMDr8Q2o3PTfrt1MODvuHq3D/Sn6/HYFR5aTTQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNh5QpKiFRlrnSEWsUmkTGg9TKm4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h MzYxNTZhZS0xOTA3LTQ2ZWYtODA1ZC0zMjBlNzIwNWJlYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2EzNjE1NmFlLTE5MDctNDZlZi04 MDVkLTMyMGU3MjA1YmVhYS9hMzYxNTZhZS0xOTA3LTQ2ZWYtODA1ZC0zMjBlNzIw NWJlYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAzv8DBADGYcwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPWkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEEfyQKjVRhHAb+DnlvY6w3L/7tNxzUxn9IXw/BW tCSgSrrWeGUIMS3tPGZpCrKHAxu+uCRlQoDAu2vJnyqDMXwrXEktLoxS8rVfJ2gN SL0/OJF7XMmVKHEI9VNo4NqGHi0FYgGmIxLVot3pJBqeM8+77eUXpY3LMRhousKi 44nggxgGw3AxBjy2Nl/pFaLkOE8bUD+tRtcxGWVaMQKOTamKuConzqkh3jv21Drq Es8LBWSXoPCWE37jfdsjbuq5GfI3S7toYG55DuNns5Caw3jIrZv5HIxtygUwKGU1 7euqAqxUh5TbLrMGMX0Nl+RM4K0mMnlOAVZkhXHiT9hk6ck= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:52 2026 by rpki-client