$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0.cer File: a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0.cer (raw, json) Hash identifier: wtI7zxjeUV7H4LjBufbAcVODYSainf5M8NDQjZEF+OE= Subject key identifier: E6:09:38:51:3D:2B:1F:F3:ED:30:83:0D:20:18:B4:EE:99:B4:56:36 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4C4CF5281802D71639EA96C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0/a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Sep 2026 01:31:57 +0000 Certificate not after: Fri 29 Dec 2028 02:31:57 +0000 Subordinate resources: AS: 39978 IP: 155.254.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:4c:f5:28:18:02:d7:16:39:ea:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 26 01:31:57 2026 GMT Not After : Dec 29 02:31:57 2028 GMT Subject: CN=a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:16:4a:b8:58:6a:7e:d0:19:6e:f9:3a:73: 81:d5:2c:d8:20:6e:e7:ca:09:a9:3f:fd:6a:cf:ae: ce:21:42:20:1f:c2:e9:ed:68:d3:73:c0:05:d1:be: 11:51:a0:69:4d:d9:64:46:74:e2:3e:fb:45:06:95: 7a:14:e5:b7:17:b3:53:1f:ec:2c:b6:49:df:43:6a: 9d:8a:80:d0:8e:f8:1f:4f:2f:a2:3f:f8:95:ff:e2: d2:8e:f8:88:26:25:27:e3:57:6f:cd:f1:14:5d:fd: aa:f3:d9:4a:d2:d8:c3:3c:b9:07:18:80:fa:2b:35: 42:ad:95:8b:07:5d:a7:8c:3d:67:46:d7:1d:c9:fc: 4b:60:ad:b5:51:52:83:d4:8b:a1:51:9e:c9:02:71: 4a:45:23:1e:00:7c:93:ce:28:a0:90:d4:39:f0:9f: 66:27:5b:3c:12:5f:87:bc:9c:12:27:82:54:2c:fa: 84:53:13:f0:a7:2a:6a:24:a9:1d:53:a2:2e:f4:7d: 4f:83:aa:df:4d:88:6f:4d:f1:5f:b3:9f:d8:85:e9: d8:65:4f:68:c5:48:bf:f3:1d:f9:6b:1b:0e:04:2a: d2:95:89:c0:d3:b0:19:3e:a6:80:01:67:3e:a0:b9: 15:75:31:57:a7:72:ef:85:28:ac:3f:33:f6:fd:e2: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:09:38:51:3D:2B:1F:F3:ED:30:83:0D:20:18:B4:EE:99:B4:56:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0/a6bf4f37-d48f-437e-ac4f-eb6aa6528ef0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 155.254.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39978 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:23:35:37:74:ec:3f:00:81:99:9b:73:84:ff:87:5d:bf:e6: 14:12:88:b8:1f:f5:b3:6a:cd:80:e5:5f:8e:6d:99:fc:74:d1: 11:e4:bc:80:87:f6:8f:47:75:ae:42:cc:b1:80:4a:96:01:61: d1:da:59:24:47:87:bc:23:e3:27:81:b9:38:0c:01:39:7f:58: 73:c1:0d:28:86:94:54:2f:e4:8c:10:75:3c:82:f7:73:cb:78: df:7e:df:db:6a:04:c1:bc:3e:af:02:b8:48:77:ac:6b:cf:ed: 6c:c0:c0:61:83:79:93:3c:f3:81:da:8c:9d:0b:7d:53:ce:2e: 10:a2:08:76:93:67:d8:0c:de:9d:04:91:49:02:62:46:8b:13: 3e:1c:2d:b0:02:cf:d8:b9:fd:f5:6d:93:8e:53:45:eb:f8:8c: 16:77:2b:e2:0a:1d:56:d1:dc:5d:54:7a:53:4c:8d:73:16:eb: 02:f8:69:9f:59:f7:7d:cf:19:d5:c8:7e:e0:82:72:8b:4f:69: ff:45:21:ef:e4:7a:01:ea:48:ef:4c:8b:bb:1b:50:0d:2b:04: d7:12:98:8b:7d:ce:e0:ca:90:6f:77:10:db:33:4c:4d:8d:3f: c2:75:fb:66:e8:7a:30:84:1f:b0:c4:32:62:fb:47:1b:01:87: 97:de:87:ed -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9MTPUoGALXFjnqlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyNjAxMzE1N1oXDTI4MTIyOTAyMzE1N1owLzEtMCsGA1UEAxMk YTZiZjRmMzctZDQ4Zi00MzdlLWFjNGYtZWI2YWE2NTI4ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeMWSrhYan7QGW75OnOB1SzYIG7nygmpP/1q z67OIUIgH8Lp7WjTc8AF0b4RUaBpTdlkRnTiPvtFBpV6FOW3F7NTH+wstknfQ2qd ioDQjvgfTy+iP/iV/+LSjviIJiUn41dvzfEUXf2q89lK0tjDPLkHGID6KzVCrZWL B12njD1nRtcdyfxLYK21UVKD1IuhUZ7JAnFKRSMeAHyTziigkNQ58J9mJ1s8El+H vJwSJ4JULPqEUxPwpypqJKkdU6Iu9H1Pg6rfTYhvTfFfs5/YhenYZU9oxUi/8x35 axsOBCrSlYnA07AZPqaAAWc+oLkVdTFXp3LvhSisPzP2/eJHIQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOYJOFE9Kx/z7TCDDSAYtO6ZtFY2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h NmJmNGYzNy1kNDhmLTQzN2UtYWM0Zi1lYjZhYTY1MjhlZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2E2YmY0ZjM3LWQ0OGYtNDM3ZS1h YzRmLWViNmFhNjUyOGVmMC9hNmJmNGYzNy1kNDhmLTQzN2UtYWM0Zi1lYjZhYTY1 MjhlZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKb/swwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJwqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJkjNTd07D8AgZmbc4T/h12/5hQSiLgf9bNqzYDlX45tmfx0 0RHkvICH9o9Hda5CzLGASpYBYdHaWSRHh7wj4yeBuTgMATl/WHPBDSiGlFQv5IwQ dTyC93PLeN9+39tqBMG8Pq8CuEh3rGvP7WzAwGGDeZM884HajJ0LfVPOLhCiCHaT Z9gM3p0EkUkCYkaLEz4cLbACz9i5/fVtk45TRev4jBZ3K+IKHVbR3F1UelNMjXMW 6wL4aZ9Z933PGdXIfuCCcotPaf9FIe/kegHqSO9Mi7sbUA0rBNcSmIt9zuDKkG93 ENszTE2NP8J1+2boejCEH7DEMmL7RxsBh5feh+0= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:17 2026 by rpki-client