$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.cer File: a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.cer (raw, json) Hash identifier: zTnn52uIt0rnVTtmgh8/5oqP5QtDUQ5hUzI8NJdBNdU= Subject key identifier: F7:38:59:19:AB:B2:09:46:FA:C8:23:77:C1:A4:B0:FF:71:63:F2:9D Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F539050919638B18859B7B540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 15:58:19 +0000 Certificate not after: Sun 31 Dec 2028 16:58:19 +0000 Subordinate resources: IP: 204.29.154.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:90:50:91:96:38:b1:88:59:b7:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 28 15:58:19 2026 GMT Not After : Dec 31 16:58:19 2028 GMT Subject: CN=a9d0b6e9-7f03-4eaf-9c0e-e809961366f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dd:af:a0:64:94:0a:2b:12:9c:0d:ba:74:e8: 60:80:f5:e0:0b:78:b4:f9:ab:bc:a8:e3:ab:f4:ee: 54:ec:09:be:3f:76:fa:c9:e1:15:54:9f:e7:57:2e: 1e:0e:43:5f:0f:9e:47:50:5f:30:ef:c3:48:b1:53: 28:38:4d:5b:99:a6:bb:df:ec:96:56:7f:95:4b:73: d0:81:c6:e8:4a:f6:86:0f:50:72:0b:32:d8:63:c9: ad:ad:02:ad:f0:bf:fe:01:71:19:23:ec:a9:66:9d: bc:f9:fa:4d:e6:5b:44:58:51:65:04:d4:66:d6:e1: df:8d:3a:31:b7:92:89:72:cd:d3:bd:ee:d5:10:f1: a9:1e:9c:06:4f:1e:fa:87:2f:f8:32:28:93:7f:a6: 9f:c6:dc:4d:e5:19:02:0c:8e:b4:10:73:9f:bc:4e: 38:b9:5e:5f:39:60:58:8e:6a:5f:87:1d:c2:2b:81: cb:a7:22:d3:95:30:da:a8:71:03:9d:9d:e2:b1:be: fd:dd:be:aa:5b:1d:e2:59:54:2f:f4:e6:42:9a:b9: d7:ea:64:ca:af:9e:42:c0:f2:a7:0c:58:dd:36:64: 1a:35:4f:b8:4e:f6:68:57:e4:61:01:bc:d8:6f:bc: b5:93:02:77:8e:49:b1:1a:fe:72:e0:ce:f1:eb:db: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:59:19:AB:B2:09:46:FA:C8:23:77:C1:A4:B0:FF:71:63:F2:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 204.29.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8a:fb:42:96:63:91:bc:e5:c0:1c:a3:e2:ee:eb:28:8d:7a: 44:86:b2:00:03:eb:87:cc:0e:1d:e7:1a:a9:4a:62:91:9b:10: bd:7d:8e:2b:5a:19:5b:d0:df:d9:2f:ab:cb:11:f5:62:de:ae: df:e7:33:cd:f2:d9:d2:fe:dc:78:e6:73:fa:d6:92:e1:6f:a3: e3:06:99:34:95:26:cc:61:9e:bb:85:21:31:49:6e:7f:8f:cf: b4:cb:1e:e8:a4:3a:d6:7c:95:e9:e2:cb:83:19:88:ab:ef:3b: fd:1a:5b:06:f2:fe:46:a1:c1:a7:fe:3c:11:1e:34:5d:3a:3e: 04:8e:eb:bd:cc:4a:99:4f:0f:5a:0f:ca:0f:8e:01:43:a7:5a: ae:b4:69:9f:da:4e:7d:70:6b:a0:c5:bc:66:0c:0d:be:c3:50: 74:34:a7:40:06:a8:23:df:be:52:f9:ff:c4:55:69:94:11:56: 27:e0:d3:c1:21:23:ee:12:3f:bb:08:4b:f6:32:c6:fb:74:b3: 54:93:33:1b:fe:f5:a0:4a:f7:25:94:a6:20:64:a9:28:42:d0: 95:b4:d1:86:a7:3e:7d:5b:64:98:fd:97:7e:18:b6:63:2a:03: 0c:b2:2e:3d:60:c3:8a:e5:81:56:a6:9e:77:c4:0a:4c:39:a0: 09:df:59:5a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9TkFCRljixiFm3tUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyODE1NTgxOVoXDTI4MTIzMTE2NTgxOVowLzEtMCsGA1UEAxMk YTlkMGI2ZTktN2YwMy00ZWFmLTljMGUtZTgwOTk2MTM2NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN2voGSUCisSnA26dOhggPXgC3i0+au8qOOr 9O5U7Am+P3b6yeEVVJ/nVy4eDkNfD55HUF8w78NIsVMoOE1bmaa73+yWVn+VS3PQ gcboSvaGD1ByCzLYY8mtrQKt8L/+AXEZI+ypZp28+fpN5ltEWFFlBNRm1uHfjTox t5KJcs3Tve7VEPGpHpwGTx76hy/4MiiTf6afxtxN5RkCDI60EHOfvE44uV5fOWBY jmpfhx3CK4HLpyLTlTDaqHEDnZ3isb793b6qWx3iWVQv9OZCmrnX6mTKr55CwPKn DFjdNmQaNU+4TvZoV+RhAbzYb7y1kwJ3jkmxGv5y4M7x69sNcQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPc4WRmrsglG+sgjd8GksP9xY/KdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h OWQwYjZlOS03ZjAzLTRlYWYtOWMwZS1lODA5OTYxMzY2ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2E5ZDBiNmU5LTdmMDMtNGVhZi05 YzBlLWU4MDk5NjEzNjZmNi9hOWQwYjZlOS03ZjAzLTRlYWYtOWMwZS1lODA5OTYx MzY2ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMHZowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa4r7QpZjkbzlwByj4u7r KI16RIayAAPrh8wOHecaqUpikZsQvX2OK1oZW9Df2S+ryxH1Yt6u3+czzfLZ0v7c eOZz+taS4W+j4waZNJUmzGGeu4UhMUluf4/PtMse6KQ61nyV6eLLgxmIq+87/Rpb BvL+RqHBp/48ER40XTo+BI7rvcxKmU8PWg/KD44BQ6darrRpn9pOfXBroMW8ZgwN vsNQdDSnQAaoI9++Uvn/xFVplBFWJ+DTwSEj7hI/uwhL9jLG+3SzVJMzG/71oEr3 JZSmIGSpKELQlbTRhqc+fVtkmP2Xfhi2YyoDDLIuPWDDiuWBVqaed8QKTDmgCd9Z Wg== -----END CERTIFICATE-----Generated at Wed Oct 7 11:54:12 2026 by rpki-client