$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aebe235e-20cd-4e33-9ee1-47ebfd074563.cer File: aebe235e-20cd-4e33-9ee1-47ebfd074563.cer (raw, json) Hash identifier: 83fjjX2WF5hYXbShtMKDkjDMqTJ+FKY0x/Muk3EYH98= Subject key identifier: 28:21:4C:6B:C0:DB:EE:E1:A7:59:AD:C9:CA:52:97:BE:25:DE:7C:FC Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F94E57B7F75852C6BBFF6E280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aebe235e-20cd-4e33-9ee1-47ebfd074563/aebe235e-20cd-4e33-9ee1-47ebfd074563.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aebe235e-20cd-4e33-9ee1-47ebfd074563/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Oct 2026 01:37:28 +0000 Certificate not after: Wed 24 Jan 2029 02:37:28 +0000 Subordinate resources: IP: 198.251.36.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:e5:7b:7f:75:85:2c:6b:bf:f6:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 22 01:37:28 2026 GMT Not After : Jan 24 02:37:28 2029 GMT Subject: CN=aebe235e-20cd-4e33-9ee1-47ebfd074563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:a8:dd:74:3f:89:4a:b7:dd:3a:9f:d9:c7: 92:20:57:8c:fd:d9:65:36:95:be:58:c3:0b:d8:62: b0:26:ff:bf:97:5a:f7:74:19:ca:a0:65:46:44:ce: fa:ae:57:d7:96:e3:a5:dd:e2:8d:8c:ec:cb:00:8f: 3e:c9:bb:97:20:24:92:18:11:29:ce:5d:22:0c:79: 5d:f1:7c:5f:17:b9:68:a0:96:fe:8b:20:2a:7b:08: 88:04:81:67:30:0a:3d:31:1b:7b:00:c0:13:b6:25: 5f:ae:ff:93:83:ca:be:1e:ab:5d:72:3b:08:62:2a: f5:86:d5:87:be:84:1c:a0:e7:d3:00:f6:5a:b0:fc: 3a:4d:f0:04:bb:f0:9f:02:20:b2:8c:5c:5b:b6:ab: 56:39:01:ea:4a:23:d9:69:c4:bc:ff:23:c7:a1:19: 08:d5:96:df:34:23:19:b2:fb:9a:70:3b:5f:2c:cf: b8:4c:88:20:33:8e:51:e8:10:d5:6c:ca:75:86:88: 1d:40:1e:09:f6:bd:9f:75:3f:3d:3a:53:71:69:13: f6:9c:ab:ad:da:91:de:e6:fa:8f:74:59:ff:45:5a: 52:09:a6:11:b9:97:96:04:ab:4d:41:c8:ad:c0:37: 6d:ab:fc:c8:c9:d3:34:e7:11:f3:66:5c:6b:92:4d: 04:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:4C:6B:C0:DB:EE:E1:A7:59:AD:C9:CA:52:97:BE:25:DE:7C:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aebe235e-20cd-4e33-9ee1-47ebfd074563/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aebe235e-20cd-4e33-9ee1-47ebfd074563/aebe235e-20cd-4e33-9ee1-47ebfd074563.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.251.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0a:fa:49:03:ea:6d:4e:bc:42:a3:13:92:36:30:d8:f7:86: 74:10:1e:7f:43:ab:6d:21:7b:16:19:e4:aa:91:87:21:ef:e6: 19:d6:81:8a:8f:26:18:f1:f8:48:41:c9:f9:55:9c:c6:01:09: ae:3f:1f:81:dd:4d:7e:7a:86:2d:71:8e:7a:33:06:ab:4b:27: 55:bb:98:2d:c9:1b:47:00:f6:60:4e:6c:a6:89:c8:e7:e2:a2: d5:a5:36:0e:51:02:82:1c:a5:c6:1c:bc:58:36:be:4a:d1:fe: a4:9a:16:0f:52:8e:b2:9b:07:1c:5b:90:e0:62:fe:a1:3a:dd: 33:68:77:77:44:fa:8d:ea:35:bc:f4:38:34:e4:61:e0:4d:bb: 1b:2c:13:ce:f6:73:42:f0:8e:26:96:d7:d3:58:3d:53:79:8c: 53:67:ad:9f:ff:64:00:82:05:c2:86:a2:6a:43:04:74:d9:bb: 19:2c:3b:b8:97:6c:b0:df:5e:c4:2d:55:c4:23:9b:05:b2:f3: 8c:22:fa:08:94:3f:46:07:ae:c9:77:87:78:e9:a8:94:d3:af: b5:84:32:a1:10:10:f2:51:b7:05:1f:2f:df:fd:f0:57:26:c4: ae:89:c5:33:93:0a:d3:ad:4a:7d:d4:85:10:cc:42:20:6b:f7: e3:43:5a:27 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+U5Xt/dYUsa7/24oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMjAxMzcyOFoXDTI5MDEyNDAyMzcyOFowLzEtMCsGA1UEAxMk YWViZTIzNWUtMjBjZC00ZTMzLTllZTEtNDdlYmZkMDc0NTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmao3XQ/iUq33Tqf2ceSIFeM/dllNpW+WMML 2GKwJv+/l1r3dBnKoGVGRM76rlfXluOl3eKNjOzLAI8+ybuXICSSGBEpzl0iDHld 8XxfF7looJb+iyAqewiIBIFnMAo9MRt7AMATtiVfrv+Tg8q+HqtdcjsIYir1htWH voQcoOfTAPZasPw6TfAEu/CfAiCyjFxbtqtWOQHqSiPZacS8/yPHoRkI1ZbfNCMZ svuacDtfLM+4TIggM45R6BDVbMp1hogdQB4J9r2fdT89OlNxaRP2nKut2pHe5vqP dFn/RVpSCaYRuZeWBKtNQcitwDdtq/zIydM05xHzZlxrkk0EQwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCghTGvA2+7hp1mtycpSl74l3nz8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h ZWJlMjM1ZS0yMGNkLTRlMzMtOWVlMS00N2ViZmQwNzQ1NjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2FlYmUyMzVlLTIwY2QtNGUzMy05 ZWUxLTQ3ZWJmZDA3NDU2My9hZWJlMjM1ZS0yMGNkLTRlMzMtOWVlMS00N2ViZmQw NzQ1NjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALG+yQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEgr6SQPqbU68QqMTkjYw 2PeGdBAef0OrbSF7FhnkqpGHIe/mGdaBio8mGPH4SEHJ+VWcxgEJrj8fgd1NfnqG LXGOejMGq0snVbuYLckbRwD2YE5sponI5+Ki1aU2DlECghylxhy8WDa+StH+pJoW D1KOspsHHFuQ4GL+oTrdM2h3d0T6jeo1vPQ4NORh4E27GywTzvZzQvCOJpbX01g9 U3mMU2etn/9kAIIFwoaiakMEdNm7GSw7uJdssN9exC1VxCObBbLzjCL6CJQ/Rgeu yXeHeOmolNOvtYQyoRAQ8lG3BR8v3/3wVybEronFM5MK061KfdSFEMxCIGv340Na Jw== -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:36 2026 by rpki-client