$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aff9a944-0697-4155-b173-103373819dab.cer File: aff9a944-0697-4155-b173-103373819dab.cer (raw, json) Hash identifier: gP8fqTZekz7pMhIC8V7NVCsWjbz4+OOykZhcSyXl01s= Subject key identifier: 6C:26:51:7E:5B:6F:98:FA:76:18:5E:57:F5:BD:9E:22:5A:37:AD:C0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F91A2AEF61721A73B5FB32B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aff9a944-0697-4155-b173-103373819dab/aff9a944-0697-4155-b173-103373819dab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aff9a944-0697-4155-b173-103373819dab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 21:35:27 +0000 Certificate not after: Mon 22 Jan 2029 22:35:27 +0000 Subordinate resources: AS: 11294 AS: 26447 IP: 74.121.36.0/22 IP: 160.20.208.0/23 IP: 2620:114::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:a2:ae:f6:17:21:a7:3b:5f:b3:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 20 21:35:27 2026 GMT Not After : Jan 22 22:35:27 2029 GMT Subject: CN=aff9a944-0697-4155-b173-103373819dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:6f:b9:fb:21:71:77:89:4b:e4:6f:47:0b: 36:af:8e:bc:2d:a7:5c:04:84:40:ab:ab:b2:4e:70: fe:b1:8f:a6:97:8c:a4:ad:5e:25:4d:33:fc:c4:6e: f4:fc:a3:6a:1d:36:d4:14:e0:1f:3d:6a:cf:ef:7b: fc:64:8e:4c:79:46:9e:eb:e5:5a:13:1c:ac:df:d9: dd:18:e6:f9:7c:3c:57:3c:7a:4a:0f:be:15:b1:a1: 5a:67:e4:f3:eb:fe:c3:a3:f9:03:e2:ae:c2:65:2f: 3c:1a:31:b4:64:30:9f:b9:2a:f5:84:eb:dd:d4:ce: 32:41:99:f1:57:db:17:d4:ae:7a:59:2a:e3:fd:3d: 8b:41:1e:a2:9e:d3:52:2e:0c:0a:35:e0:38:24:03: 56:96:40:55:5b:ac:ea:8f:1b:80:3d:f3:07:96:b6: 42:36:d2:f9:79:0d:f0:7a:cb:61:31:82:a0:16:ca: 11:9f:f7:ca:d1:27:10:c3:6c:4c:d7:d4:85:b5:d0: 90:bc:d6:5d:39:d8:2f:58:c4:c8:30:a6:09:f3:f6: d1:b7:4d:c6:3f:ab:f1:44:91:84:a7:03:f0:5c:fa: 21:da:f5:e8:db:3d:2f:7b:56:3b:ad:e4:1c:47:b8: 2f:98:ef:ff:41:27:6c:36:d0:4a:da:1b:10:77:41: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:26:51:7E:5B:6F:98:FA:76:18:5E:57:F5:BD:9E:22:5A:37:AD:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aff9a944-0697-4155-b173-103373819dab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aff9a944-0697-4155-b173-103373819dab/aff9a944-0697-4155-b173-103373819dab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 74.121.36.0/22 160.20.208.0/23 IPv6: 2620:114::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11294 26447 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a5:01:60:34:2c:8d:ae:aa:22:f8:b9:7a:39:b8:20:08:f9: c8:ca:63:33:d9:82:b2:83:c5:e0:57:4c:38:bc:e3:ef:0c:03: ee:a7:aa:ea:b8:07:e0:d2:e9:bf:2c:79:2e:f0:d5:33:44:80: ca:61:b3:92:08:1b:75:07:17:fa:19:94:8b:de:5b:49:42:78: f1:f8:54:78:83:18:ff:99:ea:42:40:cc:46:e6:25:b8:09:0c: bb:80:20:59:16:69:56:72:a2:e4:ad:c1:c8:fd:5b:1a:ca:d8: b5:48:3d:5d:2a:9f:b1:81:aa:09:5e:bb:9c:af:2f:36:aa:91: 16:00:d4:cd:2a:4e:ac:57:22:97:2f:f9:a5:1b:8c:22:d2:d8: 8e:35:c1:fc:63:b2:c1:b4:d2:78:21:22:98:5e:b7:b9:7f:7a: 59:31:3f:4d:b9:9c:a2:3e:77:bb:e8:da:23:01:31:c9:3a:3a: 24:70:63:fd:b0:ac:6c:e5:2b:4f:16:58:d8:78:7f:f4:4e:22: e0:2b:e9:a3:eb:71:b0:cf:50:02:dd:0b:fd:de:9a:9e:52:39: c1:a2:c7:03:0a:1b:fa:f2:25:99:bf:7c:6f:11:82:07:e5:5d: 87:0f:7f:7f:5d:7f:f9:15:75:f6:a0:17:7f:cc:94:1f:bf:5e: 21:53:21:1e -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE+Roq72FyGnO1+zKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMDIxMzUyN1oXDTI5MDEyMjIyMzUyN1owLzEtMCsGA1UEAxMk YWZmOWE5NDQtMDY5Ny00MTU1LWIxNzMtMTAzMzczODE5ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvRvufshcXeJS+RvRws2r468LadcBIRAq6uy TnD+sY+ml4ykrV4lTTP8xG70/KNqHTbUFOAfPWrP73v8ZI5MeUae6+VaExys39nd GOb5fDxXPHpKD74VsaFaZ+Tz6/7Do/kD4q7CZS88GjG0ZDCfuSr1hOvd1M4yQZnx V9sX1K56WSrj/T2LQR6intNSLgwKNeA4JANWlkBVW6zqjxuAPfMHlrZCNtL5eQ3w esthMYKgFsoRn/fK0ScQw2xM19SFtdCQvNZdOdgvWMTIMKYJ8/bRt03GP6vxRJGE pwPwXPoh2vXo2z0ve1Y7reQcR7gvmO//QSdsNtBK2hsQd0FdvQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFGwmUX5bb5j6dhheV/W9niJaN63AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h ZmY5YTk0NC0wNjk3LTQxNTUtYjE3My0xMDMzNzM4MTlkYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2FmZjlhOTQ0LTA2OTctNDE1NS1i MTczLTEwMzM3MzgxOWRhYi9hZmY5YTk0NC0wNjk3LTQxNTUtYjE3My0xMDMzNzM4 MTlkYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAJKeSQDBAGgFNAwDwQCAAIwCQMHBCYgARQAADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgIsHgICZ08wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFaUBYDQsja6q Ivi5ejm4IAj5yMpjM9mCsoPF4FdMOLzj7wwD7qeq6rgH4NLpvyx5LvDVM0SAymGz kggbdQcX+hmUi95bSUJ48fhUeIMY/5nqQkDMRuYluAkMu4AgWRZpVnKi5K3ByP1b GsrYtUg9XSqfsYGqCV67nK8vNqqRFgDUzSpOrFcily/5pRuMItLYjjXB/GOywbTS eCEimF63uX96WTE/Tbmcoj53u+jaIwExyTo6JHBj/bCsbOUrTxZY2Hh/9E4i4Cvp o+txsM9QAt0L/d6anlI5waLHAwob+vIlmb98bxGCB+Vdhw9/f11/+RV19qAXf8yU H79eIVMhHg== -----END CERTIFICATE-----Generated at Sun Nov 1 08:30:05 2026 by rpki-client