$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b828b9d6-e1a1-44a9-8981-75a552ecf042.cer File: b828b9d6-e1a1-44a9-8981-75a552ecf042.cer (raw, json) Hash identifier: g4xSrkCypSHUsYq0sfiW3WO2b63M4OMQO2uazheIX+A= Subject key identifier: 0E:4D:8E:0C:BC:8C:97:30:7E:B3:76:60:A6:FD:80:02:1B:09:60:6F Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6F9007B1FB8FF021D7B86940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b828b9d6-e1a1-44a9-8981-75a552ecf042/b828b9d6-e1a1-44a9-8981-75a552ecf042.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b828b9d6-e1a1-44a9-8981-75a552ecf042/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 16:40:23 +0000 Certificate not after: Wed 10 Jan 2029 17:40:23 +0000 Subordinate resources: AS: 40007 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:90:07:b1:fb:8f:f0:21:d7:b8:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 16:40:23 2026 GMT Not After : Jan 10 17:40:23 2029 GMT Subject: CN=b828b9d6-e1a1-44a9-8981-75a552ecf042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:1d:cc:06:b9:1a:f7:ef:03:ce:ac:e2:20: d7:d9:c2:aa:0a:ae:33:55:d7:9b:95:47:20:84:48: 63:a4:bb:d2:d0:99:64:fa:3b:85:93:d1:6f:83:27: be:9a:f1:45:98:80:7a:ce:4e:a9:8e:09:28:2e:50: 6f:5e:00:49:d5:4b:3a:49:d3:a6:65:f3:02:32:0e: 3c:c9:b7:cd:a1:bc:57:fa:69:dd:51:5c:33:2c:b0: b7:a6:aa:39:6a:08:30:b4:64:3b:76:7f:29:f8:3d: f2:e1:6e:10:48:52:df:0b:35:c3:57:65:86:3e:12: e6:c5:97:13:3b:0a:1f:3d:b0:db:43:5a:6f:1c:c7: a1:24:ad:1f:4e:47:fc:52:c1:5e:f8:90:89:4a:3c: 64:28:61:7e:06:2a:29:54:8c:48:de:f5:eb:96:18: c4:2d:7c:8e:27:b4:03:cf:62:ee:94:ae:e5:8b:71: bd:f5:ed:af:23:51:fc:45:06:48:d4:17:06:2f:43: 58:08:17:2d:57:ac:83:fd:1f:9b:28:e5:43:04:09: 96:43:9b:8b:63:8f:c5:11:3e:6d:3d:42:c3:d8:4d: 29:5c:06:e5:4d:e8:be:e2:27:f4:dc:67:a7:8b:0c: 26:a5:a6:fb:1f:3a:2e:ad:cc:02:db:66:71:08:01: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:8E:0C:BC:8C:97:30:7E:B3:76:60:A6:FD:80:02:1B:09:60:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b828b9d6-e1a1-44a9-8981-75a552ecf042/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b828b9d6-e1a1-44a9-8981-75a552ecf042/b828b9d6-e1a1-44a9-8981-75a552ecf042.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 40007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:fc:ee:29:56:be:35:37:7c:ac:f6:7c:47:8d:8e:df:95:15: 70:02:c4:a4:de:e5:58:08:bf:01:9d:ea:e5:ce:81:d5:b6:30: 24:b7:30:bb:30:cf:53:76:6b:34:36:76:5a:ea:99:86:7f:ee: 52:38:20:0f:9a:72:48:9a:7a:75:e2:95:d5:cf:1c:33:ea:ce: b7:25:7d:82:ab:83:42:fc:7e:5c:c7:b5:0a:21:50:0f:bf:97: e3:2e:78:8f:99:a6:8b:ce:0f:87:64:1a:c4:a1:0a:95:0a:f1: 1f:71:2f:d0:4d:db:d0:8f:e9:90:80:b1:34:46:a5:16:05:19: 11:26:a2:ac:cd:33:5d:10:1d:f9:7a:a3:93:be:ba:86:2e:2a: c6:f6:e0:b6:31:b7:34:43:b8:67:c4:55:7e:af:1e:92:f2:22: 98:26:b2:35:08:8c:c4:91:18:11:03:b7:83:de:43:55:44:23: ad:e9:0e:b3:34:7b:f5:fc:99:65:74:da:bc:2f:14:d5:95:a4: 79:a8:59:14:3e:ec:a9:55:80:5d:9e:ad:e2:68:8e:30:02:6b: 7e:51:e2:90:6f:2d:0c:89:51:97:27:7c:4b:d8:2a:08:57:b1: f5:7f:30:c5:81:df:a6:93:44:68:a3:74:b9:dc:8a:ac:9f:e4: a7:ce:04:ab -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE9vkAex+4/wIde4aUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODE2NDAyM1oXDTI5MDExMDE3NDAyM1owLzEtMCsGA1UEAxMk YjgyOGI5ZDYtZTFhMS00NGE5LTg5ODEtNzVhNTUyZWNmMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPcdzAa5GvfvA86s4iDX2cKqCq4zVdeblUcg hEhjpLvS0Jlk+juFk9Fvgye+mvFFmIB6zk6pjgkoLlBvXgBJ1Us6SdOmZfMCMg48 ybfNobxX+mndUVwzLLC3pqo5aggwtGQ7dn8p+D3y4W4QSFLfCzXDV2WGPhLmxZcT OwofPbDbQ1pvHMehJK0fTkf8UsFe+JCJSjxkKGF+BiopVIxI3vXrlhjELXyOJ7QD z2LulK7li3G99e2vI1H8RQZI1BcGL0NYCBctV6yD/R+bKOVDBAmWQ5uLY4/FET5t PULD2E0pXAblTei+4if03Geniwwmpab7HzourcwC22ZxCAEiJwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFA5Njgy8jJcwfrN2YKb9gAIbCWBvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i ODI4YjlkNi1lMWExLTQ0YTktODk4MS03NWE1NTJlY2YwNDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2I4MjhiOWQ2LWUxYTEtNDRhOS04 OTgxLTc1YTU1MmVjZjA0Mi9iODI4YjlkNi1lMWExLTQ0YTktODk4MS03NWE1NTJl Y2YwNDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJxHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHv87ilWvjU3fKz2fEeNjt+VFXAC xKTe5VgIvwGd6uXOgdW2MCS3MLswz1N2azQ2dlrqmYZ/7lI4IA+ackiaenXildXP HDPqzrclfYKrg0L8flzHtQohUA+/l+MueI+ZpovOD4dkGsShCpUK8R9xL9BN29CP 6ZCAsTRGpRYFGREmoqzNM10QHfl6o5O+uoYuKsb24LYxtzRDuGfEVX6vHpLyIpgm sjUIjMSRGBEDt4PeQ1VEI63pDrM0e/X8mWV02rwvFNWVpHmoWRQ+7KlVgF2ereJo jjACa35R4pBvLQyJUZcnfEvYKghXsfV/MMWB36aTRGijdLnciqyf5KfOBKs= -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:54 2026 by rpki-client