$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95372db-e1b8-4308-93de-c000433590f3.cer File: b95372db-e1b8-4308-93de-c000433590f3.cer (raw, json) Hash identifier: emZQwXsPRlA/hpWbBE9icXsi0jG87uCwYAzg+ouqF3o= Subject key identifier: 11:D4:F3:A2:35:4D:19:36:8C:39:AC:25:C4:B2:27:5A:1D:50:66:4A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4AEAEB717B9AE04198DC6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95372db-e1b8-4308-93de-c000433590f3/b95372db-e1b8-4308-93de-c000433590f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95372db-e1b8-4308-93de-c000433590f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 13:38:36 +0000 Certificate not after: Thu 28 Dec 2028 14:38:36 +0000 Subordinate resources: AS: 401531 IP: 65.61.44.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:ea:eb:71:7b:9a:e0:41:98:dc:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 25 13:38:36 2026 GMT Not After : Dec 28 14:38:36 2028 GMT Subject: CN=b95372db-e1b8-4308-93de-c000433590f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:5a:e1:3d:e3:8e:61:8f:cd:ce:91:43:dd: 69:60:4c:b1:eb:97:33:f6:3c:10:fa:bb:25:e1:bb: d1:de:7c:4c:d0:0d:75:f3:64:a4:1d:0e:2d:9a:e8: 99:d0:cc:20:fc:d8:79:72:97:67:75:0f:5b:79:f2: 14:22:50:29:9b:d8:59:45:db:67:b2:32:73:72:99: 23:4f:6f:f2:b5:a6:0b:ed:01:a4:83:f4:f4:6b:e8: 9d:16:40:6d:a1:3e:9a:e9:02:db:6e:52:72:d0:e2: 8c:15:53:f1:fb:e4:c2:11:90:7e:89:84:3a:f4:7b: 06:cd:26:66:2b:51:ca:ac:e7:cf:be:c2:76:c2:48: f9:66:09:af:b1:a8:59:72:f2:c4:64:b5:12:86:18: f1:c6:87:6e:45:74:57:04:d5:ad:29:eb:69:a9:c3: a4:d0:7f:a3:d1:28:92:81:36:01:f8:ff:59:d0:fc: 73:da:f0:47:3a:34:ad:aa:6d:1a:f2:7e:a5:be:2a: 69:55:4d:1a:e8:9b:d6:5f:56:9b:ca:70:8f:75:84: 74:f3:89:ee:49:2b:87:fc:da:5e:29:24:48:b7:6f: cb:e8:ba:04:87:3e:e2:b9:ff:81:5d:7c:0d:62:24: e8:5a:cf:c1:e8:87:11:cc:c9:ee:6b:b1:d9:7d:57: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:F3:A2:35:4D:19:36:8C:39:AC:25:C4:B2:27:5A:1D:50:66:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95372db-e1b8-4308-93de-c000433590f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b95372db-e1b8-4308-93de-c000433590f3/b95372db-e1b8-4308-93de-c000433590f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 65.61.44.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401531 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:52:48:bd:8d:14:f6:13:83:d7:9b:d5:e1:bc:c5:f9:e0:40: 92:28:db:92:92:52:cc:54:70:64:a8:aa:1c:df:78:18:b8:c2: 39:22:9d:d5:50:23:8e:40:d7:43:78:f4:14:70:1d:b4:7b:3f: c0:20:90:6e:8f:a1:d4:db:51:19:f2:c7:db:5d:ae:24:8f:7a: 40:a8:19:7b:50:b0:08:42:6e:ce:91:15:a4:80:01:a3:11:ca: 6a:82:3b:7d:f7:71:18:22:27:f2:9e:54:17:6e:fb:44:7d:78: 72:c6:08:2f:9e:34:20:34:59:27:fb:fb:24:3b:fd:06:11:ee: 3f:b1:02:39:48:d1:7e:ed:6a:54:21:9c:58:14:f4:1f:3e:a5: 6a:77:95:fe:b9:ba:41:c3:59:80:9d:12:75:38:88:16:41:f7: ce:0c:2d:c2:89:d0:d1:01:fc:34:bd:99:52:43:ae:4f:87:65: 13:86:f0:39:d4:7f:64:e8:bc:a0:ed:4c:49:98:00:be:2b:d2: 1e:e9:40:92:2d:13:b6:54:be:f6:f0:4e:5a:dd:a2:a2:86:4f: 85:66:57:e1:75:f5:a0:c1:45:4d:a7:87:c4:cb:13:89:ff:e8: 59:06:c3:64:0f:32:ac:5e:6d:36:37:66:a1:95:c1:10:05:c4: 08:50:86:bb -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9K6utxe5rgQZjcZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyNTEzMzgzNloXDTI4MTIyODE0MzgzNlowLzEtMCsGA1UEAxMk Yjk1MzcyZGItZTFiOC00MzA4LTkzZGUtYzAwMDQzMzU5MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZRa4T3jjmGPzc6RQ91pYEyx65cz9jwQ+rsl 4bvR3nxM0A1182SkHQ4tmuiZ0Mwg/Nh5cpdndQ9befIUIlApm9hZRdtnsjJzcpkj T2/ytaYL7QGkg/T0a+idFkBtoT6a6QLbblJy0OKMFVPx++TCEZB+iYQ69HsGzSZm K1HKrOfPvsJ2wkj5ZgmvsahZcvLEZLUShhjxxoduRXRXBNWtKetpqcOk0H+j0SiS gTYB+P9Z0Pxz2vBHOjStqm0a8n6lvippVU0a6JvWX1abynCPdYR084nuSSuH/Npe KSRIt2/L6LoEhz7iuf+BXXwNYiToWs/B6IcRzMnua7HZfVfxYQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBHU86I1TRk2jDmsJcSyJ1odUGZKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i OTUzNzJkYi1lMWI4LTQzMDgtOTNkZS1jMDAwNDMzNTkwZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2I5NTM3MmRiLWUxYjgtNDMwOC05 M2RlLWMwMDA0MzM1OTBmMy9iOTUzNzJkYi1lMWI4LTQzMDgtOTNkZS1jMDAwNDMz NTkwZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFBPSwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiB7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABtSSL2NFPYTg9eb1eG8xfngQJIo25KSUsxUcGSoqhzfeBi4 wjkindVQI45A10N49BRwHbR7P8AgkG6PodTbURnyx9tdriSPekCoGXtQsAhCbs6R FaSAAaMRymqCO333cRgiJ/KeVBdu+0R9eHLGCC+eNCA0WSf7+yQ7/QYR7j+xAjlI 0X7talQhnFgU9B8+pWp3lf65ukHDWYCdEnU4iBZB984MLcKJ0NEB/DS9mVJDrk+H ZROG8DnUf2TovKDtTEmYAL4r0h7pQJItE7ZUvvbwTlrdoqKGT4VmV+F19aDBRU2n h8TLE4n/6FkGw2QPMqxebTY3ZqGVwRAFxAhQhrs= -----END CERTIFICATE-----Generated at Tue Nov 3 08:02:37 2026 by rpki-client