$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.cer File: ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.cer (raw, json) Hash identifier: VSzninqzPkieeNb3kofM931mAgrJRvHv5+OV9bBm+Xc= Subject key identifier: 58:CB:29:74:E4:85:D1:37:55:98:7E:7A:52:6D:2C:83:AB:74:1E:CF Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F91547C0E352F829B2461E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 18:57:53 +0000 Certificate not after: Mon 22 Jan 2029 19:57:53 +0000 Subordinate resources: IP: 206.126.102.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:54:7c:0e:35:2f:82:9b:24:61:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 20 18:57:53 2026 GMT Not After : Jan 22 19:57:53 2029 GMT Subject: CN=ba4a432d-c3a7-4774-a834-bd2fcfc3a24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:a9:7f:11:a6:b3:8f:b3:8b:5f:cd:cc:56: 89:5d:36:38:6b:b7:36:77:0a:cb:0b:70:b8:b0:4a: bf:d0:69:98:96:22:1c:2f:39:f7:82:e6:0a:b2:cf: 44:58:cc:bb:93:13:62:5f:22:53:e4:b9:71:44:4b: e9:71:61:48:d8:eb:eb:cd:bf:20:7a:b0:3a:06:f9: 0a:52:c2:d3:72:d2:14:21:bb:fd:eb:b3:56:dc:4f: d3:17:29:ae:5f:13:58:e8:d0:fb:78:e2:27:fd:37: c6:32:9b:27:29:fb:37:39:22:e1:c1:46:e0:d7:1d: a4:01:e8:a8:d9:63:b5:41:ec:7a:5f:81:36:23:2c: ba:f2:2c:3b:18:3f:ef:86:7b:64:e7:71:9c:e1:54: 56:67:a9:db:36:f8:10:22:d2:90:7e:f6:f6:2b:85: 62:b7:6f:95:df:7e:09:6d:07:36:9c:6c:3a:4f:f9: 06:a7:4c:be:46:e0:f7:6c:b5:80:2c:f1:7d:c1:92: c6:49:52:4a:8f:7d:c0:2a:45:84:6f:0f:6b:a9:9a: 09:dc:f7:db:1b:f7:36:2e:a9:97:0b:db:dd:35:a6: d8:61:ec:68:06:4d:b6:a9:91:ae:f7:95:15:82:20: a8:54:e8:3c:15:8c:1a:ba:4b:f4:8e:1e:1e:b1:5a: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CB:29:74:E4:85:D1:37:55:98:7E:7A:52:6D:2C:83:AB:74:1E:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c/ba4a432d-c3a7-4774-a834-bd2fcfc3a24c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 206.126.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:af:a7:da:5b:8b:d0:09:f4:7c:b1:7d:64:2a:07:90:b9:47: 17:ea:1b:15:8a:89:6c:50:a5:c1:76:a1:96:46:33:06:4b:6e: 47:3b:b9:c6:b2:64:4f:d5:29:5c:17:c9:13:5b:7e:f7:4c:48: e0:39:d8:c4:15:4d:1b:a9:4c:37:e2:05:0c:33:79:2d:4d:b3: f0:c5:f5:26:88:ca:3f:dd:94:c7:7f:69:a0:2f:3a:31:a9:d6: 46:23:3b:35:81:04:2d:42:c5:0f:e3:ce:b8:08:d0:43:ee:18: 06:a4:0a:25:23:21:da:22:e6:ff:98:00:e6:62:23:8c:a4:41: 7f:70:56:50:51:36:7b:33:37:c9:57:01:a2:7d:53:ec:81:61: 06:08:e9:a5:52:2d:95:3d:2d:71:17:4f:99:57:2c:77:31:4b: 9d:c4:d4:03:5e:2a:40:ab:eb:82:57:6d:37:06:6b:ea:ff:c8: 1a:3f:15:4f:a1:b9:2f:1d:d4:f6:64:bb:35:cf:f2:1e:a9:76: 49:66:0d:5a:ef:b0:70:35:de:2e:f8:7a:26:a9:39:ce:a6:d2: d4:80:98:9f:76:8b:6a:6e:72:27:29:26:5d:aa:90:f5:76:e1: ed:38:11:6a:a5:f3:c5:7d:12:02:26:d0:90:22:ee:2d:d8:1a: a9:11:92:9a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE+RVHwONS+CmyRh4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMDE4NTc1M1oXDTI5MDEyMjE5NTc1M1owLzEtMCsGA1UEAxMk YmE0YTQzMmQtYzNhNy00Nzc0LWE4MzQtYmQyZmNmYzNhMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYWpfxGms4+zi1/NzFaJXTY4a7c2dwrLC3C4 sEq/0GmYliIcLzn3guYKss9EWMy7kxNiXyJT5LlxREvpcWFI2Ovrzb8gerA6BvkK UsLTctIUIbv967NW3E/TFymuXxNY6ND7eOIn/TfGMpsnKfs3OSLhwUbg1x2kAeio 2WO1Qex6X4E2Iyy68iw7GD/vhntk53Gc4VRWZ6nbNvgQItKQfvb2K4Vit2+V334J bQc2nGw6T/kGp0y+RuD3bLWALPF9wZLGSVJKj33AKkWEbw9rqZoJ3PfbG/c2LqmX C9vdNabYYexoBk22qZGu95UVgiCoVOg8FYwaukv0jh4esVpX2wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFjLKXTkhdE3VZh+elJtLIOrdB7PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i YTRhNDMyZC1jM2E3LTQ3NzQtYTgzNC1iZDJmY2ZjM2EyNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JhNGE0MzJkLWMzYTctNDc3NC1h ODM0LWJkMmZjZmMzYTI0Yy9iYTRhNDMyZC1jM2E3LTQ3NzQtYTgzNC1iZDJmY2Zj M2EyNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHOfmYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfK+n2luL0An0fLF9ZCoH kLlHF+obFYqJbFClwXahlkYzBktuRzu5xrJkT9UpXBfJE1t+90xI4DnYxBVNG6lM N+IFDDN5LU2z8MX1JojKP92Ux39poC86ManWRiM7NYEELULFD+POuAjQQ+4YBqQK JSMh2iLm/5gA5mIjjKRBf3BWUFE2ezM3yVcBon1T7IFhBgjppVItlT0tcRdPmVcs dzFLncTUA14qQKvrgldtNwZr6v/IGj8VT6G5Lx3U9mS7Nc/yHql2SWYNWu+wcDXe Lvh6Jqk5zqbS1ICYn3aLam5yJykmXaqQ9Xbh7TgRaqXzxX0SAibQkCLuLdgaqRGS mg== -----END CERTIFICATE-----Generated at Wed Nov 4 05:35:50 2026 by rpki-client