$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bbd3a073-3d6c-4e8c-bb23-966cf2b9888c.cer File: bbd3a073-3d6c-4e8c-bb23-966cf2b9888c.cer (raw, json) Hash identifier: Vx8lttklN+VUeuQPWCD+wmQtAH7btnGVFdyhrqthJMY= Subject key identifier: 7B:78:B0:11:4C:E0:F7:67:36:0C:B3:60:EF:E5:29:F3:57:9F:C8:7B Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7E1A2B4CDF4207DB497D6800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bbd3a073-3d6c-4e8c-bb23-966cf2b9888c/bbd3a073-3d6c-4e8c-bb23-966cf2b9888c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bbd3a073-3d6c-4e8c-bb23-966cf2b9888c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 21:40:02 +0000 Certificate not after: Mon 15 Jan 2029 22:40:02 +0000 Subordinate resources: AS: 11203 IP: 192.0.8.0/21 IP: 192.209.0.0/24 IP: 2606:b280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:1a:2b:4c:df:42:07:db:49:7d:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 13 21:40:02 2026 GMT Not After : Jan 15 22:40:02 2029 GMT Subject: CN=bbd3a073-3d6c-4e8c-bb23-966cf2b9888c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:71:50:e8:e1:d5:a5:71:9b:7f:f5:a9:d8: eb:90:f7:4b:df:2e:2f:f9:c7:12:d8:d3:54:6e:75: 31:17:1d:6c:1c:5e:91:21:54:db:db:09:92:49:15: be:9e:2d:14:8a:bd:2f:50:95:c0:e8:c7:f1:0a:e8: b3:56:8e:a4:85:94:d0:66:90:77:1c:61:99:0e:12: 5b:28:e6:98:bb:59:32:a1:ee:be:a9:30:5d:21:e4: ec:f1:85:dd:b5:97:81:77:66:95:d4:c7:5b:10:c3: e7:be:ba:f9:df:71:f0:ea:8a:1f:5b:48:dc:4c:9c: 99:4e:06:2a:c2:ec:51:c9:d9:8f:df:4b:c4:b1:91: 2b:f6:31:2e:58:93:4c:e9:a7:57:9c:92:38:77:17: ae:78:22:92:73:96:d0:31:03:ae:2b:9d:85:cd:72: b8:8e:26:20:9d:a8:42:a8:a7:3f:3f:81:c0:f9:db: 7b:9b:6a:a1:d8:e3:9f:f9:f0:9e:bb:ef:a1:1d:84: 97:a1:1d:94:5e:9e:54:c1:c9:ab:91:a9:97:0c:48: 36:d9:f7:34:3c:bc:0c:2a:a8:bd:0e:58:07:f4:cb: 79:4d:73:3f:99:df:73:6f:5a:de:da:df:6c:29:6e: 75:7f:96:b7:05:41:0a:1d:a5:08:47:f2:1e:99:4e: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:78:B0:11:4C:E0:F7:67:36:0C:B3:60:EF:E5:29:F3:57:9F:C8:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bbd3a073-3d6c-4e8c-bb23-966cf2b9888c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bbd3a073-3d6c-4e8c-bb23-966cf2b9888c/bbd3a073-3d6c-4e8c-bb23-966cf2b9888c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.0.8.0/21 192.209.0.0/24 IPv6: 2606:b280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11203 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3e:e4:7b:9f:39:29:c0:3d:1e:2e:c9:de:ec:a0:07:41:c5: 5a:d0:7e:6c:9d:48:5f:19:c5:17:af:d6:5d:18:d3:ce:b3:7a: 84:20:49:52:44:9f:f9:4f:72:dd:b6:42:2a:eb:44:2f:08:36: ad:f1:f6:1d:2b:d7:90:b6:f6:89:4a:b7:3e:b9:85:08:35:56: 3a:b1:8d:d2:e4:4e:0b:dc:63:84:b4:eb:bf:61:d8:75:90:86: d4:e2:b9:c2:88:ea:e4:b6:32:e1:c8:c5:e5:b1:21:09:25:15: 3c:3c:be:44:db:ee:3d:5c:ee:2f:13:7e:6c:61:61:35:f9:1c: 2f:38:14:30:6d:c8:0e:b5:13:ea:f6:8c:a0:12:60:a4:5a:c6: b3:58:59:b2:22:72:9a:17:a5:ef:84:72:4e:0d:cd:89:e3:4f: 79:5b:94:18:b4:1e:6a:1c:60:23:ae:f6:c8:e3:97:a4:92:5b: c8:45:71:ac:f9:79:3a:f6:89:3f:64:d2:54:35:e3:7b:af:17: b9:38:40:dc:85:2d:07:47:0d:0a:c4:c9:d4:4b:ac:cb:10:78: 11:16:85:55:77:96:d2:ae:7f:b7:58:27:36:04:2d:2b:2b:83: ed:26:6d:b5:99:4e:c5:60:65:67:6f:09:6c:c2:4a:eb:58:01: 55:a5:99:db -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE9+GitM30IH20l9aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMzIxNDAwMloXDTI5MDExNTIyNDAwMlowLzEtMCsGA1UEAxMk YmJkM2EwNzMtM2Q2Yy00ZThjLWJiMjMtOTY2Y2YyYjk4ODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbtxUOjh1aVxm3/1qdjrkPdL3y4v+ccS2NNU bnUxFx1sHF6RIVTb2wmSSRW+ni0Uir0vUJXA6MfxCuizVo6khZTQZpB3HGGZDhJb KOaYu1kyoe6+qTBdIeTs8YXdtZeBd2aV1MdbEMPnvrr533Hw6oofW0jcTJyZTgYq wuxRydmP30vEsZEr9jEuWJNM6adXnJI4dxeueCKSc5bQMQOuK52FzXK4jiYgnahC qKc/P4HA+dt7m2qh2OOf+fCeu++hHYSXoR2UXp5UwcmrkamXDEg22fc0PLwMKqi9 DlgH9Mt5TXM/md9zb1re2t9sKW51f5a3BUEKHaUIR/IemU6XcwIDAQABo4IELzCC BCswHQYDVR0OBBYEFHt4sBFM4PdnNgyzYO/lKfNXn8h7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i YmQzYTA3My0zZDZjLTRlOGMtYmIyMy05NjZjZjJiOTg4OGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JiZDNhMDczLTNkNmMtNGU4Yy1i YjIzLTk2NmNmMmI5ODg4Yy9iYmQzYTA3My0zZDZjLTRlOGMtYmIyMy05NjZjZjJi OTg4OGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPAAAgDBADA0QAwDQQCAAIwBwMFACYGsoAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICK8MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATj7ke585KcA9Hi7J3uyg B0HFWtB+bJ1IXxnFF6/WXRjTzrN6hCBJUkSf+U9y3bZCKutELwg2rfH2HSvXkLb2 iUq3PrmFCDVWOrGN0uROC9xjhLTrv2HYdZCG1OK5wojq5LYy4cjF5bEhCSUVPDy+ RNvuPVzuLxN+bGFhNfkcLzgUMG3IDrUT6vaMoBJgpFrGs1hZsiJymhel74RyTg3N ieNPeVuUGLQeahxgI672yOOXpJJbyEVxrPl5OvaJP2TSVDXje68XuThA3IUtB0cN CsTJ1EusyxB4ERaFVXeW0q5/t1gnNgQtKyuD7SZttZlOxWBlZ28JbMJK61gBVaWZ 2w== -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:23 2026 by rpki-client