$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bc4751b5-87f1-4f09-82d6-3a619a4af1d0.cer File: bc4751b5-87f1-4f09-82d6-3a619a4af1d0.cer (raw, json) Hash identifier: 6LTPgSqvu096x0RzHhp4SO5uiXSxb1jt5LaRK4kwQU0= Subject key identifier: 76:45:15:76:17:66:5D:62:F6:73:C9:74:30:7F:AA:4F:80:1B:EC:9A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F747F0367AFB6750F6258E240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bc4751b5-87f1-4f09-82d6-3a619a4af1d0/bc4751b5-87f1-4f09-82d6-3a619a4af1d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bc4751b5-87f1-4f09-82d6-3a619a4af1d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Oct 2026 11:05:08 +0000 Certificate not after: Fri 12 Jan 2029 12:05:08 +0000 Subordinate resources: IP: 199.249.227.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:7f:03:67:af:b6:75:0f:62:58:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 10 11:05:08 2026 GMT Not After : Jan 12 12:05:08 2029 GMT Subject: CN=bc4751b5-87f1-4f09-82d6-3a619a4af1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e4:1a:69:d9:3b:f6:4d:b3:bb:ec:3e:bd:d7: c4:0a:7c:41:fc:8b:20:e8:b7:46:bb:dd:84:f2:cf: df:b8:c6:ef:d3:48:03:d4:58:57:51:eb:76:d7:2a: 58:8d:75:e3:a1:ce:5a:45:17:41:8c:28:6e:cc:c1: 67:f4:e7:09:cc:f8:eb:1f:09:14:66:0e:06:fb:d8: 4d:0d:c9:e8:db:00:1b:36:3b:c4:70:48:0a:14:66: e8:2d:7b:95:d7:6e:17:cd:bf:9a:f5:2a:25:c8:f4: 12:43:f3:9f:33:2c:38:1a:d1:57:c7:83:cf:f4:a3: 72:a4:3c:25:e3:24:8d:17:d6:80:de:e3:65:6f:61: 49:a8:c2:41:6c:d9:2b:14:15:4a:7d:5d:51:a6:9a: 22:a6:ca:3e:f9:01:1f:0e:c5:f1:99:b2:e7:a9:ca: 47:3c:01:42:70:a2:7c:18:25:f4:65:5d:ec:4f:4b: b0:57:19:91:6a:11:40:f9:1e:2c:48:fb:cb:42:e8: 84:0a:33:f6:41:2e:0e:28:22:70:52:15:99:2d:17: a6:8e:c1:cd:e3:3f:d3:e5:2e:8d:bb:8a:9c:00:e0: 4e:f1:3e:f3:4e:ce:f8:fe:58:3c:6b:80:36:0c:8c: c4:4b:33:67:3d:2e:1a:6b:16:46:dd:31:f5:ec:40: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:45:15:76:17:66:5D:62:F6:73:C9:74:30:7F:AA:4F:80:1B:EC:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bc4751b5-87f1-4f09-82d6-3a619a4af1d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bc4751b5-87f1-4f09-82d6-3a619a4af1d0/bc4751b5-87f1-4f09-82d6-3a619a4af1d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.249.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c5:10:a5:1c:0e:b8:77:5e:f4:69:24:06:56:a9:d7:4a:4b: 75:be:3a:0b:30:72:4c:02:8b:bc:62:dd:3b:e9:ed:65:df:c6: b8:ca:40:e8:f7:c7:12:d0:aa:d5:d1:df:01:7a:09:18:00:aa: a1:50:d6:7d:b9:b6:13:41:ac:fb:81:cf:a8:a0:7c:bb:23:d6: 99:5f:2d:31:42:ea:a0:4a:73:34:59:93:7e:e4:90:d0:f2:d7: c9:c9:de:af:a5:9d:df:ca:95:bb:8e:c0:84:c8:a8:15:7a:fa: 12:8d:47:55:f1:35:f6:37:b3:0e:45:b9:4d:0c:33:25:e3:d7: 2c:87:88:3e:27:e8:a8:4c:b0:9e:91:76:57:7b:54:7c:4a:15: 27:d9:a6:4d:0d:bf:26:d6:49:57:78:26:ac:37:75:5f:0a:38: 8b:29:d5:6c:b8:94:c4:2c:10:65:d5:38:a3:78:4c:6e:6d:9f: a8:b9:2b:eb:9b:0f:32:d3:59:2b:6b:28:39:e9:f1:12:3d:88: 89:37:ee:be:b3:24:f2:8a:ba:b4:c6:40:e5:ba:c8:2f:e9:97: 8b:43:45:f2:b8:8f:1f:c7:01:28:a5:7d:0f:15:83:7a:43:0d: 38:85:4c:ef:88:83:d3:57:81:6c:b2:f7:63:6d:35:95:e3:42: 6b:90:31:2a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE90fwNnr7Z1D2JY4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMDExMDUwOFoXDTI5MDExMjEyMDUwOFowLzEtMCsGA1UEAxMk YmM0NzUxYjUtODdmMS00ZjA5LTgyZDYtM2E2MTlhNGFmMWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+Qaadk79k2zu+w+vdfECnxB/Isg6LdGu92E 8s/fuMbv00gD1FhXUet21ypYjXXjoc5aRRdBjChuzMFn9OcJzPjrHwkUZg4G+9hN Dcno2wAbNjvEcEgKFGboLXuV124Xzb+a9SolyPQSQ/OfMyw4GtFXx4PP9KNypDwl 4ySNF9aA3uNlb2FJqMJBbNkrFBVKfV1Rppoipso++QEfDsXxmbLnqcpHPAFCcKJ8 GCX0ZV3sT0uwVxmRahFA+R4sSPvLQuiECjP2QS4OKCJwUhWZLRemjsHN4z/T5S6N u4qcAOBO8T7zTs74/lg8a4A2DIzESzNnPS4aaxZG3TH17EC0fwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHZFFXYXZl1i9nPJdDB/qk+AG+yaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i YzQ3NTFiNS04N2YxLTRmMDktODJkNi0zYTYxOWE0YWYxZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JjNDc1MWI1LTg3ZjEtNGYwOS04 MmQ2LTNhNjE5YTRhZjFkMC9iYzQ3NTFiNS04N2YxLTRmMDktODJkNi0zYTYxOWE0 YWYxZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADH+eMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIMUQpRwOuHde9GkkBlap 10pLdb46CzByTAKLvGLdO+ntZd/GuMpA6PfHEtCq1dHfAXoJGACqoVDWfbm2E0Gs +4HPqKB8uyPWmV8tMULqoEpzNFmTfuSQ0PLXycner6Wd38qVu47AhMioFXr6Eo1H VfE19jezDkW5TQwzJePXLIeIPifoqEywnpF2V3tUfEoVJ9mmTQ2/JtZJV3gmrDd1 Xwo4iynVbLiUxCwQZdU4o3hMbm2fqLkr65sPMtNZK2soOenxEj2IiTfuvrMk8oq6 tMZA5brIL+mXi0NF8riPH8cBKKV9DxWDekMNOIVM74iD01eBbLL3Y201leNCa5Ax Kg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:49 2026 by rpki-client