$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde2aa3c-5fee-4c48-a41a-e0b913b27955.cer File: bde2aa3c-5fee-4c48-a41a-e0b913b27955.cer (raw, json) Hash identifier: 5TNzrHUfdH4u71KV8l65Tu5u0So/+kicbIFBAoy47wQ= Subject key identifier: F3:E8:10:F7:CE:8B:2C:27:80:B0:5A:F9:6A:90:0D:56:3C:DD:7A:14 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F600791BF71D89DE1632F9980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde2aa3c-5fee-4c48-a41a-e0b913b27955/bde2aa3c-5fee-4c48-a41a-e0b913b27955.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde2aa3c-5fee-4c48-a41a-e0b913b27955/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Oct 2026 03:08:18 +0000 Certificate not after: Fri 05 Jan 2029 04:08:18 +0000 Subordinate resources: AS: 402349 IP: 162.252.32.0/24 IP: 2602:f372::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:60:07:91:bf:71:d8:9d:e1:63:2f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 3 03:08:18 2026 GMT Not After : Jan 5 04:08:18 2029 GMT Subject: CN=bde2aa3c-5fee-4c48-a41a-e0b913b27955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:87:c5:fb:c0:b0:fd:0a:1d:d2:27:5c:5d: 0c:8e:2e:fd:5d:e0:43:ca:a4:de:23:f3:39:ee:b6: 19:a3:c2:a6:21:ae:d4:4c:ae:66:d0:18:77:b0:fb: 32:21:ce:f1:c9:33:7a:26:8e:26:38:71:42:91:17: d8:18:dc:a2:b9:87:78:66:cc:0a:ca:89:95:e3:9d: bd:d8:ef:46:8c:0f:f1:03:da:f4:7b:f2:de:fb:96: e1:e3:fe:39:ef:0f:ef:46:42:87:f8:e3:1c:30:9c: 72:a9:cd:4b:bf:2d:c5:19:7d:bc:f9:62:8c:60:c3: 31:cf:d8:68:84:f0:bb:b0:e2:f7:71:24:d4:a9:8d: b0:f8:9b:68:b7:15:9d:14:c5:62:5e:10:bf:38:a2: 5c:8e:29:48:9f:6a:e2:f9:ce:bf:1c:77:8e:fc:08: 9f:68:37:36:1f:5e:1b:ce:de:23:e9:50:ca:60:74: be:7e:8c:9b:00:3c:1b:2c:ed:1e:0a:aa:91:04:3f: b4:98:2a:3a:13:29:f3:30:09:4b:44:33:00:05:46: 0c:3a:dc:a4:c7:b9:de:22:28:48:f9:63:fd:0a:a0: 39:71:8b:b7:26:8a:3d:54:24:ce:5f:96:32:06:c1: c6:0e:9a:72:90:e4:7d:5a:78:74:7e:92:7a:15:ea: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:10:F7:CE:8B:2C:27:80:B0:5A:F9:6A:90:0D:56:3C:DD:7A:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde2aa3c-5fee-4c48-a41a-e0b913b27955/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde2aa3c-5fee-4c48-a41a-e0b913b27955/bde2aa3c-5fee-4c48-a41a-e0b913b27955.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 162.252.32.0/24 IPv6: 2602:f372::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402349 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a1:86:cf:be:a9:bd:c0:ab:f8:3d:5d:db:40:dc:8a:18:82: 29:1e:b6:43:6e:9e:2e:65:ca:8d:f3:a9:dc:53:03:df:b4:3e: 30:83:6d:fb:51:e6:e1:bb:d0:67:90:bd:a6:c0:2f:be:46:fa: e9:b9:94:60:78:85:ab:ca:96:c9:de:91:be:03:0d:20:25:ce: a3:bb:42:b1:41:b4:f6:13:c5:48:52:84:d1:56:08:9c:dd:11: 08:b1:43:ee:2c:22:86:b6:31:48:c0:54:93:28:91:75:20:ff: e1:a1:e6:f6:16:31:88:88:f1:72:5d:52:2a:03:7f:3f:09:5e: 7d:95:e5:c7:1b:43:c5:dd:94:54:28:94:ef:ed:ed:fb:47:c7: 03:43:be:46:ee:e8:52:6c:4e:8c:7c:25:76:9d:ed:a4:a4:ca: b0:a8:9e:98:c2:7e:c7:a3:6b:fb:7f:5f:84:08:d0:c4:93:2b: 49:15:ae:85:3e:f4:52:cd:a8:e2:eb:35:d7:b6:36:c3:1b:29: e9:fd:79:b8:a3:b0:33:a2:bd:fc:21:3a:06:70:12:d1:57:59: f1:ed:12:5a:f0:59:06:3e:59:73:78:18:24:c9:02:5d:2a:7a: 66:a2:71:89:87:d1:92:56:09:a4:ec:30:f7:6a:e5:6a:50:c5: f4:b4:79:61 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9gB5G/cdid4WMvmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMzAzMDgxOFoXDTI5MDEwNTA0MDgxOFowLzEtMCsGA1UEAxMk YmRlMmFhM2MtNWZlZS00YzQ4LWE0MWEtZTBiOTEzYjI3OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCGHxfvAsP0KHdInXF0Mji79XeBDyqTeI/M5 7rYZo8KmIa7UTK5m0Bh3sPsyIc7xyTN6Jo4mOHFCkRfYGNyiuYd4ZswKyomV4529 2O9GjA/xA9r0e/Le+5bh4/457w/vRkKH+OMcMJxyqc1Lvy3FGX28+WKMYMMxz9ho hPC7sOL3cSTUqY2w+JtotxWdFMViXhC/OKJcjilIn2ri+c6/HHeO/AifaDc2H14b zt4j6VDKYHS+foybADwbLO0eCqqRBD+0mCo6EynzMAlLRDMABUYMOtykx7neIihI +WP9CqA5cYu3Joo9VCTOX5YyBsHGDppykOR9Wnh0fpJ6Fepc6wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPPoEPfOiywngLBa+WqQDVY83XoUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i ZGUyYWEzYy01ZmVlLTRjNDgtYTQxYS1lMGI5MTNiMjc5NTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JkZTJhYTNjLTVmZWUtNGM0OC1h NDFhLWUwYjkxM2IyNzk1NS9iZGUyYWEzYy01ZmVlLTRjNDgtYTQxYS1lMGI5MTNi Mjc5NTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACi/CAwDgQCAAIwCAMGACYC83IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjrTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXoYbPvqm9wKv4PV3bQNyKGIIp HrZDbp4uZcqN86ncUwPftD4wg237Uebhu9BnkL2mwC++RvrpuZRgeIWrypbJ3pG+ Aw0gJc6ju0KxQbT2E8VIUoTRVgic3REIsUPuLCKGtjFIwFSTKJF1IP/hoeb2FjGI iPFyXVIqA38/CV59leXHG0PF3ZRUKJTv7e37R8cDQ75G7uhSbE6MfCV2ne2kpMqw qJ6Ywn7Ho2v7f1+ECNDEkytJFa6FPvRSzaji6zXXtjbDGynp/Xm4o7Azor38IToG cBLRV1nx7RJa8FkGPllzeBgkyQJdKnpmonGJh9GSVgmk7DD3auVqUMX0tHlh -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:13 2026 by rpki-client