$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1.cer File: bde5c818-5173-403b-85bf-e2a79bcac9e1.cer (raw, json) Hash identifier: pmn0J/q20kcDtvMKyjDVCMcqlmYcwK3yrn5OFgpDr7c= Subject key identifier: 9D:81:6B:60:27:EF:FC:86:11:2B:8C:3A:93:23:76:B1:5B:D3:71:07 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F908DA4AB08E84281E4822240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/bde5c818-5173-403b-85bf-e2a79bcac9e1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Oct 2026 12:17:15 +0000 Certificate not after: Mon 22 Jan 2029 13:17:15 +0000 Subordinate resources: AS: 403028 IP: 23.166.4.0/24 IP: 2602:f2bd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:8d:a4:ab:08:e8:42:81:e4:82:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 20 12:17:15 2026 GMT Not After : Jan 22 13:17:15 2029 GMT Subject: CN=bde5c818-5173-403b-85bf-e2a79bcac9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:51:d1:7e:5e:a5:17:c5:a8:a6:ca:51:9b: c7:92:c1:79:5f:2c:2e:14:e8:c8:66:77:b1:a1:65: c8:d4:06:c5:49:c1:d7:c1:99:16:63:c3:82:bc:85: ef:0d:27:dd:84:87:7b:c1:a3:93:42:84:30:3f:59: 65:b5:57:d8:f9:e6:0a:71:ec:09:db:20:b9:db:91: f7:c9:06:4c:ae:a0:a7:e4:19:75:1b:54:85:17:ea: 1a:cf:95:b0:ca:4c:53:e2:5e:d8:2e:2b:e2:ab:df: 08:14:05:b8:34:dd:f6:d0:cf:02:7f:8c:4e:81:fa: 60:7f:2a:c5:75:6e:f2:15:0c:df:78:84:c8:96:af: f2:6c:73:51:f9:10:e9:cc:ef:6e:ee:82:7e:8b:bc: c8:c9:5a:0d:42:11:0f:d7:41:65:70:4e:0d:8d:f6: 8a:44:2b:1d:c3:99:89:db:4c:d2:8e:5a:db:0b:21: 82:dd:21:3a:6a:76:24:93:5e:de:33:72:25:dc:a6: 95:95:05:d5:3b:ee:97:5e:01:3a:00:d6:8a:ff:ba: 27:e6:33:6e:04:f8:77:20:f8:4f:27:ec:00:53:52: 1a:f5:d4:c2:c5:08:18:71:c9:d8:f1:e7:92:bf:32: 3e:46:05:fe:87:20:02:f0:89:38:8d:36:df:67:22: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:6B:60:27:EF:FC:86:11:2B:8C:3A:93:23:76:B1:5B:D3:71:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/bde5c818-5173-403b-85bf-e2a79bcac9e1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.166.4.0/24 IPv6: 2602:f2bd::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403028 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d7:07:4c:85:99:51:e6:1b:02:a6:72:91:87:06:c3:fa:5c: 34:1b:d2:3c:90:c3:dd:60:67:8a:b2:d9:1a:97:04:82:2c:83: ff:1d:74:50:13:de:5b:03:9f:9c:fc:1f:25:ad:be:24:61:4a: a6:8e:b8:9e:df:19:b2:8e:51:01:e4:14:c4:95:ec:bf:88:4b: 77:e0:68:52:25:b2:45:78:17:e7:7a:6f:e0:52:ee:ce:e5:da: 74:75:c2:47:0c:f8:40:ac:ae:ce:7b:0a:06:99:8f:ab:5a:81: 93:1b:c4:72:b9:de:9b:df:db:81:a8:2c:3f:c5:47:c6:95:ed: 8e:56:0e:34:6b:a7:0d:b3:bc:68:d7:43:5a:91:ac:bb:91:c0: 2b:d9:22:9e:78:02:e9:c9:2a:c6:d9:82:11:9b:ae:66:f5:a7: f0:d2:fd:4e:4f:24:7d:1c:75:16:9d:dc:f9:98:3c:35:37:54: 92:a9:71:ce:16:75:2a:89:78:76:a2:a0:0b:bd:50:ca:0b:b1: dd:72:b6:cb:fe:6c:7f:5a:e6:ac:3d:1d:82:96:8d:7e:19:47: df:94:24:a6:19:9d:71:af:4d:9c:40:88:05:9b:d1:35:e8:8b: fa:e4:48:76:9a:19:17:aa:72:60:b2:ba:0f:9a:25:32:e2:6a: f8:5e:a7:c0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+QjaSrCOhCgeSCIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMDEyMTcxNVoXDTI5MDEyMjEzMTcxNVowLzEtMCsGA1UEAxMk YmRlNWM4MTgtNTE3My00MDNiLTg1YmYtZTJhNzliY2FjOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiVR0X5epRfFqKbKUZvHksF5XywuFOjIZnex oWXI1AbFScHXwZkWY8OCvIXvDSfdhId7waOTQoQwP1lltVfY+eYKcewJ2yC525H3 yQZMrqCn5Bl1G1SFF+oaz5WwykxT4l7YLiviq98IFAW4NN320M8Cf4xOgfpgfyrF dW7yFQzfeITIlq/ybHNR+RDpzO9u7oJ+i7zIyVoNQhEP10FlcE4NjfaKRCsdw5mJ 20zSjlrbCyGC3SE6anYkk17eM3Il3KaVlQXVO+6XXgE6ANaK/7on5jNuBPh3IPhP J+wAU1Ia9dTCxQgYccnY8eeSvzI+RgX+hyAC8Ik4jTbfZyKiJwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJ2Ba2An7/yGESuMOpMjdrFb03EHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i ZGU1YzgxOC01MTczLTQwM2ItODViZi1lMmE3OWJjYWM5ZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JkZTVjODE4LTUxNzMtNDAzYi04 NWJmLWUyYTc5YmNhYzllMS9iZGU1YzgxOC01MTczLTQwM2ItODViZi1lMmE3OWJj YWM5ZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpgQwDgQCAAIwCAMGACYC8r0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmVDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe1wdMhZlR5hsCpnKRhwbD+lw0 G9I8kMPdYGeKstkalwSCLIP/HXRQE95bA5+c/B8lrb4kYUqmjrie3xmyjlEB5BTE ley/iEt34GhSJbJFeBfnem/gUu7O5dp0dcJHDPhArK7OewoGmY+rWoGTG8Ryud6b 39uBqCw/xUfGle2OVg40a6cNs7xo10Nakay7kcAr2SKeeALpySrG2YIRm65m9afw 0v1OTyR9HHUWndz5mDw1N1SSqXHOFnUqiXh2oqALvVDKC7HdcrbL/mx/WuasPR2C lo1+GUfflCSmGZ1xr02cQIgFm9E16Iv65Eh2mhkXqnJgsroPmiUy4mr4XqfA -----END CERTIFICATE-----Generated at Mon Nov 2 22:26:38 2026 by rpki-client