$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer File: be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer (raw, json) Hash identifier: gKICrKwldjqIfSKrXbZ1UD9ukU8+cUboAfW73wZ4aiA= Subject key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA294A8480322981589498B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 23:15:56 +0000 Certificate not after: Mon 29 Jan 2029 00:15:56 +0000 Subordinate resources: AS: 13860 IP: 148.159.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:94:a8:48:03:22:98:15:89:49:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 26 23:15:56 2026 GMT Not After : Jan 29 00:15:56 2029 GMT Subject: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:b7:85:a4:90:aa:7a:e1:44:8e:95:85:4e: 5b:a2:68:0c:f9:6b:35:8c:7b:0a:a1:a4:c8:0e:8a: c1:f3:d8:e5:5c:e7:2d:94:6a:34:93:da:08:30:be: e4:dc:dc:f0:49:61:3a:8a:19:bc:d1:a1:ee:83:80: d1:73:82:50:1c:76:6d:53:54:1f:e3:5b:42:1e:1a: 68:24:b2:5d:04:88:34:c0:ee:7e:a9:64:4d:da:0e: 74:af:2c:97:7f:fd:15:02:85:51:76:40:f0:f4:a3: 38:61:d8:72:5a:50:4f:f8:04:be:56:68:00:3b:d0: aa:88:46:52:ff:31:8f:0d:28:1c:df:2e:9a:9c:c5: 2b:c9:37:89:06:8b:6f:e2:9c:2c:26:e1:15:fa:f1: bd:a0:c7:65:28:bf:4a:cd:91:09:e1:c2:8c:6a:c7: 1d:82:53:c9:26:d0:dc:fa:0f:71:35:44:d7:91:8e: a2:d8:5b:ad:25:c3:72:aa:ce:a3:2c:d1:18:5f:8a: a5:d2:22:f7:a5:52:8f:de:3f:43:64:76:d8:76:dd: 9d:8e:70:35:c4:ca:2d:b7:e2:0d:cf:fc:d4:c1:1d: c7:17:86:2e:0d:db:9e:00:40:c0:71:54:96:a8:9e: 0b:3e:6e:59:6e:20:c8:dc:63:ff:16:ab:d9:11:6e: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 148.159.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bf:47:83:1a:c9:7e:48:0f:4c:51:a0:bf:c4:29:c8:e1:df: e6:89:fe:6f:5b:cc:7c:13:b0:1c:ce:dd:a7:8a:08:16:85:51: 8a:b2:39:ef:3b:a5:f8:b8:bb:af:e5:55:ff:d1:bb:1e:62:70: f3:8b:3e:8d:cd:26:f8:d0:e5:74:65:38:2c:66:b4:97:85:c0: bb:cf:d4:88:25:38:a9:8f:ec:40:ce:96:47:0c:93:74:09:df: 6b:1b:e8:28:95:61:30:77:81:04:e3:f0:f4:3b:dd:2f:94:7a: e5:91:70:56:6a:6d:86:f1:4a:fa:98:0d:71:fa:10:29:02:45: 6c:b9:0f:e3:79:26:61:92:c9:37:39:9d:f3:81:b2:9e:2f:74: 1c:80:4a:1c:de:46:53:8f:f8:ca:80:93:e9:c0:79:44:02:dc: 27:6b:62:63:fd:70:7d:3e:ad:f8:a9:1e:ad:6b:6f:23:03:79: d4:27:5b:17:58:04:5b:d7:b9:cf:46:47:c3:cf:da:79:51:b6: e8:84:0f:e6:cf:f4:6d:6b:9f:eb:83:5e:64:37:e0:19:d6:b9: 2a:d6:d2:ac:ac:40:f4:09:7c:05:4c:59:fe:4b:1e:99:85:35: 07:aa:45:1f:b7:40:ed:6f:5f:43:4b:73:28:a0:10:02:8e:17: 99:dc:6b:9a -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE+ilKhIAyKYFYlJiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNjIzMTU1NloXDTI5MDEyOTAwMTU1NlowLzEtMCsGA1UEAxMk YmU0MmNjN2ItMWZhNC00YmQ1LWFiZjYtNTI1Zjk1YjcxMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibO3haSQqnrhRI6VhU5bomgM+Ws1jHsKoaTI DorB89jlXOctlGo0k9oIML7k3NzwSWE6ihm80aHug4DRc4JQHHZtU1Qf41tCHhpo JLJdBIg0wO5+qWRN2g50ryyXf/0VAoVRdkDw9KM4YdhyWlBP+AS+VmgAO9CqiEZS /zGPDSgc3y6anMUryTeJBotv4pwsJuEV+vG9oMdlKL9KzZEJ4cKMascdglPJJtDc +g9xNUTXkY6i2FutJcNyqs6jLNEYX4ql0iL3pVKP3j9DZHbYdt2djnA1xMott+IN z/zUwR3HF4YuDdueAEDAcVSWqJ4LPm5ZbiDI3GP/FqvZEW7n1QIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFP2tgvLwiPDZMQerQgItoXAAOFQ0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i ZTQyY2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVmOTViNzExYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JlNDJjYzdiLTFmYTQtNGJkNS1h YmY2LTUyNWY5NWI3MTFhYS9iZTQyY2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVmOTVi NzExYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCUnzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI2 JDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBSv0eDGsl+SA9MUaC/xCnI4d/mif5vW8x8E7Aczt2niggWhVGK sjnvO6X4uLuv5VX/0bseYnDziz6NzSb40OV0ZTgsZrSXhcC7z9SIJTipj+xAzpZH DJN0Cd9rG+golWEwd4EE4/D0O90vlHrlkXBWam2G8Ur6mA1x+hApAkVsuQ/jeSZh ksk3OZ3zgbKeL3QcgEoc3kZTj/jKgJPpwHlEAtwna2Jj/XB9Pq34qR6ta28jA3nU J1sXWARb17nPRkfDz9p5UbbohA/mz/Rta5/rg15kN+AZ1rkq1tKsrED0CXwFTFn+ Sx6ZhTUHqkUft0Dtb19DS3MooBACjheZ3Gua -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:18 2026 by rpki-client