$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer File: bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.cer (raw, json) Hash identifier: HtKCRSLvp5/NGxFOhKCH4n+KGmv/jqkNgr5ofYBLfO8= Subject key identifier: 40:01:08:50:32:B9:74:59:61:67:2F:83:02:19:B8:A0:F0:D2:42:E9 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F970DE5017882AE081BD76982 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Oct 2026 20:10:30 +0000 Certificate not after: Wed 24 Jan 2029 21:10:30 +0000 Subordinate resources: AS: 13478 IP: 66.242.52.0/22 IP: 2602:f40c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:0d:e5:01:78:82:ae:08:1b:d7:69:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 22 20:10:30 2026 GMT Not After : Jan 24 21:10:30 2029 GMT Subject: CN=bf9f591a-d6f6-4cc2-bc84-cfca996b52ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:7e:3e:4b:aa:27:78:e6:f1:7d:e7:05:bd: 18:81:04:65:4f:b6:b8:00:b0:c6:42:b8:ad:6a:7f: 49:0c:a1:13:f5:73:a4:17:df:78:cb:c4:f1:c2:d3: 2e:af:0d:00:79:3e:8e:77:35:6f:81:57:a9:a7:2a: c4:5c:1a:9c:fc:6b:a3:fa:a5:06:5c:da:4b:b0:d1: 8d:de:cb:db:aa:dc:28:1c:6e:07:e0:b0:16:2b:76: 72:14:5d:e7:59:aa:0e:60:5a:8c:b5:90:78:9b:03: ca:13:01:f4:bb:74:49:47:2c:c5:80:ed:4e:c7:a7: 8b:99:13:a7:79:2f:fb:70:e8:54:70:45:22:04:d2: a0:f8:f2:2e:a3:55:39:29:df:7f:e9:0c:58:49:6b: 3b:bc:63:e9:f2:71:2e:50:31:56:a0:db:ab:b6:90: dd:81:dc:9f:91:58:40:e9:a0:1a:09:4a:6d:ab:28: f8:3b:53:9e:6e:96:27:31:54:9e:b1:ac:45:76:f0: 48:24:77:11:50:06:8c:b8:a4:c2:1c:ac:ea:43:39: ca:46:6d:56:7f:e6:7d:83:b8:82:61:eb:80:3f:b3: c5:d1:3c:10:b4:a0:cf:9b:18:0a:c9:bd:39:07:54: 38:eb:6b:f8:fc:3a:5f:8e:4a:a5:06:00:8e:2c:a0: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:01:08:50:32:B9:74:59:61:67:2F:83:02:19:B8:A0:F0:D2:42:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee/bf9f591a-d6f6-4cc2-bc84-cfca996b52ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 66.242.52.0/22 IPv6: 2602:f40c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13478 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:62:78:6d:ec:3e:e5:19:b4:e8:32:98:b9:42:32:b0:7f:9c: d6:25:9d:92:29:0e:3c:ce:87:94:2a:0c:82:77:b6:96:1f:52: c2:77:46:a3:92:0a:20:db:0d:8b:15:ad:6c:3c:94:37:26:35: 54:87:4d:d1:e1:3e:39:32:54:4e:7b:62:ad:4e:0c:d1:df:cd: 0a:3d:d7:93:14:5b:7e:ac:db:c3:e9:ae:90:3d:d8:dc:68:e7: 47:1b:3d:53:6e:ad:15:1f:e2:6f:82:da:2f:45:dc:f5:95:62: ba:39:52:d1:6f:72:dd:89:55:e7:a9:ea:57:d4:58:7a:ea:32: 81:61:24:f7:45:ff:92:fe:bf:77:77:75:ba:d7:cc:ee:54:84: c1:da:6a:5d:05:e6:c5:e4:16:db:24:47:70:c4:50:1b:7d:31: 5d:e9:86:40:cd:b7:a8:d0:27:6a:96:69:3f:61:84:e0:da:cc: cc:8b:18:0f:cd:6e:e7:d4:6a:2d:b9:f5:9b:89:f2:b4:bc:ad: f3:59:61:11:e5:80:e3:81:93:05:bc:f7:72:0d:e9:bd:bd:c5: 5f:be:47:6e:83:fd:6a:59:e9:3a:d4:a9:6b:46:e9:25:82:a0: 30:66:22:b3:ef:a5:86:45:45:96:f0:9b:53:8e:59:d3:27:9b: 0d:43:1a:3e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE+XDeUBeIKuCBvXaYIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyMjIwMTAzMFoXDTI5MDEyNDIxMTAzMFowLzEtMCsGA1UEAxMk YmY5ZjU5MWEtZDZmNi00Y2MyLWJjODQtY2ZjYTk5NmI1MmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpN+PkuqJ3jm8X3nBb0YgQRlT7a4ALDGQrit an9JDKET9XOkF994y8TxwtMurw0AeT6OdzVvgVeppyrEXBqc/Guj+qUGXNpLsNGN 3svbqtwoHG4H4LAWK3ZyFF3nWaoOYFqMtZB4mwPKEwH0u3RJRyzFgO1Ox6eLmROn eS/7cOhUcEUiBNKg+PIuo1U5Kd9/6QxYSWs7vGPp8nEuUDFWoNurtpDdgdyfkVhA 6aAaCUptqyj4O1OebpYnMVSesaxFdvBIJHcRUAaMuKTCHKzqQznKRm1Wf+Z9g7iC YeuAP7PF0TwQtKDPmxgKyb05B1Q462v4/DpfjkqlBgCOLKDAPQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEABCFAyuXRZYWcvgwIZuKDw0kLpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i ZjlmNTkxYS1kNmY2LTRjYzItYmM4NC1jZmNhOTk2YjUyZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JmOWY1OTFhLWQ2ZjYtNGNjMi1i Yzg0LWNmY2E5OTZiNTJlZS9iZjlmNTkxYS1kNmY2LTRjYzItYmM4NC1jZmNhOTk2 YjUyZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJC8jQwDgQCAAIwCAMGACYC9AwAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjSmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHxieG3sPuUZtOgymLlCMrB/nNYl nZIpDjzOh5QqDIJ3tpYfUsJ3RqOSCiDbDYsVrWw8lDcmNVSHTdHhPjkyVE57Yq1O DNHfzQo915MUW36s28PprpA92Nxo50cbPVNurRUf4m+C2i9F3PWVYro5UtFvct2J Veep6lfUWHrqMoFhJPdF/5L+v3d3dbrXzO5UhMHaal0F5sXkFtskR3DEUBt9MV3p hkDNt6jQJ2qWaT9hhODazMyLGA/NbufUai259ZuJ8rS8rfNZYRHlgOOBkwW893IN 6b29xV++R26D/WpZ6TrUqWtG6SWCoDBmIrPvpYZFRZbwm1OOWdMnmw1DGj4= -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:31 2026 by rpki-client