$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e.cer File: c40ee22e-af38-43b0-a20f-e09c8ba7884e.cer (raw, json) Hash identifier: el+c3UXGdB1ob/5/Y1yymoK2wkP8iz472u7CkJN/F+4= Subject key identifier: 3A:02:96:7F:58:1F:49:5D:41:DB:6C:D1:E7:0D:0D:67:19:EC:FA:FB Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6E682CCE73C34B2A90719180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/c40ee22e-af38-43b0-a20f-e09c8ba7884e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 06:44:16 +0000 Certificate not after: Wed 10 Jan 2029 07:44:16 +0000 Subordinate resources: AS: 402508 IP: 23.157.228.0/24 IP: 2602:f3d3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:68:2c:ce:73:c3:4b:2a:90:71:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 06:44:16 2026 GMT Not After : Jan 10 07:44:16 2029 GMT Subject: CN=c40ee22e-af38-43b0-a20f-e09c8ba7884e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:cb:33:3f:03:ea:71:5b:72:43:7a:c2:da: a7:e3:96:12:6c:c3:ea:2a:e7:fb:40:54:e1:6d:9c: b5:9d:b3:63:1c:77:4d:94:6e:09:f0:a2:b9:55:84: b3:03:72:87:9d:df:88:ed:ee:c8:c2:c2:6a:39:c9: d3:97:da:d5:f5:c7:64:58:71:fb:d1:c0:93:d4:32: a4:4b:7c:8e:0d:1a:31:c5:5e:d4:8e:28:75:53:0d: 0d:d4:22:8c:80:da:bb:23:d4:88:ce:6b:fd:c2:27: 6d:42:5b:52:d5:91:33:ff:8d:9d:68:f7:75:05:18: 3f:43:0a:ae:e0:b8:48:59:b0:fd:2d:cf:66:3b:42: 65:6e:a1:f4:62:84:dd:90:8d:55:a6:41:94:9f:ad: b1:ab:2b:55:51:6b:44:73:b3:09:ac:33:7a:08:d4: b9:15:8d:8a:b1:41:c2:87:e6:c4:75:1d:09:7f:5e: ad:a6:e0:3e:2d:9e:5a:96:57:79:9e:21:bf:c5:6a: 86:06:e6:19:99:12:cf:05:df:41:3b:43:34:9c:7c: cb:23:46:1a:b9:df:45:65:f3:93:69:ce:49:ac:b7: 3a:fb:90:3b:1d:8b:0b:94:f4:c5:0b:4f:ab:35:48: ab:d1:ce:95:af:85:4d:0a:82:db:59:b3:95:fb:61: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:96:7F:58:1F:49:5D:41:DB:6C:D1:E7:0D:0D:67:19:EC:FA:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c40ee22e-af38-43b0-a20f-e09c8ba7884e/c40ee22e-af38-43b0-a20f-e09c8ba7884e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.157.228.0/24 IPv6: 2602:f3d3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402508 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:de:95:39:95:12:a3:a9:3d:e6:6c:8e:4c:6d:c9:91:0b:23: e5:1f:0e:16:3c:59:b5:63:e1:eb:86:da:8b:7b:19:34:39:37: e6:4a:19:28:2b:8b:fa:c4:05:61:84:d4:d5:f9:8d:5b:8c:67: 7a:7d:e9:e0:cf:6c:48:50:d4:19:f2:73:fd:46:82:8a:2a:2f: a1:a5:00:82:8a:40:ec:b3:2a:1a:5e:d9:83:a9:31:f1:fa:16: 39:0d:b1:d7:87:73:ac:14:29:55:8e:f4:dc:6f:e2:97:d5:82: 1f:55:63:0e:ee:55:d8:d5:85:00:8a:9d:f8:68:df:1d:a8:c9: ad:16:52:98:59:6b:c5:e0:8e:2d:c5:38:7a:04:e2:5d:46:06: cd:26:a4:f1:14:d4:2c:6b:35:f8:61:2c:b1:ff:77:7a:e9:0f: 4e:34:a2:dd:17:2e:46:c8:61:57:80:99:52:ed:00:a4:ab:69: 0d:81:d2:e9:2d:f0:3a:be:ff:d7:61:1a:88:81:15:33:f6:40: df:62:4f:4a:25:82:fd:75:2c:88:e1:89:0c:f4:1e:17:3b:61: e3:cd:d5:7e:ab:67:e5:18:08:10:73:bd:d9:bc:c5:81:8e:d9: fd:e2:94:79:fd:5d:65:7e:7d:b0:90:e8:61:28:7c:0d:54:d8: ad:61:35:1a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9uaCzOc8NLKpBxkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODA2NDQxNloXDTI5MDExMDA3NDQxNlowLzEtMCsGA1UEAxMk YzQwZWUyMmUtYWYzOC00M2IwLWEyMGYtZTA5YzhiYTc4ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp63LMz8D6nFbckN6wtqn45YSbMPqKuf7QFTh bZy1nbNjHHdNlG4J8KK5VYSzA3KHnd+I7e7IwsJqOcnTl9rV9cdkWHH70cCT1DKk S3yODRoxxV7Ujih1Uw0N1CKMgNq7I9SIzmv9widtQltS1ZEz/42daPd1BRg/Qwqu 4LhIWbD9Lc9mO0JlbqH0YoTdkI1VpkGUn62xqytVUWtEc7MJrDN6CNS5FY2KsUHC h+bEdR0Jf16tpuA+LZ5alld5niG/xWqGBuYZmRLPBd9BO0M0nHzLI0Yaud9FZfOT ac5JrLc6+5A7HYsLlPTFC0+rNUir0c6Vr4VNCoLbWbOV+2EM6QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDoCln9YH0ldQdts0ecNDWcZ7Pr7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j NDBlZTIyZS1hZjM4LTQzYjAtYTIwZi1lMDljOGJhNzg4NGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M0MGVlMjJlLWFmMzgtNDNiMC1h MjBmLWUwOWM4YmE3ODg0ZS9jNDBlZTIyZS1hZjM4LTQzYjAtYTIwZi1lMDljOGJh Nzg4NGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXneQwDgQCAAIwCAMGACYC89MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYkTDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBH3pU5lRKjqT3mbI5MbcmRCyPl Hw4WPFm1Y+HrhtqLexk0OTfmShkoK4v6xAVhhNTV+Y1bjGd6fengz2xIUNQZ8nP9 RoKKKi+hpQCCikDssyoaXtmDqTHx+hY5DbHXh3OsFClVjvTcb+KX1YIfVWMO7lXY 1YUAip34aN8dqMmtFlKYWWvF4I4txTh6BOJdRgbNJqTxFNQsazX4YSyx/3d66Q9O NKLdFy5GyGFXgJlS7QCkq2kNgdLpLfA6vv/XYRqIgRUz9kDfYk9KJYL9dSyI4YkM 9B4XO2HjzdV+q2flGAgQc73ZvMWBjtn94pR5/V1lfn2wkOhhKHwNVNitYTUa -----END CERTIFICATE-----Generated at Sun Oct 11 22:47:32 2026 by rpki-client