$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4207d4c-a693-4e4d-a48b-d8d3b341d089.cer File: c4207d4c-a693-4e4d-a48b-d8d3b341d089.cer (raw, json) Hash identifier: 2/py1kWlwNGnTRhX8lu4aU8dg0XEaYjIUOt8xaZTrhY= Subject key identifier: 75:87:6E:FD:10:70:E1:BB:C5:F2:3A:14:4E:7F:FF:17:CD:F5:72:24 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5AF27E79DFB4F5492F327C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4207d4c-a693-4e4d-a48b-d8d3b341d089/c4207d4c-a693-4e4d-a48b-d8d3b341d089.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4207d4c-a693-4e4d-a48b-d8d3b341d089/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Oct 2026 07:26:48 +0000 Certificate not after: Wed 03 Jan 2029 08:26:48 +0000 Subordinate resources: IP: 63.133.220.0/22 IP: 167.253.140.0/22 IP: 2606:88c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:f2:7e:79:df:b4:f5:49:2f:32:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 1 07:26:48 2026 GMT Not After : Jan 3 08:26:48 2029 GMT Subject: CN=c4207d4c-a693-4e4d-a48b-d8d3b341d089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:79:f9:e0:61:87:1b:c0:d2:a5:6f:34:c4: 09:0c:db:6d:a4:86:81:b9:99:33:c2:6c:56:98:62: 51:d9:40:58:8f:20:81:d2:4c:51:27:fe:87:99:08: 6b:c4:97:2f:ed:9f:c5:db:06:c4:2a:e4:b5:f7:92: ad:cb:4e:bf:02:81:ec:86:d4:a2:e1:8b:47:35:3b: da:81:21:11:a0:06:ca:5c:4c:47:d6:05:60:33:b7: 5a:de:ff:aa:9a:1d:fa:09:e3:56:02:6f:c6:6b:ed: 5a:3c:ac:d3:cf:8c:31:d5:78:4e:69:44:27:9f:68: 8b:44:38:73:a7:ad:f0:75:13:bb:11:7d:10:92:58: df:d3:0c:b8:32:c8:3b:d7:11:ae:39:45:c5:84:35: f7:66:78:53:c6:76:6c:1f:93:89:ae:29:2e:71:7b: af:6d:1d:fa:23:ca:2d:10:54:ac:f0:c7:33:03:79: fc:d9:69:04:8c:d2:cc:44:bb:4a:35:6c:21:52:1a: 66:83:9a:90:76:23:7f:4e:2e:f4:fb:1d:36:23:ef: 70:fc:cd:84:f5:c9:80:40:88:0c:51:ef:e9:6e:6d: 0b:5e:8b:54:70:2d:af:63:4d:95:08:6f:1c:8b:bf: 56:6a:ab:1e:40:ad:bc:cd:f9:f2:46:25:f7:09:3b: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:6E:FD:10:70:E1:BB:C5:F2:3A:14:4E:7F:FF:17:CD:F5:72:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4207d4c-a693-4e4d-a48b-d8d3b341d089/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c4207d4c-a693-4e4d-a48b-d8d3b341d089/c4207d4c-a693-4e4d-a48b-d8d3b341d089.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 63.133.220.0/22 167.253.140.0/22 IPv6: 2606:88c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:58:94:8f:81:13:4b:62:24:5a:9d:9c:82:0b:65:e4:0b:82: f4:21:f1:90:bf:e1:d6:89:d2:b7:9c:36:da:c4:b4:24:69:90: a4:a8:7e:17:c3:fb:13:4e:df:d1:ab:07:be:b1:64:d6:da:a1: e6:8e:03:59:f3:ec:e9:55:17:db:c3:bb:a0:14:62:a5:17:fd: 65:83:cb:c5:6b:ee:9b:bf:74:09:6f:3b:5d:c2:9a:8d:68:b8: b2:06:37:09:a8:10:5c:e9:92:a0:0b:95:3b:f3:b7:28:1e:11: 5d:c9:fc:e0:ce:66:8e:db:0d:20:60:a5:5a:90:27:be:6d:75: df:e6:0f:f6:d1:3d:30:57:38:fc:89:f0:9d:52:56:e6:44:2e: 69:6f:1e:9b:a9:2a:e8:5e:6f:db:59:d5:9f:73:ec:7a:d1:a6: 91:a1:1c:0a:59:36:cf:44:86:61:fd:00:a1:9a:13:8b:07:5f: 7e:1f:54:bd:ff:b2:36:ff:59:76:2d:21:45:cd:92:3c:86:37: 0f:ec:1d:e0:92:a2:5f:8a:99:5e:c7:a8:22:77:06:de:e1:c4: 57:b6:27:4f:6b:f9:cd:b5:fc:0a:31:5d:78:10:b6:04:07:7e: f1:b4:51:94:d5:cd:8d:36:09:8b:7d:59:ac:14:2b:12:49:35: ea:f7:af:2f -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWE9a8n5537T1SS8yfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMTA3MjY0OFoXDTI5MDEwMzA4MjY0OFowLzEtMCsGA1UEAxMk YzQyMDdkNGMtYTY5My00ZTRkLWE0OGItZDhkM2IzNDFkMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFV5+eBhhxvA0qVvNMQJDNttpIaBuZkzwmxW mGJR2UBYjyCB0kxRJ/6HmQhrxJcv7Z/F2wbEKuS195Kty06/AoHshtSi4YtHNTva gSERoAbKXExH1gVgM7da3v+qmh36CeNWAm/Ga+1aPKzTz4wx1XhOaUQnn2iLRDhz p63wdRO7EX0Qkljf0wy4Msg71xGuOUXFhDX3ZnhTxnZsH5OJrikucXuvbR36I8ot EFSs8MczA3n82WkEjNLMRLtKNWwhUhpmg5qQdiN/Ti70+x02I+9w/M2E9cmAQIgM Ue/pbm0LXotUcC2vY02VCG8ci79WaqseQK28zfnyRiX3CTuCeQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFHWHbv0QcOG7xfI6FE5//xfN9XIkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j NDIwN2Q0Yy1hNjkzLTRlNGQtYTQ4Yi1kOGQzYjM0MWQwODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M0MjA3ZDRjLWE2OTMtNGU0ZC1h NDhiLWQ4ZDNiMzQxZDA4OS9jNDIwN2Q0Yy1hNjkzLTRlNGQtYTQ4Yi1kOGQzYjM0 MWQwODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAI/hdwDBAKn/YwwDQQCAAIwBwMFACYGiMAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARFiUj4ETS2IkWp2cggtl5AuC9CHxkL/h1onSt5w22sS0JGmQpKh+F8P7 E07f0asHvrFk1tqh5o4DWfPs6VUX28O7oBRipRf9ZYPLxWvum790CW87XcKajWi4 sgY3CagQXOmSoAuVO/O3KB4RXcn84M5mjtsNIGClWpAnvm113+YP9tE9MFc4/Inw nVJW5kQuaW8em6kq6F5v21nVn3PsetGmkaEcClk2z0SGYf0AoZoTiwdffh9Uvf+y Nv9Zdi0hRc2SPIY3D+wd4JKiX4qZXseoIncG3uHEV7YnT2v5zbX8CjFdeBC2BAd+ 8bRRlNXNjTYJi31ZrBQrEkk16vevLw== -----END CERTIFICATE-----Generated at Wed Oct 14 06:44:18 2026 by rpki-client