$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c43d0cd0-8b3f-4cbe-9a25-da800096f5dc.cer File: c43d0cd0-8b3f-4cbe-9a25-da800096f5dc.cer (raw, json) Hash identifier: QFaeTgLeI89OnWHMg/mVRfE1L3TFt5HxNBzEwwPPnFk= Subject key identifier: 90:99:0A:A5:C6:D6:D6:3D:5D:1B:97:12:BB:8E:A7:D6:CE:D8:35:B1 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584FA29635C7677619250C4EE988 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c43d0cd0-8b3f-4cbe-9a25-da800096f5dc/c43d0cd0-8b3f-4cbe-9a25-da800096f5dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c43d0cd0-8b3f-4cbe-9a25-da800096f5dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Oct 2026 23:19:03 +0000 Certificate not after: Mon 29 Jan 2029 00:19:03 +0000 Subordinate resources: AS: 400721 IP: 23.139.152.0/24 IP: 206.81.108.0/24 IP: 2602:fb36::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:96:35:c7:67:76:19:25:0c:4e:e9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 26 23:19:03 2026 GMT Not After : Jan 29 00:19:03 2029 GMT Subject: CN=c43d0cd0-8b3f-4cbe-9a25-da800096f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:dc:6a:8d:b2:71:24:66:e1:2f:df:4a:e1: 2f:96:ac:5e:df:7c:bd:72:df:d2:68:50:c5:17:3f: 8d:19:36:7a:ea:43:92:4a:9f:ef:ee:de:a3:bf:f1: 1c:be:56:5b:12:58:6f:34:3c:0f:90:0a:3f:2d:ab: aa:fe:cb:ad:25:50:68:34:6d:b6:67:ad:61:e4:29: 91:d1:d5:c4:ce:4d:02:77:b1:fb:22:72:22:ee:f3: 73:66:e8:40:e5:1f:01:9c:5a:cd:04:53:df:b9:49: 59:36:be:aa:31:73:34:f3:75:4f:27:62:e3:44:b7: e6:8c:a4:32:5a:ad:88:dd:51:c6:d2:c3:e5:1d:c2: 52:79:f2:db:f6:12:55:d5:f8:3a:14:f0:00:a6:14: 18:25:01:fa:eb:28:25:92:d5:81:92:9b:1c:34:ac: e0:c8:2f:a1:eb:6e:50:11:92:1e:6c:7d:5b:b8:6f: df:bc:26:d2:6a:a2:61:11:18:2c:7b:b7:59:0e:f5: d4:3a:7b:42:d8:03:57:b0:0d:43:de:78:44:6a:85: c2:6f:23:29:82:d7:ec:37:99:ed:f1:b0:0c:73:6b: 9b:30:2f:4b:24:f3:b9:dd:f4:13:d9:07:16:13:d3: e0:ac:df:6b:63:c2:f5:7d:50:0f:a8:c5:e6:59:61: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:0A:A5:C6:D6:D6:3D:5D:1B:97:12:BB:8E:A7:D6:CE:D8:35:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c43d0cd0-8b3f-4cbe-9a25-da800096f5dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c43d0cd0-8b3f-4cbe-9a25-da800096f5dc/c43d0cd0-8b3f-4cbe-9a25-da800096f5dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.139.152.0/24 206.81.108.0/24 IPv6: 2602:fb36::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400721 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ff:5a:b6:d4:96:8d:50:23:6b:ed:e2:1b:e8:10:6c:2f:c4: ee:27:e6:ec:33:3e:d9:39:1e:ba:29:5d:14:92:bb:0f:23:3e: 8a:32:c7:9d:cc:07:e7:dd:e0:6c:11:47:be:cc:bb:fd:0f:3d: 4e:71:c5:8b:98:a8:97:cc:9a:3c:d7:86:2b:35:05:9d:cc:ed: e1:19:0b:3c:79:22:2f:6e:bd:e1:3c:fa:eb:d1:71:15:fd:72: 2b:53:dd:09:ae:9f:98:ee:6b:f6:32:d6:14:2a:46:ba:90:3c: d0:b7:79:1f:a7:f0:f0:d2:16:99:a8:69:73:65:85:ba:8c:2a: 22:4c:30:29:42:96:d5:42:73:80:4c:e7:ac:2e:a9:d3:b3:4c: f6:36:61:f8:67:09:92:a6:47:3e:96:10:55:b1:37:f7:2b:5c: e1:38:08:89:c2:2d:ef:20:1e:c6:a6:d9:d8:d9:b2:bd:ac:05: 3c:3c:c0:9b:63:dc:10:e9:61:29:e8:c3:d2:ce:be:1d:8c:ef: 4a:24:4b:c4:18:dd:04:ea:13:b7:04:26:9a:f8:07:1f:12:1a: e7:d1:33:11:fa:58:07:7c:f7:04:ff:06:95:04:8b:c5:e3:e8: 30:41:66:5c:2d:40:13:a0:3b:ee:28:92:0a:93:64:e0:d0:58: 91:4c:cd:65 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE+iljXHZ3YZJQxO6YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAyNjIzMTkwM1oXDTI5MDEyOTAwMTkwM1owLzEtMCsGA1UEAxMk YzQzZDBjZDAtOGIzZi00Y2JlLTlhMjUtZGE4MDAwOTZmNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFbcao2ycSRm4S/fSuEvlqxe33y9ct/SaFDF Fz+NGTZ66kOSSp/v7t6jv/EcvlZbElhvNDwPkAo/Lauq/sutJVBoNG22Z61h5CmR 0dXEzk0Cd7H7InIi7vNzZuhA5R8BnFrNBFPfuUlZNr6qMXM083VPJ2LjRLfmjKQy Wq2I3VHG0sPlHcJSefLb9hJV1fg6FPAAphQYJQH66yglktWBkpscNKzgyC+h625Q EZIebH1buG/fvCbSaqJhERgse7dZDvXUOntC2ANXsA1D3nhEaoXCbyMpgtfsN5nt 8bAMc2ubMC9LJPO53fQT2QcWE9PgrN9rY8L1fVAPqMXmWWGG3wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJCZCqXG1tY9XRuXEruOp9bO2DWxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j NDNkMGNkMC04YjNmLTRjYmUtOWEyNS1kYTgwMDA5NmY1ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M0M2QwY2QwLThiM2YtNGNiZS05 YTI1LWRhODAwMDk2ZjVkYy9jNDNkMGNkMC04YjNmLTRjYmUtOWEyNS1kYTgwMDA5 NmY1ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXi5gDBADOUWwwDgQCAAIwCAMGBCYC+zYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYdUTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBb/1q21JaNUCNr7eIb 6BBsL8TuJ+bsMz7ZOR66KV0UkrsPIz6KMsedzAfn3eBsEUe+zLv9Dz1OccWLmKiX zJo814YrNQWdzO3hGQs8eSIvbr3hPPrr0XEV/XIrU90Jrp+Y7mv2MtYUKka6kDzQ t3kfp/Dw0haZqGlzZYW6jCoiTDApQpbVQnOATOesLqnTs0z2NmH4ZwmSpkc+lhBV sTf3K1zhOAiJwi3vIB7GptnY2bK9rAU8PMCbY9wQ6WEp6MPSzr4djO9KJEvEGN0E 6hO3BCaa+AcfEhrn0TMR+lgHfPcE/waVBIvF4+gwQWZcLUAToDvuKJIKk2Tg0FiR TM1l -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:05 2026 by rpki-client