$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8756a8d-a231-4fc6-9069-12703e9adfe3.cer File: c8756a8d-a231-4fc6-9069-12703e9adfe3.cer (raw, json) Hash identifier: 5wpp2QtXckiHu3bAUO96m0nf5KQmAb7TvjVkvvLGdJc= Subject key identifier: 26:C8:66:72:8F:C3:AC:A1:A5:BE:54:8A:E7:FA:84:BD:B9:78:5F:5E Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8D3C103E2087EF71040297E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8756a8d-a231-4fc6-9069-12703e9adfe3/c8756a8d-a231-4fc6-9069-12703e9adfe3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8756a8d-a231-4fc6-9069-12703e9adfe3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 07:45:27 +0000 Certificate not after: Sun 21 Jan 2029 08:45:27 +0000 Subordinate resources: IP: 23.164.116.0/24 IP: 2602:f2e4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:3c:10:3e:20:87:ef:71:04:02:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 07:45:27 2026 GMT Not After : Jan 21 08:45:27 2029 GMT Subject: CN=c8756a8d-a231-4fc6-9069-12703e9adfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:37:80:5e:5b:81:5f:13:fe:74:f5:73:e1: 20:5d:c6:e2:93:07:cc:0c:08:dc:16:6f:ba:e6:db: 69:fe:be:91:d2:b2:b8:8e:73:d4:28:8f:40:c6:ab: b0:e5:df:8a:74:ae:be:2e:de:6b:b5:48:fc:33:06: f3:c4:29:56:41:3b:5f:54:5b:b3:ed:d5:24:fb:bf: 29:8e:73:ff:a4:7e:90:ba:a1:dd:55:a1:36:e2:41: 43:9a:af:53:d6:16:63:45:a4:60:c7:2c:e8:9a:ec: ae:75:7f:66:27:56:64:0e:c5:08:96:6d:6c:34:d2: 0f:09:65:88:a5:1a:63:79:26:a4:86:43:2e:f8:40: 6f:41:d5:95:a0:29:4e:0a:ac:b4:07:c7:a5:2e:5d: 5d:cc:e0:9d:b8:6d:79:b0:43:39:ad:a1:bd:a2:e9: 81:2a:b1:9b:da:3d:47:ad:e5:e8:52:f4:a1:63:5f: 4d:13:3e:dd:58:a4:21:2e:36:91:e3:c9:64:a6:6e: 22:4b:4e:86:88:a4:2c:06:08:de:4f:4e:bd:54:ac: f6:9c:a7:62:1c:e2:a4:3b:ba:60:bf:ec:ee:a1:e2: 04:b9:8c:f7:77:db:5b:7f:ac:cb:85:c8:44:14:73: 91:db:8f:ce:79:07:72:90:fd:22:7f:38:1e:ff:d8: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C8:66:72:8F:C3:AC:A1:A5:BE:54:8A:E7:FA:84:BD:B9:78:5F:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8756a8d-a231-4fc6-9069-12703e9adfe3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8756a8d-a231-4fc6-9069-12703e9adfe3/c8756a8d-a231-4fc6-9069-12703e9adfe3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.164.116.0/24 IPv6: 2602:f2e4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:89:68:8a:fd:89:13:ea:18:06:13:a3:81:35:c0:9c:25:3b: a9:01:d6:ca:dc:c2:d0:e6:a3:61:0a:ff:d2:25:e5:7b:e6:df: 95:bf:d4:5d:c5:19:6c:a4:e9:8d:e9:6b:a5:dc:2a:20:1f:4d: 60:a5:41:98:9e:94:c8:ea:e1:cc:05:fc:98:bf:bf:62:d4:be: b9:35:6f:27:4c:be:a3:ce:72:75:be:3e:f8:c2:18:02:d9:60: 8a:12:b9:2e:5c:0d:4f:1b:f7:b6:c6:66:cb:c0:96:df:7e:e3: 36:ed:d6:84:c3:37:89:a1:9a:fa:0f:16:85:ad:aa:71:ce:2d: a6:7b:a5:3d:2d:c1:02:7f:9b:61:05:4e:e1:e5:2e:fb:37:68: 36:2f:71:c9:4b:e5:38:c0:f3:47:20:a1:b7:23:84:4c:b5:31: a8:a9:1a:b2:69:35:e8:85:3f:61:b1:74:27:f1:91:b4:e1:4d: 1a:f3:d5:37:d6:41:80:53:6c:f5:1d:c2:60:75:08:14:e9:8d: 5f:b2:95:35:b9:9b:40:90:be:de:ab:3e:7b:c4:05:21:b4:17: 57:21:77:66:20:b7:f7:2f:14:ee:a1:87:16:ca:2e:65:0a:a4: 3d:ad:2f:4f:63:01:0e:4a:9e:02:f0:1f:46:55:98:57:b1:fb: a9:37:24:7b -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+NPBA+IIfvcQQCl+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTA3NDUyN1oXDTI5MDEyMTA4NDUyN1owLzEtMCsGA1UEAxMk Yzg3NTZhOGQtYTIzMS00ZmM2LTkwNjktMTI3MDNlOWFkZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QM3gF5bgV8T/nT1c+EgXcbikwfMDAjcFm+6 5ttp/r6R0rK4jnPUKI9Axquw5d+KdK6+Lt5rtUj8MwbzxClWQTtfVFuz7dUk+78p jnP/pH6QuqHdVaE24kFDmq9T1hZjRaRgxyzomuyudX9mJ1ZkDsUIlm1sNNIPCWWI pRpjeSakhkMu+EBvQdWVoClOCqy0B8elLl1dzOCduG15sEM5raG9oumBKrGb2j1H reXoUvShY19NEz7dWKQhLjaR48lkpm4iS06GiKQsBgjeT069VKz2nKdiHOKkO7pg v+zuoeIEuYz3d9tbf6zLhchEFHOR24/OeQdykP0ifzge/9j4ZwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCbIZnKPw6yhpb5Uiuf6hL25eF9eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j ODc1NmE4ZC1hMjMxLTRmYzYtOTA2OS0xMjcwM2U5YWRmZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M4NzU2YThkLWEyMzEtNGZjNi05 MDY5LTEyNzAzZTlhZGZlMy9jODc1NmE4ZC1hMjMxLTRmYzYtOTA2OS0xMjcwM2U5 YWRmZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpHQwDgQCAAIwCAMGACYC8uQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIqJaIr9iRPqGAYTo4E1wJwlO6kB1srcwtDmo2EK/9Il5Xvm35W/1F3FGWyk6Y3p a6XcKiAfTWClQZielMjq4cwF/Ji/v2LUvrk1bydMvqPOcnW+PvjCGALZYIoSuS5c DU8b97bGZsvAlt9+4zbt1oTDN4mhmvoPFoWtqnHOLaZ7pT0twQJ/m2EFTuHlLvs3 aDYvcclL5TjA80cgobcjhEy1MaipGrJpNeiFP2GxdCfxkbThTRrz1TfWQYBTbPUd wmB1CBTpjV+ylTW5m0CQvt6rPnvEBSG0F1chd2Ygt/cvFO6hhxbKLmUKpD2tL09j AQ5KngLwH0ZVmFex+6k3JHs= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:35 2026 by rpki-client