$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb54314-97f9-4833-a5a0-827fa56a7ecd.cer File: cbb54314-97f9-4833-a5a0-827fa56a7ecd.cer (raw, json) Hash identifier: 87tKza+9oh6fYJTuHZtpKhys5Y4rY9LYWO+oegzZmCU= Subject key identifier: 70:FE:52:CB:56:8A:86:E9:76:48:7D:FD:C6:B6:DF:5B:D2:25:63:D3 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7CF738A6FF72DA4CD3DD6700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb54314-97f9-4833-a5a0-827fa56a7ecd/cbb54314-97f9-4833-a5a0-827fa56a7ecd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb54314-97f9-4833-a5a0-827fa56a7ecd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 11:53:48 +0000 Certificate not after: Mon 15 Jan 2029 12:53:48 +0000 Subordinate resources: AS: 14738 IP: 198.203.149.0/24 IP: 2620:ce:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:f7:38:a6:ff:72:da:4c:d3:dd:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 13 11:53:48 2026 GMT Not After : Jan 15 12:53:48 2029 GMT Subject: CN=cbb54314-97f9-4833-a5a0-827fa56a7ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:7e:15:e6:04:f8:4b:d9:1a:20:af:f6:18: 98:26:61:09:25:9f:fe:6e:32:43:7e:40:98:84:97: 7e:24:17:4f:4d:02:f5:ba:83:37:fd:f1:a1:a7:e2: 16:b7:20:20:99:a7:e0:7c:38:64:33:ca:05:46:28: 3f:50:17:ba:fd:c6:20:d3:7d:ac:f1:4b:bd:6e:10: 3a:67:b4:a9:ff:af:b3:7f:54:58:4f:03:53:1c:55: 29:a7:be:7a:79:ef:76:1a:0d:74:d1:ae:18:98:56: cf:16:e0:83:94:1c:57:d2:72:5d:50:a4:85:82:e9: f8:a5:3c:89:46:83:5c:13:ad:ab:66:dc:28:8e:db: f9:9a:15:00:ff:7e:2d:b7:2b:9b:ca:29:52:1b:58: ca:52:a0:17:e5:b1:4a:84:52:67:15:fe:f1:bf:98: 19:f8:de:69:a6:14:7d:9b:3c:a0:cd:09:25:db:ee: 8a:87:e3:3f:c8:8e:d5:c8:2a:3a:7f:b6:8d:fc:ef: 0a:07:21:6e:61:be:b2:fe:4a:7f:d7:e6:27:e5:41: 76:67:c9:7f:db:fc:a5:a3:6b:8d:82:d0:47:af:0f: 1d:e5:3c:f3:03:10:1e:88:ca:33:d4:75:d2:39:9e: f9:c8:93:47:5c:3a:7d:61:61:8e:04:c7:78:2c:46: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FE:52:CB:56:8A:86:E9:76:48:7D:FD:C6:B6:DF:5B:D2:25:63:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb54314-97f9-4833-a5a0-827fa56a7ecd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb54314-97f9-4833-a5a0-827fa56a7ecd/cbb54314-97f9-4833-a5a0-827fa56a7ecd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.203.149.0/24 IPv6: 2620:ce:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14738 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:03:da:da:e5:6d:5f:e7:f4:6a:61:5a:02:4f:f5:3f:fc:7e: b8:9d:67:57:26:7c:13:5e:14:47:e7:31:4e:99:2e:5e:37:4f: a9:bb:89:1b:0b:19:50:11:1b:85:b8:9a:1b:cf:e2:14:7c:49: 23:9b:d7:bd:87:e5:a2:3b:1e:4a:94:0a:52:38:1b:64:41:dc: 49:ac:57:46:b7:f5:fb:d3:2e:cb:91:84:5b:4e:00:2a:d0:13: 7e:54:34:bc:d8:66:17:2e:6a:fd:b1:2c:ea:9d:40:eb:b1:4c: ed:d4:53:6c:1a:37:ef:d6:70:9e:9d:b4:3f:a4:93:ea:6f:df: 7b:62:e5:64:09:58:c6:e9:21:58:e5:b0:b3:04:3f:91:b3:b4: cf:f6:3d:04:8a:48:6f:5b:91:47:d5:27:f3:8d:9b:de:b4:17: 8d:fe:8b:8e:fe:24:66:bd:55:03:06:84:66:a6:a1:6f:5f:ec: 74:94:e7:49:f7:f1:fd:29:10:e7:ee:92:64:68:44:de:0d:6a: 58:79:46:9b:57:71:09:e9:55:0a:85:30:a2:05:73:ec:8d:e6: 02:99:27:ca:9e:cf:b3:46:2b:00:f4:19:fe:58:0f:78:ce:98: 0f:31:2b:80:0e:df:dd:e7:5e:af:77:32:fb:c4:4f:98:54:a6: 65:45:3d:73 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE989zim/3LaTNPdZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMzExNTM0OFoXDTI5MDExNTEyNTM0OFowLzEtMCsGA1UEAxMk Y2JiNTQzMTQtOTdmOS00ODMzLWE1YTAtODI3ZmE1NmE3ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnJ+FeYE+EvZGiCv9hiYJmEJJZ/+bjJDfkCY hJd+JBdPTQL1uoM3/fGhp+IWtyAgmafgfDhkM8oFRig/UBe6/cYg032s8Uu9bhA6 Z7Sp/6+zf1RYTwNTHFUpp756ee92Gg100a4YmFbPFuCDlBxX0nJdUKSFgun4pTyJ RoNcE62rZtwojtv5mhUA/34ttyubyilSG1jKUqAX5bFKhFJnFf7xv5gZ+N5pphR9 mzygzQkl2+6Kh+M/yI7VyCo6f7aN/O8KByFuYb6y/kp/1+Yn5UF2Z8l/2/ylo2uN gtBHrw8d5TzzAxAeiMoz1HXSOZ75yJNHXDp9YWGOBMd4LEaMhwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHD+UstWiobpdkh9/ca231vSJWPTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j YmI1NDMxNC05N2Y5LTQ4MzMtYTVhMC04MjdmYTU2YTdlY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2NiYjU0MzE0LTk3ZjktNDgzMy1h NWEwLTgyN2ZhNTZhN2VjZC9jYmI1NDMxNC05N2Y5LTQ4MzMtYTVhMC04MjdmYTU2 YTdlY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADGy5UwDwQCAAIwCQMHACYgAM6AADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI5kjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeA9ra5W1f5/RqYVoCT/U//H64 nWdXJnwTXhRH5zFOmS5eN0+pu4kbCxlQERuFuJobz+IUfEkjm9e9h+WiOx5KlApS OBtkQdxJrFdGt/X70y7LkYRbTgAq0BN+VDS82GYXLmr9sSzqnUDrsUzt1FNsGjfv 1nCenbQ/pJPqb997YuVkCVjG6SFY5bCzBD+Rs7TP9j0EikhvW5FH1SfzjZvetBeN /ouO/iRmvVUDBoRmpqFvX+x0lOdJ9/H9KRDn7pJkaETeDWpYeUabV3EJ6VUKhTCi BXPsjeYCmSfKns+zRisA9Bn+WA94zpgPMSuADt/d516vdzL7xE+YVKZlRT1z -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:44 2026 by rpki-client