$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d14dbe4c-e50c-49b9-91e2-cb21c131d6d8.cer File: d14dbe4c-e50c-49b9-91e2-cb21c131d6d8.cer (raw, json) Hash identifier: BMu39GDrc/GzhlQioF7UXvYLoBklEDHKSo1ppQ8mxsg= Subject key identifier: C2:E9:CB:E6:5C:2B:4A:2D:C2:F6:5B:0E:C5:10:FC:F6:1B:AA:DD:F0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F59652EECC3BF91CF99891640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d14dbe4c-e50c-49b9-91e2-cb21c131d6d8/d14dbe4c-e50c-49b9-91e2-cb21c131d6d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d14dbe4c-e50c-49b9-91e2-cb21c131d6d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 18:06:16 +0000 Certificate not after: Fri 29 Dec 2028 14:36:19 +0000 Subordinate resources: AS: 11885 IP: 162.223.208.0/21 IP: 2602:f2c8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:65:2e:ec:c3:bf:91:cf:99:89:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 30 18:06:16 2026 GMT Not After : Dec 29 14:36:19 2028 GMT Subject: CN=d14dbe4c-e50c-49b9-91e2-cb21c131d6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:4c:74:3f:e0:5a:10:f5:4d:67:1f:65:80: ae:10:e4:d0:e6:f7:00:9c:68:6d:84:89:10:58:eb: f6:00:1c:26:ca:8e:b2:50:12:92:fc:f0:fe:af:7c: bc:a6:ac:25:7f:ff:8e:36:9e:79:ca:da:c6:1a:d1: e4:14:bd:f7:b1:7a:1c:4a:e5:e3:77:19:39:cf:80: 69:25:d1:39:47:42:b1:24:6c:f7:5c:c2:29:78:7b: 1b:de:88:71:3a:03:73:0e:22:d7:ba:90:ad:99:87: 9c:dc:6e:f4:a2:6c:00:50:54:46:2b:25:39:4a:3c: 7f:dd:a8:b6:0c:67:ed:e7:c0:7a:bd:ed:84:27:74: 5f:3b:ae:01:b3:5d:09:66:2b:7e:fe:46:01:91:64: 3f:2f:0f:f7:36:26:e6:8e:58:87:e0:2f:29:a2:31: 7a:10:bd:06:db:13:58:48:a7:45:29:97:8e:7d:1e: 63:43:c5:bf:65:35:6b:c0:c0:55:0b:97:a9:02:9e: c0:02:f4:e2:41:58:be:13:6e:ab:38:27:2e:7c:a5: 78:70:92:fa:cd:c8:1d:7e:96:1d:b9:12:04:3f:dd: e4:76:ec:ac:7a:02:b1:66:d2:16:12:1b:c7:99:49: 57:39:e5:9c:9c:ad:71:d7:2c:aa:91:0d:ad:ed:a6: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E9:CB:E6:5C:2B:4A:2D:C2:F6:5B:0E:C5:10:FC:F6:1B:AA:DD:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d14dbe4c-e50c-49b9-91e2-cb21c131d6d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d14dbe4c-e50c-49b9-91e2-cb21c131d6d8/d14dbe4c-e50c-49b9-91e2-cb21c131d6d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 162.223.208.0/21 IPv6: 2602:f2c8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11885 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:bb:c5:62:07:ae:43:7c:5f:5c:6e:81:15:8d:0d:df:ac:2e: b4:13:d5:d8:48:aa:80:4b:ab:8b:16:aa:a1:38:bc:fc:58:69: 84:dd:a9:ba:36:df:fd:48:e1:4a:24:bd:80:e2:2c:a8:bd:2e: fd:1c:78:3b:46:d0:68:66:d5:e6:b8:21:74:12:93:9a:06:23: 38:e2:9e:eb:b9:33:e4:71:8e:ca:fc:08:fb:49:e1:20:8f:8a: 13:b4:7c:a6:ce:0e:76:24:5e:19:bf:ff:84:5b:be:49:9f:b4: 8d:38:d4:5c:e5:bf:fd:1e:8c:86:5a:3c:66:5b:e7:d9:88:32: 65:a2:c1:2d:5d:c8:57:0b:fe:38:9f:10:9d:e5:4c:4a:a2:5d: e1:ff:70:f6:b1:09:98:fd:49:af:0a:71:14:68:e6:bb:4b:0c: 00:5f:fd:bc:45:bc:11:0a:04:4b:b0:da:89:c8:9e:61:3c:31: 57:cf:67:57:71:97:e5:f6:0f:6b:c0:9b:3c:a7:8e:c9:d7:9c: 2a:63:8e:71:2e:4c:3a:3d:33:5a:af:9a:03:ef:0a:0d:55:75: 66:43:f8:2a:ac:61:c4:e5:2f:9c:73:1f:d9:b2:22:ee:4b:bf: 01:dc:0b:54:bc:58:5f:e1:fa:07:52:33:cc:00:eb:3f:11:c1: 9b:a1:b4:ae -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE9ZZS7sw7+Rz5mJFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkzMDE4MDYxNloXDTI4MTIyOTE0MzYxOVowLzEtMCsGA1UEAxMk ZDE0ZGJlNGMtZTUwYy00OWI5LTkxZTItY2IyMWMxMzFkNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjFMdD/gWhD1TWcfZYCuEOTQ5vcAnGhthIkQ WOv2ABwmyo6yUBKS/PD+r3y8pqwlf/+ONp55ytrGGtHkFL33sXocSuXjdxk5z4Bp JdE5R0KxJGz3XMIpeHsb3ohxOgNzDiLXupCtmYec3G70omwAUFRGKyU5Sjx/3ai2 DGft58B6ve2EJ3RfO64Bs10JZit+/kYBkWQ/Lw/3NibmjliH4C8pojF6EL0G2xNY SKdFKZeOfR5jQ8W/ZTVrwMBVC5epAp7AAvTiQVi+E26rOCcufKV4cJL6zcgdfpYd uRIEP93kduysegKxZtIWEhvHmUlXOeWcnK1x1yyqkQ2t7aYBBwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMLpy+ZcK0otwvZbDsUQ/PYbqt3wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k MTRkYmU0Yy1lNTBjLTQ5YjktOTFlMi1jYjIxYzEzMWQ2ZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2QxNGRiZTRjLWU1MGMtNDliOS05 MWUyLWNiMjFjMTMxZDZkOC9kMTRkYmU0Yy1lNTBjLTQ5YjktOTFlMi1jYjIxYzEz MWQ2ZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAOi39AwDgQCAAIwCAMGBCYC8sgAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi5tMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFa7xWIHrkN8X1xugRWNDd+sLrQT 1dhIqoBLq4sWqqE4vPxYaYTdqbo23/1I4UokvYDiLKi9Lv0ceDtG0Ghm1ea4IXQS k5oGIzjinuu5M+Rxjsr8CPtJ4SCPihO0fKbODnYkXhm//4RbvkmftI041Fzlv/0e jIZaPGZb59mIMmWiwS1dyFcL/jifEJ3lTEqiXeH/cPaxCZj9Sa8KcRRo5rtLDABf /bxFvBEKBEuw2onInmE8MVfPZ1dxl+X2D2vAmzynjsnXnCpjjnEuTDo9M1qvmgPv Cg1VdWZD+CqsYcTlL5xzH9myIu5LvwHcC1S8WF/h+gdSM8wA6z8RwZuhtK4= -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:19 2026 by rpki-client