$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d2ac08c7-1da4-4889-8550-f9204f4254f2.cer File: d2ac08c7-1da4-4889-8550-f9204f4254f2.cer (raw, json) Hash identifier: rTsXJOqG6lcd6tZUqarz8Q2Y0b+5Gey8fMMUKcI2NsQ= Subject key identifier: 32:D2:E2:8D:B8:F8:2E:12:E1:5B:EC:65:78:F4:97:98:2B:53:6F:1A Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F67424E5EC7D113826359D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d2ac08c7-1da4-4889-8550-f9204f4254f2/d2ac08c7-1da4-4889-8550-f9204f4254f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d2ac08c7-1da4-4889-8550-f9204f4254f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 17:17:19 +0000 Certificate not after: Sun 07 Jan 2029 18:17:19 +0000 Subordinate resources: AS: 30518 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:42:4e:5e:c7:d1:13:82:63:59:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 5 17:17:19 2026 GMT Not After : Jan 7 18:17:19 2029 GMT Subject: CN=d2ac08c7-1da4-4889-8550-f9204f4254f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:fe:2d:25:16:50:7a:7c:81:be:04:61:bd: 3b:91:9d:35:91:56:1a:5a:85:f9:a4:25:3e:ee:38: b6:e7:8b:2c:4d:00:dd:3c:35:95:a7:a8:a7:5c:d6: de:39:ce:f1:f9:c3:59:80:92:7e:a0:9a:1e:db:a7: a0:07:f8:fc:eb:d3:53:4f:2c:53:62:2f:9e:b0:e0: ab:3c:0d:a5:9a:5c:f5:5f:89:4f:c0:75:f4:95:fb: d8:06:22:4c:63:16:ab:5c:3a:c0:55:bd:a6:a6:65: db:36:9e:22:c4:55:3c:88:30:23:16:a8:30:8f:52: 7b:1d:33:3f:2b:8f:06:b0:36:40:e8:05:b7:1f:90: ee:81:d1:cd:0d:2b:02:1b:27:4a:ab:06:8e:78:ce: 47:15:fd:e5:7c:6b:0c:8c:7d:8d:e8:5c:d7:86:d9: 0c:37:d0:a6:97:a3:cc:a5:2b:f9:75:63:2a:40:d1: 09:7b:27:b1:38:46:57:db:a0:ce:58:cc:8a:60:21: b7:37:5c:9c:18:db:d4:90:72:d8:7e:11:82:89:30: 25:f0:00:cf:78:d2:45:08:18:2a:1a:0b:8e:74:11: 55:06:48:f5:b7:f6:01:7c:f1:e8:59:71:2d:a5:69: e2:64:98:91:ec:93:fa:9e:db:ff:e8:5f:67:d9:f9: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:E2:8D:B8:F8:2E:12:E1:5B:EC:65:78:F4:97:98:2B:53:6F:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d2ac08c7-1da4-4889-8550-f9204f4254f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d2ac08c7-1da4-4889-8550-f9204f4254f2/d2ac08c7-1da4-4889-8550-f9204f4254f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 30518 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4f:c2:00:b6:6f:f0:75:6d:65:4a:88:1b:27:f6:56:91:73: d4:27:64:b9:be:ea:d6:d7:ad:a1:53:3e:43:13:c0:17:ab:3a: 53:a4:14:a4:41:ee:30:0a:5d:c0:4a:69:ff:1a:e1:86:63:95: 16:a2:d4:01:e9:78:76:82:b3:e3:f4:90:7b:e0:6a:47:fd:d8: 7b:a1:4a:68:37:8b:79:77:6f:70:80:67:8e:83:6f:6d:a8:1c: 97:56:6d:05:e3:d5:8f:2c:f4:23:c7:1d:ef:e3:d2:66:48:66: fa:b7:0a:09:6a:0d:d6:c9:03:c1:11:25:c6:d4:b9:85:25:85: 8a:15:c4:30:13:ce:dc:21:68:ae:74:6e:91:b5:75:07:04:55: ae:84:ce:5c:32:3b:b6:ef:f8:98:47:3e:d0:ab:76:1d:ea:0e: 43:de:ed:4c:7e:56:dd:6c:8c:16:36:0e:74:b8:82:60:08:49: 03:b1:61:3a:7a:87:97:5d:67:4a:b6:24:2c:ba:be:af:05:26: dc:59:05:e1:e9:9d:2f:35:a3:e7:a3:33:f7:0f:92:ae:70:14: 9c:48:d1:51:d7:ce:de:cc:b9:16:fc:92:ce:41:3e:80:26:af: 03:2c:ca:09:63:c3:bc:8b:da:d1:b7:ad:d1:de:0c:7c:e5:ec: 75:79:f2:ff -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE9nQk5ex9ETgmNZ1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNTE3MTcxOVoXDTI5MDEwNzE4MTcxOVowLzEtMCsGA1UEAxMk ZDJhYzA4YzctMWRhNC00ODg5LTg1NTAtZjkyMDRmNDI1NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAX+LSUWUHp8gb4EYb07kZ01kVYaWoX5pCU+ 7ji254ssTQDdPDWVp6inXNbeOc7x+cNZgJJ+oJoe26egB/j869NTTyxTYi+esOCr PA2lmlz1X4lPwHX0lfvYBiJMYxarXDrAVb2mpmXbNp4ixFU8iDAjFqgwj1J7HTM/ K48GsDZA6AW3H5DugdHNDSsCGydKqwaOeM5HFf3lfGsMjH2N6FzXhtkMN9Cml6PM pSv5dWMqQNEJeyexOEZX26DOWMyKYCG3N1ycGNvUkHLYfhGCiTAl8ADPeNJFCBgq GguOdBFVBkj1t/YBfPHoWXEtpWniZJiR7JP6ntv/6F9n2flnrQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFDLS4o24+C4S4VvsZXj0l5grU28aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k MmFjMDhjNy0xZGE0LTQ4ODktODU1MC1mOTIwNGY0MjU0ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2QyYWMwOGM3LTFkYTQtNDg4OS04 NTUwLWY5MjA0ZjQyNTRmMi9kMmFjMDhjNy0xZGE0LTQ4ODktODU1MC1mOTIwNGY0 MjU0ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdzYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPU/CALZv8HVtZUqIGyf2VpFz1Cdk ub7q1tetoVM+QxPAF6s6U6QUpEHuMApdwEpp/xrhhmOVFqLUAel4doKz4/SQe+Bq R/3Ye6FKaDeLeXdvcIBnjoNvbagcl1ZtBePVjyz0I8cd7+PSZkhm+rcKCWoN1skD wRElxtS5hSWFihXEMBPO3CFornRukbV1BwRVroTOXDI7tu/4mEc+0Kt2HeoOQ97t TH5W3WyMFjYOdLiCYAhJA7FhOnqHl11nSrYkLLq+rwUm3FkF4emdLzWj56Mz9w+S rnAUnEjRUdfO3sy5FvySzkE+gCavAyzKCWPDvIva0bet0d4MfOXsdXny/w== -----END CERTIFICATE-----Generated at Sun Nov 1 08:30:11 2026 by rpki-client