$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce.cer File: d4df721f-f1d3-488f-a11f-24012ecf96ce.cer (raw, json) Hash identifier: DQ7+/DTFqh2T4hbGW1pbYWV6KNS+fKK2o9p3DVrjwHc= Subject key identifier: 25:6F:77:DA:DD:0B:B5:8B:D9:56:94:F4:EE:F4:EF:F3:6C:F3:19:FD Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F74A408E489FA98B2433FE480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Oct 2026 12:19:44 +0000 Certificate not after: Fri 12 Jan 2029 13:19:44 +0000 Subordinate resources: AS: 402233 IP: 206.208.120.0/22 IP: 2605:2780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:a4:08:e4:89:fa:98:b2:43:3f:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 10 12:19:44 2026 GMT Not After : Jan 12 13:19:44 2029 GMT Subject: CN=d4df721f-f1d3-488f-a11f-24012ecf96ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:e2:a1:bb:a0:ea:27:7b:b6:06:8a:83:e8: 56:28:35:75:50:e7:3a:f9:46:b7:81:c9:06:33:94: ac:c5:db:0d:91:4d:3a:34:fe:d1:85:5f:ce:31:57: f9:9b:dd:ac:82:46:dd:2e:32:7b:ed:3c:ef:4f:70: 38:5e:42:28:02:62:34:03:07:5f:25:7a:48:23:73: 1d:6e:d0:76:4e:e1:ed:02:9b:19:ef:26:4e:bd:62: 5d:5a:51:53:64:8a:be:ae:74:be:a2:98:7e:6f:b5: a8:e6:c2:5d:6e:3a:54:c3:d1:1f:7b:1b:27:d9:73: f3:3e:8e:0e:ea:7c:05:42:df:bb:bb:ad:eb:a5:b7: c3:48:f8:30:ff:1e:d2:1f:98:e4:f2:2c:53:55:ab: b8:74:d6:6f:99:98:a3:32:c0:4d:04:ce:7f:e7:d1: 4e:3d:98:34:6f:8c:50:bf:dd:dd:55:3b:98:75:20: 53:d3:b8:b9:db:3a:d4:8e:7b:5b:32:33:70:7d:dc: a0:c3:9d:26:8d:62:f3:9f:cf:3a:45:fc:0e:a9:6e: 50:9c:d2:48:59:de:74:b6:0d:b2:6a:71:e8:fe:e0: ee:14:ef:a7:71:b4:85:af:cc:b4:e8:76:2c:fa:69: b3:85:ea:a1:c1:f6:4c:b0:28:8e:e0:a5:8e:52:24: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6F:77:DA:DD:0B:B5:8B:D9:56:94:F4:EE:F4:EF:F3:6C:F3:19:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 206.208.120.0/22 IPv6: 2605:2780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402233 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e8:37:0b:73:7b:9e:f0:e9:f4:0f:75:9f:82:10:41:b2:fe: e2:a0:1b:bf:9b:78:2c:87:83:a3:5e:59:e2:45:35:eb:6e:db: 87:90:dc:a9:21:3a:09:1d:db:de:9f:f1:d6:67:76:81:c5:7c: f7:ec:0f:52:7a:7e:cb:9e:8d:fe:08:35:64:5b:89:81:7c:e4: 86:e2:12:4d:35:02:3e:3f:e1:5f:4a:04:01:fb:94:43:4c:ed: c9:95:42:3f:9b:c6:ae:7f:3b:90:22:a4:e8:f3:d9:ee:67:19: 25:16:3f:70:88:69:c9:14:01:ca:c6:a3:41:04:00:cb:4f:00: c8:83:03:5f:c7:09:3c:87:1c:d2:f9:a6:84:82:57:2f:ad:54: 1f:3a:84:d5:67:81:53:02:1c:80:23:07:32:df:50:db:7f:82: 83:9b:8d:e1:4e:e8:e2:bd:c5:09:ae:bc:ac:1f:77:39:93:cf: a9:cd:47:ec:84:c0:e3:53:c1:06:41:e3:c0:2d:ee:ea:f4:aa: ac:6d:3c:c3:d7:b4:ba:4f:8d:78:26:70:2b:b1:82:33:3c:2f: bb:85:b3:b6:3c:84:28:2d:96:e0:66:68:70:19:ad:17:e3:e3: 88:cf:f5:2b:f5:cb:59:19:06:61:18:ef:4e:4d:99:d3:75:a2: 94:66:48:62 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE90pAjkifqYskM/5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMDEyMTk0NFoXDTI5MDExMjEzMTk0NFowLzEtMCsGA1UEAxMk ZDRkZjcyMWYtZjFkMy00ODhmLWExMWYtMjQwMTJlY2Y5NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4viobug6id7tgaKg+hWKDV1UOc6+Ua3gckG M5SsxdsNkU06NP7RhV/OMVf5m92sgkbdLjJ77TzvT3A4XkIoAmI0AwdfJXpII3Md btB2TuHtApsZ7yZOvWJdWlFTZIq+rnS+oph+b7Wo5sJdbjpUw9Efexsn2XPzPo4O 6nwFQt+7u63rpbfDSPgw/x7SH5jk8ixTVau4dNZvmZijMsBNBM5/59FOPZg0b4xQ v93dVTuYdSBT07i52zrUjntbMjNwfdygw50mjWLzn886RfwOqW5QnNJIWd50tg2y anHo/uDuFO+ncbSFr8y06HYs+mmzheqhwfZMsCiO4KWOUiQniwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCVvd9rdC7WL2VaU9O707/Ns8xn9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k NGRmNzIxZi1mMWQzLTQ4OGYtYTExZi0yNDAxMmVjZjk2Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2Q0ZGY3MjFmLWYxZDMtNDg4Zi1h MTFmLTI0MDEyZWNmOTZjZS9kNGRmNzIxZi1mMWQzLTQ4OGYtYTExZi0yNDAxMmVj Zjk2Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALO0HgwDQQCAAIwBwMFACYFJ4AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiM5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjoNwtze57w6fQPdZ+CEEGy/uKg G7+beCyHg6NeWeJFNetu24eQ3KkhOgkd296f8dZndoHFfPfsD1J6fsuejf4INWRb iYF85IbiEk01Aj4/4V9KBAH7lENM7cmVQj+bxq5/O5AipOjz2e5nGSUWP3CIackU AcrGo0EEAMtPAMiDA1/HCTyHHNL5poSCVy+tVB86hNVngVMCHIAjBzLfUNt/goOb jeFO6OK9xQmuvKwfdzmTz6nNR+yEwONTwQZB48At7ur0qqxtPMPXtLpPjXgmcCux gjM8L7uFs7Y8hCgtluBmaHAZrRfj44jP9Sv1y1kZBmEY705NmdN1opRmSGI= -----END CERTIFICATE-----Generated at Sun Nov 1 09:17:07 2026 by rpki-client