$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/db28f696-374f-473f-9463-d222677574e2.cer File: db28f696-374f-473f-9463-d222677574e2.cer (raw, json) Hash identifier: 5EHvNITr95wEhKPiw8QIvoG9tSL/6XLj1jDiL+5+8pM= Subject key identifier: 76:DB:04:3D:D2:9A:32:68:34:A1:6C:C0:7B:5F:D8:1F:97:D4:E3:E1 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8DC9DC7B33548D97A85B18E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/db28f696-374f-473f-9463-d222677574e2/db28f696-374f-473f-9463-d222677574e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/db28f696-374f-473f-9463-d222677574e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 12:31:09 +0000 Certificate not after: Sun 21 Jan 2029 13:31:09 +0000 Subordinate resources: AS: 15100 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:c9:dc:7b:33:54:8d:97:a8:5b:18:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 12:31:09 2026 GMT Not After : Jan 21 13:31:09 2029 GMT Subject: CN=db28f696-374f-473f-9463-d222677574e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:89:35:23:5e:6a:2c:8b:81:b6:40:b7:2c: 2e:3a:f5:d5:58:8c:24:34:76:32:18:25:44:aa:d6: 9e:c2:b5:6a:f6:e5:e5:51:cf:80:2f:5a:ff:13:b8: 08:25:af:4d:ef:20:33:75:94:f0:e9:f9:e4:dd:ea: f6:94:53:0a:76:07:c8:e3:46:c7:71:77:9c:2d:60: 6f:e1:d2:14:03:0d:fb:18:6c:7b:3b:e8:f7:a7:41: 02:88:3f:4f:19:81:8c:05:9f:5b:43:6c:e7:13:17: eb:77:32:de:46:7d:32:04:23:f3:8a:cc:22:49:33: 38:dc:11:c9:99:e3:b3:bf:31:36:96:5c:28:f2:51: ac:17:a5:57:ab:6c:9c:de:93:a4:2d:3e:bf:20:5a: aa:80:07:8d:6c:c2:b9:97:2a:f5:ab:91:03:a7:6e: 93:16:fd:e8:be:eb:fc:99:a1:c0:fe:38:4e:ec:c0: 71:12:84:4e:83:8f:a3:11:bb:e0:6d:aa:e9:b5:d8: bf:7c:ad:1e:c2:5d:5b:28:a6:99:00:04:f1:66:b1: b0:e2:f7:24:c1:72:f7:60:c4:b4:f6:d3:f2:28:0d: cf:01:06:fe:66:26:dc:b3:6a:db:29:27:ec:a5:8a: de:1a:ff:98:53:88:96:b6:07:b9:6a:25:64:a3:be: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DB:04:3D:D2:9A:32:68:34:A1:6C:C0:7B:5F:D8:1F:97:D4:E3:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/db28f696-374f-473f-9463-d222677574e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/db28f696-374f-473f-9463-d222677574e2/db28f696-374f-473f-9463-d222677574e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 15100 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:24:4d:5c:be:a4:3a:49:7a:4d:37:67:da:b0:a7:60:a9:ad: d9:55:90:c3:ab:75:d5:15:15:72:8c:75:e4:1e:0e:80:79:8a: d5:4e:96:80:86:26:9b:7d:8b:f4:23:c3:b1:5f:da:87:96:c2: 78:9c:9e:c5:bf:bb:0b:20:16:15:82:48:f6:9e:84:82:12:52: 3c:7b:7a:36:70:15:f8:84:9d:d9:73:03:d2:bd:29:ed:00:f7: 72:3f:c1:05:27:27:c6:db:db:e1:f8:3d:ad:b0:b7:fd:d6:b7: 45:95:45:03:ed:95:09:0c:cc:a3:3a:c0:02:95:25:df:15:c1: 19:27:f8:4a:7c:04:33:d4:ca:eb:b4:6d:49:b1:fe:ca:a7:15: 49:71:f6:c7:01:27:5a:96:fb:2d:28:37:4c:2e:63:0a:cc:89: 61:25:b0:75:55:5c:27:7e:da:af:c7:75:de:0c:fc:ce:97:02: 45:1f:29:15:5e:59:c1:44:c5:73:be:60:d8:43:31:72:f1:f2: 28:98:87:cd:25:b5:b2:c4:2e:8c:ff:bc:c1:64:10:0d:bd:b1: 2d:38:c3:e1:1a:ab:88:52:71:ce:91:ff:3d:ee:5d:3a:81:96: 9e:e2:b5:b6:c0:6e:e3:a9:a9:22:61:ac:12:7a:e4:46:f3:85: 64:fd:cd:f6 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE+Nydx7M1SNl6hbGOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTEyMzEwOVoXDTI5MDEyMTEzMzEwOVowLzEtMCsGA1UEAxMk ZGIyOGY2OTYtMzc0Zi00NzNmLTk0NjMtZDIyMjY3NzU3NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYSJNSNeaiyLgbZAtywuOvXVWIwkNHYyGCVE qtaewrVq9uXlUc+AL1r/E7gIJa9N7yAzdZTw6fnk3er2lFMKdgfI40bHcXecLWBv 4dIUAw37GGx7O+j3p0ECiD9PGYGMBZ9bQ2znExfrdzLeRn0yBCPziswiSTM43BHJ meOzvzE2llwo8lGsF6VXq2yc3pOkLT6/IFqqgAeNbMK5lyr1q5EDp26TFv3ovuv8 maHA/jhO7MBxEoROg4+jEbvgbarptdi/fK0ewl1bKKaZAATxZrGw4vckwXL3YMS0 9tPyKA3PAQb+Zibcs2rbKSfspYreGv+YU4iWtge5aiVko7694wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHbbBD3SmjJoNKFswHtf2B+X1OPhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k YjI4ZjY5Ni0zNzRmLTQ3M2YtOTQ2My1kMjIyNjc3NTc0ZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2RiMjhmNjk2LTM3NGYtNDczZi05 NDYzLWQyMjI2Nzc1NzRlMi9kYjI4ZjY5Ni0zNzRmLTQ3M2YtOTQ2My1kMjIyNjc3 NTc0ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOvwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnSRNXL6kOkl6TTdn2rCnYKmt2VWQ w6t11RUVcox15B4OgHmK1U6WgIYmm32L9CPDsV/ah5bCeJyexb+7CyAWFYJI9p6E ghJSPHt6NnAV+ISd2XMD0r0p7QD3cj/BBScnxtvb4fg9rbC3/da3RZVFA+2VCQzM ozrAApUl3xXBGSf4SnwEM9TK67RtSbH+yqcVSXH2xwEnWpb7LSg3TC5jCsyJYSWw dVVcJ37ar8d13gz8zpcCRR8pFV5ZwUTFc75g2EMxcvHyKJiHzSW1ssQujP+8wWQQ Db2xLTjD4RqriFJxzpH/Pe5dOoGWnuK1tsBu46mpImGsEnrkRvOFZP3N9g== -----END CERTIFICATE-----Generated at Sun Nov 1 14:35:28 2026 by rpki-client