$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03.cer File: dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03.cer (raw, json) Hash identifier: GR+h6rjQcWFj7zhYD3JgRUsDla0TWmZcc8qJ0t/Plqo= Subject key identifier: 6C:21:58:5B:46:E6:A9:AA:03:F8:C2:B2:82:53:B3:3A:E0:39:6D:76 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6E6F32B4B5015B657F05D000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03/dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 06:58:25 +0000 Certificate not after: Wed 10 Jan 2029 07:58:25 +0000 Subordinate resources: AS: 400308 IP: 23.149.84.0/24 IP: 2602:f44e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:6f:32:b4:b5:01:5b:65:7f:05:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 8 06:58:25 2026 GMT Not After : Jan 10 07:58:25 2029 GMT Subject: CN=dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:aa:3e:a9:9d:ec:5e:6b:44:50:68:36:13: 16:6a:d6:ea:93:21:43:b4:5d:6d:73:c6:73:53:6e: e5:9e:3b:5d:72:72:17:6f:31:99:32:c2:89:4f:8c: 99:5f:8f:c3:91:ea:a5:06:22:c9:32:ab:8d:84:34: fe:d2:c8:16:d8:fc:3d:2d:ab:a2:eb:83:56:34:1d: 75:4c:8b:b1:1f:7c:5e:37:a3:8e:a2:b7:1a:66:53: c5:9e:82:fe:de:e8:ab:69:20:c4:55:d0:1c:96:80: 36:f9:5c:e6:30:66:bc:30:d3:c4:d2:32:79:6b:37: 56:91:92:1e:78:f2:ca:2a:1c:a8:1f:71:ee:a9:6b: a0:da:63:fe:80:8f:e5:f8:10:47:fe:db:aa:54:c5: 9d:46:02:c2:cc:18:ec:f3:1a:8f:78:6e:c1:f5:93: 06:6c:9e:a5:2c:9e:d7:bf:78:6e:27:3f:f8:a2:08: 6f:7e:41:10:72:eb:7d:7d:d5:03:dd:a3:68:73:ff: 34:1c:4b:53:00:16:7f:0e:65:df:21:47:9c:9b:1a: ef:bb:a5:e6:0a:c8:8d:d2:0a:72:f4:cb:2a:87:5d: d3:2e:8f:0d:ea:2e:51:29:4e:6f:ea:ea:ef:73:c5: c8:23:94:12:1a:34:a5:58:c1:19:13:99:02:3e:bc: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:21:58:5B:46:E6:A9:AA:03:F8:C2:B2:82:53:B3:3A:E0:39:6D:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03/dbcf5d86-9ce6-4ae5-8cb1-00ec7b18ed03.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.149.84.0/24 IPv6: 2602:f44e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400308 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3e:94:7f:94:05:f6:de:1e:fb:d8:5c:b5:b6:0d:bd:56:21: 11:8f:71:04:4b:1f:06:7a:c7:21:50:42:9a:a4:b2:aa:0b:d0: 91:6c:2d:5b:0b:4e:b5:c6:bf:c7:34:26:88:c5:2a:1d:d7:71: 11:95:e7:d9:a3:e4:d2:39:e3:e3:26:64:d0:1d:71:dc:31:3a: 3e:6f:b5:e1:e9:90:74:cc:65:3c:a3:5a:6d:74:68:e4:c0:bf: 74:dc:7e:46:08:cc:51:9d:f0:00:4b:8b:7a:d2:eb:eb:d7:5b: 0a:87:88:61:fd:bf:be:93:08:15:26:26:aa:cc:03:84:00:ee: 29:12:ca:f7:29:04:32:53:85:61:e5:e8:84:78:9a:df:49:5d: 98:04:2f:3e:2e:d6:3e:52:53:f2:d5:8e:53:19:21:ff:9b:c5: 6b:12:6d:62:3e:6b:a5:f2:91:a8:c0:49:09:a3:12:a5:d1:65: 57:20:74:ff:13:b3:4c:1d:dc:b8:9a:35:b2:19:bc:54:57:ff: dd:ad:57:f7:7a:e8:3f:03:7c:28:30:9d:b3:89:88:e1:5e:19: c0:ab:45:23:15:b9:c8:b8:77:1b:31:80:fb:5c:a0:9c:a5:49: f3:3c:67:46:f0:6c:bb:b1:1f:34:49:15:4e:82:67:81:11:38: c9:66:48:28 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9ubzK0tQFbZX8F0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwODA2NTgyNVoXDTI5MDExMDA3NTgyNVowLzEtMCsGA1UEAxMk ZGJjZjVkODYtOWNlNi00YWU1LThjYjEtMDBlYzdiMThlZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfaqPqmd7F5rRFBoNhMWatbqkyFDtF1tc8Zz U27lnjtdcnIXbzGZMsKJT4yZX4/DkeqlBiLJMquNhDT+0sgW2Pw9Laui64NWNB11 TIuxH3xeN6OOorcaZlPFnoL+3uiraSDEVdAcloA2+VzmMGa8MNPE0jJ5azdWkZIe ePLKKhyoH3HuqWug2mP+gI/l+BBH/tuqVMWdRgLCzBjs8xqPeG7B9ZMGbJ6lLJ7X v3huJz/4oghvfkEQcut9fdUD3aNoc/80HEtTABZ/DmXfIUecmxrvu6XmCsiN0gpy 9Msqh13TLo8N6i5RKU5v6urvc8XII5QSGjSlWMEZE5kCPrxlqQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGwhWFtG5qmqA/jCsoJTszrgOW12MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k YmNmNWQ4Ni05Y2U2LTRhZTUtOGNiMS0wMGVjN2IxOGVkMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2RiY2Y1ZDg2LTljZTYtNGFlNS04 Y2IxLTAwZWM3YjE4ZWQwMy9kYmNmNWQ4Ni05Y2U2LTRhZTUtOGNiMS0wMGVjN2Ix OGVkMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlVQwDgQCAAIwCAMGACYC9E4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYbtDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWPpR/lAX23h772Fy1tg29ViER j3EESx8GeschUEKapLKqC9CRbC1bC061xr/HNCaIxSod13ERlefZo+TSOePjJmTQ HXHcMTo+b7Xh6ZB0zGU8o1ptdGjkwL903H5GCMxRnfAAS4t60uvr11sKh4hh/b++ kwgVJiaqzAOEAO4pEsr3KQQyU4Vh5eiEeJrfSV2YBC8+LtY+UlPy1Y5TGSH/m8Vr Em1iPmul8pGowEkJoxKl0WVXIHT/E7NMHdy4mjWyGbxUV//drVf3eug/A3woMJ2z iYjhXhnAq0UjFbnIuHcbMYD7XKCcpUnzPGdG8Gy7sR80SRVOgmeBETjJZkgo -----END CERTIFICATE-----Generated at Sat Oct 10 12:52:37 2026 by rpki-client