$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24.cer File: df8934b8-de3a-483c-acaa-671093370c24.cer (raw, json) Hash identifier: YPVpoZLOv9QcI4Q5QX7tjIl0ysB5nYdKCupO9lZFEcA= Subject key identifier: 70:27:13:AB:F4:0C:50:4A:94:2E:A3:BE:B7:B7:98:8D:E3:65:48:7D Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5EC474137F426E381AE26BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/df8934b8-de3a-483c-acaa-671093370c24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 16:17:16 +0000 Certificate not after: Thu 04 Jan 2029 17:17:16 +0000 Subordinate resources: IP: 70.35.159.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:c4:74:13:7f:42:6e:38:1a:e2:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 16:17:16 2026 GMT Not After : Jan 4 17:17:16 2029 GMT Subject: CN=df8934b8-de3a-483c-acaa-671093370c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:1a:72:7e:0b:48:53:3e:80:75:d0:ae:97: ce:2b:32:44:58:4f:2d:2b:e0:13:b4:57:86:8f:70: be:d5:98:b6:2d:23:6a:c6:20:96:d9:2e:01:06:ce: f9:00:94:95:36:0f:34:e5:10:e7:2f:6b:f3:62:21: ba:b0:0e:5d:2e:7c:c5:9a:f2:e6:57:18:c3:3a:41: 1c:63:2d:f6:d1:aa:81:c4:90:1b:8e:65:54:4c:62: 42:a3:68:fc:ef:ad:43:af:f0:4b:4e:a0:da:b3:d9: 4e:59:3e:7e:21:73:f2:2c:35:73:78:c2:90:90:2c: 95:00:5b:2d:e9:ca:60:fe:57:e4:6b:09:45:76:c6: 19:84:75:1e:74:de:17:f3:ae:c2:a6:2d:f5:0c:88: 67:7b:6c:cb:b2:8d:29:ad:6c:6b:9c:46:46:3b:06: 33:ef:af:1e:a2:f8:08:17:cc:93:e9:73:71:33:21: 12:08:79:6e:31:75:d1:09:b2:f2:32:c6:48:51:66: d8:cf:7f:fe:13:d2:3b:2a:e3:75:04:9e:46:99:7b: 70:7a:16:73:1d:98:1f:46:75:1e:87:dd:01:de:f0: f1:a4:5b:49:dd:bd:df:5a:09:0b:81:d1:d1:a4:f5: ff:7b:c0:39:2f:6c:c8:0d:9e:32:9c:88:d3:c9:cf: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:13:AB:F4:0C:50:4A:94:2E:A3:BE:B7:B7:98:8D:E3:65:48:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/df8934b8-de3a-483c-acaa-671093370c24/df8934b8-de3a-483c-acaa-671093370c24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 70.35.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ba:04:04:43:b0:26:ee:d2:b1:ba:93:80:55:0d:79:98:8c: 63:1b:fd:a8:63:0c:53:b3:bb:79:05:ea:9b:da:72:07:b4:c8: d7:6c:f8:d5:b2:59:93:13:12:f6:47:b1:43:5b:c8:07:d1:06: 74:3d:3c:53:ae:12:33:92:7c:da:8c:6c:b3:7f:d0:c4:32:df: 42:08:04:c6:b0:a0:52:ab:60:bd:7b:cf:63:54:86:78:af:64: b9:cd:cc:43:14:09:bf:b2:a1:0c:82:42:2c:d7:98:36:c6:f5: 7b:8e:52:fb:1e:31:18:4f:c1:38:a4:78:cf:b2:0d:54:9e:52: 1b:d5:95:a5:19:b9:9e:8b:8b:37:79:7d:4e:63:e4:ec:d4:2f: 19:ab:74:07:79:d1:e8:01:27:fa:6c:cf:24:d1:e7:12:6c:51: 33:16:c2:e6:47:c1:1d:f7:0b:82:fa:3a:99:c0:07:08:b3:e8: a8:12:f8:ba:6c:5a:95:6a:9e:c5:5a:a6:7b:53:98:28:34:8a: 71:6d:9e:a0:95:40:14:f6:f7:b2:53:f6:d7:ab:66:2d:eb:fd: ba:ae:b8:f6:6e:28:65:65:df:e8:d6:43:50:78:a1:4e:16:3d: 79:68:f5:c2:7f:ae:16:1b:93:ed:fb:88:65:89:12:df:6b:2d: a7:95:77:3d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE9exHQTf0JuOBria8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjE2MTcxNloXDTI5MDEwNDE3MTcxNlowLzEtMCsGA1UEAxMk ZGY4OTM0YjgtZGUzYS00ODNjLWFjYWEtNjcxMDkzMzcwYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntMacn4LSFM+gHXQrpfOKzJEWE8tK+ATtFeG j3C+1Zi2LSNqxiCW2S4BBs75AJSVNg805RDnL2vzYiG6sA5dLnzFmvLmVxjDOkEc Yy320aqBxJAbjmVUTGJCo2j8761Dr/BLTqDas9lOWT5+IXPyLDVzeMKQkCyVAFst 6cpg/lfkawlFdsYZhHUedN4X867Cpi31DIhne2zLso0prWxrnEZGOwYz768eovgI F8yT6XNxMyESCHluMXXRCbLyMsZIUWbYz3/+E9I7KuN1BJ5GmXtwehZzHZgfRnUe h90B3vDxpFtJ3b3fWgkLgdHRpPX/e8A5L2zIDZ4ynIjTyc/v+wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHAnE6v0DFBKlC6jvre3mI3jZUh9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k Zjg5MzRiOC1kZTNhLTQ4M2MtYWNhYS02NzEwOTMzNzBjMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2RmODkzNGI4LWRlM2EtNDgzYy1h Y2FhLTY3MTA5MzM3MGMyNC9kZjg5MzRiOC1kZTNhLTQ4M2MtYWNhYS02NzEwOTMz NzBjMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABGI58wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbroEBEOwJu7SsbqTgFUN eZiMYxv9qGMMU7O7eQXqm9pyB7TI12z41bJZkxMS9kexQ1vIB9EGdD08U64SM5J8 2oxss3/QxDLfQggExrCgUqtgvXvPY1SGeK9kuc3MQxQJv7KhDIJCLNeYNsb1e45S +x4xGE/BOKR4z7INVJ5SG9WVpRm5nouLN3l9TmPk7NQvGat0B3nR6AEn+mzPJNHn EmxRMxbC5kfBHfcLgvo6mcAHCLPoqBL4umxalWqexVqme1OYKDSKcW2eoJVAFPb3 slP216tmLev9uq649m4oZWXf6NZDUHihThY9eWj1wn+uFhuT7fuIZYkS32stp5V3 PQ== -----END CERTIFICATE-----Generated at Sun Oct 11 11:09:39 2026 by rpki-client