$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3102d6d-5d60-486e-9cf9-d5f7159df765.cer File: e3102d6d-5d60-486e-9cf9-d5f7159df765.cer (raw, json) Hash identifier: CU/Wv6ii+b7AtMlbgL4etn923NrRlCeQBg7QYwHlHXA= Subject key identifier: 1D:BC:D9:59:2C:1E:9E:B2:86:81:41:E9:2F:A5:7D:9C:54:1A:89:DC Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5F1B7DB987036FB198854400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3102d6d-5d60-486e-9cf9-d5f7159df765/e3102d6d-5d60-486e-9cf9-d5f7159df765.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3102d6d-5d60-486e-9cf9-d5f7159df765/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 19:12:38 +0000 Certificate not after: Thu 04 Jan 2029 20:12:38 +0000 Subordinate resources: AS: 395204 IP: 104.193.96.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:1b:7d:b9:87:03:6f:b1:98:85:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 19:12:38 2026 GMT Not After : Jan 4 20:12:38 2029 GMT Subject: CN=e3102d6d-5d60-486e-9cf9-d5f7159df765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:3f:b1:28:b4:40:d7:c2:1d:49:0b:60:3a: d8:dc:65:6f:14:f1:e3:a5:02:88:e6:f9:99:2d:18: d2:1c:09:c9:82:c1:2e:67:91:84:34:3e:4f:01:87: 0f:f7:83:db:06:f2:f0:1c:f5:db:14:50:a8:ef:66: f7:9d:ea:3d:2d:6f:a0:c7:95:8e:fc:08:08:4d:cb: 51:df:9c:27:e0:77:1f:53:55:05:48:99:92:7d:73: d1:c2:06:d3:f7:39:70:1f:26:74:2b:df:f8:e4:f2: 8f:21:af:bd:64:72:5d:7d:23:38:b8:0f:1f:3b:91: 66:46:bb:2b:81:b6:4a:9d:4f:01:9d:24:bf:4c:71: fa:ac:59:ff:74:76:32:c4:a2:ed:c0:55:d7:68:4a: 00:7f:24:b2:46:8f:2c:cd:84:59:ac:b9:03:ad:ef: 6a:cc:6f:60:ad:2a:a4:5e:fb:44:65:c5:23:75:bf: 49:95:1a:d6:a1:0c:87:7f:49:e0:6f:31:e8:c2:be: 58:51:1f:3e:5d:27:8b:9f:07:ae:9e:fa:4e:f4:35: e1:83:27:53:90:0a:f9:82:0c:e2:fa:32:71:86:23: 27:01:ab:b9:54:2d:25:04:67:8d:55:75:a3:7f:d8: ac:66:5d:1e:8d:29:a2:63:cc:35:e0:8c:25:85:cb: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BC:D9:59:2C:1E:9E:B2:86:81:41:E9:2F:A5:7D:9C:54:1A:89:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3102d6d-5d60-486e-9cf9-d5f7159df765/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3102d6d-5d60-486e-9cf9-d5f7159df765/e3102d6d-5d60-486e-9cf9-d5f7159df765.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 104.193.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395204 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:66:12:05:8a:ff:cc:a3:f7:4e:c3:0b:eb:9b:1b:6a:50:f7: 39:99:8f:8d:5c:04:3d:8d:8d:e7:19:7a:70:01:13:56:7f:74: 5a:ec:00:2a:16:10:ed:4d:63:23:2b:37:9b:b8:cc:f3:6f:ae: ad:b8:df:89:5f:eb:51:9e:d2:c4:01:ad:1e:db:df:61:a8:db: f5:aa:c6:5b:5a:d3:26:4a:8a:3b:4e:25:7f:d9:a5:d8:a4:08: 09:05:4b:c0:fd:52:23:3c:a0:29:5b:e1:cf:12:3e:d5:74:5b: e6:4c:00:0d:d7:fe:ae:f1:ce:0e:0e:53:9c:fb:ea:ee:cc:74: fe:6b:e3:a6:6b:20:59:5c:a8:a3:01:b0:db:eb:ec:2c:31:5c: 69:52:fa:3b:7d:4d:0e:0d:97:ba:29:4f:a6:5d:42:c7:af:60: 38:8c:a4:92:d9:79:c6:8a:82:f5:16:c6:e5:47:43:5b:fc:80: 7c:94:e0:ff:86:fd:18:d8:dc:cd:04:14:47:29:66:e8:5e:56: 56:25:f3:68:e4:b7:d3:d0:c5:03:db:f0:38:6b:99:cb:7e:e3: 6c:f7:f8:9a:53:8b:2c:4c:72:09:02:83:37:07:b2:a6:d6:21: 9a:b3:7b:7e:9c:e8:4d:27:e3:71:e5:5f:9f:26:bd:3c:04:c2: d3:78:eb:9a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9fG325hwNvsZiFRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjE5MTIzOFoXDTI5MDEwNDIwMTIzOFowLzEtMCsGA1UEAxMk ZTMxMDJkNmQtNWQ2MC00ODZlLTljZjktZDVmNzE1OWRmNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVI/sSi0QNfCHUkLYDrY3GVvFPHjpQKI5vmZ LRjSHAnJgsEuZ5GEND5PAYcP94PbBvLwHPXbFFCo72b3neo9LW+gx5WO/AgITctR 35wn4HcfU1UFSJmSfXPRwgbT9zlwHyZ0K9/45PKPIa+9ZHJdfSM4uA8fO5FmRrsr gbZKnU8BnSS/THH6rFn/dHYyxKLtwFXXaEoAfySyRo8szYRZrLkDre9qzG9grSqk XvtEZcUjdb9JlRrWoQyHf0ngbzHowr5YUR8+XSeLnweunvpO9DXhgydTkAr5ggzi +jJxhiMnAau5VC0lBGeNVXWjf9isZl0ejSmiY8w14IwlhcsklwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFB282VksHp6yhoFB6S+lfZxUGoncMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l MzEwMmQ2ZC01ZDYwLTQ4NmUtOWNmOS1kNWY3MTU5ZGY3NjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2UzMTAyZDZkLTVkNjAtNDg2ZS05 Y2Y5LWQ1ZjcxNTlkZjc2NS9lMzEwMmQ2ZC01ZDYwLTQ4NmUtOWNmOS1kNWY3MTU5 ZGY3NjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowWAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgfEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFpmEgWK/8yj907DC+ubG2pQ9zmZj41cBD2NjecZenABE1Z/ dFrsACoWEO1NYyMrN5u4zPNvrq2434lf61Ge0sQBrR7b32Go2/Wqxlta0yZKijtO JX/ZpdikCAkFS8D9UiM8oClb4c8SPtV0W+ZMAA3X/q7xzg4OU5z76u7MdP5r46Zr IFlcqKMBsNvr7CwxXGlS+jt9TQ4Nl7opT6ZdQsevYDiMpJLZecaKgvUWxuVHQ1v8 gHyU4P+G/RjY3M0EFEcpZuheVlYl82jkt9PQxQPb8Dhrmct+42z3+JpTiyxMcgkC gzcHsqbWIZqze36c6E0n43HlX58mvTwEwtN465o= -----END CERTIFICATE-----Generated at Thu Oct 22 18:35:18 2026 by rpki-client