$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e39b140e-5f23-4167-9cce-ac5e6cfff2ae.cer File: e39b140e-5f23-4167-9cce-ac5e6cfff2ae.cer (raw, json) Hash identifier: KvIOgpNHTj0XA7FuYpsTw5f1lppOUoAiDKGlgELtfDM= Subject key identifier: 37:DA:61:F7:54:1C:69:15:AD:AB:C5:68:86:70:E4:20:86:E3:C5:AF Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8D1F4D2D0BB9884964B1BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e39b140e-5f23-4167-9cce-ac5e6cfff2ae/e39b140e-5f23-4167-9cce-ac5e6cfff2ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e39b140e-5f23-4167-9cce-ac5e6cfff2ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Oct 2026 06:47:30 +0000 Certificate not after: Sun 21 Jan 2029 07:47:30 +0000 Subordinate resources: IP: 23.165.180.0/24 IP: 2602:f2c0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:1f:4d:2d:0b:b9:88:49:64:b1:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 19 06:47:30 2026 GMT Not After : Jan 21 07:47:30 2029 GMT Subject: CN=e39b140e-5f23-4167-9cce-ac5e6cfff2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:78:be:14:61:07:f3:a3:f0:fc:e6:1c:88: 12:07:b9:79:2d:36:bd:31:28:32:4f:98:f5:6f:98: e0:e8:3f:98:f6:23:87:88:9d:50:d9:a0:70:42:e5: cf:4c:09:c0:6f:85:08:88:85:fa:d4:d0:6a:0f:c4: 1f:ba:bf:97:d3:7f:f7:ca:d6:4a:7c:3b:cf:b1:db: 54:3d:f1:d8:48:36:9b:6c:36:d9:5e:14:d1:8a:54: df:dc:0c:63:bf:7e:e4:f5:ff:8f:b8:c3:b4:e0:b1: 1a:d8:97:52:95:c7:f5:c2:75:15:d3:17:e8:6e:d6: 78:cf:e0:7d:04:81:86:c7:97:5d:dc:ba:5f:02:d2: d4:8a:bc:8e:ba:0e:48:f4:2f:28:a5:46:b3:23:bb: d2:30:94:9f:4d:f7:86:67:24:a0:de:20:db:9e:38: 63:b2:71:89:88:c7:d0:9d:e1:49:5a:a9:3d:21:df: 0d:3e:0b:74:16:71:5f:f9:a7:9b:45:a4:75:69:d3: 62:0b:9c:72:29:4d:8b:97:a5:49:72:24:06:8b:9e: 40:02:27:4a:fa:a6:27:04:24:e0:c8:60:3c:3e:aa: 41:87:df:13:6d:eb:6c:2f:d5:03:0e:41:0d:3a:ce: 33:f4:b0:60:dd:68:51:60:58:4f:0c:96:c3:5d:94: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DA:61:F7:54:1C:69:15:AD:AB:C5:68:86:70:E4:20:86:E3:C5:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e39b140e-5f23-4167-9cce-ac5e6cfff2ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e39b140e-5f23-4167-9cce-ac5e6cfff2ae/e39b140e-5f23-4167-9cce-ac5e6cfff2ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.165.180.0/24 IPv6: 2602:f2c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:84:5b:3e:4f:63:d8:54:d2:e7:21:b8:5d:e1:f9:47:9c:9c: 7e:ca:9b:4e:d2:2b:5a:3b:c8:87:a7:c5:9b:40:df:ab:08:19: 20:e7:f9:9b:7d:dd:e5:41:41:42:c6:24:64:c4:bd:38:2e:be: 1b:b1:9d:61:f8:a0:06:29:32:21:4e:98:f3:4a:10:2d:a3:e8: 3b:67:2a:9b:b8:73:a0:86:96:4a:96:0e:7c:b3:ef:7c:b8:98: 0f:43:97:02:ff:4d:fe:29:a3:0b:d7:72:5b:ce:8e:d0:14:9d: e8:6a:71:66:e5:cf:23:8b:43:7b:77:83:25:53:ba:80:d6:7d: f0:cc:88:89:49:e4:09:a4:39:1e:ad:31:64:6a:b2:f9:f4:62: fa:eb:3b:46:28:6b:f3:dc:11:14:d2:0a:af:6e:32:8b:47:5c: a5:89:05:fb:3a:d0:14:4a:36:5b:df:c4:17:6e:84:1e:8a:62: 47:d6:d7:5a:d4:f1:e5:a6:86:88:97:b3:d9:5e:f8:a6:cf:6d: 10:e3:7a:b0:a9:c1:de:f7:97:a7:b0:7b:22:19:95:24:08:89: 0d:a4:42:d1:6d:53:95:9d:02:e6:08:32:88:3b:e7:21:fe:d6: 70:3c:40:c4:c7:d1:d7:d3:e1:67:47:2e:25:05:38:c4:2d:f1: d3:75:dc:2d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+NH00tC7mISWSxvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxOTA2NDczMFoXDTI5MDEyMTA3NDczMFowLzEtMCsGA1UEAxMk ZTM5YjE0MGUtNWYyMy00MTY3LTljY2UtYWM1ZTZjZmZmMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl54vhRhB/Oj8PzmHIgSB7l5LTa9MSgyT5j1 b5jg6D+Y9iOHiJ1Q2aBwQuXPTAnAb4UIiIX61NBqD8Qfur+X03/3ytZKfDvPsdtU PfHYSDabbDbZXhTRilTf3Axjv37k9f+PuMO04LEa2JdSlcf1wnUV0xfobtZ4z+B9 BIGGx5dd3LpfAtLUiryOug5I9C8opUazI7vSMJSfTfeGZySg3iDbnjhjsnGJiMfQ neFJWqk9Id8NPgt0FnFf+aebRaR1adNiC5xyKU2Ll6VJciQGi55AAidK+qYnBCTg yGA8PqpBh98TbetsL9UDDkENOs4z9LBg3WhRYFhPDJbDXZQpJQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDfaYfdUHGkVravFaIZw5CCG48WvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l MzliMTQwZS01ZjIzLTQxNjctOWNjZS1hYzVlNmNmZmYyYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2UzOWIxNDBlLTVmMjMtNDE2Ny05 Y2NlLWFjNWU2Y2ZmZjJhZS9lMzliMTQwZS01ZjIzLTQxNjctOWNjZS1hYzVlNmNm ZmYyYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpbQwDgQCAAIwCAMGACYC8sAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABuEWz5PY9hU0uchuF3h+UecnH7Km07SK1o7yIenxZtA36sIGSDn+Zt93eVBQULG JGTEvTguvhuxnWH4oAYpMiFOmPNKEC2j6DtnKpu4c6CGlkqWDnyz73y4mA9DlwL/ Tf4powvXclvOjtAUnehqcWblzyOLQ3t3gyVTuoDWffDMiIlJ5AmkOR6tMWRqsvn0 YvrrO0Yoa/PcERTSCq9uMotHXKWJBfs60BRKNlvfxBduhB6KYkfW11rU8eWmhoiX s9le+KbPbRDjerCpwd73l6eweyIZlSQIiQ2kQtFtU5WdAuYIMog75yH+1nA8QMTH 0dfT4WdHLiUFOMQt8dN13C0= -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:44 2026 by rpki-client