$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1.cer File: e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1.cer (raw, json) Hash identifier: 5WqdQpUoapu3kU0tdVTCdcNE8JPrAMcMGvD3kE5pwvU= Subject key identifier: 4E:AF:4A:9B:32:46:74:CA:CF:68:DB:A9:6A:8F:24:69:BA:18:95:B6 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6CAC800FEED3D9F8455B8880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1/e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 15:50:19 +0000 Certificate not after: Tue 09 Jan 2029 16:50:19 +0000 Subordinate resources: AS: 30268 IP: 69.58.160.0/20 IP: 216.167.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:ac:80:0f:ee:d3:d9:f8:45:5b:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 7 15:50:19 2026 GMT Not After : Jan 9 16:50:19 2029 GMT Subject: CN=e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:ae:0d:31:c8:64:10:ba:e1:83:c7:a1:76: b0:e6:21:8c:fe:fd:ad:ba:9c:34:2a:51:81:4b:6d: 39:50:be:13:c7:75:06:d1:f2:f6:95:a4:9a:a0:80: 99:d2:14:50:7d:37:a9:42:bf:78:e4:c4:1d:7c:8f: ad:0e:f7:aa:51:93:33:49:f2:2d:61:8a:17:e5:fa: 10:f2:4e:3d:d5:a8:c6:d4:f0:0a:b3:2a:73:db:95: f7:51:b1:31:8b:39:cd:6b:f3:e7:d9:04:44:4d:0d: 93:5f:63:1f:03:aa:f1:94:08:ae:07:ad:96:7e:a2: b7:f4:bb:7c:e5:c5:b1:ef:b0:65:de:dc:44:9a:3b: 5e:c3:c5:fe:d9:10:94:95:17:4b:51:e8:bb:99:21: f7:b6:8e:c8:ab:63:85:49:35:e7:93:ae:64:7f:be: fe:2e:82:09:55:df:e1:f2:b0:3c:d1:fa:02:62:ac: ab:bc:d9:35:f3:c3:bd:ec:90:31:1f:0e:95:04:b5: 12:69:8c:e9:c4:fb:7f:2c:59:fe:57:eb:37:bb:bb: 7c:12:89:9c:fb:f5:a6:44:86:e1:41:a6:57:db:76: 27:7e:6f:5e:08:9c:1f:07:4d:11:c0:75:69:aa:05: d0:6f:5b:d1:c4:2a:c1:07:9f:1e:11:e2:0e:85:31: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AF:4A:9B:32:46:74:CA:CF:68:DB:A9:6A:8F:24:69:BA:18:95:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1/e57b90fa-2c0e-4e34-b4ba-ab6b8e6aa1c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 69.58.160.0/20 216.167.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30268 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:28:b8:0a:28:9d:72:99:b9:17:a5:6f:b0:67:0d:28:3e:ed: 8c:c9:59:3f:1d:95:63:78:e5:a1:a4:5a:ac:17:8f:6b:5e:97: 6d:c7:97:d6:c9:73:01:86:a4:b0:83:39:86:31:fc:fd:03:7a: bf:0c:1c:88:6f:e0:51:d6:e2:95:84:27:2f:1e:a7:bd:91:c0: e3:64:f6:26:a7:bd:c1:a1:95:8c:b9:e1:6e:e8:e3:dc:c4:5f: b1:68:25:16:0f:07:e7:38:99:d3:5a:33:49:ed:db:bb:04:ac: 3f:68:04:b2:ef:0c:d6:b6:cb:46:98:1b:d1:3e:4b:c7:4e:cc: 75:15:09:24:29:2a:6d:08:93:68:3a:e7:8c:80:be:78:64:b0: 5e:a6:66:1f:65:46:cc:c6:6e:54:a9:cc:53:fb:3f:c7:3f:3d: 59:91:3d:6e:42:ad:54:9f:e1:4c:53:af:d3:69:62:65:b8:ce: 1a:fe:0b:c8:60:05:74:13:bf:96:0a:92:2f:d4:0d:2b:c4:0f: 4e:9b:97:b8:f1:79:ef:4c:86:f0:12:c1:89:23:95:26:04:e4: 88:3a:cc:ef:cc:95:02:3e:bc:d2:59:22:a2:0e:a2:6c:9a:b3: 82:de:0c:a5:32:c2:48:14:0b:fd:83:f8:f0:c3:09:03:c8:25: 40:bf:4f:0c -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE9srIAP7tPZ+EVbiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNzE1NTAxOVoXDTI5MDEwOTE2NTAxOVowLzEtMCsGA1UEAxMk ZTU3YjkwZmEtMmMwZS00ZTM0LWI0YmEtYWI2YjhlNmFhMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYCuDTHIZBC64YPHoXaw5iGM/v2tupw0KlGB S205UL4Tx3UG0fL2laSaoICZ0hRQfTepQr945MQdfI+tDveqUZMzSfItYYoX5foQ 8k491ajG1PAKsypz25X3UbExiznNa/Pn2QRETQ2TX2MfA6rxlAiuB62WfqK39Lt8 5cWx77Bl3txEmjtew8X+2RCUlRdLUei7mSH3to7Iq2OFSTXnk65kf77+LoIJVd/h 8rA80foCYqyrvNk188O97JAxHw6VBLUSaYzpxPt/LFn+V+s3u7t8Eomc+/WmRIbh QaZX23Ynfm9eCJwfB00RwHVpqgXQb1vRxCrBB58eEeIOhTHhZQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFE6vSpsyRnTKz2jbqWqPJGm6GJW2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l NTdiOTBmYS0yYzBlLTRlMzQtYjRiYS1hYjZiOGU2YWExYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2U1N2I5MGZhLTJjMGUtNGUzNC1i NGJhLWFiNmI4ZTZhYTFjMS9lNTdiOTBmYS0yYzBlLTRlMzQtYjRiYS1hYjZiOGU2 YWExYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARFOqADBATYp9AwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICdjwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAPii4Ciidcpm5F6VvsGcNKD7tjMlZPx2VY3jloaRa rBePa16XbceX1slzAYaksIM5hjH8/QN6vwwciG/gUdbilYQnLx6nvZHA42T2Jqe9 waGVjLnhbujj3MRfsWglFg8H5ziZ01ozSe3buwSsP2gEsu8M1rbLRpgb0T5Lx07M dRUJJCkqbQiTaDrnjIC+eGSwXqZmH2VGzMZuVKnMU/s/xz89WZE9bkKtVJ/hTFOv 02liZbjOGv4LyGAFdBO/lgqSL9QNK8QPTpuXuPF570yG8BLBiSOVJgTkiDrM78yV Aj680lkiog6ibJqzgt4MpTLCSBQL/YP48MMJA8glQL9PDA== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:27 2026 by rpki-client