$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce.cer File: e66620d0-bad7-4e88-82dd-63efe25bd4ce.cer (raw, json) Hash identifier: 95aeuU29nrWrNI7T7NbDxhcPUjRCCDq+j+xD4bFnGrc= Subject key identifier: 15:7D:6C:DB:C8:9D:27:68:C5:C5:68:D6:D9:D7:15:24:5F:34:C2:D4 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6C7BEC13B14EE23A0E0581C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/e66620d0-bad7-4e88-82dd-63efe25bd4ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 14:12:26 +0000 Certificate not after: Tue 09 Jan 2029 15:12:26 +0000 Subordinate resources: AS: 397640 IP: 161.199.56.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:7b:ec:13:b1:4e:e2:3a:0e:05:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 7 14:12:26 2026 GMT Not After : Jan 9 15:12:26 2029 GMT Subject: CN=e66620d0-bad7-4e88-82dd-63efe25bd4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e5:0f:b3:53:8e:55:07:be:d9:8f:46:8a:8f: a0:36:38:08:16:fc:3f:85:5d:19:27:85:4c:b5:96: d3:c3:62:ec:a3:22:02:a6:16:31:06:86:1f:2b:b2: ad:79:53:bf:44:fe:d5:ac:6b:b6:d7:e7:88:42:c2: e5:dc:cd:fb:32:6c:89:e8:63:5f:25:a9:04:66:f8: 0d:75:0a:ce:df:3a:70:8a:43:6f:53:d7:01:e1:51: ca:62:33:5b:29:e9:66:1e:5f:86:45:90:5f:a0:ca: e3:68:ad:e0:08:cb:c0:b8:f2:75:bb:2c:71:0a:76: 5e:26:ae:37:76:97:0d:23:e1:83:4f:32:68:83:b6: 80:1c:10:96:d0:62:ac:de:c0:31:ae:30:c6:36:89: 20:fc:07:7f:49:48:76:6e:33:24:26:f9:79:6f:a4: f6:13:f5:82:21:02:59:c9:52:30:cc:8b:9e:d7:6e: 48:cd:1d:7d:bb:04:55:59:ef:39:2a:37:a8:82:08: 53:80:57:1b:3b:28:52:95:06:2e:a5:08:00:70:d4: c6:6f:11:ad:a7:13:c1:52:c6:0b:22:bd:cb:bf:fd: d7:c3:28:a9:c8:a0:38:0b:78:1e:e0:9a:62:cd:8c: d6:67:4c:64:8f:28:30:08:e0:b3:0f:66:9d:ad:7a: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7D:6C:DB:C8:9D:27:68:C5:C5:68:D6:D9:D7:15:24:5F:34:C2:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e66620d0-bad7-4e88-82dd-63efe25bd4ce/e66620d0-bad7-4e88-82dd-63efe25bd4ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 161.199.56.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397640 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bd:6a:b4:31:d1:4c:a7:b1:00:37:7a:e1:3b:0c:5d:61:3f: 9d:0b:61:81:39:c2:ca:e1:54:39:76:33:d3:07:3a:ea:7d:0b: a1:17:2b:8a:82:d7:7f:ba:56:2a:eb:ef:86:84:57:59:bc:12: 37:1d:7f:7f:68:b8:79:64:6b:99:51:b2:25:08:59:73:1b:47: 0a:2b:16:25:02:0b:78:8c:50:fb:c7:c9:a9:13:a6:4c:7e:9b: b6:4b:89:e5:58:b3:a9:24:ee:13:c4:23:76:c1:ce:30:11:5c: 1e:46:c8:c6:a8:70:60:f6:14:42:30:8a:2b:d4:e2:82:1e:22: 4f:01:25:70:71:90:cb:24:4b:e1:b6:72:cb:ee:4f:6d:26:26: 43:7f:cb:d2:4a:47:1b:c1:e6:f3:85:0c:e5:58:ac:95:54:77: 27:38:26:4c:df:a1:74:e4:87:d6:e7:b5:50:a0:60:a2:d6:3c: 2e:bb:a3:ea:97:f3:6c:03:2d:98:69:1a:1f:55:2a:a6:1a:cf: bc:1c:55:d3:24:9a:5c:4e:d4:e0:6b:56:92:4e:55:a2:1e:a7: 0e:14:e4:d1:ac:77:9e:b2:05:52:5f:44:1c:2c:4b:37:0f:18: 07:6a:97:98:1d:db:9f:ee:b8:33:b0:80:ec:7a:bb:a6:4e:53: 9f:5b:ac:e6 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9se+wTsU7iOg4FgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNzE0MTIyNloXDTI5MDEwOTE1MTIyNlowLzEtMCsGA1UEAxMk ZTY2NjIwZDAtYmFkNy00ZTg4LTgyZGQtNjNlZmUyNWJkNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OUPs1OOVQe+2Y9Gio+gNjgIFvw/hV0ZJ4VM tZbTw2LsoyICphYxBoYfK7KteVO/RP7VrGu21+eIQsLl3M37MmyJ6GNfJakEZvgN dQrO3zpwikNvU9cB4VHKYjNbKelmHl+GRZBfoMrjaK3gCMvAuPJ1uyxxCnZeJq43 dpcNI+GDTzJog7aAHBCW0GKs3sAxrjDGNokg/Ad/SUh2bjMkJvl5b6T2E/WCIQJZ yVIwzIue125IzR19uwRVWe85KjeogghTgFcbOyhSlQYupQgAcNTGbxGtpxPBUsYL Ir3Lv/3XwyipyKA4C3ge4JpizYzWZ0xkjygwCOCzD2adrXppywIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBV9bNvInSdoxcVo1tnXFSRfNMLUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l NjY2MjBkMC1iYWQ3LTRlODgtODJkZC02M2VmZTI1YmQ0Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2U2NjYyMGQwLWJhZDctNGU4OC04 MmRkLTYzZWZlMjViZDRjZS9lNjY2MjBkMC1iYWQ3LTRlODgtODJkZC02M2VmZTI1 YmQ0Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGhxzgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhFIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABu9arQx0UynsQA3euE7DF1hP50LYYE5wsrhVDl2M9MHOup9 C6EXK4qC13+6Virr74aEV1m8Ejcdf39ouHlka5lRsiUIWXMbRworFiUCC3iMUPvH yakTpkx+m7ZLieVYs6kk7hPEI3bBzjARXB5GyMaocGD2FEIwiivU4oIeIk8BJXBx kMskS+G2csvuT20mJkN/y9JKRxvB5vOFDOVYrJVUdyc4JkzfoXTkh9bntVCgYKLW PC67o+qX82wDLZhpGh9VKqYaz7wcVdMkmlxO1OBrVpJOVaIepw4U5NGsd56yBVJf RBwsSzcPGAdql5gd25/uuDOwgOx6u6ZOU59brOY= -----END CERTIFICATE-----Generated at Sun Nov 1 07:31:24 2026 by rpki-client