$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.cer File: ec84cc45-e44f-4542-a7f7-9a7ce3906c64.cer (raw, json) Hash identifier: MfRi2y5Lb/73dzXT4BGZe0C9gYdpEgjIqGgW80h35ok= Subject key identifier: 36:BA:A1:A1:D5:EB:B8:A4:D0:DC:43:FD:63:B6:A7:A9:50:51:87:FD Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F565E3EDED11C1DD63705B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Sep 2026 16:04:52 +0000 Certificate not after: Mon 01 Jan 2029 17:04:52 +0000 Subordinate resources: AS: 33673 IP: 162.223.60.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:5e:3e:de:d1:1c:1d:d6:37:05:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 29 16:04:52 2026 GMT Not After : Jan 1 17:04:52 2029 GMT Subject: CN=ec84cc45-e44f-4542-a7f7-9a7ce3906c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:95:73:83:0f:41:a4:a6:91:4c:e0:54:52: e1:56:f6:f4:18:2d:65:99:de:17:eb:90:6f:38:23: 2a:21:a3:45:1f:c9:d8:45:a4:1b:35:a2:90:ad:8e: 48:70:77:b1:41:49:12:00:47:43:4f:8b:de:a6:a5: 4c:73:3e:da:a7:d3:4c:15:ad:a9:48:97:c2:04:1e: 24:fc:bb:f2:56:0a:cd:83:87:b2:76:f7:af:a5:9e: 0b:cb:a1:4e:de:84:8e:4d:ad:ce:66:e4:4e:9e:db: 44:2c:e1:b1:d0:79:bb:93:d4:fb:75:f0:65:f6:1d: 5a:d5:f7:9b:06:b4:b8:23:bf:9a:21:39:9a:0c:8c: fd:c1:35:16:f9:e6:87:a9:ad:28:68:0c:fb:0d:ac: 15:2e:e4:62:d1:a3:7e:98:e1:87:85:11:8a:fd:3c: 49:0f:a3:49:9e:ed:37:8e:cb:38:98:98:21:27:50: 89:b5:6b:b5:ea:ca:8a:2f:13:20:bb:4b:cf:8a:44: 0e:f3:9a:6d:d9:b8:9f:96:f7:a2:67:d5:7a:28:f9: 58:30:e0:10:9f:18:c1:1a:6f:98:82:44:3d:88:c0: 89:e5:37:72:9f:88:bf:13:cf:22:8e:f9:60:1e:41: f6:6c:b8:45:1d:4a:a9:4a:4c:e3:89:84:22:af:28: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BA:A1:A1:D5:EB:B8:A4:D0:DC:43:FD:63:B6:A7:A9:50:51:87:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ec84cc45-e44f-4542-a7f7-9a7ce3906c64/ec84cc45-e44f-4542-a7f7-9a7ce3906c64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 162.223.60.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33673 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:42:09:c7:a0:8c:84:c0:e1:f1:e4:b5:77:40:90:52:db:d7: 71:b7:fd:6b:50:e6:d4:62:c1:e3:bb:a8:93:fe:f7:20:00:c8: 04:6e:59:63:4d:18:e1:b7:34:ec:5b:dd:67:9b:45:55:9f:b0: 16:14:31:9c:35:22:de:ca:52:0e:e5:dc:27:3f:bf:3b:bf:ae: ed:03:bf:83:07:14:08:4f:20:0f:b5:1b:34:57:bd:37:3f:fe: 11:7a:37:6d:e0:61:13:d2:e8:2e:ed:55:0f:10:d9:e2:5e:25: a5:11:26:3a:d2:f3:68:a5:bc:fe:56:f4:3d:6c:0b:ee:8c:da: 8e:30:55:8a:0b:5d:16:79:f1:95:e1:7c:91:91:61:5c:3a:7d: 02:a9:dc:6d:8f:0a:ee:66:68:e8:74:39:de:88:da:a6:b7:f8: 28:83:41:b5:22:f9:be:10:ff:10:61:f2:25:1e:f1:45:bb:9b: 7c:34:a9:2d:ea:71:52:ce:5b:31:b9:7d:14:35:0e:31:8d:6c: a4:d9:2f:e9:c4:77:5b:7d:86:77:45:82:77:d4:8e:fc:1a:9f: fb:76:73:ae:3a:cd:f3:1c:73:34:07:ac:99:5e:9e:4f:34:f5: 43:e6:0a:3a:01:ec:6d:08:8e:d1:88:d0:20:f5:45:f2:de:88: 48:7b:a0:9e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9WXj7e0Rwd1jcFt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyOTE2MDQ1MloXDTI5MDEwMTE3MDQ1MlowLzEtMCsGA1UEAxMk ZWM4NGNjNDUtZTQ0Zi00NTQyLWE3ZjctOWE3Y2UzOTA2YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2qVc4MPQaSmkUzgVFLhVvb0GC1lmd4X65Bv OCMqIaNFH8nYRaQbNaKQrY5IcHexQUkSAEdDT4vepqVMcz7ap9NMFa2pSJfCBB4k /LvyVgrNg4eydvevpZ4Ly6FO3oSOTa3OZuROnttELOGx0Hm7k9T7dfBl9h1a1feb BrS4I7+aITmaDIz9wTUW+eaHqa0oaAz7DawVLuRi0aN+mOGHhRGK/TxJD6NJnu03 jss4mJghJ1CJtWu16sqKLxMgu0vPikQO85pt2biflveiZ9V6KPlYMOAQnxjBGm+Y gkQ9iMCJ5Tdyn4i/E88ijvlgHkH2bLhFHUqpSkzjiYQiryhHewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDa6oaHV67ik0NxD/WO2p6lQUYf9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9l Yzg0Y2M0NS1lNDRmLTQ1NDItYTdmNy05YTdjZTM5MDZjNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2VjODRjYzQ1LWU0NGYtNDU0Mi1h N2Y3LTlhN2NlMzkwNmM2NC9lYzg0Y2M0NS1lNDRmLTQ1NDItYTdmNy05YTdjZTM5 MDZjNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKi3zwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIOJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAARCCcegjITA4fHktXdAkFLb13G3/WtQ5tRiweO7qJP+9yAA yARuWWNNGOG3NOxb3WebRVWfsBYUMZw1It7KUg7l3Cc/vzu/ru0Dv4MHFAhPIA+1 GzRXvTc//hF6N23gYRPS6C7tVQ8Q2eJeJaURJjrS82ilvP5W9D1sC+6M2o4wVYoL XRZ58ZXhfJGRYVw6fQKp3G2PCu5maOh0Od6I2qa3+CiDQbUi+b4Q/xBh8iUe8UW7 m3w0qS3qcVLOWzG5fRQ1DjGNbKTZL+nEd1t9hndFgnfUjvwan/t2c646zfMcczQH rJlenk809UPmCjoB7G0IjtGI0CD1RfLeiEh7oJ4= -----END CERTIFICATE-----Generated at Sun Nov 1 08:28:44 2026 by rpki-client