$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2705a22-3776-4436-aa57-454d14e70e0d.cer File: f2705a22-3776-4436-aa57-454d14e70e0d.cer (raw, json) Hash identifier: J1t2Uc2AEMvRJaa2Ou2ZuJdIzWhlyPkAcguDSxROe8Y= Subject key identifier: C0:7F:BE:A8:7F:19:6E:6A:A6:EE:07:2F:03:E4:DE:59:9B:85:34:41 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F59385261CBD2DACD38B84980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2705a22-3776-4436-aa57-454d14e70e0d/f2705a22-3776-4436-aa57-454d14e70e0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2705a22-3776-4436-aa57-454d14e70e0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 16:35:52 +0000 Certificate not after: Tue 02 Jan 2029 17:35:52 +0000 Subordinate resources: AS: 32117 IP: 199.190.159.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:38:52:61:cb:d2:da:cd:38:b8:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 30 16:35:52 2026 GMT Not After : Jan 2 17:35:52 2029 GMT Subject: CN=f2705a22-3776-4436-aa57-454d14e70e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:79:db:6d:d3:8b:25:0e:b7:2b:a1:cd:6b: df:19:8a:63:34:94:d7:ff:44:7a:f0:9c:6f:fb:f8: 71:a8:50:65:81:ef:64:34:05:2b:41:98:16:08:9d: b5:e7:1d:2c:62:0b:05:46:0a:09:97:ee:ba:3f:04: 48:d6:18:55:5e:ff:c8:b5:bb:d7:82:d5:9d:d9:df: e1:52:62:27:86:c9:f8:62:c8:da:f9:84:4c:2c:bd: fa:fa:13:3d:6e:cc:d5:95:36:ea:82:6d:d7:f5:c5: d2:49:e2:ba:50:d1:11:bf:b0:74:88:3e:dd:e0:97: 1e:15:96:b4:b7:8a:b0:5a:70:6b:75:23:22:6c:f9: 6d:90:f4:a3:86:ec:c2:f9:5e:79:d9:17:a6:d3:ca: b6:d5:75:22:1d:13:92:9b:54:e7:56:5a:36:58:d6: 19:5b:40:6a:ef:21:d3:67:5b:ed:a2:0e:a5:0d:a9: e7:98:ff:b0:6e:6a:df:71:ec:2f:6e:23:de:e6:f8: c9:7d:6b:8d:ff:8f:2c:a9:b5:e8:74:37:66:65:07: 88:d7:78:a4:43:be:ec:41:02:b8:d6:cd:dd:f9:bc: 3c:f6:2b:a2:20:65:cf:9a:49:7e:c2:cb:fa:bd:df: 58:57:28:47:db:44:78:74:84:f8:6c:3e:f2:20:43: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7F:BE:A8:7F:19:6E:6A:A6:EE:07:2F:03:E4:DE:59:9B:85:34:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2705a22-3776-4436-aa57-454d14e70e0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2705a22-3776-4436-aa57-454d14e70e0d/f2705a22-3776-4436-aa57-454d14e70e0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.190.159.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32117 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:51:5f:d0:2a:61:9f:e6:77:21:c5:79:46:68:50:e7:c2:a6: b6:1b:4c:45:08:ac:5a:e2:40:da:0c:e2:61:ed:ba:8d:81:26: b1:f1:2d:21:49:13:85:95:71:69:58:a2:b8:31:c6:bf:6d:fe: fb:ca:84:a1:ed:0c:e1:2f:fc:eb:d3:6e:c1:db:21:dc:03:f3: 2e:34:b8:ce:79:62:f4:e2:c1:35:66:0a:00:78:39:fa:97:2b: 5b:8c:e7:dc:31:79:19:ca:8c:eb:d3:12:07:05:6a:b2:a4:ac: ec:f2:24:92:d2:c2:83:d6:bc:24:9f:30:0d:64:dd:19:9a:af: 93:40:a0:c4:af:3a:2c:3a:b1:07:7e:04:df:1d:9f:1a:4a:22: e1:aa:cf:4a:11:24:7f:ee:a6:44:92:10:9e:7a:ec:40:04:8a: be:5f:77:4f:cd:74:96:15:59:dd:a4:7c:fd:e1:72:54:53:1a: a1:31:5c:20:f5:f4:57:31:90:19:5a:8c:33:53:8c:aa:e1:2d: 39:ba:57:69:45:f9:d8:da:b4:8d:ea:62:99:06:6d:af:de:1f: fb:71:14:6c:fa:d2:52:d6:1d:50:3f:d2:f1:47:5d:bc:66:62: 6d:5b:79:fd:89:89:b9:66:42:17:40:ec:9e:06:5d:3c:8b:27: 8d:2d:84:75 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9ZOFJhy9LazTi4SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkzMDE2MzU1MloXDTI5MDEwMjE3MzU1MlowLzEtMCsGA1UEAxMk ZjI3MDVhMjItMzc3Ni00NDM2LWFhNTctNDU0ZDE0ZTcwZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgd5223TiyUOtyuhzWvfGYpjNJTX/0R68Jxv +/hxqFBlge9kNAUrQZgWCJ215x0sYgsFRgoJl+66PwRI1hhVXv/ItbvXgtWd2d/h UmInhsn4Ysja+YRMLL36+hM9bszVlTbqgm3X9cXSSeK6UNERv7B0iD7d4JceFZa0 t4qwWnBrdSMibPltkPSjhuzC+V552Rem08q21XUiHROSm1TnVlo2WNYZW0Bq7yHT Z1vtog6lDannmP+wbmrfcewvbiPe5vjJfWuN/48sqbXodDdmZQeI13ikQ77sQQK4 1s3d+bw89iuiIGXPmkl+wsv6vd9YVyhH20R4dIT4bD7yIEPXCQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFMB/vqh/GW5qpu4HLwPk3lmbhTRBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m MjcwNWEyMi0zNzc2LTQ0MzYtYWE1Ny00NTRkMTRlNzBlMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2YyNzA1YTIyLTM3NzYtNDQzNi1h YTU3LTQ1NGQxNGU3MGUwZC9mMjcwNWEyMi0zNzc2LTQ0MzYtYWE1Ny00NTRkMTRl NzBlMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHvp8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fXUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAMlFf0Cphn+Z3IcV5RmhQ58KmthtMRQisWuJA2gziYe26jYEm sfEtIUkThZVxaViiuDHGv23++8qEoe0M4S/869Nuwdsh3APzLjS4znli9OLBNWYK AHg5+pcrW4zn3DF5GcqM69MSBwVqsqSs7PIkktLCg9a8JJ8wDWTdGZqvk0CgxK86 LDqxB34E3x2fGkoi4arPShEkf+6mRJIQnnrsQASKvl93T810lhVZ3aR8/eFyVFMa oTFcIPX0VzGQGVqMM1OMquEtObpXaUX52Nq0jepimQZtr94f+3EUbPrSUtYdUD/S 8UddvGZibVt5/YmJuWZCF0DsngZdPIsnjS2EdQ== -----END CERTIFICATE-----Generated at Sun Nov 1 01:40:42 2026 by rpki-client