$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f67549bf-d36a-48af-856d-08792e1f6ba8.cer File: f67549bf-d36a-48af-856d-08792e1f6ba8.cer (raw, json) Hash identifier: n0rKZw0uCHSDswl/zEZlHQU8Lro+0PJ+unceezuVxDA= Subject key identifier: CB:0A:47:F6:30:47:52:7D:60:48:42:96:B3:71:F1:C8:FC:3E:64:D4 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5E96E0904E355107A632C440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f67549bf-d36a-48af-856d-08792e1f6ba8/f67549bf-d36a-48af-856d-08792e1f6ba8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f67549bf-d36a-48af-856d-08792e1f6ba8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 14:45:26 +0000 Certificate not after: Thu 04 Jan 2029 15:45:26 +0000 Subordinate resources: AS: 401838 AS: 401937 IP: 206.208.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:96:e0:90:4e:35:51:07:a6:32:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 2 14:45:26 2026 GMT Not After : Jan 4 15:45:26 2029 GMT Subject: CN=f67549bf-d36a-48af-856d-08792e1f6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c3:28:37:51:eb:25:08:5f:2b:2d:05:df:b2: c2:61:8f:a5:1e:28:e2:9c:7a:23:8e:96:cc:b2:1f: 77:e7:ab:b9:0f:f5:fb:18:2c:be:99:83:b8:20:ab: 81:2d:ef:8c:ed:e9:11:1c:95:90:3b:ae:14:5c:49: 8c:61:f9:d7:40:1d:83:55:bf:67:27:d8:0e:f1:33: 52:17:cd:10:29:28:8f:67:85:16:78:3f:ef:64:c4: 97:99:ce:f5:9a:6d:18:f4:26:61:d7:89:87:17:c4: a3:ea:4c:6b:74:e5:93:6e:c2:f3:86:15:21:fd:45: a6:e4:d8:69:0a:e3:78:46:15:07:2b:06:c9:36:a8: f0:f7:24:d5:13:b8:dc:1b:b9:dc:a7:af:37:b5:89: b6:0d:94:9a:c4:cd:9d:c4:f8:0a:aa:88:03:52:f8: 97:88:28:75:15:64:6d:b5:11:e4:99:bf:d1:e1:eb: 61:f2:dd:9f:4d:1e:eb:0f:97:84:ac:01:6a:ca:5b: 98:3c:f5:ae:88:2f:f6:b9:3e:36:b1:18:76:c5:48: f0:36:14:5a:b8:46:78:af:e7:86:64:c4:19:ab:ff: 25:96:27:db:bf:ca:db:89:d3:80:fc:1f:b0:94:02: 5e:3a:17:43:86:3f:32:78:0f:c4:16:b8:60:11:ef: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0A:47:F6:30:47:52:7D:60:48:42:96:B3:71:F1:C8:FC:3E:64:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f67549bf-d36a-48af-856d-08792e1f6ba8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f67549bf-d36a-48af-856d-08792e1f6ba8/f67549bf-d36a-48af-856d-08792e1f6ba8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 206.208.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401838 401937 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cd:f5:35:64:2b:f8:76:ba:e1:0e:c9:7d:27:68:df:ee:11: c2:67:b0:2a:20:2b:91:73:a8:85:f6:f8:19:6e:cc:07:55:08: 42:92:ba:f6:48:36:22:cc:36:4a:60:92:1b:d7:32:7f:98:e1: 6f:a2:22:f3:7d:62:37:d1:b8:20:89:0e:9a:cd:51:fa:42:2e: e5:99:fc:0f:b0:50:6c:9d:88:14:dc:16:cb:00:6a:ff:34:33: 5d:dd:81:b6:7a:19:f7:47:26:44:f1:bd:d3:e0:16:fd:f4:93: 94:86:20:b5:f0:8e:1d:96:1b:9e:f6:26:d7:12:f4:35:f8:8f: ed:99:e0:c9:51:28:13:a1:fb:85:13:c1:f6:bd:cf:d4:ef:8b: c7:c9:6a:a1:27:41:e3:8d:4c:b6:48:78:ab:bd:93:22:27:c5: 99:8b:8d:f5:3c:01:3c:10:bc:8a:b6:e7:6a:de:c9:a1:09:21: d5:6e:92:f2:40:49:11:e0:7d:50:74:5b:f5:95:7d:8b:2c:3c: d6:b7:fb:3f:5c:fc:77:54:42:a2:3b:02:6e:87:41:a7:a2:a4: 50:a0:cb:9d:c7:dc:49:5b:42:3a:45:e5:4a:13:55:af:02:34: 08:2b:ac:58:c6:4c:c6:38:0a:01:91:a9:44:a9:24:51:f9:d7: fb:40:3e:4a -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE9eluCQTjVRB6YyxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwMjE0NDUyNloXDTI5MDEwNDE1NDUyNlowLzEtMCsGA1UEAxMk ZjY3NTQ5YmYtZDM2YS00OGFmLTg1NmQtMDg3OTJlMWY2YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMMoN1HrJQhfKy0F37LCYY+lHijinHojjpbM sh9356u5D/X7GCy+mYO4IKuBLe+M7ekRHJWQO64UXEmMYfnXQB2DVb9nJ9gO8TNS F80QKSiPZ4UWeD/vZMSXmc71mm0Y9CZh14mHF8Sj6kxrdOWTbsLzhhUh/UWm5Nhp CuN4RhUHKwbJNqjw9yTVE7jcG7ncp683tYm2DZSaxM2dxPgKqogDUviXiCh1FWRt tRHkmb/R4eth8t2fTR7rD5eErAFqyluYPPWuiC/2uT42sRh2xUjwNhRauEZ4r+eG ZMQZq/8llifbv8rbidOA/B+wlAJeOhdDhj8yeA/EFrhgEe/RQQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFMsKR/YwR1J9YEhClrNx8cj8PmTUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m Njc1NDliZi1kMzZhLTQ4YWYtODU2ZC0wODc5MmUxZjZiYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2Y2NzU0OWJmLWQzNmEtNDhhZi04 NTZkLTA4NzkyZTFmNmJhOC9mNjc1NDliZi1kMzZhLTQ4YWYtODU2ZC0wODc5MmUx ZjZiYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALO0BQwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID BiGuAgMGIhEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAis31NWQr+Ha64Q7JfSdo3+4RwmewKiArkXOohfb4 GW7MB1UIQpK69kg2Isw2SmCSG9cyf5jhb6Ii831iN9G4IIkOms1R+kIu5Zn8D7BQ bJ2IFNwWywBq/zQzXd2BtnoZ90cmRPG90+AW/fSTlIYgtfCOHZYbnvYm1xL0NfiP 7ZngyVEoE6H7hRPB9r3P1O+Lx8lqoSdB441Mtkh4q72TIifFmYuN9TwBPBC8irbn at7JoQkh1W6S8kBJEeB9UHRb9ZV9iyw81rf7P1z8d1RCojsCbodBp6KkUKDLncfc SVtCOkXlShNVrwI0CCusWMZMxjgKAZGpRKkkUfnX+0A+Sg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:28 2026 by rpki-client