$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9b1e7c5-febc-4b64-890c-7bf423ee5df6.cer File: f9b1e7c5-febc-4b64-890c-7bf423ee5df6.cer (raw, json) Hash identifier: gXAQyQFU4rFVIDa3dtipsq7blFEmkZtdPUUgrfygoIc= Subject key identifier: E6:8B:28:6D:E4:8A:7E:42:49:7E:D7:42:73:1A:76:33:6B:A1:00:CC Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F5341E070743FC7E0F889B0E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9b1e7c5-febc-4b64-890c-7bf423ee5df6/f9b1e7c5-febc-4b64-890c-7bf423ee5df6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9b1e7c5-febc-4b64-890c-7bf423ee5df6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 13:20:17 +0000 Certificate not after: Sun 31 Dec 2028 14:20:17 +0000 Subordinate resources: AS: 36731 IP: 67.22.120.0/21 IP: 199.48.100.0/22 IP: 2602:ffc1::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:41:e0:70:74:3f:c7:e0:f8:89:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 28 13:20:17 2026 GMT Not After : Dec 31 14:20:17 2028 GMT Subject: CN=f9b1e7c5-febc-4b64-890c-7bf423ee5df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cb:89:01:c8:18:34:6a:a4:87:4d:4b:3d:92: bf:c8:2e:b9:63:61:05:04:64:ef:bd:ab:ff:f0:23: 9d:82:61:fa:5f:07:49:f5:fa:96:4a:7d:51:d3:3b: 5a:77:5c:5d:bf:28:98:87:9a:3f:f5:21:0c:77:d7: 37:4f:09:e8:57:c8:eb:09:bd:7f:52:dc:00:8e:d5: cd:2f:49:04:19:59:40:ea:b6:a7:e6:12:34:d2:6a: 34:08:3b:c8:78:89:b2:9b:d2:44:18:b5:df:91:08: f6:c0:7d:64:44:d6:f9:cd:2a:65:00:db:14:44:31: 73:35:20:cf:5d:7d:0b:51:2a:4f:a4:04:46:f8:d3: 62:eb:0e:60:57:27:ee:87:e8:98:fa:c7:f9:57:42: 3c:13:ae:c7:0e:6f:45:4f:1f:27:e7:76:10:dc:ba: ca:bc:6e:5c:14:17:bb:4a:99:6c:d9:01:8b:63:15: ec:9e:ea:c7:9f:d8:44:28:72:8a:8b:81:52:75:5a: 25:d2:ed:d2:9e:05:56:d4:83:18:ab:9f:e9:0a:2e: 82:01:7d:2c:b3:a9:eb:5c:c9:79:1c:91:70:97:30: ac:8c:93:db:26:a6:b5:05:06:b7:e0:5a:b0:8b:21: 29:7f:01:eb:11:34:48:c2:2e:ba:0c:23:75:f0:d7: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:28:6D:E4:8A:7E:42:49:7E:D7:42:73:1A:76:33:6B:A1:00:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9b1e7c5-febc-4b64-890c-7bf423ee5df6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9b1e7c5-febc-4b64-890c-7bf423ee5df6/f9b1e7c5-febc-4b64-890c-7bf423ee5df6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 67.22.120.0/21 199.48.100.0/22 IPv6: 2602:ffc1::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36731 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:28:27:88:54:4a:ba:8f:84:17:54:fb:75:35:50:4a:dc:a6: 11:49:28:c3:ac:5f:98:1d:65:51:e1:78:f6:00:fb:0e:43:7b: 63:56:0f:be:6f:8b:1f:5a:26:cf:04:5c:6e:e8:c9:38:50:53: 83:70:32:49:2a:bc:31:c3:13:fa:aa:d0:cf:99:19:f9:67:e4: ae:a7:83:c3:e2:14:f9:ef:be:15:1c:f7:8e:39:54:cd:e2:83: 51:37:69:db:93:eb:2a:cd:e3:1c:ab:2a:a2:9e:f8:24:fc:b8: 0e:04:34:64:18:05:67:bf:14:ae:8b:a2:c5:dc:ec:29:18:28: 2b:01:b5:5d:e0:1b:dc:90:61:6c:fb:9e:4e:b8:26:7e:71:5d: af:58:84:a6:48:44:d3:7d:9c:73:e4:25:f4:77:93:d3:87:b0: 7c:1a:4a:86:23:25:c9:98:aa:4e:23:68:22:f1:4a:a4:b8:27: d7:14:50:44:50:22:07:15:a9:39:5c:a1:ef:b2:24:93:0c:2d: b1:51:5a:f1:c3:8b:da:3c:9e:bc:5b:1b:2d:6f:2f:1c:d0:7f: 42:fc:71:f2:fa:12:ea:1d:19:6d:94:97:17:e1:90:74:99:95: 46:bd:a9:07:08:9c:f1:0a:5b:3a:08:f5:15:d5:c0:62:84:71: 54:27:d4:60 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9TQeBwdD/H4PiJsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyODEzMjAxN1oXDTI4MTIzMTE0MjAxN1owLzEtMCsGA1UEAxMk ZjliMWU3YzUtZmViYy00YjY0LTg5MGMtN2JmNDIzZWU1ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsuJAcgYNGqkh01LPZK/yC65Y2EFBGTvvav/ 8COdgmH6XwdJ9fqWSn1R0ztad1xdvyiYh5o/9SEMd9c3TwnoV8jrCb1/UtwAjtXN L0kEGVlA6ran5hI00mo0CDvIeImym9JEGLXfkQj2wH1kRNb5zSplANsURDFzNSDP XX0LUSpPpARG+NNi6w5gVyfuh+iY+sf5V0I8E67HDm9FTx8n53YQ3LrKvG5cFBe7 Spls2QGLYxXsnurHn9hEKHKKi4FSdVol0u3SngVW1IMYq5/pCi6CAX0ss6nrXMl5 HJFwlzCsjJPbJqa1BQa34FqwiyEpfwHrETRIwi66DCN18Nd+fQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOaLKG3kin5CSX7XQnMadjNroQDMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m OWIxZTdjNS1mZWJjLTRiNjQtODkwYy03YmY0MjNlZTVkZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2Y5YjFlN2M1LWZlYmMtNGI2NC04 OTBjLTdiZjQyM2VlNWRmNi9mOWIxZTdjNS1mZWJjLTRiNjQtODkwYy03YmY0MjNl ZTVkZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANDFngDBALHMGQwDQQCAAIwBwMFACYC/8EwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAI97MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIIoJ4hUSrqPhBdU+3U1 UErcphFJKMOsX5gdZVHhePYA+w5De2NWD75vix9aJs8EXG7oyThQU4NwMkkqvDHD E/qq0M+ZGfln5K6ng8PiFPnvvhUc9445VM3ig1E3aduT6yrN4xyrKqKe+CT8uA4E NGQYBWe/FK6LosXc7CkYKCsBtV3gG9yQYWz7nk64Jn5xXa9YhKZIRNN9nHPkJfR3 k9OHsHwaSoYjJcmYqk4jaCLxSqS4J9cUUERQIgcVqTlcoe+yJJMMLbFRWvHDi9o8 nrxbGy1vLxzQf0L8cfL6EuodGW2UlxfhkHSZlUa9qQcInPEKWzoI9RXVwGKEcVQn 1GA= -----END CERTIFICATE-----Generated at Sun Nov 1 09:17:05 2026 by rpki-client