$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528.cer File: fd6a4b76-6473-443a-bdfa-7875d5e78528.cer (raw, json) Hash identifier: qkriJKnzyxv3Md7h8Z4aWP5gjp/C+OKS+se9tD9/YWA= Subject key identifier: C7:E7:BC:6D:B7:08:DA:67:86:C8:35:78:A4:66:2E:0C:6B:CF:73:C2 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F66DAA0E0F29353F1D6FD4000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/fd6a4b76-6473-443a-bdfa-7875d5e78528.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Oct 2026 13:48:25 +0000 Certificate not after: Sun 07 Jan 2029 14:48:25 +0000 Subordinate resources: AS: 62844 IP: 74.122.148.0/22 IP: 198.136.16.0/22 IP: 2606:b8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:da:a0:e0:f2:93:53:f1:d6:fd:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 5 13:48:25 2026 GMT Not After : Jan 7 14:48:25 2029 GMT Subject: CN=fd6a4b76-6473-443a-bdfa-7875d5e78528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5c:ba:8f:e4:f4:f4:cd:cb:80:06:2a:b6:57: 3a:6d:d9:80:cd:c4:bb:a8:34:94:7d:95:ce:70:f8: 97:71:6f:54:2d:27:cd:92:0d:fc:81:aa:2c:81:a3: 26:0a:ac:bc:2c:e1:2a:ba:25:50:9c:88:56:2c:2f: 55:f7:91:f8:20:5b:88:bb:74:c5:95:52:d7:97:e0: d1:07:fd:0d:51:91:42:2b:f2:c7:69:95:fb:27:b6: 3a:ec:7d:85:33:3a:a5:a4:11:c3:04:96:f1:94:0f: 82:1d:18:88:b8:8f:64:1b:52:0f:37:5c:9c:6c:d3: ab:7a:7d:4d:9e:dc:92:bb:3f:54:b2:e1:57:24:84: 35:b7:96:f3:18:a1:d8:e0:9e:92:17:ae:50:e0:4a: 40:fa:64:5d:67:44:b6:af:3c:7b:ce:54:d8:f2:61: ad:43:8f:7d:ea:56:2b:aa:54:9a:3f:e6:ac:bf:b2: 54:39:69:81:0d:3f:0d:88:5d:63:4f:58:fd:b3:91: 17:52:61:5a:98:7c:7a:a1:17:92:e0:b5:24:51:da: 40:54:2a:0b:14:e0:a2:e1:77:21:f8:32:f2:4d:55: f5:65:85:b4:48:b5:71:aa:72:10:76:54:54:70:ef: d5:38:13:46:02:17:46:cd:ac:66:09:d5:38:f3:5f: 48:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:BC:6D:B7:08:DA:67:86:C8:35:78:A4:66:2E:0C:6B:CF:73:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/fd6a4b76-6473-443a-bdfa-7875d5e78528.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 74.122.148.0/22 198.136.16.0/22 IPv6: 2606:b8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62844 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cd:eb:17:44:4c:96:21:2e:09:e1:85:fd:b5:86:ed:01:ab: ac:90:5a:e7:ba:0a:82:ce:a1:cc:33:a8:9c:3c:fc:24:30:d3: f0:35:f5:e9:65:13:27:51:ef:38:4e:a8:98:78:39:be:39:5c: c5:ce:52:08:93:c0:64:7b:80:f5:35:69:2a:98:db:e9:26:8e: 2b:59:07:5c:87:00:90:80:6c:88:02:5a:3d:93:0d:8a:55:0e: 25:05:c8:e5:bc:4c:e4:a4:c6:a2:bf:f2:37:7d:9c:f4:8f:78: 3a:6f:5f:30:4c:4a:3c:78:f4:e1:1d:80:7c:42:ba:64:55:4e: e2:36:82:e4:6c:c5:83:61:cc:39:da:f9:d2:b0:3c:b0:8c:cb: c7:b7:ab:fc:29:28:b5:96:ba:aa:73:8f:72:36:1e:63:2f:62: af:1a:1c:d3:79:17:0c:bc:04:4a:e5:a9:76:e6:15:44:4e:06: c5:6d:c1:58:fe:ad:8a:63:d8:30:9d:a8:60:6d:75:6c:8f:89: ba:68:27:36:53:d6:8d:11:72:e5:25:d3:e2:d0:b0:fa:2b:46: e1:e2:b8:83:c1:05:ba:79:da:78:cf:fc:6a:4a:01:09:55:07: 12:5d:d6:74:31:44:1d:dc:d6:fa:17:a4:d4:66:29:de:cd:06: d5:1d:cd:17 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE9m2qDg8pNT8db9QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNTEzNDgyNVoXDTI5MDEwNzE0NDgyNVowLzEtMCsGA1UEAxMk ZmQ2YTRiNzYtNjQ3My00NDNhLWJkZmEtNzg3NWQ1ZTc4NTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61y6j+T09M3LgAYqtlc6bdmAzcS7qDSUfZXO cPiXcW9ULSfNkg38gaosgaMmCqy8LOEquiVQnIhWLC9V95H4IFuIu3TFlVLXl+DR B/0NUZFCK/LHaZX7J7Y67H2FMzqlpBHDBJbxlA+CHRiIuI9kG1IPN1ycbNOren1N ntySuz9UsuFXJIQ1t5bzGKHY4J6SF65Q4EpA+mRdZ0S2rzx7zlTY8mGtQ4996lYr qlSaP+asv7JUOWmBDT8NiF1jT1j9s5EXUmFamHx6oReS4LUkUdpAVCoLFOCi4Xch +DLyTVX1ZYW0SLVxqnIQdlRUcO/VOBNGAhdGzaxmCdU4819IYwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMfnvG23CNpnhsg1eKRmLgxrz3PCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m ZDZhNGI3Ni02NDczLTQ0M2EtYmRmYS03ODc1ZDVlNzg1MjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2ZkNmE0Yjc2LTY0NzMtNDQzYS1i ZGZhLTc4NzVkNWU3ODUyOC9mZDZhNGI3Ni02NDczLTQ0M2EtYmRmYS03ODc1ZDVl Nzg1MjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJKepQDBALGiBAwDQQCAAIwBwMFACYGuMAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPV8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI3N6xdETJYhLgnhhf21 hu0Bq6yQWue6CoLOocwzqJw8/CQw0/A19ellEydR7zhOqJh4Ob45XMXOUgiTwGR7 gPU1aSqY2+kmjitZB1yHAJCAbIgCWj2TDYpVDiUFyOW8TOSkxqK/8jd9nPSPeDpv XzBMSjx49OEdgHxCumRVTuI2guRsxYNhzDna+dKwPLCMy8e3q/wpKLWWuqpzj3I2 HmMvYq8aHNN5Fwy8BErlqXbmFUROBsVtwVj+rYpj2DCdqGBtdWyPibpoJzZT1o0R cuUl0+LQsPorRuHiuIPBBbp52njP/GpKAQlVBxJd1nQxRB3c1voXpNRmKd7NBtUd zRc= -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:43 2026 by rpki-client