$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.cer File: ffb67a96-02a3-4447-aa27-0dc385fe3b0f.cer (raw, json) Hash identifier: 2oKkBGvVf8jMJmYqfA7edDl5mOK6Zi7TAjkPzVP01BA= Subject key identifier: 32:82:EC:E7:89:80:D9:79:9E:1B:63:A4:53:AD:92:43:3F:09:3C:E4 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F80552F981428139B26774880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Oct 2026 16:50:33 +0000 Certificate not after: Tue 16 Jan 2029 17:50:33 +0000 Subordinate resources: AS: 11239 IP: 199.114.252.0/22 IP: 199.168.248.0/22 IP: 2607:2700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:55:2f:98:14:28:13:9b:26:77:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 14 16:50:33 2026 GMT Not After : Jan 16 17:50:33 2029 GMT Subject: CN=ffb67a96-02a3-4447-aa27-0dc385fe3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:8d:63:c4:64:dd:7e:34:92:ad:1a:48:d3: 4a:a3:b7:86:4a:7e:b2:b3:00:14:c3:ef:95:ff:41: cf:93:27:98:00:11:43:14:b8:16:c8:db:2a:80:0d: 90:0e:83:9e:02:d6:46:1b:67:c8:44:0b:f9:96:2b: 24:35:1b:c2:47:62:15:7e:f3:2a:25:a3:bb:9e:54: 7a:74:d1:fa:37:f0:47:ac:bb:f9:21:29:72:95:45: 3f:d1:db:8d:33:36:d2:5b:9a:75:0e:d0:99:51:83: 81:fd:f4:cc:f8:c1:c7:ae:d8:29:6e:4c:04:18:8f: 37:4f:6b:68:e2:03:90:e1:97:fe:a9:b5:af:28:7c: 39:a6:61:20:1a:b3:a3:a6:72:47:b6:79:fa:d8:67: 6f:69:8f:a2:52:77:11:09:9b:60:df:50:a3:b6:b0: 70:e9:85:84:41:bb:32:f7:ff:e2:b6:30:b2:44:c0: d0:1c:de:a0:84:da:c7:a1:d5:bf:c8:9d:a5:08:e1: cd:24:65:83:cb:7d:a5:92:51:3c:9b:7f:37:d1:9b: 96:c4:b1:76:7a:2f:fe:86:b1:f9:24:23:04:1d:f5: 4f:82:b0:31:cb:fb:75:15:9f:2e:30:65:93:92:84: bb:89:21:e8:5c:0a:55:97:59:b6:db:f2:2a:a2:41: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:82:EC:E7:89:80:D9:79:9E:1B:63:A4:53:AD:92:43:3F:09:3C:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ffb67a96-02a3-4447-aa27-0dc385fe3b0f/ffb67a96-02a3-4447-aa27-0dc385fe3b0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.114.252.0/22 199.168.248.0/22 IPv6: 2607:2700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11239 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d0:6e:ce:ed:40:55:2d:25:0b:da:f5:ee:df:70:8f:ae:43: 0c:0a:e2:9a:68:cd:96:59:40:ec:17:9d:75:2c:5b:80:29:9a: 1a:d1:0f:17:d3:14:5d:1d:db:e3:d4:b6:14:1b:e1:45:1d:5d: 65:07:54:cb:3e:fe:87:bb:ff:ef:3e:88:94:8c:20:3d:a0:a3: 3e:ef:1b:70:c0:b9:8c:a2:12:e4:8f:73:26:0e:db:15:a1:9d: b4:dc:4a:af:bf:7c:b0:b0:f3:a4:ee:21:83:81:9a:63:6e:11: 7a:de:25:25:ff:bd:03:73:e9:f2:67:52:a1:96:44:79:ad:34: 57:c6:65:be:c6:ba:95:28:0e:8e:d6:0b:d9:51:ef:5b:2e:f8: 93:0b:c3:71:d7:e1:60:4a:d6:3b:b4:1b:f9:8b:8b:af:5a:c5: 5e:cb:a7:de:03:2f:79:4c:64:97:86:80:ae:8f:f3:91:2e:3a: 5c:69:a1:34:3d:a1:31:9d:87:57:49:dc:c9:1e:29:3a:c7:89: ae:2e:45:80:86:10:af:ab:d6:e5:ad:7d:7b:8f:db:79:9a:56: 4b:95:d7:96:3c:40:4d:47:9a:61:b5:dc:8a:05:b0:7b:52:8d: 80:47:38:89:36:3b:23:fb:28:93:8b:f0:0a:22:4d:1e:53:5c: b8:59:9b:fa -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE+AVS+YFCgTmyZ3SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNDE2NTAzM1oXDTI5MDExNjE3NTAzM1owLzEtMCsGA1UEAxMk ZmZiNjdhOTYtMDJhMy00NDQ3LWFhMjctMGRjMzg1ZmUzYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOyNY8Rk3X40kq0aSNNKo7eGSn6yswAUw++V /0HPkyeYABFDFLgWyNsqgA2QDoOeAtZGG2fIRAv5liskNRvCR2IVfvMqJaO7nlR6 dNH6N/BHrLv5ISlylUU/0duNMzbSW5p1DtCZUYOB/fTM+MHHrtgpbkwEGI83T2to 4gOQ4Zf+qbWvKHw5pmEgGrOjpnJHtnn62GdvaY+iUncRCZtg31CjtrBw6YWEQbsy 9//itjCyRMDQHN6ghNrHodW/yJ2lCOHNJGWDy32lklE8m3830ZuWxLF2ei/+hrH5 JCMEHfVPgrAxy/t1FZ8uMGWTkoS7iSHoXApVl1m22/IqokEN7QIDAQABo4IELzCC BCswHQYDVR0OBBYEFDKC7OeJgNl5nhtjpFOtkkM/CTzkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m ZmI2N2E5Ni0wMmEzLTQ0NDctYWEyNy0wZGMzODVmZTNiMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2ZmYjY3YTk2LTAyYTMtNDQ0Ny1h YTI3LTBkYzM4NWZlM2IwZi9mZmI2N2E5Ni0wMmEzLTQ0NDctYWEyNy0wZGMzODVm ZTNiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALHcvwDBALHqPgwDQQCAAIwBwMFACYHJwAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICK+cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbtBuzu1AVS0lC9r17t9w j65DDArimmjNlllA7BeddSxbgCmaGtEPF9MUXR3b49S2FBvhRR1dZQdUyz7+h7v/ 7z6IlIwgPaCjPu8bcMC5jKIS5I9zJg7bFaGdtNxKr798sLDzpO4hg4GaY24Ret4l Jf+9A3Pp8mdSoZZEea00V8Zlvsa6lSgOjtYL2VHvWy74kwvDcdfhYErWO7Qb+YuL r1rFXsun3gMveUxkl4aAro/zkS46XGmhND2hMZ2HV0ncyR4pOseJri5FgIYQr6vW 5a19e4/beZpWS5XXljxATUeaYbXcigWwe1KNgEc4iTY7I/sok4vwCiJNHlNcuFmb +g== -----END CERTIFICATE-----Generated at Sun Nov 1 01:44:38 2026 by rpki-client