$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/31d740f4-7be6-4768-af79-e4c34d998f70.cer File: 31d740f4-7be6-4768-af79-e4c34d998f70.cer (raw, json) Hash identifier: 7EzimBZWaJ81OJauL304Hb829wEOqFT/6pZbQu2vxF8= Subject key identifier: 35:A4:0F:B7:E7:46:29:CF:C1:C2:02:FB:76:B8:D8:0C:6C:3A:F1:1E Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F431EC8B5B3BF55B035AF2A71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/31d740f4-7be6-4768-af79-e4c34d998f70/31d740f4-7be6-4768-af79-e4c34d998f70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/31d740f4-7be6-4768-af79-e4c34d998f70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Sep 2026 18:36:38 +0000 Certificate not after: Mon 25 Dec 2028 19:36:38 +0000 Subordinate resources: AS: 32006 AS: 32467 AS: 53982 IP: 198.206.130.0/23 IP: 199.34.248.0/21 IP: 199.85.102.0 -- 199.85.106.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:1e:c8:b5:b3:bf:55:b0:35:af:2a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 22 18:36:38 2026 GMT Not After : Dec 25 19:36:38 2028 GMT Subject: CN=31d740f4-7be6-4768-af79-e4c34d998f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:61:9c:e1:c9:8d:29:45:53:6f:7e:b3:8a: 5d:90:48:48:20:33:64:2a:86:a4:5e:4c:d3:00:64: 0d:84:d0:a3:b3:fb:80:4f:ff:5d:8e:33:f3:cf:76: 25:4b:ad:e2:77:f4:41:eb:0f:98:97:6b:e0:d9:d0: 77:9f:a9:cd:4c:74:63:f4:38:14:c5:a4:2f:eb:e5: 07:e1:8a:f7:cf:d6:12:51:04:0a:2b:ff:e2:0b:13: e8:68:fc:b3:8b:8f:03:6d:ec:8f:0e:92:cb:66:cf: 4c:f2:45:4e:03:ea:2b:57:c5:ca:3a:72:84:f6:39: b7:ae:78:3a:9c:8f:77:f9:75:e1:72:1b:57:63:31: 78:3d:69:26:eb:e8:17:d0:59:9d:23:a7:8c:96:58: 33:a9:bc:95:73:72:63:eb:49:fd:28:98:fb:cd:c3: 67:0a:38:10:0b:e7:c1:5b:05:1c:0d:73:d0:76:2f: cf:97:d8:df:c8:bc:98:59:16:e8:a0:5f:44:1e:0a: bc:92:76:df:02:69:f3:7e:2c:5e:c8:0b:6e:c4:9c: 12:f1:42:02:d5:1d:6c:e0:e8:2d:22:b5:35:19:2c: cf:c4:24:2e:43:84:cf:1a:59:03:6b:36:8a:70:e5: 29:76:41:fe:b2:17:81:27:33:ee:79:88:8e:a8:c7: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:0F:B7:E7:46:29:CF:C1:C2:02:FB:76:B8:D8:0C:6C:3A:F1:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/31d740f4-7be6-4768-af79-e4c34d998f70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/31d740f4-7be6-4768-af79-e4c34d998f70/31d740f4-7be6-4768-af79-e4c34d998f70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.206.130.0/23 199.34.248.0/21 199.85.102.0-199.85.106.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32006 32467 53982 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:54:70:8b:15:a3:4e:bb:17:21:19:d5:df:1c:43:d0:56:4c: 48:10:ec:ab:71:05:77:b1:05:44:e7:4d:28:da:4f:c5:79:35: d7:7b:cb:19:22:32:6c:58:27:6c:14:a4:ab:79:27:41:7f:ab: 9f:38:a8:49:d3:52:91:08:a1:f1:2b:f0:b5:e2:a6:78:53:55: dd:e5:ee:be:45:2d:ac:97:9e:9e:5f:1a:6e:1c:26:c5:55:27: 26:75:5c:6a:f7:f0:8a:9a:62:fc:48:ca:d3:07:c8:b7:26:91: 09:bc:a7:e3:b8:6a:bb:00:10:09:ae:b1:85:b3:35:57:52:cd: b5:39:71:d1:ab:fd:1f:36:3b:c3:ea:da:f8:7f:5c:9d:1f:72: bd:e4:d4:93:64:3d:6f:95:c4:1a:1d:7c:29:0a:2d:32:3f:ea: 7b:b7:98:5f:22:44:e2:cc:31:39:aa:ea:4a:02:be:a7:b6:95: d0:a7:77:d0:f3:1d:66:36:69:72:6c:10:b2:ef:37:88:43:a9: 88:d2:21:c1:e0:b9:fe:14:df:d8:01:02:56:cd:d7:9b:50:d6: 84:c2:9a:37:0e:12:93:58:9e:c7:85:9f:37:c9:28:b3:31:f4: 80:81:d0:4a:23:7a:82:5f:31:7a:c9:5d:a7:ee:7e:ca:cb:4f: 23:b7:88:40 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE9DHsi1s79VsDWvKnEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMjE4MzYzOFoXDTI4MTIyNTE5MzYzOFowLzEtMCsGA1UEAxMk MzFkNzQwZjQtN2JlNi00NzY4LWFmNzktZTRjMzRkOTk4ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTphnOHJjSlFU29+s4pdkEhIIDNkKoakXkzT AGQNhNCjs/uAT/9djjPzz3YlS63id/RB6w+Yl2vg2dB3n6nNTHRj9DgUxaQv6+UH 4Yr3z9YSUQQKK//iCxPoaPyzi48DbeyPDpLLZs9M8kVOA+orV8XKOnKE9jm3rng6 nI93+XXhchtXYzF4PWkm6+gX0FmdI6eMllgzqbyVc3Jj60n9KJj7zcNnCjgQC+fB WwUcDXPQdi/Pl9jfyLyYWRbooF9EHgq8knbfAmnzfixeyAtuxJwS8UIC1R1s4Ogt IrU1GSzPxCQuQ4TPGlkDazaKcOUpdkH+sheBJzPueYiOqMdVVwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFDWkD7fnRinPwcIC+3a42AxsOvEeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8z MWQ3NDBmNC03YmU2LTQ3NjgtYWY3OS1lNGMzNGQ5OThmNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzMxZDc0MGY0LTdiZTYtNDc2OC1h Zjc5LWU0YzM0ZDk5OGY3MC8zMWQ3NDBmNC03YmU2LTQ3NjgtYWY3OS1lNGMzNGQ5 OThmNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAHGzoIDBAPHIvgwDAMEAcdVZgMEAMdVajAiBggr BgEFBQcBCAEB/wQTMBGgDzANAgJ9BgICftMCAwDS3jBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhVHCLFaNO uxchGdXfHEPQVkxIEOyrcQV3sQVE500o2k/FeTXXe8sZIjJsWCdsFKSreSdBf6uf OKhJ01KRCKHxK/C14qZ4U1Xd5e6+RS2sl56eXxpuHCbFVScmdVxq9/CKmmL8SMrT B8i3JpEJvKfjuGq7ABAJrrGFszVXUs21OXHRq/0fNjvD6tr4f1ydH3K95NSTZD1v lcQaHXwpCi0yP+p7t5hfIkTizDE5qupKAr6ntpXQp3fQ8x1mNmlybBCy7zeIQ6mI 0iHB4Ln+FN/YAQJWzdebUNaEwpo3DhKTWJ7HhZ83ySizMfSAgdBKI3qCXzF6yV2n 7n7Ky08jt4hA -----END CERTIFICATE-----Generated at Thu Sep 24 14:57:33 2026 by rpki-client