$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e46a92-5b4a-42e1-9947-e4dce6787e66.cer File: 43e46a92-5b4a-42e1-9947-e4dce6787e66.cer (raw, json) Hash identifier: XipV8/I+P0qBNPjO2Wj1/xnL+rsNro/K1pIA8Yj4Ioo= Subject key identifier: 90:34:5E:59:C6:66:91:E6:20:34:7E:A7:09:20:04:E4:E7:C0:43:B4 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F3FCF0EE70043BF9DD580CE68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e46a92-5b4a-42e1-9947-e4dce6787e66/43e46a92-5b4a-42e1-9947-e4dce6787e66.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e46a92-5b4a-42e1-9947-e4dce6787e66/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 14:08:34 +0000 Certificate not after: Sun 24 Dec 2028 15:08:34 +0000 Subordinate resources: AS: 398956 IP: 216.152.79.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:cf:0e:e7:00:43:bf:9d:d5:80:ce:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 21 14:08:34 2026 GMT Not After : Dec 24 15:08:34 2028 GMT Subject: CN=43e46a92-5b4a-42e1-9947-e4dce6787e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:64:52:ce:a3:ee:2f:c1:5d:5d:1a:0a:20: 09:8e:92:b3:6c:32:2e:bb:64:e7:51:86:f2:7b:d8: a0:5f:4d:e4:6c:85:ec:2b:6d:2a:0e:f9:25:fa:b0: f6:9a:c0:5f:9c:e4:b9:28:cd:03:49:e5:6d:21:f2: b8:ca:19:c5:05:3c:6c:77:56:df:ca:06:0a:47:b3: 08:d8:4d:13:e2:95:5f:88:97:cc:2a:50:99:94:97: fc:8b:c0:92:0a:9f:53:d1:57:58:3e:af:43:3c:92: 44:8d:21:72:19:5d:89:cb:59:42:72:4a:9b:ac:a7: 3c:48:6c:57:72:ee:a6:d8:ad:98:e1:f4:68:64:61: ee:b6:a3:5d:82:6f:5c:de:7e:f7:92:88:60:f7:26: 66:72:58:a2:ee:b6:4e:33:a7:1e:9a:b5:db:f5:82: 18:df:09:3c:90:fb:8f:b2:23:0a:08:fd:71:ac:8b: bf:70:9a:f2:d4:53:5d:77:89:f9:44:e6:c4:37:20: 0f:8c:bc:4c:fa:f6:ef:4a:a7:96:59:85:ad:b2:9f: 6c:a8:c1:8d:8e:80:b7:a3:e0:cd:8d:24:da:0c:f7: be:c0:d9:22:40:b5:ed:74:58:1c:3f:98:e3:bc:90: 42:8d:ee:60:99:27:2c:db:51:e6:95:95:80:67:86: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:34:5E:59:C6:66:91:E6:20:34:7E:A7:09:20:04:E4:E7:C0:43:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e46a92-5b4a-42e1-9947-e4dce6787e66/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/43e46a92-5b4a-42e1-9947-e4dce6787e66/43e46a92-5b4a-42e1-9947-e4dce6787e66.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 216.152.79.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:81:3e:f1:a5:d3:b5:68:b2:25:1a:31:59:15:6e:d9:65:50: 30:ec:0c:aa:ac:37:6f:60:9c:38:e3:1e:67:1d:45:1b:42:ff: 5a:ba:d6:80:aa:dc:25:65:af:d2:14:1c:04:e0:4c:3a:3a:0f: d0:a2:c4:49:12:ad:40:f1:fd:e9:0b:74:c6:fd:61:ed:0c:20: 87:57:44:a3:d6:04:66:d3:af:cc:a7:a9:41:71:e5:c0:87:d0: 3b:2c:65:38:6d:0d:2c:7e:1f:6b:7a:3b:03:74:64:60:8c:ef: 3c:b3:e1:53:7a:34:8c:45:f5:65:87:ac:b3:ca:41:85:9f:71: 71:c7:a8:ef:23:fc:66:ed:0d:ed:e8:8b:35:43:cd:0e:f1:b9: 5c:88:07:f7:8f:cb:dd:27:29:8f:d8:f8:d1:d0:91:71:9f:cc: c5:f9:89:18:00:c6:d6:d0:32:7b:3f:72:0c:af:71:d1:79:78: 7b:40:4b:31:fb:dd:97:e7:71:c7:98:55:78:c1:cb:c1:74:3d: 2b:6b:30:72:03:ed:bf:c1:bd:63:b8:99:1e:46:12:71:01:0d: 3d:45:66:11:0c:14:3a:46:df:21:ca:2a:cc:75:50:d8:e6:39: b2:b6:62:99:04:9f:59:5d:f5:8f:45:7c:64:a6:99:25:4b:35: 48:f9:ad:c4 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE8/zw7nAEO/ndWAzmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMTE0MDgzNFoXDTI4MTIyNDE1MDgzNFowLzEtMCsGA1UEAxMk NDNlNDZhOTItNWI0YS00MmUxLTk5NDctZTRkY2U2Nzg3ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmydkUs6j7i/BXV0aCiAJjpKzbDIuu2TnUYby e9igX03kbIXsK20qDvkl+rD2msBfnOS5KM0DSeVtIfK4yhnFBTxsd1bfygYKR7MI 2E0T4pVfiJfMKlCZlJf8i8CSCp9T0VdYPq9DPJJEjSFyGV2Jy1lCckqbrKc8SGxX cu6m2K2Y4fRoZGHutqNdgm9c3n73kohg9yZmclii7rZOM6cemrXb9YIY3wk8kPuP siMKCP1xrIu/cJry1FNdd4n5RObENyAPjLxM+vbvSqeWWYWtsp9sqMGNjoC3o+DN jSTaDPe+wNkiQLXtdFgcP5jjvJBCje5gmScs21HmlZWAZ4bAxwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJA0XlnGZpHmIDR+pwkgBOTnwEO0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 M2U0NmE5Mi01YjRhLTQyZTEtOTk0Ny1lNGRjZTY3ODdlNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQzZTQ2YTkyLTViNGEtNDJlMS05 OTQ3LWU0ZGNlNjc4N2U2Ni80M2U0NmE5Mi01YjRhLTQyZTEtOTk0Ny1lNGRjZTY3 ODdlNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADYmE8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhZsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAASBPvGl07VosiUaMVkVbtllUDDsDKqsN29gnDjjHmcdRRtC /1q61oCq3CVlr9IUHATgTDo6D9CixEkSrUDx/ekLdMb9Ye0MIIdXRKPWBGbTr8yn qUFx5cCH0DssZThtDSx+H2t6OwN0ZGCM7zyz4VN6NIxF9WWHrLPKQYWfcXHHqO8j /GbtDe3oizVDzQ7xuVyIB/ePy90nKY/Y+NHQkXGfzMX5iRgAxtbQMns/cgyvcdF5 eHtASzH73ZfncceYVXjBy8F0PStrMHID7b/BvWO4mR5GEnEBDT1FZhEMFDpG3yHK Ksx1UNjmObK2YpkEn1ld9Y9FfGSmmSVLNUj5rcQ= -----END CERTIFICATE-----Generated at Thu Sep 24 04:48:23 2026 by rpki-client