$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer File: 47dcd76c-a53c-4746-b38d-ab33e0246341.cer (raw, json) Hash identifier: OWsbPPYSFyJrB2ivsPXVmfXY12JCIQnjXWaJhxfc5B4= Subject key identifier: 47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F40058D123FE504C637C029C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 15:58:22 +0000 Certificate not after: Sun 24 Dec 2028 16:58:22 +0000 Subordinate resources: AS: 17215 AS: 21794 AS: 23283 IP: 192.104.244.0/24 IP: 192.189.96.0 -- 192.189.98.255 IP: 198.51.215.0 -- 198.51.216.255 IP: 199.38.133.0/24 IP: 204.136.0.0 -- 204.136.9.255 IP: 2620:172::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:05:8d:12:3f:e5:04:c6:37:c0:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 21 15:58:22 2026 GMT Not After : Dec 24 16:58:22 2028 GMT Subject: CN=47dcd76c-a53c-4746-b38d-ab33e0246341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:f7:be:10:42:6d:e1:f1:9e:04:f5:40:07: ea:cb:42:e3:3b:42:9e:ae:db:ed:3f:79:c6:b3:8c: 07:1a:a1:77:33:e4:b1:95:a3:3b:3f:ba:2d:5a:9a: 1a:08:9b:59:d6:21:c3:ec:4c:9b:cb:d6:62:80:b4: 33:10:56:15:38:3c:57:68:e6:6e:a8:94:3c:0a:60: 89:e3:ca:32:d7:c4:7b:ed:83:be:c8:7d:c8:26:96: c4:40:44:3b:3d:76:ff:3a:80:fe:ff:3a:e4:1d:30: 14:03:06:0d:8a:13:dd:e0:94:8d:10:01:b0:2e:5a: 4e:83:85:b3:8c:89:94:8c:b9:17:e1:71:30:bf:8d: 75:41:b7:a4:e5:79:03:80:05:39:83:7c:04:a2:0a: 92:66:52:26:5d:c9:9d:4f:84:e2:14:d1:08:08:26: 32:23:4a:b6:4a:42:24:cc:d4:68:87:87:9e:7c:fe: fa:6a:9b:77:01:90:ef:f8:77:ee:95:8b:ea:31:af: 96:15:91:2c:08:9e:cf:2c:ad:36:e8:09:15:ef:f3: a8:1d:06:93:6f:e1:53:62:dd:ba:b9:6b:38:85:63: 33:44:34:06:41:3d:70:9d:17:0b:c2:5a:75:32:8c: e5:8d:9e:7e:fe:78:95:1c:c3:aa:94:71:ac:b3:19: 0d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.104.244.0/24 192.189.96.0-192.189.98.255 198.51.215.0-198.51.216.255 199.38.133.0/24 204.136.0.0-204.136.9.255 IPv6: 2620:172::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17215 21794 23283 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:af:0d:2c:9b:03:a8:c0:79:3e:c4:95:18:35:a3:98:18:c8: 5d:ea:92:36:a7:f9:a4:60:4e:97:92:25:5b:a3:61:51:e5:72: 79:0f:23:1b:44:d4:85:4b:a9:dc:9e:bc:90:45:3e:9c:f2:8f: 9b:3f:47:e4:e2:45:40:0d:3e:3f:50:54:35:b3:9a:a9:15:00: 5d:55:32:f2:a3:48:65:39:9e:d7:9a:b8:bd:8b:a8:9f:ed:b1: eb:ad:ea:a7:59:59:a6:77:5c:ff:3c:20:4c:4a:7b:3e:0e:ab: cb:ac:8d:63:98:47:b9:88:d1:81:56:fa:14:91:6f:d6:6f:ac: d3:3c:d1:d0:a5:c8:76:e9:b8:c9:29:99:92:ab:36:a3:1b:f1: b4:ae:1a:b3:39:9f:c4:5d:0f:81:d0:d9:9f:e8:dd:ca:1a:3b: b0:e9:d3:c1:f7:a7:04:e4:89:16:6f:8d:89:cd:6d:19:80:a4: 21:d7:27:ef:39:9c:a0:76:61:8c:c8:58:67:70:e7:52:94:f5: ac:ec:b1:2e:83:c3:07:64:95:c7:97:28:14:d9:c8:81:7a:f8: 82:82:34:e6:8b:cf:d5:2c:2d:d4:e0:4d:b7:41:17:6b:99:90: ad:bb:ee:80:db:3b:56:18:aa:e5:4a:78:d7:2c:ec:21:71:93: a9:12:a0:fa -----BEGIN CERTIFICATE----- MIIHTzCCBjegAwIBAgIUAQ0Mn0MoWE9ABY0SP+UExjfAKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMTE1NTgyMloXDTI4MTIyNDE2NTgyMlowLzEtMCsGA1UEAxMk NDdkY2Q3NmMtYTUzYy00NzQ2LWIzOGQtYWIzM2UwMjQ2MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUH3vhBCbeHxngT1QAfqy0LjO0KertvtP3nG s4wHGqF3M+SxlaM7P7otWpoaCJtZ1iHD7Eyby9ZigLQzEFYVODxXaOZuqJQ8CmCJ 48oy18R77YO+yH3IJpbEQEQ7PXb/OoD+/zrkHTAUAwYNihPd4JSNEAGwLlpOg4Wz jImUjLkX4XEwv411Qbek5XkDgAU5g3wEogqSZlImXcmdT4TiFNEICCYyI0q2SkIk zNRoh4eefP76apt3AZDv+HfulYvqMa+WFZEsCJ7PLK026AkV7/OoHQaTb+FTYt26 uWs4hWMzRDQGQT1wnRcLwlp1MozljZ5+/niVHMOqlHGssxkNlwIDAQABo4IEYTCC BF0wHQYDVR0OBBYEFEea27ydMzq8XEw0fJldYRiTamywMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 N2RjZDc2Yy1hNTNjLTQ3NDYtYjM4ZC1hYjMzZTAyNDYzNDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQ3ZGNkNzZjLWE1M2MtNDc0Ni1i MzhkLWFiMzNlMDI0NjM0MS80N2RjZDc2Yy1hNTNjLTQ3NDYtYjM4ZC1hYjMzZTAy NDYzNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDsEAgABMDUDBADAaPQwDAMEBcC9YAMEAMC9YjAMAwQAxjPXAwQA xjPYAwQAxyaFMAsDAwPMiAMEAcyICDAOBAIAAjAIAwYEJiABcgAwIQYIKwYBBQUH AQgBAf8EEjAQoA4wDAICQz8CAlUiAgJa8zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2rw0smwOowHk+xJUY NaOYGMhd6pI2p/mkYE6XkiVbo2FR5XJ5DyMbRNSFS6ncnryQRT6c8o+bP0fk4kVA DT4/UFQ1s5qpFQBdVTLyo0hlOZ7Xmri9i6if7bHrreqnWVmmd1z/PCBMSns+DqvL rI1jmEe5iNGBVvoUkW/Wb6zTPNHQpch26bjJKZmSqzajG/G0rhqzOZ/EXQ+B0Nmf 6N3KGjuw6dPB96cE5IkWb42JzW0ZgKQh1yfvOZygdmGMyFhncOdSlPWs7LEug8MH ZJXHlygU2ciBeviCgjTmi8/VLC3U4E23QRdrmZCtu+6A2ztWGKrlSnjXLOwhcZOp EqD6 -----END CERTIFICATE-----Generated at Thu Sep 24 13:21:35 2026 by rpki-client