$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec.cer File: 8b30d66c-004f-49f1-a57c-c10abb20b1ec.cer (raw, json) Hash identifier: lowPWYd6Ch/HbSlJ+A8U7rfDdhtyo5tI1iN1E1nwhhY= Subject key identifier: 16:51:41:E0:18:B0:10:DC:56:A9:BD:DA:AC:B6:BE:E5:D7:B3:66:C0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F3FB87B934FABC99AEBEA3C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/8b30d66c-004f-49f1-a57c-c10abb20b1ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 13:23:05 +0000 Certificate not after: Sun 24 Dec 2028 14:23:05 +0000 Subordinate resources: AS: 20414 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:b8:7b:93:4f:ab:c9:9a:eb:ea:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 21 13:23:05 2026 GMT Not After : Dec 24 14:23:05 2028 GMT Subject: CN=8b30d66c-004f-49f1-a57c-c10abb20b1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:41:5d:22:6f:db:b8:df:d8:d2:99:51:0e: d9:d2:54:2b:72:cd:d8:3b:fd:68:4d:30:5c:aa:22: d6:80:3d:09:e0:04:ed:68:b9:6b:18:2a:3a:1b:cc: 2c:70:43:4a:52:23:4d:86:1e:37:80:5b:5c:01:29: 17:59:01:16:a4:43:8d:47:d0:b5:fb:ec:3f:3e:76: f8:a0:fd:8d:f6:fa:50:20:e9:f9:ae:54:6a:2b:fc: 9f:b0:b2:61:45:ee:e7:9b:4c:5e:7e:37:2a:91:57: 52:85:4d:61:be:a7:c5:53:1e:a6:2d:c9:04:97:b8: 15:6a:15:9b:2e:dd:1f:d5:1c:99:e2:cd:61:3d:78: 3f:35:54:96:92:89:71:da:d2:41:3a:ce:e0:54:8b: 82:d9:9c:9a:fe:93:51:39:e7:c6:27:73:e2:77:97: e0:04:bb:4c:cd:70:02:ed:2b:3a:28:de:89:67:e1: 15:36:e8:bd:4c:5e:fe:59:ee:f6:f7:5c:ec:78:1b: 57:96:79:23:33:84:92:f0:73:43:c6:42:7d:38:9f: b2:f6:5f:39:92:3e:0d:27:2a:f7:22:ef:27:8f:e8: 8b:83:a4:1d:d0:81:bb:41:bd:ea:35:9c:7b:43:5e: b7:3d:7e:a2:08:57:a1:86:22:d1:02:a1:0b:b0:b1: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:41:E0:18:B0:10:DC:56:A9:BD:DA:AC:B6:BE:E5:D7:B3:66:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b30d66c-004f-49f1-a57c-c10abb20b1ec/8b30d66c-004f-49f1-a57c-c10abb20b1ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 20414 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4c:51:c3:b8:68:37:4c:a7:c0:83:df:bb:12:1d:85:cc:b5: 3e:a6:8d:b1:1a:80:a0:7f:02:e1:40:ab:b7:da:f1:cb:7b:1a: d4:fe:43:48:56:fa:7d:c7:e3:04:2a:a0:19:3c:04:01:0d:7f: c3:19:ed:1c:f9:6d:fe:8e:63:43:26:87:d8:72:c2:b6:ae:84: 30:ef:68:2a:cc:3d:0b:46:d3:61:41:be:b0:b6:b2:31:79:cc: 23:80:c7:e4:16:43:9d:c4:c8:70:0d:7b:44:d9:e5:2a:6a:8a: da:8b:ff:41:70:39:0c:1d:c5:91:fb:21:13:66:d0:0d:c6:22: f6:4d:f1:8e:3e:d4:f2:45:a5:54:7a:90:d1:b3:78:8a:a9:e1: e2:d0:e6:e6:04:b1:3d:cf:d9:59:11:d0:f1:35:63:42:75:c3: 30:a3:05:29:b6:0f:7a:1d:8b:ed:ba:b5:d3:30:84:bb:4c:e1: b9:aa:e4:21:f3:04:01:35:eb:e9:e9:8a:9e:99:81:0a:a1:0a: cc:b3:07:4a:da:a4:22:7e:7b:a6:c8:2b:3a:eb:da:80:69:03: eb:cb:f0:b6:6b:54:91:5b:22:45:d9:30:96:c5:57:89:21:a5: 8c:ca:2b:61:fc:c8:b6:fd:7f:4e:bf:e6:f2:d8:2f:16:da:6f: 08:e0:4c:fa -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE8/uHuTT6vJmuvqPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMTEzMjMwNVoXDTI4MTIyNDE0MjMwNVowLzEtMCsGA1UEAxMk OGIzMGQ2NmMtMDA0Zi00OWYxLWE1N2MtYzEwYWJiMjBiMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWBBXSJv27jf2NKZUQ7Z0lQrcs3YO/1oTTBc qiLWgD0J4ATtaLlrGCo6G8wscENKUiNNhh43gFtcASkXWQEWpEONR9C1++w/Pnb4 oP2N9vpQIOn5rlRqK/yfsLJhRe7nm0xefjcqkVdShU1hvqfFUx6mLckEl7gVahWb Lt0f1RyZ4s1hPXg/NVSWkolx2tJBOs7gVIuC2Zya/pNROefGJ3Pid5fgBLtMzXAC 7Ss6KN6JZ+EVNui9TF7+We7291zseBtXlnkjM4SS8HNDxkJ9OJ+y9l85kj4NJyr3 Iu8nj+iLg6Qd0IG7Qb3qNZx7Q163PX6iCFehhiLRAqELsLE2JQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFBZRQeAYsBDcVqm92qy2vuXXs2bAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84 YjMwZDY2Yy0wMDRmLTQ5ZjEtYTU3Yy1jMTBhYmIyMGIxZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzhiMzBkNjZjLTAwNGYtNDlmMS1h NTdjLWMxMGFiYjIwYjFlYy84YjMwZDY2Yy0wMDRmLTQ5ZjEtYTU3Yy1jMTBhYmIy MGIxZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICT74wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK0xRw7hoN0ynwIPfuxIdhcy1PqaN sRqAoH8C4UCrt9rxy3sa1P5DSFb6fcfjBCqgGTwEAQ1/wxntHPlt/o5jQyaH2HLC tq6EMO9oKsw9C0bTYUG+sLayMXnMI4DH5BZDncTIcA17RNnlKmqK2ov/QXA5DB3F kfshE2bQDcYi9k3xjj7U8kWlVHqQ0bN4iqnh4tDm5gSxPc/ZWRHQ8TVjQnXDMKMF KbYPeh2L7bq10zCEu0zhuarkIfMEATXr6emKnpmBCqEKzLMHStqkIn57psgrOuva gGkD68vwtmtUkVsiRdkwlsVXiSGljMorYfzItv1/Tr/m8tgvFtpvCOBM+g== -----END CERTIFICATE-----Generated at Wed Sep 23 22:16:25 2026 by rpki-client