$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.cer File: a2617de0-a5e1-4c68-9eda-b13152b7ec7e.cer (raw, json) Hash identifier: duc6mX1nEuXya0wH2cbELbTWmJS5YYyHOLd7k53E0Yo= Subject key identifier: F5:38:67:6B:C7:AA:7D:5C:B7:4E:D0:C7:E3:AC:1A:0D:7C:7A:C4:26 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F3FE334D3BC4293BF3E3D1200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 14:49:10 +0000 Certificate not after: Sun 24 Dec 2028 15:49:10 +0000 Subordinate resources: AS: 27557 IP: 199.116.236.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:e3:34:d3:bc:42:93:bf:3e:3d:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 21 14:49:10 2026 GMT Not After : Dec 24 15:49:10 2028 GMT Subject: CN=a2617de0-a5e1-4c68-9eda-b13152b7ec7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:a1:fb:e0:2b:b5:2a:ae:aa:3c:67:62:af: c8:ac:06:d3:f0:a5:5c:7f:cf:c7:b5:37:41:34:d5: d2:43:7e:df:e9:9f:f1:b3:cb:bd:da:05:38:ec:ad: 7e:b1:db:1d:f5:10:64:2c:1f:43:7a:0a:52:00:23: 07:3b:16:b9:84:fd:3b:c1:cd:ac:80:18:8a:d6:33: 23:20:c5:fa:c0:da:50:db:ea:76:25:95:77:3d:29: 87:07:e5:37:16:f6:92:ff:70:59:17:ce:45:64:68: 47:5d:9e:c9:00:d9:7a:6f:52:0c:6e:e1:1f:8e:4c: fa:c3:07:98:8f:a6:2a:7f:f4:b3:f5:78:a9:5b:7b: d7:fa:4d:6d:2a:9e:5c:83:c3:ad:b8:8f:ef:e8:37: d7:53:07:8d:b5:33:f7:81:8e:d3:2b:df:66:97:3d: 43:14:ac:96:ce:71:a3:26:8b:dd:90:ac:7b:01:0b: 74:0a:f7:b1:d6:41:df:5c:d5:af:12:71:e4:ea:aa: e3:1a:70:cd:dc:d8:60:65:6c:74:8d:b2:f8:ca:1d: cf:df:44:e1:2e:1d:c2:66:30:6a:bd:f7:c7:05:58: 1e:e9:5e:99:d6:bf:34:97:ae:de:0e:bb:01:3b:f2: 37:7a:1f:cc:c7:68:75:6a:fd:ec:72:9d:1b:44:36: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:38:67:6B:C7:AA:7D:5C:B7:4E:D0:C7:E3:AC:1A:0D:7C:7A:C4:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a2617de0-a5e1-4c68-9eda-b13152b7ec7e/a2617de0-a5e1-4c68-9eda-b13152b7ec7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.116.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a6:58:a6:98:e2:41:ad:b0:0e:25:a3:1f:da:c6:58:e1:6a: 76:b9:d2:8e:cb:23:23:47:d0:00:77:52:2e:ea:c2:6b:a2:9b: 75:54:be:e5:24:95:f2:ce:4c:13:d2:bb:e9:b7:61:28:ba:f2: 04:ee:4b:03:69:02:62:c6:15:a2:c6:2d:6a:ba:61:ae:91:1d: 3b:aa:a0:b1:e9:65:7c:13:82:69:4f:7c:43:1e:80:ac:3d:a5: 7c:2f:9e:dd:00:09:92:51:37:3e:02:a0:f4:0b:f1:a1:7a:86: 30:c1:03:a5:cc:b3:54:52:81:0d:17:5f:0f:4c:49:a1:46:4d: 1a:08:e2:94:81:48:d0:40:2c:dc:61:10:3b:42:68:91:86:a5: 2f:67:78:8e:8f:d4:ac:d5:87:3a:8a:60:b1:8b:33:4a:90:10: 0d:32:78:0b:13:e0:ab:b0:a0:4e:7c:bc:99:23:ec:37:3d:3f: 66:33:25:35:d2:6c:ee:17:1a:b4:f4:a1:e2:85:ca:79:f5:4e: a5:5e:9d:ee:25:43:4d:b2:cb:6a:30:88:ca:71:39:77:d2:bd: 91:af:69:2c:6a:f9:58:32:d5:b4:a2:dd:1b:78:7b:96:c6:eb: 38:d4:44:03:b7:b8:e4:37:08:ab:59:a2:7b:b2:22:e0:c2:1e: e5:e2:3d:7b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE8/4zTTvEKTvz49EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMTE0NDkxMFoXDTI4MTIyNDE1NDkxMFowLzEtMCsGA1UEAxMk YTI2MTdkZTAtYTVlMS00YzY4LTllZGEtYjEzMTUyYjdlYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3mh++ArtSquqjxnYq/IrAbT8KVcf8/HtTdB NNXSQ37f6Z/xs8u92gU47K1+sdsd9RBkLB9DegpSACMHOxa5hP07wc2sgBiK1jMj IMX6wNpQ2+p2JZV3PSmHB+U3FvaS/3BZF85FZGhHXZ7JANl6b1IMbuEfjkz6wweY j6Yqf/Sz9XipW3vX+k1tKp5cg8OtuI/v6DfXUweNtTP3gY7TK99mlz1DFKyWznGj JovdkKx7AQt0Cvex1kHfXNWvEnHk6qrjGnDN3NhgZWx0jbL4yh3P30ThLh3CZjBq vffHBVge6V6Z1r80l67eDrsBO/I3eh/Mx2h1av3scp0bRDaAIQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPU4Z2vHqn1ct07Qx+OsGg18esQmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9h MjYxN2RlMC1hNWUxLTRjNjgtOWVkYS1iMTMxNTJiN2VjN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2EyNjE3ZGUwLWE1ZTEtNGM2OC05 ZWRhLWIxMzE1MmI3ZWM3ZS9hMjYxN2RlMC1hNWUxLTRjNjgtOWVkYS1iMTMxNTJi N2VjN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHdOwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC a6UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALKZYppjiQa2wDiWjH9rGWOFqdrnSjssjI0fQAHdSLurCa6Kb dVS+5SSV8s5ME9K76bdhKLryBO5LA2kCYsYVosYtarphrpEdO6qgsellfBOCaU98 Qx6ArD2lfC+e3QAJklE3PgKg9AvxoXqGMMEDpcyzVFKBDRdfD0xJoUZNGgjilIFI 0EAs3GEQO0JokYalL2d4jo/UrNWHOopgsYszSpAQDTJ4CxPgq7CgTny8mSPsNz0/ ZjMlNdJs7hcatPSh4oXKefVOpV6d7iVDTbLLajCIynE5d9K9ka9pLGr5WDLVtKLd G3h7lsbrONREA7e45DcIq1mie7Ii4MIe5eI9ew== -----END CERTIFICATE-----Generated at Thu Sep 24 04:49:46 2026 by rpki-client