$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bd7d3721-22bb-4a27-bb63-03140a49e984.cer File: bd7d3721-22bb-4a27-bb63-03140a49e984.cer (raw, json) Hash identifier: HXNDv+VBX6SWnLZSICY3XxgJSM+U7MjN8kJkbpNpVLc= Subject key identifier: 64:08:D9:D7:6C:12:60:AA:55:7D:5C:93:84:6D:D7:3D:0C:21:CC:A6 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F45E5C19BA9608851F458C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bd7d3721-22bb-4a27-bb63-03140a49e984/bd7d3721-22bb-4a27-bb63-03140a49e984.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bd7d3721-22bb-4a27-bb63-03140a49e984/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 18:29:09 +0000 Certificate not after: Tue 26 Dec 2028 19:29:09 +0000 Subordinate resources: AS: 32647 IP: 198.91.24.0/21 IP: 2604:4340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:e5:c1:9b:a9:60:88:51:f4:58:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 18:29:09 2026 GMT Not After : Dec 26 19:29:09 2028 GMT Subject: CN=bd7d3721-22bb-4a27-bb63-03140a49e984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:8e:4e:77:e5:fb:24:14:85:a7:71:af:65: d4:8c:f9:bb:28:22:4b:1c:af:48:a6:84:ab:40:7b: 5d:08:2e:b4:2c:e1:0f:57:82:16:da:db:3b:ed:52: 03:12:68:d8:45:cf:36:19:96:ca:4e:f2:2c:0d:db: 58:22:f2:5e:ab:26:1b:35:5c:fb:d9:a1:cc:bf:61: 87:ab:d9:7e:3f:84:1a:22:53:e6:de:9c:10:c4:c7: 19:39:c7:cf:15:59:80:8d:db:f9:80:87:e2:8f:07: 36:67:c8:08:6d:3d:bd:2c:82:54:fa:59:44:86:63: 6e:7f:f4:6c:8d:59:93:35:fb:e8:9d:80:8f:71:38: 73:7f:1e:a3:65:d3:2b:c8:37:52:43:d4:82:41:d5: 81:d5:29:78:82:36:22:4e:b5:37:75:af:94:cc:b0: 39:e4:6d:31:7e:09:25:69:fe:35:0b:b3:0b:b6:20: 76:74:5b:66:47:1f:b8:14:9c:02:cf:1d:f6:43:66: 50:31:04:64:19:9e:77:4f:7d:3c:25:a2:16:ec:1e: 88:27:85:fe:da:1a:8a:4a:f7:f6:05:40:c1:78:36: 6c:a1:7b:86:df:f4:92:f7:bc:4e:84:d2:99:ee:10: f7:91:ed:2a:15:28:12:79:e4:b0:eb:e9:00:56:09: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:08:D9:D7:6C:12:60:AA:55:7D:5C:93:84:6D:D7:3D:0C:21:CC:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bd7d3721-22bb-4a27-bb63-03140a49e984/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bd7d3721-22bb-4a27-bb63-03140a49e984/bd7d3721-22bb-4a27-bb63-03140a49e984.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.91.24.0/21 IPv6: 2604:4340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32647 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ba:d8:89:a5:9a:b0:91:a8:10:52:bb:3d:1f:cf:81:b8:9a: e6:f9:a0:04:0b:8d:57:2d:d8:48:c9:0d:6a:89:18:48:79:5d: d3:12:eb:ed:11:c2:0b:90:ab:a6:f0:36:23:91:3f:87:2a:6a: 05:31:ec:e3:16:45:d9:a6:d0:33:2a:d6:3d:12:8f:34:d0:d6: be:1b:56:d7:66:62:66:4a:80:7d:83:59:59:71:b3:49:92:96: fe:55:40:41:58:36:8a:34:8f:5f:d0:c7:cb:37:5c:77:bd:1e: 0c:bf:c9:c1:da:46:97:aa:85:62:cf:20:8e:7c:49:9b:81:d8: 54:58:8f:c5:33:5c:ef:55:d3:ac:08:ce:3d:c9:64:1c:b4:ab: 58:6b:db:42:ec:8c:fd:1f:67:0b:2c:84:ef:34:5e:64:da:4a: 66:d6:64:01:9e:f5:b4:30:53:e9:4b:e1:de:6d:7a:ff:37:68: 35:55:15:f5:47:cf:18:69:5e:e6:c1:ea:3b:1c:12:a0:68:39: e6:06:fc:81:ab:b3:a6:df:10:eb:a2:60:7b:ab:fe:da:f4:88: 5b:b4:91:1d:de:e1:64:8e:67:75:34:6c:c3:a1:3b:e1:71:74: 6b:b6:80:d2:1f:58:53:ee:b9:85:62:65:3e:64:44:02:f9:1d: a4:a0:4b:6d -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE9F5cGbqWCIUfRYxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzE4MjkwOVoXDTI4MTIyNjE5MjkwOVowLzEtMCsGA1UEAxMk YmQ3ZDM3MjEtMjJiYi00YTI3LWJiNjMtMDMxNDBhNDllOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xSOTnfl+yQUhadxr2XUjPm7KCJLHK9IpoSr QHtdCC60LOEPV4IW2ts77VIDEmjYRc82GZbKTvIsDdtYIvJeqyYbNVz72aHMv2GH q9l+P4QaIlPm3pwQxMcZOcfPFVmAjdv5gIfijwc2Z8gIbT29LIJU+llEhmNuf/Rs jVmTNfvonYCPcThzfx6jZdMryDdSQ9SCQdWB1Sl4gjYiTrU3da+UzLA55G0xfgkl af41C7MLtiB2dFtmRx+4FJwCzx32Q2ZQMQRkGZ53T308JaIW7B6IJ4X+2hqKSvf2 BUDBeDZsoXuG3/SS97xOhNKZ7hD3ke0qFSgSeeSw6+kAVglTgQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFGQI2ddsEmCqVX1ck4Rt1z0MIcymMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i ZDdkMzcyMS0yMmJiLTRhMjctYmI2My0wMzE0MGE0OWU5ODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JkN2QzNzIxLTIyYmItNGEyNy1i YjYzLTAzMTQwYTQ5ZTk4NC9iZDdkMzcyMS0yMmJiLTRhMjctYmI2My0wMzE0MGE0 OWU5ODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPGWxgwDQQCAAIwBwMFACYEQ0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICf4cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR7rYiaWasJGoEFK7PR/Pgbia5vmg BAuNVy3YSMkNaokYSHld0xLr7RHCC5CrpvA2I5E/hypqBTHs4xZF2abQMyrWPRKP NNDWvhtW12ZiZkqAfYNZWXGzSZKW/lVAQVg2ijSPX9DHyzdcd70eDL/JwdpGl6qF Ys8gjnxJm4HYVFiPxTNc71XTrAjOPclkHLSrWGvbQuyM/R9nCyyE7zReZNpKZtZk AZ71tDBT6Uvh3m16/zdoNVUV9UfPGGle5sHqOxwSoGg55gb8gauzpt8Q66Jge6v+ 2vSIW7SRHd7hZI5ndTRsw6E74XF0a7aA0h9YU+65hWJlPmREAvkdpKBLbQ== -----END CERTIFICATE-----Generated at Thu Sep 24 13:21:52 2026 by rpki-client