$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71.cer File: bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71.cer (raw, json) Hash identifier: NdRqumVmISo1Hum6Hs7lRWHymBHqfOzss7uiinBesvw= Subject key identifier: 18:F0:43:0E:22:A3:1A:DA:DB:95:27:68:B1:2E:E4:C2:AA:7C:59:BD Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F45085F6E8B956CF9DFB64EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71/bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Sep 2026 11:03:06 +0000 Certificate not after: Tue 26 Dec 2028 12:03:06 +0000 Subordinate resources: AS: 396407 IP: 207.241.204.0/22 IP: 2620:42:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:08:5f:6e:8b:95:6c:f9:df:b6:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 23 11:03:06 2026 GMT Not After : Dec 26 12:03:06 2028 GMT Subject: CN=bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:80:7f:99:5c:d2:2b:bc:fb:6a:6b:ba:36: f2:e2:00:98:95:c5:93:63:5a:df:b4:e2:ce:cf:9b: 34:df:7c:41:2a:c6:f0:95:05:ad:e6:fc:39:24:80: 90:15:63:c5:9d:62:13:7c:b2:60:ca:7e:1d:3e:c9: 93:6a:ad:d4:a5:40:57:80:c2:83:8e:c2:86:96:9a: 5d:10:84:a6:82:2c:f3:98:55:17:6a:f4:1b:36:af: cb:59:7e:cc:df:55:e3:c3:b3:fb:e8:b2:96:a1:ff: 8d:0d:d3:a2:41:34:28:b7:79:d6:de:37:44:09:2f: 2a:c6:c8:b3:18:a8:82:e7:99:0b:78:4d:65:b1:08: a6:e1:9d:e3:74:d7:c3:1c:8e:ad:bf:a5:46:e8:42: 61:9b:0c:84:c4:5e:35:7c:21:1f:8e:89:65:e4:20: 60:b1:a9:5e:ac:d5:81:d5:92:7a:f5:2f:c0:9a:2d: 7d:38:71:f8:08:50:1c:0d:74:37:66:ba:a6:8c:a9: 4f:f5:c9:82:ef:e8:7d:10:29:56:2c:56:cd:fb:31: ec:0a:e8:30:30:8e:ca:c7:8f:f8:bc:ff:79:1f:48: 26:a7:9d:ad:b6:3a:cd:cc:1d:72:92:a9:c1:79:20: a0:ec:f0:cf:00:60:76:31:66:f1:e7:4a:c9:95:73: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F0:43:0E:22:A3:1A:DA:DB:95:27:68:B1:2E:E4:C2:AA:7C:59:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71/bdf81b2b-ad4c-4d64-bc9b-19c53a34fb71.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 207.241.204.0/22 IPv6: 2620:42:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396407 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2f:ca:e5:c0:86:d5:d2:b2:44:ae:69:97:31:13:61:16:c9: 85:a9:49:5d:3b:01:05:be:3b:36:b4:48:c2:a8:25:ee:66:38: c9:01:49:32:a5:f5:2c:ee:30:c7:0c:1a:08:3a:b6:09:b8:ff: 75:08:26:99:0a:b6:fe:e8:7d:d4:4a:dd:46:eb:ee:b7:da:83: 6d:cb:c6:0a:d5:20:27:b8:b4:ac:0b:9b:80:47:00:85:49:d8: df:6f:af:04:52:35:34:5c:73:38:08:2a:f5:29:c5:c5:8b:0e: 78:0b:09:ac:fa:30:00:f8:3c:63:6c:df:00:48:ad:02:1a:50: 04:b4:3c:c2:aa:49:73:e0:97:b1:27:64:6d:8e:b8:47:ac:04: 74:11:6a:72:7f:ad:cb:8d:39:4f:b7:7c:63:33:61:5b:0b:31: 20:4c:3f:d2:28:e6:c6:45:78:90:74:ec:a1:a3:14:96:54:51: d1:1c:4a:02:bf:b5:3d:9c:35:21:1f:29:03:a3:5f:77:b8:72: 7a:ec:c8:eb:4e:eb:e3:20:3c:d5:7e:f6:d5:d9:76:d2:15:d4: b7:d2:5d:9b:1f:c5:8b:3c:df:f2:94:01:8b:b1:bd:88:03:4b: b4:0c:1f:0c:75:09:59:d6:af:0c:09:84:f3:19:1b:96:d3:e4: 46:39:f7:1e -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9FCF9ui5Vs+d+2TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMzExMDMwNloXDTI4MTIyNjEyMDMwNlowLzEtMCsGA1UEAxMk YmRmODFiMmItYWQ0Yy00ZDY0LWJjOWItMTljNTNhMzRmYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkSAf5lc0iu8+2prujby4gCYlcWTY1rftOLO z5s033xBKsbwlQWt5vw5JICQFWPFnWITfLJgyn4dPsmTaq3UpUBXgMKDjsKGlppd EISmgizzmFUXavQbNq/LWX7M31Xjw7P76LKWof+NDdOiQTQot3nW3jdECS8qxsiz GKiC55kLeE1lsQim4Z3jdNfDHI6tv6VG6EJhmwyExF41fCEfjoll5CBgsalerNWB 1ZJ69S/Ami19OHH4CFAcDXQ3ZrqmjKlP9cmC7+h9EClWLFbN+zHsCugwMI7Kx4/4 vP95H0gmp52ttjrNzB1ykqnBeSCg7PDPAGB2MWbx50rJlXMJywIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBjwQw4ioxra25UnaLEu5MKqfFm9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9i ZGY4MWIyYi1hZDRjLTRkNjQtYmM5Yi0xOWM1M2EzNGZiNzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2JkZjgxYjJiLWFkNGMtNGQ2NC1i YzliLTE5YzUzYTM0ZmI3MS9iZGY4MWIyYi1hZDRjLTRkNjQtYmM5Yi0xOWM1M2Ez NGZiNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALP8cwwDwQCAAIwCQMHACYgAEKgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGDHcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiC/K5cCG1dKyRK5plzETYRbJ halJXTsBBb47NrRIwqgl7mY4yQFJMqX1LO4wxwwaCDq2Cbj/dQgmmQq2/uh91Erd Ruvut9qDbcvGCtUgJ7i0rAubgEcAhUnY32+vBFI1NFxzOAgq9SnFxYsOeAsJrPow APg8Y2zfAEitAhpQBLQ8wqpJc+CXsSdkbY64R6wEdBFqcn+ty405T7d8YzNhWwsx IEw/0ijmxkV4kHTsoaMUllRR0RxKAr+1PZw1IR8pA6Nfd7hyeuzI607r4yA81X72 1dl20hXUt9Jdmx/Fizzf8pQBi7G9iANLtAwfDHUJWdavDAmE8xkbltPkRjn3Hg== -----END CERTIFICATE-----Generated at Fri Sep 25 18:01:41 2026 by rpki-client