$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8f79c06-7129-4fd4-9800-4fedc921a236.cer File: c8f79c06-7129-4fd4-9800-4fedc921a236.cer (raw, json) Hash identifier: RSYG2IFPN9wSkXp1KTqgxtYwZFHi2+osVBduuPUvtDs= Subject key identifier: F2:31:F9:0E:3D:E9:65:3A:DA:B8:9C:9D:5B:1A:BA:39:F7:7E:B7:E9 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F4036B7258D4D36B9000FE580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8f79c06-7129-4fd4-9800-4fedc921a236/c8f79c06-7129-4fd4-9800-4fedc921a236.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8f79c06-7129-4fd4-9800-4fedc921a236/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 17:37:26 +0000 Certificate not after: Sun 24 Dec 2028 18:37:26 +0000 Subordinate resources: AS: 30098 IP: 198.179.8.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:36:b7:25:8d:4d:36:b9:00:0f:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 21 17:37:26 2026 GMT Not After : Dec 24 18:37:26 2028 GMT Subject: CN=c8f79c06-7129-4fd4-9800-4fedc921a236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:fc:3d:8a:e8:b6:b0:55:b7:c6:13:32:20: f0:0b:51:18:81:0b:1d:63:99:78:1f:cd:9e:b9:81: f7:5e:8f:9b:35:59:62:f9:b2:c6:89:a7:ed:02:4f: f3:5b:25:3c:d9:b5:ee:4a:04:aa:f3:d3:d5:df:86: 6b:98:df:fa:3e:e2:78:84:13:b0:53:17:7d:b4:f1: a8:15:b4:83:0d:48:65:d2:15:9e:6f:fa:0c:dc:89: 3e:34:08:06:2e:42:a9:5c:5d:4a:4e:d9:ea:b7:76: 24:6e:f7:95:92:55:cf:d4:6c:df:f1:40:73:e0:26: 3c:cc:7c:04:1f:c7:ee:24:2e:e5:1d:0b:9b:07:14: dd:ba:2b:eb:f2:28:26:13:3e:8f:f6:55:04:bc:aa: 68:0f:29:c7:48:30:5c:80:d2:c6:11:d8:bc:51:90: b2:73:5e:91:20:91:5a:c1:d0:cc:15:47:df:0d:33: e0:12:fd:dc:11:8f:2b:a9:a1:a4:a0:7d:52:bb:5d: d8:6b:cd:d3:3f:4a:61:2a:9e:f1:5a:87:27:7e:5c: 0c:60:d2:23:85:a4:e6:1b:04:1b:41:2a:68:03:e4: ce:c5:65:59:df:f4:63:f4:4d:69:74:f5:53:79:b8: ff:fc:c1:f3:bc:e1:d3:73:ce:f2:09:1b:60:47:a0: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:31:F9:0E:3D:E9:65:3A:DA:B8:9C:9D:5B:1A:BA:39:F7:7E:B7:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8f79c06-7129-4fd4-9800-4fedc921a236/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c8f79c06-7129-4fd4-9800-4fedc921a236/c8f79c06-7129-4fd4-9800-4fedc921a236.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 198.179.8.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30098 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f4:7c:32:2a:9b:2e:03:75:8d:44:c1:1a:34:a9:0a:41:00: 12:df:4b:cb:14:3a:40:c4:37:2c:be:f2:6e:55:f9:2e:cd:42: 76:8b:b9:2e:0a:cd:a6:65:03:a0:01:dc:4b:eb:7d:21:7f:e1: a1:25:a3:00:4c:f6:7f:bd:d0:9d:24:e9:6d:ff:11:b3:77:7c: b6:7f:14:cd:15:37:84:46:4c:a5:74:2a:b7:8c:f2:65:a1:42: 91:be:17:e5:96:d4:19:73:c2:5e:1a:93:af:06:f8:ad:ad:2f: 7a:4a:43:5d:26:ce:d0:9e:7c:68:d3:18:95:ab:ff:82:c7:d9: 85:7a:84:6d:04:e9:67:71:8b:8e:c8:ab:eb:89:28:ad:38:d8: 87:5b:b3:00:17:17:10:4a:e5:90:c3:0e:48:44:b6:ba:af:9e: 58:02:02:32:ff:cc:c4:d3:52:56:f6:62:1e:bf:a7:2a:33:c4: 18:73:e1:c9:8d:58:55:e7:fd:e9:21:77:9d:a0:72:4e:95:97: c8:31:c5:1a:75:0b:16:9c:e5:ad:ad:55:87:39:f8:33:02:35: 11:5a:5a:0b:d9:8b:bb:ce:c5:55:eb:df:d5:86:d6:41:0b:2b: 7c:66:bb:84:9e:fa:3e:99:37:10:57:8c:04:db:ab:71:de:ac: 59:58:ed:60 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9ANrcljU02uQAP5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMTE3MzcyNloXDTI4MTIyNDE4MzcyNlowLzEtMCsGA1UEAxMk YzhmNzljMDYtNzEyOS00ZmQ0LTk4MDAtNGZlZGM5MjFhMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VT8PYrotrBVt8YTMiDwC1EYgQsdY5l4H82e uYH3Xo+bNVli+bLGiaftAk/zWyU82bXuSgSq89PV34ZrmN/6PuJ4hBOwUxd9tPGo FbSDDUhl0hWeb/oM3Ik+NAgGLkKpXF1KTtnqt3YkbveVklXP1Gzf8UBz4CY8zHwE H8fuJC7lHQubBxTduivr8igmEz6P9lUEvKpoDynHSDBcgNLGEdi8UZCyc16RIJFa wdDMFUffDTPgEv3cEY8rqaGkoH1Su13Ya83TP0phKp7xWocnflwMYNIjhaTmGwQb QSpoA+TOxWVZ3/Rj9E1pdPVTebj//MHzvOHTc87yCRtgR6BtuwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPIx+Q496WU62ricnVsaujn3frfpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j OGY3OWMwNi03MTI5LTRmZDQtOTgwMC00ZmVkYzkyMWEyMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2M4Zjc5YzA2LTcxMjktNGZkNC05 ODAwLTRmZWRjOTIxYTIzNi9jOGY3OWMwNi03MTI5LTRmZDQtOTgwMC00ZmVkYzky MWEyMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPGswgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAN/R8MiqbLgN1jUTBGjSpCkEAEt9LyxQ6QMQ3LL7yblX5Ls1C dou5LgrNpmUDoAHcS+t9IX/hoSWjAEz2f73QnSTpbf8Rs3d8tn8UzRU3hEZMpXQq t4zyZaFCkb4X5ZbUGXPCXhqTrwb4ra0vekpDXSbO0J58aNMYlav/gsfZhXqEbQTp Z3GLjsir64korTjYh1uzABcXEErlkMMOSES2uq+eWAICMv/MxNNSVvZiHr+nKjPE GHPhyY1YVef96SF3naByTpWXyDHFGnULFpzlra1Vhzn4MwI1EVpaC9mLu87FVevf 1YbWQQsrfGa7hJ76Ppk3EFeMBNurcd6sWVjtYA== -----END CERTIFICATE-----Generated at Wed Sep 23 05:48:29 2026 by rpki-client