$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68.cer File: cbad4f77-6011-4cb2-a417-af400d03bc68.cer (raw, json) Hash identifier: c7Gro9evH1JPvu4w7o0lWmT6v7eI4FWB7zPRJ7jsA4M= Subject key identifier: CA:9A:3D:9B:53:1F:23:66:01:97:79:51:68:3C:7F:E5:AF:C7:7D:91 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F6C6E6F75E4702807F8E7D540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Oct 2026 13:45:16 +0000 Certificate not after: Tue 26 Dec 2028 17:22:44 +0000 Subordinate resources: AS: 399282 IP: 162.210.20.0/22 IP: 192.200.24.0/21 IP: 209.147.104.0/21 IP: 2606:9140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:6e:6f:75:e4:70:28:07:f8:e7:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 7 13:45:16 2026 GMT Not After : Dec 26 17:22:44 2028 GMT Subject: CN=cbad4f77-6011-4cb2-a417-af400d03bc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:30:ec:e0:c9:20:c3:a4:ba:f5:39:92:22: bd:e9:d4:04:3c:92:6c:61:ec:de:45:af:57:35:31: 90:17:63:21:db:7a:d0:3a:60:9f:03:a0:50:68:1b: 11:0a:1a:e2:73:14:14:a6:1c:61:4d:e7:5b:3b:a9: 45:38:ca:54:f2:47:25:64:a8:9f:92:87:13:ac:89: 39:65:6a:b6:fc:8e:6c:ab:e8:31:48:96:1f:f0:51: 29:8b:39:c0:35:45:27:cb:f7:f0:39:96:fd:ed:ec: 8e:01:cf:87:a1:7e:e7:3d:d6:97:13:74:1a:ac:72: 24:ea:fa:ff:a4:17:a2:46:a0:2d:ec:40:78:d7:8e: 17:0d:b1:62:66:c1:33:01:46:5b:89:d9:2c:ef:f1: eb:e8:1e:64:33:9f:d7:83:8f:77:0c:b8:7b:3f:df: 07:d1:cc:61:f7:70:65:18:60:2d:0e:b6:71:3b:2b: ce:28:a4:6f:d1:32:d3:2d:fe:4f:a3:7c:85:35:ae: be:d8:56:60:6b:06:96:0e:a2:e5:cc:e0:f9:cd:ec: ed:b4:2b:22:5b:02:6b:53:6d:75:c7:cb:80:20:b9: ec:27:88:35:e2:c5:a6:f6:73:f0:7b:74:ed:fc:5c: 43:89:b0:51:a8:a1:16:74:d2:e9:63:b6:31:e5:f8: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:3D:9B:53:1F:23:66:01:97:79:51:68:3C:7F:E5:AF:C7:7D:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbad4f77-6011-4cb2-a417-af400d03bc68/cbad4f77-6011-4cb2-a417-af400d03bc68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 162.210.20.0/22 192.200.24.0/21 209.147.104.0/21 IPv6: 2606:9140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399282 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fe:92:1e:19:b7:1e:e7:63:dd:70:88:4c:f6:c4:52:03:d0: 7f:0f:f4:56:66:f3:52:fc:e8:33:65:fb:35:a6:e3:30:c2:16: 91:17:49:87:32:f5:fa:c2:ca:5b:0b:76:11:a2:a1:c8:dd:90: 34:36:f1:ad:54:39:2f:34:8a:31:46:1e:3b:7e:a7:72:a9:5d: 8d:3a:12:48:5a:4c:80:8d:cf:e5:93:ca:fd:fb:22:5f:f8:73: 0e:f3:02:2d:a9:13:9a:a5:95:a8:ea:6a:d9:1b:48:ff:3a:34: 48:9d:79:34:5c:4a:5a:a5:33:af:1e:86:7c:cd:79:f2:35:08: 2e:ca:f2:95:d5:92:01:b4:57:2d:40:be:94:8a:3e:74:92:ed: 17:54:4e:ca:af:87:22:da:f8:ed:92:d8:74:d4:64:ae:a1:34: 51:84:ef:9c:bd:a0:ae:63:6c:90:70:ed:52:80:a4:fe:68:03: fa:fa:8e:de:6e:e4:17:4d:75:4f:1a:d0:e1:1e:bb:6d:c8:06: ef:3d:42:3b:be:fb:76:ea:4d:1b:3e:bd:b5:f3:0d:c1:55:7d: f7:66:26:78:34:f9:f2:8c:8f:b8:02:18:df:d4:12:1c:e1:3d: c2:cc:33:ca:bb:9c:6a:af:11:c5:fb:e6:41:40:5f:38:69:20: 18:38:8f:96 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9sbm915HAoB/jn1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAwNzEzNDUxNloXDTI4MTIyNjE3MjI0NFowLzEtMCsGA1UEAxMk Y2JhZDRmNzctNjAxMS00Y2IyLWE0MTctYWY0MDBkMDNiYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Ew7ODJIMOkuvU5kiK96dQEPJJsYezeRa9X NTGQF2Mh23rQOmCfA6BQaBsRChricxQUphxhTedbO6lFOMpU8kclZKifkocTrIk5 ZWq2/I5sq+gxSJYf8FEpiznANUUny/fwOZb97eyOAc+HoX7nPdaXE3QarHIk6vr/ pBeiRqAt7EB4144XDbFiZsEzAUZbidks7/Hr6B5kM5/Xg493DLh7P98H0cxh93Bl GGAtDrZxOyvOKKRv0TLTLf5Po3yFNa6+2FZgawaWDqLlzOD5zezttCsiWwJrU211 x8uAILnsJ4g14sWm9nPwe3Tt/FxDibBRqKEWdNLpY7Yx5fh29wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFMqaPZtTHyNmAZd5UWg8f+Wvx32RMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9j YmFkNGY3Ny02MDExLTRjYjItYTQxNy1hZjQwMGQwM2JjNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2NiYWQ0Zjc3LTYwMTEtNGNiMi1h NDE3LWFmNDAwZDAzYmM2OC9jYmFkNGY3Ny02MDExLTRjYjItYTQxNy1hZjQwMGQw M2JjNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKi0hQDBAPAyBgDBAPRk2gwDQQCAAIwBwMFACYG kUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBheyMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJr+kh4Ztx7n Y91wiEz2xFID0H8P9FZm81L86DNl+zWm4zDCFpEXSYcy9frCylsLdhGiocjdkDQ2 8a1UOS80ijFGHjt+p3KpXY06EkhaTICNz+WTyv37Il/4cw7zAi2pE5qllajqatkb SP86NEideTRcSlqlM68ehnzNefI1CC7K8pXVkgG0Vy1AvpSKPnSS7RdUTsqvhyLa +O2S2HTUZK6hNFGE75y9oK5jbJBw7VKApP5oA/r6jt5u5BdNdU8a0OEeu23IBu89 Qju++3bqTRs+vbXzDcFVffdmJng0+fKMj7gCGN/UEhzhPcLMM8q7nGqvEcX75kFA XzhpIBg4j5Y= -----END CERTIFICATE-----Generated at Mon Oct 12 04:59:28 2026 by rpki-client