$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d.cer File: d982f1ba-c920-429c-a52e-66234d07865d.cer (raw, json) Hash identifier: hHg20xj4pVilIC4CMXx0G49SbkDo0JmKyCLjMpUENuw= Subject key identifier: 01:54:25:46:D5:2A:CA:79:F4:51:6E:66:35:2C:17:48:59:9A:0C:68 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F40A5FC520551F225A3D00DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Sep 2026 21:21:37 +0000 Certificate not after: Sun 24 Dec 2028 22:21:37 +0000 Subordinate resources: AS: 399065 IP: 72.21.0.0/21 IP: 162.33.192.0/22 IP: 167.224.0.0/20 IP: 169.150.32.0/19 IP: 170.203.0.0/21 IP: 170.203.32.0/20 IP: 195.85.120.0/21 IP: 208.56.240.0/20 IP: 216.205.32.0/20 IP: 2602:fce7::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:a5:fc:52:05:51:f2:25:a3:d0:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 21 21:21:37 2026 GMT Not After : Dec 24 22:21:37 2028 GMT Subject: CN=d982f1ba-c920-429c-a52e-66234d07865d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:7c:da:7e:2d:1d:eb:0c:de:b0:26:47:79: 3c:32:f7:66:3f:fd:28:1c:f6:19:57:3a:a9:56:ae: e2:61:2b:c4:3e:d1:b6:04:b4:02:1c:f2:65:93:07: 0b:02:9b:c5:6b:e1:a6:f3:68:ea:ce:7c:15:15:fd: 32:b1:39:1a:26:7d:3d:95:80:9b:bd:2f:be:27:22: 4b:3d:d6:54:85:c7:a0:d6:ae:5d:2f:85:20:92:cc: a5:a7:c9:2a:b3:0b:12:6c:89:3b:a3:22:bc:b7:0f: ac:aa:02:30:69:fa:1b:2c:7e:3c:fe:c8:fe:86:3c: e9:19:e0:1d:11:8a:08:bc:b5:5d:9b:30:ea:71:fa: b2:02:37:5c:a2:21:24:7b:80:9f:38:55:23:5e:3b: 1c:06:16:ce:22:19:a5:4b:52:c2:5d:33:69:e9:37: 96:fd:69:1a:e9:e4:ee:39:01:a9:0d:19:41:9b:ec: 98:e1:61:4a:e8:06:22:02:24:ba:48:18:ad:0d:ce: 86:36:9b:47:15:f4:cd:e6:bf:2e:ce:6a:63:e2:49: 81:7d:90:3e:8c:0a:59:c5:76:03:7e:df:2d:7c:a6: 6f:31:38:b5:6b:cb:a7:7b:32:dc:52:b5:e5:e8:ba: 47:4b:7e:6d:07:b0:ed:86:57:28:7a:22:ea:f2:c2: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:54:25:46:D5:2A:CA:79:F4:51:6E:66:35:2C:17:48:59:9A:0C:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d982f1ba-c920-429c-a52e-66234d07865d/d982f1ba-c920-429c-a52e-66234d07865d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 72.21.0.0/21 162.33.192.0/22 167.224.0.0/20 169.150.32.0/19 170.203.0.0/21 170.203.32.0/20 195.85.120.0/21 208.56.240.0/20 216.205.32.0/20 IPv6: 2602:fce7::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399065 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3c:1f:c4:8d:c4:df:fe:c4:d9:e4:cd:10:18:ad:57:38:09: e0:b5:da:90:39:44:8f:60:b1:43:db:c1:d4:a9:4c:1e:f2:dc: 09:91:ef:43:39:e8:70:6d:b0:da:01:c2:4f:da:be:f0:60:d0: ac:dc:0c:b2:08:5a:72:ef:27:14:9e:bd:ad:77:79:4f:ff:1b: e6:96:d5:0d:96:34:65:5c:12:7b:c1:a8:da:42:47:77:33:89: a5:e1:80:80:c4:d4:94:4d:72:30:7b:b6:58:f6:95:91:02:e8: 0f:e5:87:5f:36:de:8d:41:1a:49:46:79:41:51:99:45:e6:9e: 59:d7:01:95:e6:81:a1:2f:54:af:05:cc:f7:75:00:10:10:91: 04:b3:49:9d:07:09:c8:12:73:a2:f7:f3:81:75:ca:d8:ad:39: 8f:fa:e7:97:81:a9:05:ed:16:a5:35:00:3d:6d:a7:df:42:20: 63:a5:b0:b2:4e:31:81:f1:db:be:5f:e9:19:85:93:2c:57:90: 67:b8:e8:89:bf:e7:19:ff:35:0c:d0:19:9d:59:dd:a2:ec:11: c5:43:d8:11:b1:fa:33:0f:60:52:e0:75:b1:a9:a3:a4:a1:38: 65:84:33:69:35:ba:78:e6:82:80:e0:79:86:17:c7:97:d1:4b: a3:5a:f5:65 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWE9ApfxSBVHyJaPQDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMTIxMjEzN1oXDTI4MTIyNDIyMjEzN1owLzEtMCsGA1UEAxMk ZDk4MmYxYmEtYzkyMC00MjljLWE1MmUtNjYyMzRkMDc4NjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c982n4tHesM3rAmR3k8MvdmP/0oHPYZVzqp Vq7iYSvEPtG2BLQCHPJlkwcLApvFa+Gm82jqznwVFf0ysTkaJn09lYCbvS++JyJL PdZUhceg1q5dL4Ugksylp8kqswsSbIk7oyK8tw+sqgIwafobLH48/sj+hjzpGeAd EYoIvLVdmzDqcfqyAjdcoiEke4CfOFUjXjscBhbOIhmlS1LCXTNp6TeW/Wka6eTu OQGpDRlBm+yY4WFK6AYiAiS6SBitDc6GNptHFfTN5r8uzmpj4kmBfZA+jApZxXYD ft8tfKZvMTi1a8unezLcUrXl6LpHS35tB7DthlcoeiLq8sIjMQIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFAFUJUbVKsp59FFuZjUsF0hZmgxoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9k OTgyZjFiYS1jOTIwLTQyOWMtYTUyZS02NjIzNGQwNzg2NWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2Q5ODJmMWJhLWM5MjAtNDI5Yy1h NTJlLTY2MjM0ZDA3ODY1ZC9kOTgyZjFiYS1jOTIwLTQyOWMtYTUyZS02NjIzNGQw Nzg2NWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBANIFQADBAKiIcADBASn4AADBAWpliADBAOqywAD BASqyyADBAPDVXgDBATQOPADBATYzSAwDQQCAAIwBwMFACYC/OcwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhbZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABE8H8SNxN/+xNnkzRAYrVc4CeC1 2pA5RI9gsUPbwdSpTB7y3AmR70M56HBtsNoBwk/avvBg0KzcDLIIWnLvJxSeva13 eU//G+aW1Q2WNGVcEnvBqNpCR3cziaXhgIDE1JRNcjB7tlj2lZEC6A/lh1823o1B GklGeUFRmUXmnlnXAZXmgaEvVK8FzPd1ABAQkQSzSZ0HCcgSc6L384F1ytitOY/6 55eBqQXtFqU1AD1tp99CIGOlsLJOMYHx275f6RmFkyxXkGe46Im/5xn/NQzQGZ1Z 3aLsEcVD2BGx+jMPYFLgdbGpo6ShOGWEM2k1unjmgoDgeYYXx5fRS6Na9WU= -----END CERTIFICATE-----Generated at Wed Sep 23 04:00:31 2026 by rpki-client