$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fa531296-0910-4dff-bb4f-3d77cc23dde6.cer File: fa531296-0910-4dff-bb4f-3d77cc23dde6.cer (raw, json) Hash identifier: RnHjd9poCXNd9jY0bDpVESerq8JG1QCQ6IBFGIXjiW8= Subject key identifier: 46:0B:0A:44:E9:DD:A8:42:65:3E:B1:08:87:86:57:94:71:C2:F9:55 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F430DF33149CCAED9F6BB17A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fa531296-0910-4dff-bb4f-3d77cc23dde6/fa531296-0910-4dff-bb4f-3d77cc23dde6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fa531296-0910-4dff-bb4f-3d77cc23dde6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Sep 2026 18:02:43 +0000 Certificate not after: Mon 25 Dec 2028 19:02:43 +0000 Subordinate resources: AS: 11882 AS: 15271 AS: 36092 AS: 395179 IP: 64.118.176.0/20 IP: 141.177.0.0/16 IP: 165.174.0.0/16 IP: 167.238.0.0/16 IP: 192.234.73.0/24 IP: 192.252.32.0/19 IP: 198.51.74.0/24 IP: 198.140.197.0 -- 198.140.199.255 IP: 198.148.240.0 -- 198.148.250.255 IP: 198.153.128.0/24 IP: 198.153.170.0 -- 198.153.183.255 IP: 204.107.32.0/19 IP: 204.124.252.0/22 IP: 204.130.205.0/24 IP: 204.145.112.0/22 IP: 205.144.176.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:0d:f3:31:49:cc:ae:d9:f6:bb:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 22 18:02:43 2026 GMT Not After : Dec 25 19:02:43 2028 GMT Subject: CN=fa531296-0910-4dff-bb4f-3d77cc23dde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f8:fc:fb:7f:51:39:69:ec:50:39:66:cf:72: fb:8a:43:7d:65:50:1a:43:81:60:81:89:5f:ea:88: 45:bf:31:d4:78:da:e1:4e:43:59:5e:a6:cd:0f:f8: 5e:0e:e3:7c:05:4b:bd:28:3f:08:7e:da:c9:e5:bf: 8b:c7:67:3b:15:fe:d3:be:67:f6:50:e7:21:8d:e3: c5:8d:ae:ff:d4:1e:26:d5:f4:8d:23:48:1e:c6:ba: 51:4b:72:eb:24:2e:60:47:cf:f2:74:e2:64:4e:ee: cc:60:6b:f1:b9:d9:7d:c8:14:55:bc:4c:46:36:05: 6a:17:cd:71:a4:a4:54:bb:a4:c2:1d:23:6e:d3:e0: ee:39:2f:56:61:a2:52:de:1a:10:7c:3c:bc:61:2e: bf:55:09:32:e8:56:cc:b1:84:f8:8c:d1:c5:7b:51: 06:63:af:3f:15:7a:e4:10:b0:75:aa:6e:85:e5:67: 08:ec:15:03:82:81:8c:f3:6f:0d:6b:d5:74:d8:5a: 60:ca:fb:70:c7:8c:d1:d3:19:4a:07:cc:35:fd:9a: aa:03:f1:27:ce:1f:d6:f2:cd:99:76:ad:c1:89:30: b5:78:47:f4:39:91:e8:85:cf:a7:3e:22:77:cd:e4: de:2c:53:0c:72:e5:bb:5e:7f:ff:73:7e:26:14:80: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:0A:44:E9:DD:A8:42:65:3E:B1:08:87:86:57:94:71:C2:F9:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fa531296-0910-4dff-bb4f-3d77cc23dde6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fa531296-0910-4dff-bb4f-3d77cc23dde6/fa531296-0910-4dff-bb4f-3d77cc23dde6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 64.118.176.0/20 141.177.0.0/16 165.174.0.0/16 167.238.0.0/16 192.234.73.0/24 192.252.32.0/19 198.51.74.0/24 198.140.197.0-198.140.199.255 198.148.240.0-198.148.250.255 198.153.128.0/24 198.153.170.0-198.153.183.255 204.107.32.0/19 204.124.252.0/22 204.130.205.0/24 204.145.112.0/22 205.144.176.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11882 15271 36092 395179 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b3:9a:fd:e3:e5:fc:6a:14:63:c9:e0:18:0c:f8:e4:1c:b8: c7:b0:b1:df:09:12:ef:1d:60:59:51:fa:ab:4c:4a:46:69:d8: 17:13:0c:c8:a6:6f:80:87:f3:fc:89:2e:cf:65:ec:e5:91:c1: 1e:6e:5f:0d:1a:0c:d7:b6:fb:62:93:d5:ec:f5:d3:46:b3:07: 2e:7a:a6:00:3e:28:d5:33:fb:9c:b8:20:41:66:3e:26:c7:02: d1:c7:32:97:e1:e2:f5:ba:c7:f3:8f:eb:ad:fd:a2:93:a2:d9: e3:b1:0c:d3:ac:21:ae:ef:df:3c:cb:be:04:30:09:34:4e:64: 85:2c:f1:3d:35:6b:8e:cc:49:80:a5:b7:f9:a4:55:4b:8f:f5: a9:3f:ff:c7:31:1d:45:e8:d3:8e:07:bd:9a:43:b8:a8:28:52: ee:5e:f7:79:8b:e2:0b:14:c1:bc:40:92:30:e6:af:05:81:f4: da:ad:06:12:04:c6:d1:83:4d:f2:2c:ab:68:47:c7:2a:2a:c8: 20:4f:e1:74:65:a2:23:77:26:4d:d3:4e:65:55:bf:00:31:7a: d0:95:51:63:ff:9c:7f:36:b2:7c:69:3e:f0:a0:79:39:3f:81: a1:46:3d:2e:cb:5a:57:08:3d:8f:78:d6:66:fb:27:63:4f:3b: 32:3d:32:c2 -----BEGIN CERTIFICATE----- MIIHhjCCBm6gAwIBAgIUAQ0Mn0MoWE9DDfMxScyu2fa7F6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkyMjE4MDI0M1oXDTI4MTIyNTE5MDI0M1owLzEtMCsGA1UEAxMk ZmE1MzEyOTYtMDkxMC00ZGZmLWJiNGYtM2Q3N2NjMjNkZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvj8+39ROWnsUDlmz3L7ikN9ZVAaQ4FggYlf 6ohFvzHUeNrhTkNZXqbND/heDuN8BUu9KD8IftrJ5b+Lx2c7Ff7Tvmf2UOchjePF ja7/1B4m1fSNI0gexrpRS3LrJC5gR8/ydOJkTu7MYGvxudl9yBRVvExGNgVqF81x pKRUu6TCHSNu0+DuOS9WYaJS3hoQfDy8YS6/VQky6FbMsYT4jNHFe1EGY68/FXrk ELB1qm6F5WcI7BUDgoGM828Na9V02Fpgyvtwx4zR0xlKB8w1/ZqqA/Enzh/W8s2Z dq3BiTC1eEf0OZHohc+nPiJ3zeTeLFMMcuW7Xn//c34mFICtTQIDAQABo4IEmDCC BJQwHQYDVR0OBBYEFEYLCkTp3ahCZT6xCIeGV5RxwvlVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m YTUzMTI5Ni0wOTEwLTRkZmYtYmI0Zi0zZDc3Y2MyM2RkZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2ZhNTMxMjk2LTA5MTAtNGRmZi1i YjRmLTNkNzdjYzIzZGRlNi9mYTUzMTI5Ni0wOTEwLTRkZmYtYmI0Zi0zZDc3Y2My M2RkZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwgY4GCCsGAQUF BwEHAQH/BH8wfTB7BAIAATB1AwQEQHawAwMAjbEDAwClrgMDAKfuAwQAwOpJAwQF wPwgAwQAxjNKMAwDBADGjMUDBAPGjMAwDAMEBMaU8AMEAMaU+gMEAMaZgDAMAwQB xpmqAwQDxpmwAwQFzGsgAwQCzHz8AwQAzILNAwQCzJFwAwQEzZCwMCcGCCsGAQUF BwEIAQH/BBgwFqAUMBICAi5qAgI7pwIDAIz8AgMGB6swVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASrOa/ePl /GoUY8ngGAz45By4x7Cx3wkS7x1gWVH6q0xKRmnYFxMMyKZvgIfz/Ikuz2Xs5ZHB Hm5fDRoM17b7YpPV7PXTRrMHLnqmAD4o1TP7nLggQWY+JscC0ccyl+Hi9brH84/r rf2ik6LZ47EM06whru/fPMu+BDAJNE5khSzxPTVrjsxJgKW3+aRVS4/1qT//xzEd RejTjge9mkO4qChS7l73eYviCxTBvECSMOavBYH02q0GEgTG0YNN8iyraEfHKirI IE/hdGWiI3cmTdNOZVW/ADF60JVRY/+cfzayfGk+8KB5OT+BoUY9LstaVwg9j3jW ZvsnY087Mj0ywg== -----END CERTIFICATE-----Generated at Thu Sep 24 14:54:17 2026 by rpki-client