$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c.cer File: 0f35d963-b9d2-495c-92b1-408f555bc61c.cer (raw, json) Hash identifier: l9Cvxoy79zbxUy5vZKgAWiC4Kwp40EmoX4Y3R1D/SlI= Subject key identifier: 5D:AE:6A:70:3E:F2:9E:DC:28:3D:46:58:48:69:4C:E1:70:A3:E2:E0 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7C99B813C4B0248F2FF3F880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Oct 2026 08:45:25 +0000 Certificate not after: Mon 15 Jan 2029 09:45:25 +0000 Subordinate resources: IP: 156.9.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:99:b8:13:c4:b0:24:8f:2f:f3:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 13 08:45:25 2026 GMT Not After : Jan 15 09:45:25 2029 GMT Subject: CN=0f35d963-b9d2-495c-92b1-408f555bc61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:24:5f:3b:69:7c:bd:05:0f:cc:b1:39:1c: 0b:65:45:ff:9c:9e:3c:d6:55:19:e7:1e:9c:67:8f: 1b:84:48:17:70:e9:ac:c6:b2:3c:60:f4:c8:08:90: 47:4f:91:56:88:09:81:d6:23:b9:50:6b:0e:a1:32: e1:59:4e:4c:22:ed:7c:dc:0a:dc:4f:cd:ea:5b:ec: 4f:a8:43:22:8a:c7:23:36:5a:89:d9:b8:5d:f1:1e: a9:e4:76:a7:07:bb:98:9f:33:8c:f1:c1:16:67:49: 9c:f8:22:74:b5:91:3e:0d:99:17:ae:cd:b4:66:cf: e4:f8:a2:63:62:9f:e9:9c:9a:5b:d2:95:67:ce:56: a5:0b:4d:36:7a:a5:c5:52:5a:be:22:09:dc:18:4a: 3a:53:75:2b:80:4a:b9:42:bf:47:57:4b:b3:cb:1c: c4:09:f7:98:31:0a:bb:47:96:74:8a:c9:ac:aa:ad: be:61:3b:ac:33:82:bc:b4:ca:af:22:0e:ba:70:f9: 2b:f5:27:65:09:23:18:c8:53:3e:f5:58:64:92:94: 70:17:15:db:64:43:21:6c:80:31:d4:c2:79:f4:5d: 07:d8:38:7b:a8:42:aa:af:88:7e:f6:7e:d9:61:1a: 1a:10:8f:6a:55:9d:2e:3c:d4:88:84:dc:16:78:f8: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AE:6A:70:3E:F2:9E:DC:28:3D:46:58:48:69:4C:E1:70:A3:E2:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 156.9.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:04:a0:9b:ae:7d:1c:3b:d5:4e:06:44:d6:ef:07:b3:dd:3e: 10:1a:52:d9:68:48:62:d3:ac:5b:4e:dd:dd:12:9b:11:42:40: 07:f5:05:73:fb:12:4d:92:d5:46:f2:4f:aa:ac:92:65:38:1b: 90:e9:b1:4c:ca:81:48:b9:96:ec:89:f2:69:f6:cc:c7:7c:3c: a3:a9:a1:e2:a6:c2:ef:06:83:6d:cd:23:7e:d9:fd:68:7c:c4: ad:5a:51:d1:28:ba:ff:f5:a7:7a:65:5b:5e:87:18:9a:42:bf: 5e:ac:fc:13:3e:b3:fb:1c:e2:72:77:a6:79:4a:7d:17:18:14: 5b:27:94:b8:5f:c9:cb:80:2e:9c:53:f4:bf:b5:24:ad:9e:55: 51:f4:a7:00:ef:8f:56:5e:0b:02:48:71:ac:91:b7:63:07:40: 80:81:3d:3f:52:d6:6d:72:d1:18:94:8c:e4:c4:26:2f:6b:93: ce:76:63:ee:96:76:27:30:52:4a:1a:79:d1:67:7c:7b:14:d7: 43:d0:e4:a5:f9:b2:f2:0e:91:12:b3:63:8f:07:97:ce:45:20: 01:57:c5:6f:c2:12:00:a3:dd:d6:3e:27:0b:27:86:3f:5e:d5: 87:a7:9b:59:f5:a5:de:9d:cb:2d:92:e1:2f:65:95:ac:61:64: 25:77:c6:d0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE98mbgTxLAkjy/z+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMzA4NDUyNVoXDTI5MDExNTA5NDUyNVowLzEtMCsGA1UEAxMk MGYzNWQ5NjMtYjlkMi00OTVjLTkyYjEtNDA4ZjU1NWJjNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEwkXztpfL0FD8yxORwLZUX/nJ481lUZ5x6c Z48bhEgXcOmsxrI8YPTICJBHT5FWiAmB1iO5UGsOoTLhWU5MIu183ArcT83qW+xP qEMiiscjNlqJ2bhd8R6p5HanB7uYnzOM8cEWZ0mc+CJ0tZE+DZkXrs20Zs/k+KJj Yp/pnJpb0pVnzlalC002eqXFUlq+IgncGEo6U3UrgEq5Qr9HV0uzyxzECfeYMQq7 R5Z0ismsqq2+YTusM4K8tMqvIg66cPkr9SdlCSMYyFM+9VhkkpRwFxXbZEMhbIAx 1MJ59F0H2Dh7qEKqr4h+9n7ZYRoaEI9qVZ0uPNSIhNwWePhXpwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFF2uanA+8p7cKD1GWEhpTOFwo+LgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8w ZjM1ZDk2My1iOWQyLTQ5NWMtOTJiMS00MDhmNTU1YmM2MWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzBmMzVkOTYzLWI5ZDItNDk1Yy05 MmIxLTQwOGY1NTViYzYxYy8wZjM1ZDk2My1iOWQyLTQ5NWMtOTJiMS00MDhmNTU1 YmM2MWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKcCbwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMgSgm659HDvVTgZE1u8H s90+EBpS2WhIYtOsW07d3RKbEUJAB/UFc/sSTZLVRvJPqqySZTgbkOmxTMqBSLmW 7InyafbMx3w8o6mh4qbC7waDbc0jftn9aHzErVpR0Si6//WnemVbXocYmkK/Xqz8 Ez6z+xzicnemeUp9FxgUWyeUuF/Jy4AunFP0v7UkrZ5VUfSnAO+PVl4LAkhxrJG3 YwdAgIE9P1LWbXLRGJSM5MQmL2uTznZj7pZ2JzBSShp50Wd8exTXQ9Dkpfmy8g6R ErNjjweXzkUgAVfFb8ISAKPd1j4nCyeGP17Vh6ebWfWl3p3LLZLhL2WVrGFkJXfG 0A== -----END CERTIFICATE-----Generated at Thu Oct 15 00:42:30 2026 by rpki-client