$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f0dcbd3-789a-4ebc-af28-562295fb01fa.cer File: 1f0dcbd3-789a-4ebc-af28-562295fb01fa.cer (raw, json) Hash identifier: gqDbWC3JCGC+wvuU+mbPatEbL+roW1fl97GyFHP7O/E= Subject key identifier: 91:3F:99:11:8F:73:9B:9D:E4:B1:FC:2E:D9:EF:69:70:AD:22:3C:E6 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F347D500FC738AD62CA401700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f0dcbd3-789a-4ebc-af28-562295fb01fa/1f0dcbd3-789a-4ebc-af28-562295fb01fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f0dcbd3-789a-4ebc-af28-562295fb01fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 12:49:58 +0000 Certificate not after: Wed 20 Dec 2028 13:49:58 +0000 Subordinate resources: IP: 174.141.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:7d:50:0f:c7:38:ad:62:ca:40:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 17 12:49:58 2026 GMT Not After : Dec 20 13:49:58 2028 GMT Subject: CN=1f0dcbd3-789a-4ebc-af28-562295fb01fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:a0:ff:f1:cd:95:13:3a:fc:48:3a:f4:28: d7:3c:d5:52:55:a1:13:64:c2:68:9a:26:ea:73:ff: 31:e1:5c:f2:7a:2c:2b:00:75:35:5a:50:9f:47:a6: 11:06:5d:f0:01:9f:5f:11:a8:29:fe:95:19:d1:ac: f9:17:f8:0a:2e:49:97:f8:19:12:57:ac:4c:ea:39: 8c:57:a8:29:6e:13:e4:bb:51:ea:4c:42:e2:43:fa: 9b:b2:dc:0c:46:ca:18:03:af:9f:c8:5c:a2:90:e4: ce:d0:40:c7:dc:c1:aa:67:5e:6a:66:e0:4d:44:0d: 34:b4:92:02:bb:18:73:89:14:a7:cb:bb:2c:dd:88: 00:6b:a4:d2:e1:8b:a9:08:30:49:a3:5d:66:8e:3a: d9:81:65:55:85:4d:d2:08:ce:e4:05:5c:00:92:8d: 28:e0:4b:4a:97:8c:9e:11:5b:d7:b2:ee:65:ec:70: e9:19:fe:45:7c:ed:45:67:fa:75:f9:3c:89:af:b9: 66:ae:d2:c0:8f:db:6e:46:a6:1a:c6:39:f9:c7:14: 1d:0a:e6:70:5a:68:f1:5e:29:40:53:98:b4:c8:b2: c6:dc:ed:64:6b:2c:4f:5f:a1:53:a1:81:3d:34:56: 9c:87:90:34:41:99:02:41:09:34:23:06:4c:26:b3: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3F:99:11:8F:73:9B:9D:E4:B1:FC:2E:D9:EF:69:70:AD:22:3C:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f0dcbd3-789a-4ebc-af28-562295fb01fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1f0dcbd3-789a-4ebc-af28-562295fb01fa/1f0dcbd3-789a-4ebc-af28-562295fb01fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 174.141.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ab:fa:0c:18:2a:d3:9e:2e:d8:84:78:19:e6:c9:69:5c:3e: 81:3f:bc:99:9f:bd:27:4d:d6:91:57:fa:b5:ce:a3:50:61:92: 70:91:2e:de:7b:7a:94:c7:3d:c8:b2:a0:b1:19:b5:83:ab:c8: b2:2c:93:4e:cd:a9:34:de:29:e0:3f:cf:b3:c3:a7:da:2f:75: 49:31:26:6d:21:a2:cd:5b:39:d5:3c:e7:49:aa:06:c7:08:a2: f5:ef:29:b1:16:29:6f:1f:cc:4f:08:fe:6e:19:a8:f5:8e:f9: 21:38:35:5a:43:51:be:14:dc:38:fb:ef:eb:32:0f:1a:d6:96: 66:e9:2d:d7:2a:e9:b9:bb:00:14:f2:1a:67:85:66:3d:47:e9: 18:10:ae:3b:df:b3:d5:a1:34:ce:6d:c9:b4:fd:9c:6b:eb:f3: 9e:86:aa:f4:49:e1:4f:73:3a:67:7a:df:bc:79:d6:25:c0:d5: 6e:5b:7c:b3:99:27:10:0e:99:db:10:d0:de:d2:91:2c:68:6d: dd:9f:0e:65:61:34:c8:88:f9:65:26:11:e7:df:1b:b8:07:45: d6:0d:68:e7:74:a1:87:f5:40:7b:a0:d7:63:2e:76:9d:3e:df: c3:6e:f6:99:1f:5f:24:35:55:70:3c:f6:30:d6:59:0f:0a:9c: b8:f1:3d:1a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE80fVAPxzitYspAFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNzEyNDk1OFoXDTI4MTIyMDEzNDk1OFowLzEtMCsGA1UEAxMk MWYwZGNiZDMtNzg5YS00ZWJjLWFmMjgtNTYyMjk1ZmIwMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1eg//HNlRM6/Eg69CjXPNVSVaETZMJomibq c/8x4VzyeiwrAHU1WlCfR6YRBl3wAZ9fEagp/pUZ0az5F/gKLkmX+BkSV6xM6jmM V6gpbhPku1HqTELiQ/qbstwMRsoYA6+fyFyikOTO0EDH3MGqZ15qZuBNRA00tJIC uxhziRSny7ss3YgAa6TS4YupCDBJo11mjjrZgWVVhU3SCM7kBVwAko0o4EtKl4ye EVvXsu5l7HDpGf5FfO1FZ/p1+TyJr7lmrtLAj9tuRqYaxjn5xxQdCuZwWmjxXilA U5i0yLLG3O1kayxPX6FToYE9NFach5A0QZkCQQk0IwZMJrMt1wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFJE/mRGPc5ud5LH8LtnvaXCtIjzmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x ZjBkY2JkMy03ODlhLTRlYmMtYWYyOC01NjIyOTVmYjAxZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzFmMGRjYmQzLTc4OWEtNGViYy1h ZjI4LTU2MjI5NWZiMDFmYS8xZjBkY2JkMy03ODlhLTRlYmMtYWYyOC01NjIyOTVm YjAxZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASujeAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGav6DBgq054u2IR4GebJ aVw+gT+8mZ+9J03WkVf6tc6jUGGScJEu3nt6lMc9yLKgsRm1g6vIsiyTTs2pNN4p 4D/Ps8On2i91STEmbSGizVs51TznSaoGxwii9e8psRYpbx/MTwj+bhmo9Y75ITg1 WkNRvhTcOPvv6zIPGtaWZukt1yrpubsAFPIaZ4VmPUfpGBCuO9+z1aE0zm3JtP2c a+vznoaq9EnhT3M6Z3rfvHnWJcDVblt8s5knEA6Z2xDQ3tKRLGht3Z8OZWE0yIj5 ZSYR598buAdF1g1o53Shh/VAe6DXYy52nT7fw272mR9fJDVVcDz2MNZZDwqcuPE9 Gg== -----END CERTIFICATE-----Generated at Mon Sep 21 16:57:45 2026 by rpki-client