$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.cer File: 21f8057f-d654-47e6-8f6f-eea32f0b8ab6.cer (raw, json) Hash identifier: GISCeBgpTyDJ889su4mgxJh0vTKld/yJlwJllSDh2Gc= Subject key identifier: 5A:DC:2E:67:59:EB:E3:23:D6:BC:EA:F3:CC:60:43:61:A6:97:8F:BE Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F32587387AEB79E686254D040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Sep 2026 18:24:05 +0000 Certificate not after: Tue 19 Dec 2028 19:24:05 +0000 Subordinate resources: AS: 32932 IP: 192.174.69.0/24 IP: 2620:cd:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:58:73:87:ae:b7:9e:68:62:54:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 16 18:24:05 2026 GMT Not After : Dec 19 19:24:05 2028 GMT Subject: CN=21f8057f-d654-47e6-8f6f-eea32f0b8ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:eb:e3:ff:c0:ef:eb:89:fb:cc:c8:c7:65: 16:c3:45:59:f1:9f:72:64:44:9e:ab:4b:71:6b:92: 0e:7a:10:ae:fd:28:dc:c9:2e:65:b1:0d:ab:90:54: 7c:29:d4:13:e9:e0:cf:63:d8:39:3a:c8:56:f9:b0: 64:fc:e6:ce:32:e0:65:b2:46:d9:99:12:0c:22:e0: d8:5a:70:d3:51:f4:4c:f3:1d:c7:38:be:b1:ec:f1: 69:d7:f1:b5:43:de:b6:71:d5:9b:12:03:e4:4f:04: c5:7a:d2:1d:0b:49:28:62:a3:f7:29:38:a3:ad:4a: d1:f7:ff:30:90:f8:56:8f:27:61:1e:6c:b0:a8:c7: e7:ce:a7:0d:2d:4d:16:bc:ed:6a:9c:5c:60:66:38: 4a:40:24:a7:9a:9d:b0:6f:7d:e6:eb:b9:9e:92:35: a7:0a:db:d9:67:e2:29:ed:83:42:a6:61:50:13:09: 8b:6b:b0:b1:9b:74:38:e7:03:86:d7:e8:2d:8d:65: 76:2c:90:7d:5c:8d:a2:d9:ce:d4:dd:22:68:b1:00: 30:ac:e1:aa:21:e1:6c:25:de:4b:3f:d2:9f:cd:7b: da:27:2d:0a:07:8c:b2:8b:29:7a:ef:6f:92:9d:a2: 85:a3:7d:36:6b:71:83:6b:e0:e5:9f:2c:2a:a0:45: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:2E:67:59:EB:E3:23:D6:BC:EA:F3:CC:60:43:61:A6:97:8F:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21f8057f-d654-47e6-8f6f-eea32f0b8ab6/21f8057f-d654-47e6-8f6f-eea32f0b8ab6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 192.174.69.0/24 IPv6: 2620:cd:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32932 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b2:04:c5:d9:30:d0:84:91:a1:49:77:04:eb:53:93:89:36: 0a:8c:26:41:1d:26:63:9e:9f:d0:99:7e:ee:e1:d9:98:a1:78: 78:93:b2:e3:f8:ce:5c:a5:71:50:8b:80:df:34:78:a1:8c:1b: 94:0d:6f:9d:9d:79:13:3d:1d:a4:eb:99:b0:fc:1c:68:1d:d6: ae:6b:09:12:2a:19:f3:9e:57:c3:e8:24:65:c9:cd:d2:ac:18: e7:2a:f7:49:7d:fc:75:c8:6a:7b:ff:d8:1b:63:09:37:4f:dd: 53:b9:3b:66:10:ca:16:b4:bb:ef:19:7e:2e:ca:1a:55:4b:92: b1:6e:76:c4:c4:94:df:14:5a:0f:ab:55:43:1f:a5:c9:a0:87: b5:22:97:45:ee:96:10:6d:ec:8d:16:e1:d6:81:ef:1a:76:5b: 79:ea:43:af:75:66:10:ae:10:66:7b:9f:67:5b:48:1f:9b:cf: 54:9b:9f:6e:83:1b:c3:8b:69:37:f9:4d:0b:9e:f0:ab:c3:71: 21:6b:9f:59:d6:3c:c1:f1:9c:c0:c3:c9:dd:c7:6b:4e:ef:1a: 51:da:e6:96:e7:1d:34:ce:e9:83:57:5f:0e:36:61:48:7d:fa: e8:9f:98:8e:05:a1:c8:0e:b3:0f:91:c2:15:40:71:56:29:6a: f9:1a:41:e7 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE8yWHOHrreeaGJU0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNjE4MjQwNVoXDTI4MTIxOTE5MjQwNVowLzEtMCsGA1UEAxMk MjFmODA1N2YtZDY1NC00N2U2LThmNmYtZWVhMzJmMGI4YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCLr4//A7+uJ+8zIx2UWw0VZ8Z9yZESeq0tx a5IOehCu/SjcyS5lsQ2rkFR8KdQT6eDPY9g5OshW+bBk/ObOMuBlskbZmRIMIuDY WnDTUfRM8x3HOL6x7PFp1/G1Q962cdWbEgPkTwTFetIdC0koYqP3KTijrUrR9/8w kPhWjydhHmywqMfnzqcNLU0WvO1qnFxgZjhKQCSnmp2wb33m67mekjWnCtvZZ+Ip 7YNCpmFQEwmLa7Cxm3Q45wOG1+gtjWV2LJB9XI2i2c7U3SJosQAwrOGqIeFsJd5L P9KfzXvaJy0KB4yyiyl672+SnaKFo302a3GDa+DlnywqoEU4pwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFFrcLmdZ6+Mj1rzq88xgQ2Gml4++MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y MWY4MDU3Zi1kNjU0LTQ3ZTYtOGY2Zi1lZWEzMmYwYjhhYjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzIxZjgwNTdmLWQ2NTQtNDdlNi04 ZjZmLWVlYTMyZjBiOGFiNi8yMWY4MDU3Zi1kNjU0LTQ3ZTYtOGY2Zi1lZWEzMmYw YjhhYjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADArkUwDwQCAAIwCQMHACYgAM3AADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAgKQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAbIExdkw0ISRoUl3BOtTk4k2 CowmQR0mY56f0Jl+7uHZmKF4eJOy4/jOXKVxUIuA3zR4oYwblA1vnZ15Ez0dpOuZ sPwcaB3WrmsJEioZ855Xw+gkZcnN0qwY5yr3SX38dchqe//YG2MJN0/dU7k7ZhDK FrS77xl+LsoaVUuSsW52xMSU3xRaD6tVQx+lyaCHtSKXRe6WEG3sjRbh1oHvGnZb eepDr3VmEK4QZnufZ1tIH5vPVJufboMbw4tpN/lNC57wq8NxIWufWdY8wfGcwMPJ 3cdrTu8aUdrmlucdNM7pg1dfDjZhSH366J+YjgWhyA6zD5HCFUBxVilq+RpB5w== -----END CERTIFICATE-----Generated at Mon Sep 21 01:02:09 2026 by rpki-client