$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609.cer File: 2ab18950-ebe0-431c-b5f9-e48842e85609.cer (raw, json) Hash identifier: rLq0cJXcCRbJINKKVgZcozuaKYoqJPXhpa9DHZ0xrYE= Subject key identifier: 4A:30:A5:1C:B2:74:BF:14:08:A7:C1:0E:51:A9:40:F7:9B:18:73:9C Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F8645B9A9D462A8C000F9C640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/2ab18950-ebe0-431c-b5f9-e48842e85609.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Oct 2026 19:54:15 +0000 Certificate not after: Sat 13 Jan 2029 03:40:28 +0000 Subordinate resources: AS: 403081 IP: 199.89.252.0/24 IP: 2602:f2a0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:45:b9:a9:d4:62:a8:c0:00:f9:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 16 19:54:15 2026 GMT Not After : Jan 13 03:40:28 2029 GMT Subject: CN=2ab18950-ebe0-431c-b5f9-e48842e85609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:cb:38:13:0e:01:a6:c0:b9:e5:b5:47:87: 91:09:e9:e3:06:b7:b8:33:a0:24:e0:dc:c6:a3:b7: c4:c1:e6:d1:43:a0:80:bf:b6:9e:05:f5:6f:cb:09: 88:79:ba:a6:ed:86:ba:24:9c:72:19:71:e0:12:e9: 45:36:2a:54:33:35:9b:9b:67:a3:9a:10:26:cb:c5: a3:8c:79:9f:11:98:63:66:6d:74:07:06:45:71:8e: 5a:08:60:8f:25:40:79:4a:69:3f:ed:e6:9d:f7:6e: b7:18:5f:f5:de:62:87:95:f0:e7:7c:9c:24:78:26: 58:c4:04:b1:b6:1a:e8:c9:d0:46:55:3d:95:3e:78: 1f:5e:de:3d:b3:4e:3d:1a:19:3c:5a:1b:bc:f5:ec: 6c:e5:ba:32:64:0f:ee:ec:7b:e9:39:f4:79:ee:7b: 26:9b:da:21:16:10:18:bb:2d:ec:4c:de:7d:99:6a: 4a:55:c9:17:c5:5a:b2:62:0e:7b:1f:20:26:1c:ab: 7b:48:a5:b6:cd:13:dc:18:df:e4:7d:0b:17:b2:4c: 43:72:8d:35:c9:c1:30:b3:e9:a9:a3:42:b3:ab:97: f0:fc:2f:dd:60:bc:ae:3f:8d:82:39:bb:1d:41:9f: cd:a5:eb:78:ef:1b:2f:5a:22:f9:a2:65:7a:2c:78: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:30:A5:1C:B2:74:BF:14:08:A7:C1:0E:51:A9:40:F7:9B:18:73:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ab18950-ebe0-431c-b5f9-e48842e85609/2ab18950-ebe0-431c-b5f9-e48842e85609.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 199.89.252.0/24 IPv6: 2602:f2a0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403081 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:25:bf:e9:06:39:98:4c:75:87:b7:a4:a7:a3:87:80:31:89: 87:53:75:ce:7d:e7:58:7d:74:e2:51:d1:b9:61:e3:2b:d7:9f: b8:a5:42:20:a8:ae:9f:53:ff:cf:82:6b:60:bd:64:5e:3d:9c: 5e:24:8c:4e:ea:2f:8f:ef:48:04:b7:c3:03:02:3a:4d:79:e0: 7c:65:1a:fa:17:d4:e7:60:d2:85:7e:aa:f2:a1:6b:b4:c3:5d: 5d:2e:7c:e1:c7:e4:af:aa:4c:8c:ef:ea:71:96:07:26:c2:21: 2b:31:ce:00:5d:29:8a:ab:9e:10:aa:68:99:00:c7:df:83:cd: b6:c9:ca:4b:c0:c4:55:db:5e:7a:e1:25:f4:8e:ea:5e:87:22: 30:d5:02:c3:8d:d5:d6:81:3a:75:63:cc:15:7a:db:1b:19:f2: 70:b5:e5:50:65:97:4b:6d:b8:a9:c0:7b:32:ff:ca:be:d1:19: 0c:b2:52:63:10:f2:09:4f:7e:3a:d1:90:fe:13:68:06:45:3f: a6:d1:ce:f7:f1:55:94:ac:c0:ae:31:5f:cc:4c:6a:96:f5:e1: c6:26:36:4d:91:de:fe:ac:50:dd:c8:50:0a:8d:18:cb:65:00: af:df:b3:65:f0:67:cc:a3:82:aa:ef:0f:c4:75:ed:3a:68:c7: ff:e2:36:ba -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE+GRbmp1GKowAD5xkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxNjE5NTQxNVoXDTI5MDExMzAzNDAyOFowLzEtMCsGA1UEAxMk MmFiMTg5NTAtZWJlMC00MzFjLWI1ZjktZTQ4ODQyZTg1NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN3LOBMOAabAueW1R4eRCenjBre4M6Ak4NzG o7fEwebRQ6CAv7aeBfVvywmIebqm7Ya6JJxyGXHgEulFNipUMzWbm2ejmhAmy8Wj jHmfEZhjZm10BwZFcY5aCGCPJUB5Smk/7ead9263GF/13mKHlfDnfJwkeCZYxASx throydBGVT2VPngfXt49s049Ghk8Whu89exs5boyZA/u7HvpOfR57nsmm9ohFhAY uy3sTN59mWpKVckXxVqyYg57HyAmHKt7SKW2zRPcGN/kfQsXskxDco01ycEws+mp o0Kzq5fw/C/dYLyuP42CObsdQZ/Npet47xsvWiL5omV6LHiVLQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEowpRyydL8UCKfBDlGpQPebGHOcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8y YWIxODk1MC1lYmUwLTQzMWMtYjVmOS1lNDg4NDJlODU2MDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzJhYjE4OTUwLWViZTAtNDMxYy1i NWY5LWU0ODg0MmU4NTYwOS8yYWIxODk1MC1lYmUwLTQzMWMtYjVmOS1lNDg4NDJl ODU2MDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADHWfwwDgQCAAIwCAMGACYC8qAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYmiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEJb/pBjmYTHWHt6Sno4eAMYmH U3XOfedYfXTiUdG5YeMr15+4pUIgqK6fU//PgmtgvWRePZxeJIxO6i+P70gEt8MD AjpNeeB8ZRr6F9TnYNKFfqryoWu0w11dLnzhx+SvqkyM7+pxlgcmwiErMc4AXSmK q54QqmiZAMffg822ycpLwMRV21564SX0jupehyIw1QLDjdXWgTp1Y8wVetsbGfJw teVQZZdLbbipwHsy/8q+0RkMslJjEPIJT3460ZD+E2gGRT+m0c738VWUrMCuMV/M TGqW9eHGJjZNkd7+rFDdyFAKjRjLZQCv37Nl8GfMo4Kq7w/Ede06aMf/4ja6 -----END CERTIFICATE-----Generated at Wed Nov 4 21:43:39 2026 by rpki-client