$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/40f8f2a2-80b0-4662-a590-a2af24cdd3b0.cer File: 40f8f2a2-80b0-4662-a590-a2af24cdd3b0.cer (raw, json) Hash identifier: QDzFs2pFp1KE3pzzuSnW9EcHeO2XUN4Xfvi3GgwFgXI= Subject key identifier: 14:4E:4A:9E:E5:BD:89:BE:C5:2F:25:05:17:2C:9A:B4:91:1D:CF:8D Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F34BAA954DDE846BF1EEDC380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/40f8f2a2-80b0-4662-a590-a2af24cdd3b0/40f8f2a2-80b0-4662-a590-a2af24cdd3b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/40f8f2a2-80b0-4662-a590-a2af24cdd3b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Sep 2026 14:53:35 +0000 Certificate not after: Wed 20 Dec 2028 15:53:35 +0000 Subordinate resources: AS: 398836 IP: 23.134.200.0/23 IP: 141.195.108.0/22 IP: 2606:c3c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:ba:a9:54:dd:e8:46:bf:1e:ed:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 17 14:53:35 2026 GMT Not After : Dec 20 15:53:35 2028 GMT Subject: CN=40f8f2a2-80b0-4662-a590-a2af24cdd3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:8f:c4:85:97:8a:0f:f5:8c:be:1c:f7:cb: 18:70:1a:25:19:c2:08:d1:82:a1:5d:39:ee:00:f0: cd:fe:d4:a3:28:70:32:d7:25:01:e4:3e:0b:1a:42: d0:1d:1e:7b:73:c7:e6:63:74:5e:6b:6f:59:58:f8: 0e:cb:7a:a4:33:e1:82:b5:30:2b:05:3a:6e:a0:3b: 4e:76:fc:2c:85:73:13:28:8b:f5:52:f2:ad:7f:57: b7:08:3d:fb:99:47:46:84:4a:2d:88:dc:9d:0f:c5: 97:f9:49:50:1c:05:ec:00:0f:43:87:43:26:30:7c: f1:e4:0f:2a:1d:fa:09:ef:77:52:fe:72:46:98:42: 6c:fa:c9:f2:09:2f:01:64:52:f2:26:0b:c1:fe:a0: 7e:a4:84:3c:34:8d:d8:9f:1a:61:4e:44:3c:9b:9a: cc:6b:58:3a:44:50:72:7b:61:35:3e:aa:a2:17:d4: 2d:78:56:78:c6:91:82:70:d4:fc:1d:b0:b8:cb:40: 61:ab:ab:91:63:96:66:bc:4e:55:14:6a:de:fd:9c: 94:12:ba:de:c5:61:34:bd:73:8c:bb:6e:8f:35:2e: dd:c5:6e:6e:d2:04:bb:2d:37:8e:a2:d1:a6:73:70: c9:7d:c4:e3:27:dc:60:4e:10:04:b8:b0:13:6e:ec: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4E:4A:9E:E5:BD:89:BE:C5:2F:25:05:17:2C:9A:B4:91:1D:CF:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/40f8f2a2-80b0-4662-a590-a2af24cdd3b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/40f8f2a2-80b0-4662-a590-a2af24cdd3b0/40f8f2a2-80b0-4662-a590-a2af24cdd3b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.134.200.0/23 141.195.108.0/22 IPv6: 2606:c3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398836 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:28:28:11:ea:20:d5:03:0f:67:b7:50:83:01:e3:a2:13:15: 40:27:0e:b2:4a:fd:f7:e8:38:aa:02:bb:32:7a:c0:9b:c0:18: 5e:4c:fa:5a:b7:68:a5:3b:cf:56:94:ed:00:bb:53:55:0b:75: fe:f3:2b:f5:41:95:6c:e6:23:67:61:8a:12:1e:a7:df:e8:67: 1b:ea:f3:07:b6:4f:24:34:3f:ab:46:19:88:cb:49:ea:55:ee: 3e:79:e4:1e:fb:3f:b3:7a:67:e6:61:15:a5:ed:52:da:c7:62: 3c:7e:5b:7d:62:80:bc:0d:e5:83:8b:db:c7:46:42:e7:9d:4e: 12:7a:c8:af:aa:4e:b2:a1:4c:fc:e5:25:0a:e2:3d:b0:4a:40: ef:bd:c3:ef:fd:ef:e9:36:6f:35:56:20:98:42:67:a9:ac:51: 4f:cc:19:4d:d5:a2:d4:40:71:e5:6c:f5:68:26:49:c5:8f:8e: fd:42:57:62:c2:15:e3:8f:f5:b0:f3:eb:68:25:32:9a:65:ba: 19:c6:6e:e9:7e:e6:01:4e:2e:39:40:48:34:13:8b:94:33:06: 28:99:bd:88:25:40:cd:5a:be:f5:80:2f:e6:0e:1c:3b:a1:68: 50:20:29:8a:ad:53:44:66:1f:ed:39:8a:50:db:f9:cc:a3:2b: 40:79:08:14 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE80uqlU3ehGvx7tw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkxNzE0NTMzNVoXDTI4MTIyMDE1NTMzNVowLzEtMCsGA1UEAxMk NDBmOGYyYTItODBiMC00NjYyLWE1OTAtYTJhZjI0Y2RkM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FyPxIWXig/1jL4c98sYcBolGcII0YKhXTnu APDN/tSjKHAy1yUB5D4LGkLQHR57c8fmY3Rea29ZWPgOy3qkM+GCtTArBTpuoDtO dvwshXMTKIv1UvKtf1e3CD37mUdGhEotiNydD8WX+UlQHAXsAA9Dh0MmMHzx5A8q HfoJ73dS/nJGmEJs+snyCS8BZFLyJgvB/qB+pIQ8NI3YnxphTkQ8m5rMa1g6RFBy e2E1PqqiF9QteFZ4xpGCcNT8HbC4y0Bhq6uRY5ZmvE5VFGre/ZyUErrexWE0vXOM u26PNS7dxW5u0gS7LTeOotGmc3DJfcTjJ9xgThAEuLATbuwJQwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBROSp7lvYm+xS8lBRcsmrSRHc+NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80 MGY4ZjJhMi04MGIwLTQ2NjItYTU5MC1hMmFmMjRjZGQzYjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzQwZjhmMmEyLTgwYjAtNDY2Mi1h NTkwLWEyYWYyNGNkZDNiMC80MGY4ZjJhMi04MGIwLTQ2NjItYTU5MC1hMmFmMjRj ZGQzYjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAEXhsgDBAKNw2wwDQQCAAIwBwMFACYGw8AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhX0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEYoKBHqINUDD2e3UIMB 46ITFUAnDrJK/ffoOKoCuzJ6wJvAGF5M+lq3aKU7z1aU7QC7U1ULdf7zK/VBlWzm I2dhihIep9/oZxvq8we2TyQ0P6tGGYjLSepV7j555B77P7N6Z+ZhFaXtUtrHYjx+ W31igLwN5YOL28dGQuedThJ6yK+qTrKhTPzlJQriPbBKQO+9w+/97+k2bzVWIJhC Z6msUU/MGU3VotRAceVs9WgmScWPjv1CV2LCFeOP9bDz62glMppluhnGbul+5gFO LjlASDQTi5QzBiiZvYglQM1avvWAL+YOHDuhaFAgKYqtU0RmH+05ilDb+cyjK0B5 CBQ= -----END CERTIFICATE-----Generated at Mon Sep 21 10:38:32 2026 by rpki-client