$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/56df17e5-51c2-472f-9b11-52780c571e76.cer File: 56df17e5-51c2-472f-9b11-52780c571e76.cer (raw, json) Hash identifier: NjBu86adLLxb02k3IyjxXYiZEECdyO8xr11d3vc3M54= Subject key identifier: 2A:FD:70:76:B3:46:0D:D4:EC:18:E3:4E:C0:72:9B:57:83:72:ED:3C Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F7A3D22AD2B3CB86F9CE7C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/56df17e5-51c2-472f-9b11-52780c571e76/56df17e5-51c2-472f-9b11-52780c571e76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/56df17e5-51c2-472f-9b11-52780c571e76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Oct 2026 12:27:15 +0000 Certificate not after: Mon 25 Dec 2028 08:41:54 +0000 Subordinate resources: AS: 398418 IP: 23.165.196.0/24 IP: 207.186.192.0/21 IP: 2604:6a80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:3d:22:ad:2b:3c:b8:6f:9c:e7:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Oct 12 12:27:15 2026 GMT Not After : Dec 25 08:41:54 2028 GMT Subject: CN=56df17e5-51c2-472f-9b11-52780c571e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:87:6b:b4:ba:a3:eb:9d:99:bb:60:ac:e2: f9:d0:4f:9b:be:f3:f7:fc:38:e6:96:19:1e:98:bf: 74:6e:87:18:b2:87:12:5e:da:06:c5:f9:8c:b5:a0: 86:53:a3:e9:46:6d:53:5e:28:37:98:05:48:c5:08: 0e:f9:e5:a9:df:8b:e3:20:d9:50:a3:7c:4b:4d:86: 86:1a:a3:e2:ff:f7:d5:62:ef:cc:1b:20:d1:7c:77: fa:2f:14:25:8c:75:2d:9c:29:2e:9a:a2:be:c1:15: aa:21:4e:b3:76:cb:50:e6:4a:43:93:15:63:62:87: 8f:ef:91:ca:cd:ba:9f:66:26:df:6c:55:e0:82:b9: 6a:d5:d3:47:a0:65:f0:dd:f8:f1:8e:d4:6d:7f:c7: 1b:fe:52:07:22:e9:9c:0b:0e:ca:a1:cf:ec:4a:a8: aa:49:0a:1f:54:68:3e:39:33:93:e3:8e:c8:ac:a8: 5c:8a:c2:2f:9d:3b:fa:a1:2d:1a:a7:fc:b8:8c:99: 89:e7:7c:29:f0:bf:20:53:a5:99:81:ba:36:3d:73: e5:a1:96:13:04:27:4e:84:b0:0b:89:22:d0:04:1c: e4:8a:fa:52:56:cb:cb:38:a8:41:31:00:39:81:71: 1e:28:26:24:95:43:9a:dd:02:e9:8b:c6:98:29:6d: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:70:76:B3:46:0D:D4:EC:18:E3:4E:C0:72:9B:57:83:72:ED:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/56df17e5-51c2-472f-9b11-52780c571e76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/56df17e5-51c2-472f-9b11-52780c571e76/56df17e5-51c2-472f-9b11-52780c571e76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 23.165.196.0/24 207.186.192.0/21 IPv6: 2604:6a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398418 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d7:0e:a3:ea:fa:c7:dc:fd:5d:bd:b1:f1:50:ba:0d:39:a9: f3:67:8f:eb:80:27:da:22:ed:50:86:5c:ba:ed:55:54:97:d3: 6e:48:19:e5:67:73:2f:9b:31:1f:f6:ac:15:44:db:70:15:0e: 17:ee:fc:8a:96:af:fc:91:df:94:26:cc:79:27:f0:e0:41:cd: 8e:e1:bb:13:87:1e:c2:78:8a:dd:9f:5a:07:93:d7:9b:e4:ae: f3:f5:5e:87:92:29:bf:e7:fc:c3:0e:fc:57:4d:fb:75:55:b7: a7:c1:d3:30:b3:b1:3b:fc:fa:53:2e:23:ed:8b:67:5f:c7:c8: 85:5b:02:af:a0:11:36:14:30:c2:c3:bf:a6:18:df:60:f3:3b: a9:4f:f9:f0:35:06:23:2a:fd:17:84:96:04:24:1a:84:b4:a4: 20:03:f4:6d:e2:92:30:31:44:34:e5:69:75:85:e4:a9:ac:4a: 94:cf:20:2d:03:df:97:c6:96:b9:e6:1c:41:4a:6a:dc:06:75: 5e:7e:f2:d8:92:ec:7e:ad:be:77:6d:37:8b:1e:05:46:f0:46: 99:06:ea:89:53:9c:03:45:a7:64:2b:e3:ed:57:65:f2:68:b1: e8:c0:fa:64:55:e6:2e:86:81:c6:de:61:e9:35:1c:e2:0f:7d: 15:4d:99:1d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE96PSKtKzy4b5znxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MTAxMjEyMjcxNVoXDTI4MTIyNTA4NDE1NFowLzEtMCsGA1UEAxMk NTZkZjE3ZTUtNTFjMi00NzJmLTliMTEtNTI3ODBjNTcxZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiWHa7S6o+udmbtgrOL50E+bvvP3/Djmlhke mL90bocYsocSXtoGxfmMtaCGU6PpRm1TXig3mAVIxQgO+eWp34vjINlQo3xLTYaG GqPi//fVYu/MGyDRfHf6LxQljHUtnCkumqK+wRWqIU6zdstQ5kpDkxVjYoeP75HK zbqfZibfbFXggrlq1dNHoGXw3fjxjtRtf8cb/lIHIumcCw7Koc/sSqiqSQofVGg+ OTOT447IrKhcisIvnTv6oS0ap/y4jJmJ53wp8L8gU6WZgbo2PXPloZYTBCdOhLAL iSLQBBzkivpSVsvLOKhBMQA5gXEeKCYklUOa3QLpi8aYKW0TeQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFCr9cHazRg3U7BjjTsBym1eDcu08MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS81 NmRmMTdlNS01MWMyLTQ3MmYtOWIxMS01Mjc4MGM1NzFlNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzU2ZGYxN2U1LTUxYzItNDcyZi05 YjExLTUyNzgwYzU3MWU3Ni81NmRmMTdlNS01MWMyLTQ3MmYtOWIxMS01Mjc4MGM1 NzFlNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXpcQDBAPPusAwDQQCAAIwBwMFACYEaoAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhRSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFLXDqPq+sfc/V29sfFQ ug05qfNnj+uAJ9oi7VCGXLrtVVSX025IGeVncy+bMR/2rBVE23AVDhfu/IqWr/yR 35QmzHkn8OBBzY7huxOHHsJ4it2fWgeT15vkrvP1XoeSKb/n/MMO/FdN+3VVt6fB 0zCzsTv8+lMuI+2LZ1/HyIVbAq+gETYUMMLDv6YY32DzO6lP+fA1BiMq/ReElgQk GoS0pCAD9G3ikjAxRDTlaXWF5KmsSpTPIC0D35fGlrnmHEFKatwGdV5+8tiS7H6t vndtN4seBUbwRpkG6olTnANFp2Qr4+1XZfJosejA+mRV5i6GgcbeYek1HOIPfRVN mR0= -----END CERTIFICATE-----Generated at Thu Nov 5 02:47:48 2026 by rpki-client