$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/192dfa29-ea3e-4d4e-a2c0-3b52d23274f6.cer File: 192dfa29-ea3e-4d4e-a2c0-3b52d23274f6.cer (raw, json) Hash identifier: CWWMfjdK7wvb7+vlQn3AyfDvKgBpZQ6HlACYfr7bV3Q= Subject key identifier: BF:6F:D2:10:0C:EF:00:D9:87:06:C0:68:3D:B0:31:55:1B:FA:41:75 Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Certificate serial: 010D0C9F4328584F59353958693AF1D824CD9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/192dfa29-ea3e-4d4e-a2c0-3b52d23274f6/192dfa29-ea3e-4d4e-a2c0-3b52d23274f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/192dfa29-ea3e-4d4e-a2c0-3b52d23274f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 16:29:38 +0000 Certificate not after: Tue 02 Jan 2029 17:29:38 +0000 Subordinate resources: AS: 18648 IP: 161.199.26.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:35:39:58:69:3a:f1:d8:24:cd:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919 Validity Not Before: Sep 30 16:29:38 2026 GMT Not After : Jan 2 17:29:38 2029 GMT Subject: CN=192dfa29-ea3e-4d4e-a2c0-3b52d23274f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:6d:48:b2:b7:a3:d2:50:c6:d9:61:8c:52: 75:79:4a:8a:3c:dc:94:77:1d:36:5c:a8:a5:ec:34: 08:5d:ee:92:e0:a8:0c:35:b4:ba:1d:0f:b9:f8:d7: 69:04:8b:b7:ed:6a:b7:c8:1c:6e:07:03:a6:d7:b2: af:5f:a1:da:75:8b:c7:a3:42:03:97:d2:35:61:05: 86:d7:d7:26:b9:11:44:69:d6:4d:a3:42:7b:6c:5e: ae:6c:33:97:21:9c:b6:51:9a:24:d2:3c:62:45:6b: 79:aa:ca:f9:48:d6:e1:6d:8d:25:9b:1c:fd:03:a5: ee:87:9c:d0:03:3b:19:6f:d8:2c:04:7c:df:db:43: c7:32:9a:ad:40:a7:d2:8b:77:e1:4f:49:a0:9f:4f: 02:74:f0:e0:ed:87:b7:91:d2:6a:77:24:11:e1:29: a9:a6:29:06:bb:9a:e6:72:d3:fb:41:ca:6b:28:a8: 3a:f7:64:ae:2a:90:6a:56:03:63:1d:59:3a:4d:fb: 7e:ab:47:95:71:bb:03:a2:86:47:a8:4b:f6:78:2a: 91:85:2c:16:0a:0a:5b:40:fc:59:06:19:3c:5b:56: ec:a0:79:41:d8:e9:5b:46:64:39:5b:02:9c:b1:1c: 7e:e3:02:54:93:b2:2f:22:36:4b:67:1b:d9:0c:d6: ba:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6F:D2:10:0C:EF:00:D9:87:06:C0:68:3D:B0:31:55:1B:FA:41:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/192dfa29-ea3e-4d4e-a2c0-3b52d23274f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/192dfa29-ea3e-4d4e-a2c0-3b52d23274f6/192dfa29-ea3e-4d4e-a2c0-3b52d23274f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl X509v3 Authority Key Identifier: keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer sbgp-ipAddrBlock: critical IPv4: 161.199.26.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18648 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:99:ec:6f:cf:db:51:86:f1:27:de:df:a1:4f:45:51:77:c1: fc:a6:53:60:a6:ce:2d:b8:8c:73:27:0b:e3:be:a1:2b:d5:81: bf:90:50:e1:6f:a3:14:05:9d:2d:d4:9d:d8:66:a9:57:e6:50: af:c3:81:3d:5d:b4:a6:cc:d4:a3:bf:15:f6:2c:ae:a5:30:6a: ff:16:b3:00:53:f9:90:b8:15:a9:22:94:db:81:af:e7:4e:bc: 02:35:94:83:88:73:41:7a:ce:68:9f:9b:7e:32:ab:fd:25:d4: b9:12:06:06:3e:ed:fe:bd:11:ab:0f:be:07:89:b7:ce:1a:01: 02:b1:52:f9:69:33:2b:c3:58:5c:d3:0a:e9:d5:7f:a5:a7:39: 21:3b:f1:48:37:09:7d:0d:64:d5:75:ca:9c:d4:7f:1a:39:54: 48:b1:b1:19:a1:e7:2b:4d:12:b5:a1:dc:ad:5d:46:94:74:52: 77:2e:bc:7c:63:0e:07:ce:e3:9f:ae:82:17:7e:96:f3:5a:41: e0:37:38:53:9d:bb:5f:a1:1e:21:b5:22:04:86:e7:b7:2a:00: bd:3f:e1:40:38:af:63:d0:74:88:f6:73:79:07:f7:52:af:d2: 9b:04:e6:be:d2:ea:42:20:ba:13:55:a4:03:e8:a2:f1:e2:7a: 36:3c:7f:42 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE9ZNTlYaTrx2CTNkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk OTE5MB4XDTI2MDkzMDE2MjkzOFoXDTI5MDEwMjE3MjkzOFowLzEtMCsGA1UEAxMk MTkyZGZhMjktZWEzZS00ZDRlLWEyYzAtM2I1MmQyMzI3NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHptSLK3o9JQxtlhjFJ1eUqKPNyUdx02XKil 7DQIXe6S4KgMNbS6HQ+5+NdpBIu37Wq3yBxuBwOm17KvX6HadYvHo0IDl9I1YQWG 19cmuRFEadZNo0J7bF6ubDOXIZy2UZok0jxiRWt5qsr5SNbhbY0lmxz9A6Xuh5zQ AzsZb9gsBHzf20PHMpqtQKfSi3fhT0mgn08CdPDg7Ye3kdJqdyQR4SmppikGu5rm ctP7QcprKKg692SuKpBqVgNjHVk6Tft+q0eVcbsDooZHqEv2eCqRhSwWCgpbQPxZ Bhk8W1bsoHlB2OlbRmQ5WwKcsRx+4wJUk7IvIjZLZxvZDNa62wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFL9v0hAM7wDZhwbAaD2wMVUb+kF1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8x OTJkZmEyOS1lYTNlLTRkNGUtYTJjMC0zYjUyZDIzMjc0ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5LzE5MmRmYTI5LWVhM2UtNGQ0ZS1h MmMwLTNiNTJkMjMyNzRmNi8xOTJkZmEyOS1lYTNlLTRkNGUtYTJjMC0zYjUyZDIz Mjc0ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1 OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2 MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAChxxowGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SNgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARZnsb8/bUYbxJ97foU9FUXfB/KZTYKbOLbiMcycL476hK9WB v5BQ4W+jFAWdLdSd2GapV+ZQr8OBPV20pszUo78V9iyupTBq/xazAFP5kLgVqSKU 24Gv5068AjWUg4hzQXrOaJ+bfjKr/SXUuRIGBj7t/r0Rqw++B4m3zhoBArFS+Wkz K8NYXNMK6dV/pac5ITvxSDcJfQ1k1XXKnNR/GjlUSLGxGaHnK00StaHcrV1GlHRS dy68fGMOB87jn66CF36W81pB4Dc4U527X6EeIbUiBIbntyoAvT/hQDivY9B0iPZz eQf3Uq/SmwTmvtLqQiC6E1WkA+ii8eJ6Njx/Qg== -----END CERTIFICATE-----Generated at Sun Nov 1 14:33:18 2026 by rpki-client